Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
File: K5didVR7dd8rBMT5spHAcQxQd0A.mft (raw, json)
Hash identifier: O8e52KpDqnp4gzSAqdVqaaKJVLF4SGt+p7DdBftpDe4=
Subject key identifier: 34:9B:21:F6:57:DA:ED:20:A9:03:7C:A2:1E:85:1A:F4:4B:84:84:12
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 0196BF6F9192F29DBD92925448D1A2F1F5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 13:01:22 +0000
Manifest this update: Sun 11 May 2025 13:01:22 +0000
Manifest next update: Mon 12 May 2025 13:01:22 +0000
Files and hashes: 1: K5didVR7dd8rBMT5spHAcQxQd0A.crl (hash: /KPdLPWusVsaALS6wOG3X52iM9EgnxAn7HIbfw8nrSE=)
2: LM4PEm0ffK75EUFTgpXPbuoAKZ8.roa (hash: d7gyd2tIHJ6HJ/7vl5EHNlkX+eVBttxlbWWHGFZ3xxQ=)
3: _w36PBooYvePauBkPOTldD_qNZc.roa (hash: hpJoX8luKbQz9GDhdRpg1rk5Zn+lxQz5UWYQbVjTs1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:91:92:f2:9d:bd:92:92:54:48:d1:a2:f1:f5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: May 11 13:01:22 2025 GMT
Not After : May 12 13:01:22 2025 GMT
Subject: CN=349b21f657daed20a9037ca21e851af44b848412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bb:fe:33:41:af:01:ab:ee:47:dd:5a:a4:ee:
29:f8:8d:ce:d3:f9:29:f8:83:8a:6a:69:0d:1a:20:
17:3d:c2:d7:43:28:4a:a0:58:83:a6:4b:b7:a3:70:
20:33:20:4c:57:9c:b9:5a:9f:58:92:c1:e6:16:01:
33:47:dc:e5:cb:6e:f5:6b:74:bd:f1:68:43:64:72:
92:bc:e4:f7:99:bc:35:af:96:eb:c6:c4:8a:29:dc:
80:82:d7:0e:91:f2:e0:d3:18:22:f4:0d:26:6f:ea:
1c:5d:9b:2f:82:2d:aa:89:eb:d6:0a:8c:ed:70:c0:
13:28:f0:bd:e6:93:29:51:1c:de:a7:67:35:f8:be:
41:0e:29:2e:00:a5:fb:d2:00:ca:e0:da:9d:f7:8c:
16:71:3d:10:61:df:73:29:ac:8a:84:29:c1:62:b2:
4b:fb:8a:a2:0f:46:a0:f3:ae:57:c0:ad:d9:f1:93:
b5:1a:00:e0:31:22:0e:c1:ec:b0:40:8f:63:bb:53:
0f:df:bd:84:5b:33:1e:38:88:82:bd:c3:cc:7e:f6:
a3:db:cf:ea:bc:ee:fb:e0:0e:83:36:a4:92:ac:1a:
51:88:e5:1c:85:23:34:e6:84:f1:a1:67:7f:b6:c3:
7c:34:10:11:15:be:68:78:05:66:74:97:dc:79:a7:
fc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9B:21:F6:57:DA:ED:20:A9:03:7C:A2:1E:85:1A:F4:4B:84:84:12
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:de:e7:21:60:94:09:e6:b1:11:ce:25:c4:6c:ec:7f:da:88:
aa:e6:8a:ba:f0:c6:3b:35:0d:03:ac:9d:3c:b7:99:9d:47:97:
d3:9d:89:08:bb:65:30:0d:26:73:ad:70:22:72:92:55:9f:df:
3a:ed:14:03:3c:aa:e1:d3:20:81:3b:6c:50:fa:46:03:68:20:
