Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
File: 7_ktk2igmtNvelft-9CgXZ_UDh0.mft (raw, json)
Hash identifier: j563hRu09w4RKJmvdIJc9QnYlmLFwq4yv0Rfh5Y3/TQ=
Subject key identifier: A2:99:D4:A4:4D:DC:7E:88:3E:71:84:B7:19:8E:FF:B5:7B:D0:46:AB
Authority key identifier: EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
Certificate issuer: /CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Certificate serial: 0196C1CB61C48BA21EFDD50D0ED2AB0D827F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 00:00:53 +0000
Manifest this update: Mon 12 May 2025 00:00:53 +0000
Manifest next update: Tue 13 May 2025 00:00:53 +0000
Files and hashes: 1: 4MUCYAZCB6NVOKQFb7pDQIHNpgE.roa (hash: J62BqBqvWBCAmGxGxzXNfz9RxMyKPvmpSv0G2g6PRts=)
2: 7_ktk2igmtNvelft-9CgXZ_UDh0.crl (hash: QIagNq/3kjHoVddQcP9JBbj8j3mdm0N/U9BKHderxoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:61:c4:8b:a2:1e:fd:d5:0d:0e:d2:ab:0d:82:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Validity
Not Before: May 12 00:00:53 2025 GMT
Not After : May 13 00:00:53 2025 GMT
Subject: CN=a299d4a44ddc7e883e7184b7198effb57bd046ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:ba:97:ea:53:e4:8d:f3:ac:8c:e7:f6:30:
79:4d:e1:d8:bb:5f:de:a2:f4:12:4f:48:f4:e8:4d:
a0:96:55:ae:7f:2f:17:da:d4:38:c7:22:0e:a2:65:
e7:de:50:48:64:bf:1c:d0:85:07:77:4e:70:e6:66:
64:7b:fd:9e:20:b0:9f:d6:ff:29:fc:12:41:4e:cb:
ec:b4:da:11:52:b4:20:6d:bc:fe:da:74:e8:b0:b5:
ed:18:26:09:e2:a7:2d:09:3e:5d:0a:ec:f6:65:41:
5d:13:9e:f6:18:20:2a:78:bd:2a:3c:c7:40:39:9d:
b7:7b:1e:42:93:92:f2:14:41:38:ae:6a:81:d9:2b:
0c:2a:86:4e:9c:a6:d6:ef:0a:21:0c:b1:7e:a3:af:
0e:9a:30:03:b6:20:1f:19:80:ed:85:08:0d:86:38:
cc:57:73:57:2f:83:75:ad:cd:ba:8a:e8:8b:46:ae:
5b:91:ec:fa:3d:d3:35:ae:65:bd:b2:15:06:b4:bd:
f9:1b:3f:3b:c4:a8:03:70:aa:30:97:8e:8b:91:ba:
a8:c6:a0:b3:37:cf:ec:f6:e8:ab:f0:ba:b2:52:73:
1c:91:d5:48:ee:bc:4f:19:91:9c:d5:5e:3c:8f:a9:
a4:be:46:f2:6c:c8:21:8f:30:b1:0f:15:68:32:e1:
eb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:99:D4:A4:4D:DC:7E:88:3E:71:84:B7:19:8E:FF:B5:7B:D0:46:AB
X509v3 Authority Key Identifier:
keyid:EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3b:34:64:2c:2c:9b:cb:dd:1d:b6:f6:24:d0:18:40:de:1a:
4b:58:f1:c7:15:4a:b0:07:24:b5:2b:c4:18:29:ad:68:f3:aa:
11:fd:51:94:25:84:5d:dd:33:f0:02:83:53:50:eb:21:b2:c0:
f6:1a:a6:01:ac:5b:ce:b8:7d:aa:fd:c6:bf:3e:3e:d8:f4:1f:
2c:f1:22:80:33:be:e9:bb:e7:2e:01:e3:e9:37:52:4e:30:3b:
44:d9:5f:b8:e7:a5:a1:88:ec:4f:64:17:d0:ca:25:4d:5b:94:
df:74:95:aa:fa:b3:dc:f4:a2:19:95:1f:d8:93:2a:66:45:d9:
ae:44:8e:26:5d:f8:15:5a:04:e3:2f:ca:30:c4:91:fd:1f:90:
94:e1:1b:32:ec:9b:52:4a:3b:aa:94:65:94:3d:90:9e:c1:c1:
8c:c5:38:06:ed:d2:4d:a2:f6:b4:e5:42:61:3c:06:a1:a7:d3:
08:ff:a5:c6:39:2c:3d:bc:c7:9b:22:78:14:d9:cf:51:98:50:
8b:30:57:8e:90:85:7a:68:8f:e7:05:be:ac:dc:06:27:46:37:
69:2c:47:a7:f3:14:3f:cb:1e:38:c9:50:11:f3:6b:88:2b:63:
be:13:44:5b:47:e1:e8:a1:c7:89:9c:fb:5c:14:ab:02:b7:81:
bf:68:ae:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBy2HEi6Ie/dUNDtKrDYJ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZjkyZDkzNjhhMDlhZDM2ZjdhNTdlZGZiZDBhMDVkOWZk
NDBlMWQwHhcNMjUwNTEyMDAwMDUzWhcNMjUwNTEzMDAwMDUzWjAzMTEwLwYDVQQD
EyhhMjk5ZDRhNDRkZGM3ZTg4M2U3MTg0YjcxOThlZmZiNTdiZDA0NmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlC6l+pT5I3zrIzn9jB5TeHYu1/e
ovQST0j06E2gllWufy8X2tQ4xyIOomXn3lBIZL8c0IUHd05w5mZke/2eILCf1v8p
/BJBTsvstNoRUrQgbbz+2nTosLXtGCYJ4qctCT5dCuz2ZUFdE572GCAqeL0qPMdA
OZ23ex5Ck5LyFEE4rmqB2SsMKoZOnKbW7wohDLF+o68OmjADtiAfGYDthQgNhjjM
V3NXL4N1rc26iuiLRq5bkez6PdM1rmW9shUGtL35Gz87xKgDcKowl46LkbqoxqCz
N8/s9uir8LqyUnMckdVI7rxPGZGc1V48j6mkvkbybMghjzCxDxVoMuHrDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKZ1KRN3H6IPnGEtxmO/7V70EarMB8GA1UdIwQY
MBaAFO/5LZNooJrTb3pX7fvQoF2f1A4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83ZjcyNTktNTNkMC00MWFlLTk1MWQt
NDAwNDE3Yzk3MTdlLzEvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83ZjcyNTktNTNkMC00MWFlLTk1MWQtNDAwNDE3Yzk3MTdl
LzEvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzs0ZCws
m8vdHbb2JNAYQN4aS1jxxxVKsAcktSvEGCmtaPOqEf1RlCWEXd0z8AKDU1DrIbLA
9hqmAaxbzrh9qv3Gvz4+2PQfLPEigDO+6bvnLgHj6TdSTjA7RNlfuOeloYjsT2QX
0MolTVuU33SVqvqz3PSiGZUf2JMqZkXZrkSOJl34FVoE4y/KMMSR/R+QlOEbMuyb
Uko7qpRllD2QnsHBjMU4Bu3STaL2tOVCYTwGoafTCP+lxjksPbzHmyJ4FNnPUZhQ
izBXjpCFemiP5wW+rNwGJ0Y3aSxHp/MUP8seOMlQEfNriCtjvhNEW0fh6KHHiZz7
XBSrAreBv2iuCQ==
-----END CERTIFICATE-----
Generated at Mon May 12 01:38:14 2025 by rpki-client