Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
File: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft (raw, json)
Hash identifier: jlt8xumhU+yzCgjhXpKFU2z1AQzdXLS1pfXN/xY977Q=
Subject key identifier: 7A:AE:A1:F1:B9:ED:BA:80:04:14:EA:63:1E:D4:BB:E1:F1:7C:E5:D5
Authority key identifier: 28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
Certificate issuer: /CN=280c3860fb96a823971e2ee62f8abff093861604
Certificate serial: 0196AE7B53ECEB39ED765EAF0F6FF3FFA718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
Manifest number: 0199
Signing time: Thu 08 May 2025 06:00:40 +0000
Manifest this update: Thu 08 May 2025 06:00:40 +0000
Manifest next update: Fri 09 May 2025 06:00:40 +0000
Files and hashes: 1: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl (hash: +RpTIXAEi2StkTeyUYwHbLqfZ+QjocYkktH1+RibfZI=)
2: vSQNJQ-TqAY10tditE63QDgLi4U.roa (hash: OmFUSF7SfEkV+4PCWG7ne1LHCjmLdydl9a/jqJ2m+sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:7b:53:ec:eb:39:ed:76:5e:af:0f:6f:f3:ff:a7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280c3860fb96a823971e2ee62f8abff093861604
Validity
Not Before: May 8 06:00:40 2025 GMT
Not After : May 9 06:00:40 2025 GMT
Subject: CN=7aaea1f1b9edba800414ea631ed4bbe1f17ce5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:5b:ab:82:ec:bb:0c:9f:ec:9e:e0:da:dc:
ee:3b:0d:ec:9b:50:35:c7:7d:4c:e8:74:6d:4f:89:
d8:78:e0:cd:89:d8:eb:82:2f:ef:f7:cb:3e:d1:4f:
a6:ff:79:f5:54:c4:ee:c0:7a:bd:a1:1a:e7:97:72:
5f:18:04:51:4d:38:e6:d2:3a:8d:c0:42:24:f9:b9:
36:ca:0c:67:67:30:64:e2:b7:2a:a0:59:40:72:7e:
9d:ba:26:51:7e:31:53:56:cf:4d:6c:fc:c9:56:6d:
dd:03:6f:b0:a7:a2:ab:9b:5d:35:77:0b:c8:4f:27:
4c:c6:f9:d8:05:37:fe:ed:bc:51:f9:e4:c0:94:04:
32:0d:4a:48:0e:87:27:ab:63:ce:0d:f9:57:e5:8d:
36:59:5a:dd:3f:4a:fc:e6:1b:5e:48:5b:a4:ac:84:
e6:bd:ff:37:83:f2:88:21:7c:92:9a:ab:26:5d:dc:
18:7c:b5:e8:e0:f7:3b:d2:91:98:db:2c:ea:6c:41:
44:f1:c9:97:a4:4c:95:a6:2c:2b:9a:dd:7b:04:fe:
c3:a8:07:6c:52:89:33:d0:8c:de:4a:86:f4:e9:42:
23:29:5f:92:13:13:65:92:63:b1:26:45:52:75:44:
d3:3b:53:8c:b8:b6:26:28:e3:58:50:51:4e:76:c2:
53:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AE:A1:F1:B9:ED:BA:80:04:14:EA:63:1E:D4:BB:E1:F1:7C:E5:D5
X509v3 Authority Key Identifier:
keyid:28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cf:ab:2e:1b:40:c9:4d:fb:0e:cd:93:4b:3d:85:c7:0a:f2:
7b:b6:34:12:2a:38:61:a6:ca:8c:2b:34:a0:a5:b4:cf:52:cf:
47:73:e9:7b:b7:21:f1:1d:36:7e:56:c3:8a:ae:c5:0d:57:4e:
c7:3f:6a:01:ee:53:df:ce:c4:65:83:b4:bc:76:72:75:f4:c1:
aa:00:94:4a:ec:3f:c6:d7:5b:be:88:c4:0a:4e:77:be:06:76:
ab:4a:32:8f:0d:7e:1f:b3:af:b5:9a:2a:75:aa:2b:a4:59:05:
87:8a:44:f6:8f:f3:da:b3:37:f0:ab:d4:67:d3:96:65:5b:aa:
50:bb:c3:d6:0e:da:3b:67:ba:7e:92:48:eb:f5:89:da:1b:a6:
f4:1a:87:c3:58:78:74:ae:6b:82:bf:98:bb:7f:34:39:d7:16:
dd:3a:11:81:74:66:97:c3:28:4c:ce:fd:5a:22:b3:75:be:15:
69:35:7d:2a:f0:08:12:74:ca:d7:44:6d:2d:43:f1:b1:f9:41:
2f:0e:6f:3b:b9:44:33:7f:5c:b9:21:be:5f:48:ab:d3:0f:61:
15:12:36:0c:2a:f4:d7:3b:b2:e2:4b:17:7e:91:c9:87:f5:65:
a5:ea:e0:b2:08:1f:b7:cf:69:3b:f5:56:e1:3b:25:ad:93:c5:
94:47:cc:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaue1Ps6zntdl6vD2/z/6cYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MGMzODYwZmI5NmE4MjM5NzFlMmVlNjJmOGFiZmYwOTM4
NjE2MDQwHhcNMjUwNTA4MDYwMDQwWhcNMjUwNTA5MDYwMDQwWjAzMTEwLwYDVQQD
Eyg3YWFlYTFmMWI5ZWRiYTgwMDQxNGVhNjMxZWQ0YmJlMWYxN2NlNWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuBbq4Lsuwyf7J7g2tzuOw3sm1A1
x31M6HRtT4nYeODNidjrgi/v98s+0U+m/3n1VMTuwHq9oRrnl3JfGARRTTjm0jqN
wEIk+bk2ygxnZzBk4rcqoFlAcn6duiZRfjFTVs9NbPzJVm3dA2+wp6Krm101dwvI
TydMxvnYBTf+7bxR+eTAlAQyDUpIDocnq2PODflX5Y02WVrdP0r85hteSFukrITm
vf83g/KIIXySmqsmXdwYfLXo4Pc70pGY2yzqbEFE8cmXpEyVpiwrmt17BP7DqAds
Uokz0IzeSob06UIjKV+SExNlkmOxJkVSdUTTO1OMuLYmKONYUFFOdsJTqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHquofG57bqABBTqYx7Uu+HxfOXVMB8GA1UdIwQY
MBaAFCgMOGD7lqgjlx4u5i+Kv/CThhYEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0F3NFlQdVdxQ09YSGk3bUw0cV84Sk9HRmdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iMTM0YjctNzg0My00ZTBiLWFjMWQt
MDYzYWVhOTNhZDdkLzEvS0F3NFlQdVdxQ09YSGk3bUw0cV84Sk9HRmdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9iMTM0YjctNzg0My00ZTBiLWFjMWQtMDYzYWVhOTNhZDdk
LzEvS0F3NFlQdVdxQ09YSGk3bUw0cV84Sk9HRmdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbM+rLhtA
yU37Ds2TSz2Fxwrye7Y0Eio4YabKjCs0oKW0z1LPR3Ppe7ch8R02flbDiq7FDVdO
xz9qAe5T387EZYO0vHZydfTBqgCUSuw/xtdbvojECk53vgZ2q0oyjw1+H7OvtZoq
daorpFkFh4pE9o/z2rM38KvUZ9OWZVuqULvD1g7aO2e6fpJI6/WJ2hum9BqHw1h4
dK5rgr+Yu380OdcW3ToRgXRml8MoTM79WiKzdb4VaTV9KvAIEnTK10RtLUPxsflB
Lw5vO7lEM39cuSG+X0ir0w9hFRI2DCr01zuy4ksXfpHJh/Vlpergsggft89pO/VW
4TslrZPFlEfMUA==
-----END CERTIFICATE-----
Generated at Thu May 8 16:08:14 2025 by rpki-client