Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
File: k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json)
Hash identifier: B/SCq81K9ZDaHKgFpCwUW1gQuXkeJH537t2bL3da/w8=
Subject key identifier: 74:04:D0:2B:02:B3:EE:46:98:97:39:26:B2:69:DB:43:67:60:B1:8E
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial: 0196BC6E25512D880CC45AD9F27B26208771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
Manifest number: 0C18
Signing time: Sat 10 May 2025 23:00:57 +0000
Manifest this update: Sat 10 May 2025 23:00:57 +0000
Manifest next update: Sun 11 May 2025 23:00:57 +0000
Files and hashes: 1: 1QST1OPlWGgU_KfeCd6-eSc5Fws.roa (hash: 0IX3SPWo/YRidApWFZTcBmj27iQz+V20vqeZhxHtpTk=)
2: UOcYa9_wijcIRHEowaEFsvhzcW4.roa (hash: tUwVIAhXZ1HVd/+8k4HpFkWguLhngA3Bv+h1B/N8dK4=)
3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: 3IY7nlj44pVMMLVUP+vakAYC+TetlrCjmiLrhzG0TLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:25:51:2d:88:0c:c4:5a:d9:f2:7b:26:20:87:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Validity
Not Before: May 10 23:00:57 2025 GMT
Not After : May 11 23:00:57 2025 GMT
Subject: CN=7404d02b02b3ee4698973926b269db436760b18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f7:d6:62:90:54:e0:4b:76:b9:a1:d6:c1:0c:
e4:a7:9d:42:17:4f:e8:b8:71:7a:ec:03:c5:a1:4b:
d6:56:a2:99:96:65:8c:ca:fb:11:b0:22:0f:d7:fc:
cd:ec:aa:ce:0a:36:fa:28:56:c4:63:d0:bc:b7:13:
a5:17:30:ea:74:01:9b:5d:90:22:be:d2:e0:4f:11:
6c:cc:97:f0:1a:4e:ce:64:92:a4:9d:08:16:bc:62:
0f:a4:31:23:77:3d:29:56:2b:ce:30:0f:70:f3:a1:
e4:db:e8:45:b1:e8:63:c1:5f:ff:aa:d2:fb:ba:06:
87:72:99:3d:99:5e:14:1e:b1:64:7a:48:1e:e0:f8:
97:2a:bb:41:8c:19:e7:24:03:2f:37:04:c6:62:f7:
f1:31:a9:8a:b3:27:c6:d8:7c:4b:d9:fb:92:fc:b5:
12:fa:20:e9:56:e9:1f:7e:42:86:83:cb:46:8a:90:
bc:8a:23:b5:3f:ad:98:d1:af:6d:90:cd:9c:e7:2c:
37:39:6b:d3:cb:f7:ab:11:66:27:3c:2a:6e:31:53:
b5:78:92:5c:ae:27:f9:a3:c4:7b:9a:94:84:94:4b:
09:83:7e:16:29:2a:b2:f4:43:be:75:94:3e:1c:3e:
37:7a:21:a5:10:81:7b:e1:8b:71:c1:01:ae:c1:5c:
26:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:04:D0:2B:02:B3:EE:46:98:97:39:26:B2:69:DB:43:67:60:B1:8E
X509v3 Authority Key Identifier:
keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:17:94:57:87:bf:52:1d:a5:35:0c:9e:16:cd:9c:4c:c7:7b:
68:57:07:8b:b2:5d:79:e0:c0:90:2d:5d:ca:ba:76:58:74:c8:
