Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
File: K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft (raw, json)
Hash identifier: dC1EMxwi6F7rUyoqAz33w8RhNDXkPo3C2IcsrCQOTus=
Subject key identifier: BD:74:AB:17:6C:EE:A3:3A:57:95:7B:12:61:F4:0C:0E:A6:A5:BC:54
Authority key identifier: 2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2
Certificate issuer: /CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2
Certificate serial: 0196A0F71E5F46667A6952D49DF49DFADB94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
Manifest number: 0C86
Signing time: Mon 05 May 2025 15:01:11 +0000
Manifest this update: Mon 05 May 2025 15:01:11 +0000
Manifest next update: Tue 06 May 2025 15:01:11 +0000
Files and hashes: 1: 1-Ctx0OlZ3RY1NyUcG6Kr2eKUErY.roa (hash: JkNd+tdZjJnr7jC7uh7724Mud2+QPZt/dAV8oEoWgb4=)
2: K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl (hash: bQQsMq7I5MdeAtCLBJSlUP42hsnPdDHywIT0eHEY0j0=)
3: iBl8t3z-BUajHzSAeaP-AzTEflQ.roa (hash: +f1NthgpfDbumeIw5C75bNKybF0uHgK0qHdvaGhDtxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f7:1e:5f:46:66:7a:69:52:d4:9d:f4:9d:fa:db:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2
Validity
Not Before: May 5 15:01:11 2025 GMT
Not After : May 6 15:01:11 2025 GMT
Subject: CN=bd74ab176ceea33a57957b1261f40c0ea6a5bc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:40:3d:0a:e4:6f:c4:00:01:18:05:c3:96:
d2:ae:f0:95:a0:8c:21:43:40:63:f8:01:aa:1d:ac:
6a:93:5b:b9:21:fe:89:e2:42:50:98:f3:4a:ac:8f:
53:58:19:a1:ac:15:06:e9:f2:96:72:18:06:5d:3e:
94:ed:0d:68:72:7e:93:4b:52:cb:bf:86:f1:76:7b:
8a:f3:a1:8a:09:85:8e:f9:a3:e7:92:7f:7d:db:d1:
09:fe:3b:48:0d:75:0d:1f:5d:a3:99:d7:fc:25:17:
e5:e7:62:df:8a:e1:56:8f:03:cb:1c:a8:f9:63:5a:
ac:97:f5:f7:f3:7a:d4:fc:2c:95:7f:14:ea:6e:39:
f6:85:8a:ad:27:4b:c1:50:37:46:95:cb:7d:a4:aa:
2f:85:53:b6:82:54:fb:c8:c3:54:01:b5:13:76:a2:
f1:10:a4:67:8e:74:a9:7b:e5:ba:79:ba:7e:28:31:
81:af:a7:2f:5f:85:c8:19:d7:a3:97:7b:e5:63:0c:
7a:43:7f:a1:5a:d0:7a:ba:e9:e4:71:8a:cf:30:55:
fb:6a:0e:19:8c:dd:5e:ef:f9:93:87:cb:9d:ae:6d:
48:1f:73:75:08:67:d1:97:ad:fc:5d:5f:dc:01:bf:
59:cf:f3:54:6b:dc:c5:93:f9:28:47:3c:78:5b:1b:
92:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:74:AB:17:6C:EE:A3:3A:57:95:7B:12:61:F4:0C:0E:A6:A5:BC:54
X509v3 Authority Key Identifier:
keyid:2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:75:79:71:48:fd:aa:54:cc:13:0c:0d:35:95:d1:07:6a:63:
