Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
File: kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft (raw, json)
Hash identifier: Rhba6UngOh5+AMTM97WmnZ3Vjtwpmmsw/9huip5XRmU=
Subject key identifier: 92:21:8B:B5:EF:AC:A6:CE:B6:0E:48:16:5F:E7:0C:B6:0B:8D:A0:AB
Authority key identifier: 90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
Certificate issuer: /CN=909b5788960bd179056848ec956fd611d4cf8094
Certificate serial: 0196BD1253B5507AC8318445C376FF6CFD7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
Manifest number: 1379
Signing time: Sun 11 May 2025 02:00:16 +0000
Manifest this update: Sun 11 May 2025 02:00:16 +0000
Manifest next update: Mon 12 May 2025 02:00:16 +0000
Files and hashes: 1: kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl (hash: PVLStl+r1OsPmqZV3Evty5xQWWJ9t6PbKsa2TbdyKIY=)
2: pOvhTWtU4kelyPZ1fpMoPO101II.roa (hash: WJ4/oAtZUHsxbOhd3cJHFGOETOXNUNiMfn725elzUrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:53:b5:50:7a:c8:31:84:45:c3:76:ff:6c:fd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909b5788960bd179056848ec956fd611d4cf8094
Validity
Not Before: May 11 02:00:16 2025 GMT
Not After : May 12 02:00:16 2025 GMT
Subject: CN=92218bb5efaca6ceb60e48165fe70cb60b8da0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:17:e1:35:c5:62:d1:ef:12:c9:fa:04:72:
8d:18:ea:80:e1:ad:45:d1:fa:b0:22:73:4c:75:38:
6d:5d:12:31:1c:43:1d:9e:a3:d8:b6:7d:1e:13:6d:
ca:4b:28:c8:9b:87:f5:cd:f3:16:8a:96:82:29:9f:
07:69:2d:0d:70:5b:b8:2b:44:4c:dd:7c:c3:a2:6b:
23:64:08:eb:15:07:ab:7c:76:8d:cc:98:88:ca:57:
1d:e3:c5:d5:99:dc:3b:3d:62:fa:a8:21:1f:26:36:
54:fc:40:47:45:cc:b1:ed:d1:30:7a:c3:0e:11:86:
54:29:33:4f:ce:aa:ab:cb:53:fd:ba:ce:d1:d2:37:
94:44:dc:3b:3d:af:a8:91:0c:fb:df:23:6a:d4:34:
d1:17:f5:30:19:0a:70:65:be:f5:79:6f:a1:0d:c7:
80:6e:e0:f2:2e:e7:3c:42:68:43:93:11:83:04:8d:
dc:38:eb:2b:a1:96:78:7b:34:93:f6:8b:88:ca:03:
fa:d2:0f:fe:ea:00:c4:e2:9d:7f:5b:5b:13:f4:5b:
58:0e:cb:a6:c4:5d:4e:1f:5f:2d:fb:cb:87:05:56:
15:f3:db:34:ab:51:91:e7:6e:cd:a3:6e:d0:b9:5c:
75:a4:04:d3:7b:ab:3a:5f:b8:c2:92:e9:d9:ec:f6:
1c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:21:8B:B5:EF:AC:A6:CE:B6:0E:48:16:5F:E7:0C:B6:0B:8D:A0:AB
X509v3 Authority Key Identifier:
keyid:90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:96:2a:2c:3a:76:d0:b9:0c:36:01:e3:45:dd:f7:d4:af:19:
3b:11:61:51:8e:e0:e9:0c:01:0d:aa:f2:3d:07:15:87:3f:56:
20:9f:ac:20:7e:e4:2c:d5:83:25:cd:70:2f:4e:2f:c4:b2:f9:
93:88:0a:e2:f5:05:f0:b7:33:3a:49:4b:5c:57:7e:81:34:f9:
17:77:2c:7b:df:e2:cf:bc:17:a7:26:e7:52:bb:39:45:61:24:
77:15:8c:5c:0e:78:c2:c2:aa:bb:f7:f1:c3:d3:04:da:26:2d:
c5:81:df:0e:c8:f1:26:69:24:4e:6d:49:85:a4:d2:74:1c:4b:
8c:63:93:e5:2d:7b:00:8c:4c:3d:1c:e2:9e:26:d1:55:0a:16:
34:cf:5a:c7:f0:63:40:78:80:57:62:f4:9c:cb:a0:16:c3:63:
ef:84:55:2e:a9:63:db:84:75:73:7a:09:8f:39:26:e5:d1:00:
34:10:db:17:31:24:33:8d:b6:d2:d8:a5:48:42:d6:eb:86:f5:
ce:cb:f4:87:db:38:a1:b3:a8:e7:ac:73:a8:42:cb:cd:ef:8c:
73:06:e9:00:26:b7:3d:d2:a6:ff:ba:c0:54:02:be:0c:08:46:
1b:20:21:48:c8:c7:10:25:30:09:e8:ce:f2:3a:51:96:91:c2:
4d:27:3e:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9ElO1UHrIMYRFw3b/bP17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwOWI1Nzg4OTYwYmQxNzkwNTY4NDhlYzk1NmZkNjExZDRj
ZjgwOTQwHhcNMjUwNTExMDIwMDE2WhcNMjUwNTEyMDIwMDE2WjAzMTEwLwYDVQQD
Eyg5MjIxOGJiNWVmYWNhNmNlYjYwZTQ4MTY1ZmU3MGNiNjBiOGRhMGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+gX4TXFYtHvEsn6BHKNGOqA4a1F
0fqwInNMdThtXRIxHEMdnqPYtn0eE23KSyjIm4f1zfMWipaCKZ8HaS0NcFu4K0RM
3XzDomsjZAjrFQerfHaNzJiIylcd48XVmdw7PWL6qCEfJjZU/EBHRcyx7dEwesMO
EYZUKTNPzqqry1P9us7R0jeURNw7Pa+okQz73yNq1DTRF/UwGQpwZb71eW+hDceA
buDyLuc8QmhDkxGDBI3cOOsroZZ4ezST9ouIygP60g/+6gDE4p1/W1sT9FtYDsum
xF1OH18t+8uHBVYV89s0q1GR527No27QuVx1pATTe6s6X7jCkunZ7PYcoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIhi7XvrKbOtg5IFl/nDLYLjaCrMB8GA1UdIwQY
MBaAFJCbV4iWC9F5BWhI7JVv1hHUz4CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0p0WGlKWUwwWGtGYUVqc2xXX1dFZFRQZ0pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82YzBlMjUtODFhNS00OTAwLWI2Yjct
ZGY0YzlmMzRkYzViLzEva0p0WGlKWUwwWGtGYUVqc2xXX1dFZFRQZ0pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82YzBlMjUtODFhNS00OTAwLWI2YjctZGY0YzlmMzRkYzVi
LzEva0p0WGlKWUwwWGtGYUVqc2xXX1dFZFRQZ0pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvZYqLDp2
0LkMNgHjRd331K8ZOxFhUY7g6QwBDaryPQcVhz9WIJ+sIH7kLNWDJc1wL04vxLL5
k4gK4vUF8LczOklLXFd+gTT5F3cse9/iz7wXpybnUrs5RWEkdxWMXA54wsKqu/fx
w9ME2iYtxYHfDsjxJmkkTm1JhaTSdBxLjGOT5S17AIxMPRzinibRVQoWNM9ax/Bj
QHiAV2L0nMugFsNj74RVLqlj24R1c3oJjzkm5dEANBDbFzEkM4220tilSELW64b1
zsv0h9s4obOo56xzqELLze+McwbpACa3PdKm/7rAVAK+DAhGGyAhSMjHECUwCejO
8jpRlpHCTSc+/w==
-----END CERTIFICATE-----
Generated at Sun May 11 04:08:20 2025 by rpki-client