Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
File: KrMqUfAYgPSEFWkbYAi482mcND0.mft (raw, json)
Hash identifier: w3Dcv/E4536/xdDOpTDTmMeFDVaQOGd+0ZETSfo7zD8=
Subject key identifier: B1:75:63:C4:01:C5:2C:F5:26:C5:61:2D:F3:C5:5E:94:BD:0E:44:4C
Authority key identifier: 2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D
Certificate issuer: /CN=2ab32a51f01880f48415691b6008b8f3699c343d
Certificate serial: 0196B71090916F8DDD7A46A53E5D63B93930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
Manifest number: 1532
Signing time: Fri 09 May 2025 22:00:37 +0000
Manifest this update: Fri 09 May 2025 22:00:37 +0000
Manifest next update: Sat 10 May 2025 22:00:37 +0000
Files and hashes: 1: KrMqUfAYgPSEFWkbYAi482mcND0.crl (hash: MJ+PtVTdHL5UtOIqW+xBq/MUx3M9FsH3U0bb1ceYRFA=)
2: i9bRqGmLoNeEMEQG2gZoK39jq_M.roa (hash: QM3nqUsH3GUvguf6sXYPTlR1T5XaS6Z20/NPBnkA7vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:90:91:6f:8d:dd:7a:46:a5:3e:5d:63:b9:39:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab32a51f01880f48415691b6008b8f3699c343d
Validity
Not Before: May 9 22:00:37 2025 GMT
Not After : May 10 22:00:37 2025 GMT
Subject: CN=b17563c401c52cf526c5612df3c55e94bd0e444c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:13:fd:4a:8d:22:af:c3:fd:b7:f1:f6:89:b7:
54:55:32:60:1d:7d:d3:ec:2c:aa:6a:e5:d1:5f:dc:
2a:b5:cb:e2:b3:7c:db:88:b1:58:4b:2b:1a:5f:b9:
af:97:42:ab:c9:63:c4:cf:e0:70:40:58:6e:90:84:
3d:2f:76:ae:db:ec:9d:e6:67:7d:96:df:46:12:92:
e1:0c:14:aa:27:4b:cb:8f:b0:83:4d:f2:76:42:f7:
51:81:7f:7d:6c:10:0a:65:cc:7b:24:13:bf:fe:86:
3b:fc:ff:a1:3e:11:05:7d:04:e1:31:db:36:15:ea:
d1:4d:93:ce:35:5a:fe:b1:0e:d2:06:1a:8a:d5:0f:
c8:6c:b0:43:89:26:81:a7:cc:23:89:17:33:40:7a:
db:ac:ba:b8:95:0b:03:4e:92:75:6f:42:39:42:6b:
cb:4f:b0:f4:f5:7e:c6:e6:27:46:a3:0a:47:28:9c:
7b:93:f2:0e:85:df:87:31:c3:5e:f1:50:9b:dd:7e:
e7:be:ca:10:a5:ae:16:3f:ec:75:29:b3:d3:85:dd:
0c:df:74:36:0e:8d:4d:43:9d:8a:96:e8:b5:df:88:
cf:32:1a:32:b6:bd:e0:68:8d:33:b8:e8:47:60:10:
84:a3:d6:9d:a4:d5:ca:76:c2:6d:61:4e:b2:00:0a:
36:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:75:63:C4:01:C5:2C:F5:26:C5:61:2D:F3:C5:5E:94:BD:0E:44:4C
X509v3 Authority Key Identifier:
keyid:2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:73:58:2a:37:a8:3d:ba:8d:d8:be:0f:d0:ee:8b:a9:d0:50:
cf:5c:ed:0f:d8:aa:89:dc:e6:57:e5:5a:07:90:55:26:00:2b:
fb:ec:f1:dc:dc:16:52:57:55:98:93:93:20:44:7d:dc:b9:95:
aa:aa:0d:b0:4b:c3:ed:e3:9d:a0:5d:3a:ee:ee:0b:bd:85:df:
fa:b7:79:01:55:5b:7d:3d:e0:cc:7b:51:1c:28:7e:2e:b8:71:
01:e1:8d:04:1d:33:3b:51:f0:12:9e:db:9c:c9:9d:9d:4c:35:
7e:1e:35:4e:cc:86:59:55:6c:ba:b9:be:79:b9:7e:13:0f:d7:
ee:a4:7f:73:db:6b:30:7c:de:4e:c2:85:31:6e:de:52:fb:60:
b6:34:5d:8a:8b:fe:0c:a4:f5:ca:c6:ae:2d:e5:97:9b:66:19:
62:97:33:c5:15:40:c3:e2:b0:a0:cc:64:2b:94:88:f1:33:a8:
fa:00:33:a9:b7:85:3b:49:f6:4d:44:c8:b8:0f:f8:49:66:47:
7e:c1:be:52:98:9e:ed:36:18:bc:e7:3a:5c:c7:71:41:31:a9:
a7:b8:1f:17:5d:79:a5:5c:57:3c:9e:68:86:fa:6d:b5:6f:ef:
84:35:f8:cb:c2:ed:f8:c1:b8:71:13:b9:c2:3e:3b:63:f9:34:
de:bf:f6:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3EJCRb43dekalPl1juTkwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYjMyYTUxZjAxODgwZjQ4NDE1NjkxYjYwMDhiOGYzNjk5
YzM0M2QwHhcNMjUwNTA5MjIwMDM3WhcNMjUwNTEwMjIwMDM3WjAzMTEwLwYDVQQD
EyhiMTc1NjNjNDAxYzUyY2Y1MjZjNTYxMmRmM2M1NWU5NGJkMGU0NDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxP9So0ir8P9t/H2ibdUVTJgHX3T
7CyqauXRX9wqtcvis3zbiLFYSysaX7mvl0KryWPEz+BwQFhukIQ9L3au2+yd5md9
lt9GEpLhDBSqJ0vLj7CDTfJ2QvdRgX99bBAKZcx7JBO//oY7/P+hPhEFfQThMds2
FerRTZPONVr+sQ7SBhqK1Q/IbLBDiSaBp8wjiRczQHrbrLq4lQsDTpJ1b0I5QmvL
T7D09X7G5idGowpHKJx7k/IOhd+HMcNe8VCb3X7nvsoQpa4WP+x1KbPThd0M33Q2
Do1NQ52Klui134jPMhoytr3gaI0zuOhHYBCEo9adpNXKdsJtYU6yAAo2SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLF1Y8QBxSz1JsVhLfPFXpS9DkRMMB8GA1UdIwQY
MBaAFCqzKlHwGID0hBVpG2AIuPNpnDQ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3JNcVVmQVlnUFNFRldrYllBaTQ4Mm1jTkQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wNWFkODMtOTcxMS00NGIwLThjZDUt
ZGZkZWY2Y2FhYmRmLzEvS3JNcVVmQVlnUFNFRldrYllBaTQ4Mm1jTkQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wNWFkODMtOTcxMS00NGIwLThjZDUtZGZkZWY2Y2FhYmRm
LzEvS3JNcVVmQVlnUFNFRldrYllBaTQ4Mm1jTkQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3NYKjeo
PbqN2L4P0O6LqdBQz1ztD9iqidzmV+VaB5BVJgAr++zx3NwWUldVmJOTIER93LmV
qqoNsEvD7eOdoF067u4LvYXf+rd5AVVbfT3gzHtRHCh+LrhxAeGNBB0zO1HwEp7b
nMmdnUw1fh41TsyGWVVsurm+ebl+Ew/X7qR/c9trMHzeTsKFMW7eUvtgtjRdiov+
DKT1ysauLeWXm2YZYpczxRVAw+KwoMxkK5SI8TOo+gAzqbeFO0n2TUTIuA/4SWZH
fsG+Upie7TYYvOc6XMdxQTGpp7gfF115pVxXPJ5ohvpttW/vhDX4y8Lt+MG4cRO5
wj47Y/k03r/2MA==
-----END CERTIFICATE-----
Generated at Sat May 10 03:52:28 2025 by rpki-client