Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
File: khPywtBsZLiVRXq1D8SSAoOknMc.mft (raw, json)
Hash identifier: N/PowDewEW5uHfSqrMdg7XZiH7WmshtpRuwECbAyEuw=
Subject key identifier: 9A:E2:B9:88:80:04:D3:74:1A:E1:08:C2:3C:DA:88:3D:AB:80:A1:40
Authority key identifier: 92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
Certificate issuer: /CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Certificate serial: 0196B3D97452AE6637B992C0B8BAF173A474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
Manifest number: 1534
Signing time: Fri 09 May 2025 07:01:34 +0000
Manifest this update: Fri 09 May 2025 07:01:34 +0000
Manifest next update: Sat 10 May 2025 07:01:34 +0000
Files and hashes: 1: WzcaaMQRrlChBNRzpd6ejVsnjhE.roa (hash: thxrjBXbUSSC8DCWldp79G7rZSMi1abwsQ1q60K08dg=)
2: iRKQaDksCLDeAQtwp0YKQ3SovAI.roa (hash: wixldrtyd3fdUQpeC4X4fRGfwA4fNIJXJhW2tQSWdew=)
3: khPywtBsZLiVRXq1D8SSAoOknMc.crl (hash: QxSjsa8bYC3kuJ7/1Kb23EjWjP31eAOxgy37QUCkMY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d9:74:52:ae:66:37:b9:92:c0:b8:ba:f1:73:a4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Validity
Not Before: May 9 07:01:34 2025 GMT
Not After : May 10 07:01:34 2025 GMT
Subject: CN=9ae2b9888004d3741ae108c23cda883dab80a140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d2:8e:de:8a:79:eb:78:af:41:03:62:0c:0d:
ab:6c:a2:69:88:66:e7:6a:59:01:c7:6f:7b:80:76:
e0:9c:b5:ff:d9:9b:04:71:b5:fe:be:e5:6b:dd:95:
86:c6:4a:82:ce:36:33:ae:46:13:02:d9:dd:4c:62:
59:39:0d:9d:9a:e1:eb:11:93:06:cb:af:cf:65:8b:
36:e3:7d:c8:0b:a6:e7:43:5e:35:02:c8:3b:2b:1d:
68:fd:0c:53:09:5b:04:48:d6:f7:19:16:c8:53:20:
04:dd:21:55:5e:22:35:df:d8:d0:10:be:8e:7c:d2:
b0:e3:fc:b5:e9:25:46:f7:09:51:b4:b3:72:88:1e:
91:c4:f4:9b:43:88:ff:34:fd:3e:53:be:9e:46:a8:
62:e1:25:36:c3:d6:90:8d:17:7a:e9:25:4d:08:8e:
fb:01:b5:20:12:4c:0e:4b:29:cb:85:f8:85:00:61:
91:ab:18:1c:9a:d0:9a:c6:0e:dc:db:30:f7:f6:d1:
1f:7e:f7:de:c0:ee:88:ce:9b:70:ff:2c:be:ab:f3:
75:53:37:de:4a:6d:a6:96:61:fc:7b:1c:9f:af:15:
d1:fe:90:d7:46:cd:de:42:e8:5f:e4:67:88:13:21:
50:2b:a1:33:28:3b:ca:99:c7:ee:32:83:e3:88:84:
ce:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E2:B9:88:80:04:D3:74:1A:E1:08:C2:3C:DA:88:3D:AB:80:A1:40
X509v3 Authority Key Identifier:
keyid:92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:92:4f:b7:4c:ca:19:5e:0d:58:81:af:62:af:c2:11:7c:7e:
01:94:d0:84:6c:53:01:8e:7f:02:5d:27:d3:63:eb:24:89:49:
0f:c1:c1:9a:06:05:d1:86:55:a9:fd:4a:3a:4f:93:8b:c1:dc:
39:5b:92:47:42:6e:b2:55:f9:a0:63:fc:cf:87:61:41:0c:b5:
22:bc:aa:39:12:b4:4f:c3:3b:cf:ae:ed:0b:ff:2f:88:ed:92:
58:6e:64:e4:c1:7c:86:1a:b8:87:c4:38:5d:eb:f3:da:e0:8d:
f0:dc:cc:79:93:8f:4d:77:b4:e9:0f:67:61:a3:23:fb:18:39:
b1:ff:15:dc:a2:39:45:0c:03:e5:fe:6f:d9:f0:dc:40:64:f0:
2a:58:c4:76:5d:57:2c:a4:a5:a9:cf:ba:cc:fc:06:5d:19:7f:
13:62:4e:d4:7a:df:ef:41:d7:94:f6:96:d4:f5:c3:79:40:5d:
1a:de:f0:2f:2b:bc:70:b5:f2:41:20:c4:70:29:26:43:55:1d:
c2:b4:05:89:e3:97:e2:e7:f6:29:a4:15:63:8f:a9:0d:f8:73:
c9:7c:f7:e3:e7:46:e9:02:3b:80:c1:98:cc:c8:b7:78:74:b7:
5c:b8:96:70:51:97:f6:e3:4c:b4:a5:9a:cf:09:fa:c2:87:2c:
91:90:d1:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaz2XRSrmY3uZLAuLrxc6R0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMTNmMmMyZDA2YzY0Yjg5NTQ1N2FiNTBmYzQ5MjAyODNh
NDljYzcwHhcNMjUwNTA5MDcwMTM0WhcNMjUwNTEwMDcwMTM0WjAzMTEwLwYDVQQD
Eyg5YWUyYjk4ODgwMDRkMzc0MWFlMTA4YzIzY2RhODgzZGFiODBhMTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9KO3op563ivQQNiDA2rbKJpiGbn
alkBx297gHbgnLX/2ZsEcbX+vuVr3ZWGxkqCzjYzrkYTAtndTGJZOQ2dmuHrEZMG
y6/PZYs2433IC6bnQ141Asg7Kx1o/QxTCVsESNb3GRbIUyAE3SFVXiI139jQEL6O
fNKw4/y16SVG9wlRtLNyiB6RxPSbQ4j/NP0+U76eRqhi4SU2w9aQjRd66SVNCI77
AbUgEkwOSynLhfiFAGGRqxgcmtCaxg7c2zD39tEffvfewO6Izptw/yy+q/N1Uzfe
Sm2mlmH8exyfrxXR/pDXRs3eQuhf5GeIEyFQK6EzKDvKmcfuMoPjiITOJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJriuYiABNN0GuEIwjzaiD2rgKFAMB8GA1UdIwQY
MBaAFJIT8sLQbGS4lUV6tQ/EkgKDpJzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8zMWE2YTQtOGE5ZC00N2EyLThmYmIt
YjlkZmYzZTdhMzJlLzEva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8zMWE2YTQtOGE5ZC00N2EyLThmYmItYjlkZmYzZTdhMzJl
LzEva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtZJPt0zK
GV4NWIGvYq/CEXx+AZTQhGxTAY5/Al0n02PrJIlJD8HBmgYF0YZVqf1KOk+Ti8Hc
OVuSR0JuslX5oGP8z4dhQQy1IryqORK0T8M7z67tC/8viO2SWG5k5MF8hhq4h8Q4
Xevz2uCN8NzMeZOPTXe06Q9nYaMj+xg5sf8V3KI5RQwD5f5v2fDcQGTwKljEdl1X
LKSlqc+6zPwGXRl/E2JO1Hrf70HXlPaW1PXDeUBdGt7wLyu8cLXyQSDEcCkmQ1Ud
wrQFieOX4uf2KaQVY4+pDfhzyXz34+dG6QI7gMGYzMi3eHS3XLiWcFGX9uNMtKWa
zwn6wocskZDRiQ==
-----END CERTIFICATE-----
Generated at Fri May 9 08:29:56 2025 by rpki-client