38:dc:07:9b:65:ee:b6:a0:1f:48:6a:c2:5c:45:99:e2:c4:70:
07:28:9f:8e:ba:9c:99:ce:fc:d9:04:16:19:52:7a:d4:d4:f2:
e2:2f:4d:a7:c3:42:8c:9f:75:60:86:55:78:2f:2d:80:85:74:
cb:5f:0d:28:7f:a4:e4:05:2d:53:f7:6f:47:4e:3c:6c:29:72:
5c:2a:60:ef:37:a5:71:fe:89:bd:96:06:16:38:37:12:0a:e1:
70:ee:99:10:ec:b2:db:d5:9e:44:98:1e:a4:8d:f3:1c:fd:8b:
c9:2d:7e:81:0d:26:7c:36:c6:42:45:e4:13:26:fe:83:a9:17:
61:8b:2e:8b:07:93:35:8a:9e:49:be:d4:bc:60:cf:dd:34:c8:
4f:45:00:c8:3f:cd:25:32:75:45:d2:66:35:41:b8:83:56:8d:
ff:bc:59:1f:50:b0:87:3e:46:61:04:49:c6:6f:8c:8d:eb:9b:
e2:46:74:94:49:e6:1d:c2:19:1d:3f:00:b4:c2:1b:9c:5c:f7:
41:c7:82:a2:d3:3f:ae:d9:5f:f1:af:73:c5:71:51:ff:93:f7:
66:cf:0d:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8biVRLYgMxFrZ8nsmIIdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYjQ3NGQwNTU3MWRmM2Q0NGY2M2NjYTIxYjQwYjZlMTJj
MzkyZDkwHhcNMjUwNTEwMjMwMDU3WhcNMjUwNTExMjMwMDU3WjAzMTEwLwYDVQQD
Eyg3NDA0ZDAyYjAyYjNlZTQ2OTg5NzM5MjZiMjY5ZGI0MzY3NjBiMThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/fWYpBU4Et2uaHWwQzkp51CF0/o
uHF67APFoUvWVqKZlmWMyvsRsCIP1/zN7KrOCjb6KFbEY9C8txOlFzDqdAGbXZAi
vtLgTxFszJfwGk7OZJKknQgWvGIPpDEjdz0pVivOMA9w86Hk2+hFsehjwV//qtL7
ugaHcpk9mV4UHrFkekge4PiXKrtBjBnnJAMvNwTGYvfxMamKsyfG2HxL2fuS/LUS
+iDpVukffkKGg8tGipC8iiO1P62Y0a9tkM2c5yw3OWvTy/erEWYnPCpuMVO1eJJc
rif5o8R7mpSElEsJg34WKSqy9EO+dZQ+HD43eiGlEIF74YtxwQGuwVwmAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQE0CsCs+5GmJc5JrJp20NnYLGOMB8GA1UdIwQY
MBaAFJO0dNBVcd89RPY8yiG0C24Sw5LZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazdSMDBGVngzejFFOWp6S0liUUxiaExEa3RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84ZGE2MjQtMzFjNS00NTA5LWJjNWEt
MjA0OWY2YWJmZDlkLzEvazdSMDBGVngzejFFOWp6S0liUUxiaExEa3RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84ZGE2MjQtMzFjNS00NTA5LWJjNWEtMjA0OWY2YWJmZDlk
LzEvazdSMDBGVngzejFFOWp6S0liUUxiaExEa3RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdReUV4e/
Uh2lNQyeFs2cTMd7aFcHi7JdeeDAkC1dyrp2WHTIONwHm2XutqAfSGrCXEWZ4sRw
Byifjrqcmc782QQWGVJ61NTy4i9Np8NCjJ91YIZVeC8tgIV0y18NKH+k5AUtU/dv
R048bClyXCpg7zelcf6JvZYGFjg3EgrhcO6ZEOyy29WeRJgepI3zHP2LyS1+gQ0m
fDbGQkXkEyb+g6kXYYsuiweTNYqeSb7UvGDP3TTIT0UAyD/NJTJ1RdJmNUG4g1aN
/7xZH1Cwhz5GYQRJxm+Mjeub4kZ0lEnmHcIZHT8AtMIbnFz3QceCotM/rtlf8a9z
xXFR/5P3Zs8Niw==
-----END CERTIFICATE-----
Generated at Sun May 11 09:02:46 2025 by rpki-client