3c:42:5f:e2:b6:2d:62:1d:7b:d7:c9:46:91:f2:bc:f0:74:9b:
c3:02:ce:b9:59:c9:4f:ba:1b:f1:08:12:a9:9f:d2:bd:fe:24:
ec:0e:19:c4:f9:b2:df:c0:d5:63:0f:79:36:ae:7f:24:7a:98:
06:30:89:ff:31:67:83:c5:26:8f:c1:85:7b:93:ea:e8:d8:d3:
32:c7:44:34:c2:88:42:ff:45:ea:56:fa:7b:14:93:90:02:2e:
d4:35:a2:df:ba:cd:7f:e2:3b:3b:fb:90:61:9c:64:8d:10:1f:
0f:8b:2f:4e:e3:17:b2:87:72:c0:66:78:fb:65:58:ac:83:02:
e6:6a:21:f5:78:46:d2:84:ca:5b:3e:41:54:69:4c:f5:1f:bc:
1b:b3:0a:d2:c1:61:92:70:52:db:f7:4d:16:11:13:10:10:83:
5a:09:1a:2b:12:4b:21:86:c8:b9:8e:8b:4b:a9:d3:80:89:b4:
87:1f:f8:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/b5GS8p29kpJUSNGi8fWrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTc2Mjc1NTQ3Yjc1ZGYyYjA0YzRmOWIyOTFjMDcxMGM1
MDc3NDAwHhcNMjUwNTExMTMwMTIyWhcNMjUwNTEyMTMwMTIyWjAzMTEwLwYDVQQD
EygzNDliMjFmNjU3ZGFlZDIwYTkwMzdjYTIxZTg1MWFmNDRiODQ4NDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbv+M0GvAavuR91apO4p+I3O0/kp
+IOKamkNGiAXPcLXQyhKoFiDpku3o3AgMyBMV5y5Wp9YksHmFgEzR9zly271a3S9
8WhDZHKSvOT3mbw1r5brxsSKKdyAgtcOkfLg0xgi9A0mb+ocXZsvgi2qievWCozt
cMATKPC95pMpURzep2c1+L5BDikuAKX70gDK4Nqd94wWcT0QYd9zKayKhCnBYrJL
+4qiD0ag865XwK3Z8ZO1GgDgMSIOweywQI9ju1MP372EWzMeOIiCvcPMfvaj28/q
vO774A6DNqSSrBpRiOUchSM05oTxoWd/tsN8NBARFb5oeAVmdJfceaf8VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSbIfZX2u0gqQN8oh6FGvRLhIQSMB8GA1UdIwQY
MBaAFCuXYnVUe3XfKwTE+bKRwHEMUHdAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVkaWRWUjdkZDhyQk1UNXNwSEFjUXhRZDBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81OGY0NWYtOGIwNy00ZTZhLTk1NDgt
ZDViMGY5MWQ5N2MyLzEvSzVkaWRWUjdkZDhyQk1UNXNwSEFjUXhRZDBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81OGY0NWYtOGIwNy00ZTZhLTk1NDgtZDViMGY5MWQ5N2My
LzEvSzVkaWRWUjdkZDhyQk1UNXNwSEFjUXhRZDBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnN7nIWCU
CeaxEc4lxGzsf9qIquaKuvDGOzUNA6ydPLeZnUeX052JCLtlMA0mc61wInKSVZ/f
Ou0UAzyq4dMggTtsUPpGA2ggPEJf4rYtYh1718lGkfK88HSbwwLOuVnJT7ob8QgS
qZ/Svf4k7A4ZxPmy38DVYw95Nq5/JHqYBjCJ/zFng8Umj8GFe5Pq6NjTMsdENMKI
Qv9F6lb6exSTkAIu1DWi37rNf+I7O/uQYZxkjRAfD4svTuMXsodywGZ4+2VYrIMC
5moh9XhG0oTKWz5BVGlM9R+8G7MK0sFhknBS2/dNFhETEBCDWgkaKxJLIYbIuY6L
S6nTgIm0hx/4Ug==
-----END CERTIFICATE-----
Generated at Sun May 11 23:21:03 2025 by rpki-client