d5:f4:60:0b:9f:8a:2e:62:d2:17:58:88:74:b6:20:c2:58:ad:
a0:3f:a6:8e:5f:45:7b:b7:08:76:9d:48:4c:49:3f:36:41:34:
e9:30:29:9d:1f:ad:c9:1f:a8:08:ee:aa:44:ed:b1:55:3c:10:
b6:da:d7:12:87:c5:ec:e0:f5:ce:dc:09:ab:bd:3b:4c:ee:80:
c8:8a:b7:9d:fe:45:d0:02:6d:fa:31:be:d1:7b:1d:a1:6d:57:
2a:b0:57:dc:58:6c:07:3a:fe:a3:47:08:62:51:2c:70:79:74:
9d:68:47:73:47:27:cd:ac:1b:db:83:83:74:63:46:ef:44:6a:
0a:73:03:d0:01:75:f3:78:e5:6f:ce:e7:10:38:c9:81:9d:bb:
e2:7a:a3:98:d5:41:37:38:de:45:b4:7d:27:0c:b3:56:e1:d4:
5b:2f:28:ef:ca:56:1d:14:61:48:81:23:ef:f3:cf:51:53:90:
aa:7a:40:cd:3f:c0:28:ce:5d:d4:dc:43:4f:6a:6b:ab:1c:e0:
48:d0:32:f1:1c:bc:87:21:2d:b8:b9:1e:ed:a9:64:01:02:98:
bc:51:d8:17:b3:15:6e:96:ee:fa:e4:91:e3:08:d0:1b:7c:55:
bd:d8:7e:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZag9x5fRmZ6aVLUnfSd+tuUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiN2FiNjU2OWRlNzhkM2M0YTA4MmZkZTZkZDFkNmEzZjBk
NTA5YzIwHhcNMjUwNTA1MTUwMTExWhcNMjUwNTA2MTUwMTExWjAzMTEwLwYDVQQD
EyhiZDc0YWIxNzZjZWVhMzNhNTc5NTdiMTI2MWY0MGMwZWE2YTViYzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx71APQrkb8QAARgFw5bSrvCVoIwh
Q0Bj+AGqHaxqk1u5If6J4kJQmPNKrI9TWBmhrBUG6fKWchgGXT6U7Q1ocn6TS1LL
v4bxdnuK86GKCYWO+aPnkn9929EJ/jtIDXUNH12jmdf8JRfl52LfiuFWjwPLHKj5
Y1qsl/X383rU/CyVfxTqbjn2hYqtJ0vBUDdGlct9pKovhVO2glT7yMNUAbUTdqLx
EKRnjnSpe+W6ebp+KDGBr6cvX4XIGdejl3vlYwx6Q3+hWtB6uunkcYrPMFX7ag4Z
jN1e7/mTh8udrm1IH3N1CGfRl638XV/cAb9Zz/NUa9zFk/koRzx4WxuSDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL10qxds7qM6V5V7EmH0DA6mpbxUMB8GA1UdIwQY
MBaAFCt6tlad5408Sggv3m3R1qPw1QnCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzNxMlZwM25qVHhLQ0NfZWJkSFdvX0RWQ2NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82ZTQ1NDQtZTY1Zi00YmYwLTk0Yzgt
M2ZjOTY1OTRiNGM1LzEvSzNxMlZwM25qVHhLQ0NfZWJkSFdvX0RWQ2NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC82ZTQ1NDQtZTY1Zi00YmYwLTk0YzgtM2ZjOTY1OTRiNGM1
LzEvSzNxMlZwM25qVHhLQ0NfZWJkSFdvX0RWQ2NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHV5cUj9
qlTMEwwNNZXRB2pj1fRgC5+KLmLSF1iIdLYgwlitoD+mjl9Fe7cIdp1ITEk/NkE0
6TApnR+tyR+oCO6qRO2xVTwQttrXEofF7OD1ztwJq707TO6AyIq3nf5F0AJt+jG+
0XsdoW1XKrBX3FhsBzr+o0cIYlEscHl0nWhHc0cnzawb24ODdGNG70RqCnMD0AF1
83jlb87nEDjJgZ274nqjmNVBNzjeRbR9JwyzVuHUWy8o78pWHRRhSIEj7/PPUVOQ
qnpAzT/AKM5d1NxDT2prqxzgSNAy8Ry8hyEtuLke7alkAQKYvFHYF7MVbpbu+uSR
4wjQG3xVvdh+9g==
-----END CERTIFICATE-----
Generated at Mon May 5 19:35:16 2025 by rpki-client