Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
File: kWg1p4YCMde8FkjUX46Vf1FQWyg.mft (raw, json)
Hash identifier: kXySI2V08W49oleFYrEnm5BWAngEGZgqVsjS+cCWTLM=
Subject key identifier: 09:3A:94:10:F3:D0:D3:9F:DF:C8:25:5F:BB:3C:01:20:6C:CD:17:75
Authority key identifier: 91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
Certificate issuer: /CN=916835a7860231d7bc1648d45f8e957f51505b28
Certificate serial: 0196C2DDE5263C0A3C9F3464A18B386715FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
Manifest number: 0315
Signing time: Mon 12 May 2025 05:00:44 +0000
Manifest this update: Mon 12 May 2025 05:00:44 +0000
Manifest next update: Tue 13 May 2025 05:00:44 +0000
Files and hashes: 1: kWg1p4YCMde8FkjUX46Vf1FQWyg.crl (hash: BCaftVVprye+5MyzbzuHBAA5fridWAsCpoeY/nI0r5I=)
2: wrpYuCoTA0QDqUx1_Pjj2R81Fzo.roa (hash: EwlJIDraNdoBBYvI+7Xd9v0lh6FgCXu/F5yckTradM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:e5:26:3c:0a:3c:9f:34:64:a1:8b:38:67:15:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916835a7860231d7bc1648d45f8e957f51505b28
Validity
Not Before: May 12 05:00:44 2025 GMT
Not After : May 13 05:00:44 2025 GMT
Subject: CN=093a9410f3d0d39fdfc8255fbb3c01206ccd1775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:f7:45:00:a9:66:3b:2f:7f:b3:84:83:54:
e1:26:e8:3f:9d:42:2a:a2:07:df:65:aa:8c:77:8e:
ef:75:7d:a3:09:26:c9:6f:4e:81:49:14:77:e5:4b:
71:64:95:2d:48:ea:1f:91:ca:d7:5a:ce:43:85:b8:
82:a7:f9:11:01:91:18:c5:62:3d:9d:de:75:a0:cd:
70:23:9d:41:c1:c7:d7:1c:44:2d:89:d4:59:b1:c2:
52:c0:08:52:61:86:9e:59:1b:0a:41:b7:3c:05:fd:
0a:fd:4e:3d:ac:d9:88:ba:35:50:bd:65:71:01:4a:
e3:39:70:6e:c6:58:21:d6:eb:0e:49:92:ba:87:18:
14:e5:e1:0e:5e:94:2d:1b:bd:21:56:64:a8:de:94:
65:10:c8:76:a7:83:48:6a:09:45:2d:f6:f2:37:47:
25:8a:ef:c9:22:14:d1:58:49:3d:c3:16:41:c5:fa:
d3:f6:6b:05:9c:29:00:10:ef:fa:13:c1:74:4d:99:
41:35:27:bf:69:9e:0a:6e:c0:81:96:3a:f8:ea:0d:
ab:d5:59:a5:0c:7b:9b:c4:74:62:0d:cd:3c:d2:d0:
c4:8f:98:06:9d:56:b9:dd:8a:69:13:b7:21:91:d7:
fd:96:67:0c:e9:6d:07:24:b1:f8:f6:29:2a:75:c3:
7a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3A:94:10:F3:D0:D3:9F:DF:C8:25:5F:BB:3C:01:20:6C:CD:17:75
X509v3 Authority Key Identifier:
keyid:91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b7:ae:2d:fc:fe:7f:3a:8c:de:e5:62:eb:d6:ea:26:78:2e:
03:95:30:f1:49:64:d3:b2:e6:cf:b1:a1:0a:a1:72:54:6f:e0:
43:21:1a:7a:d3:b7:54:fd:26:06:f5:6a:08:1c:4c:03:eb:95:
ad:b7:9e:5a:fe:a8:07:03:bf:72:46:a9:7e:b9:02:dd:e4:0a:
53:ca:85:98:f0:5a:60:33:11:19:c1:66:02:e9:3a:b2:ff:dc:
bc:15:e1:84:4d:cc:a2:ad:77:af:1b:98:7c:42:b4:8b:fe:9a:
f5:b2:a4:83:4b:9b:9c:fe:5c:9c:c8:ff:51:63:d4:cc:ca:40:
d2:c2:0e:94:d9:c3:19:7d:51:62:94:0e:9a:78:a1:31:d5:a3:
92:5b:13:75:fd:52:6c:bd:78:ec:a2:b5:70:0f:18:12:0d:45:
01:5a:23:f8:a6:32:01:cc:2e:16:49:46:a6:ad:74:f4:41:d0:
04:40:73:91:e8:4c:f2:86:ad:08:45:5d:a3:bb:9f:db:af:49:
7b:bc:e5:ad:e0:79:7e:13:d3:96:17:1f:0e:80:e1:0c:15:0f:
d6:cb:18:be:13:70:34:a4:96:38:d9:b6:7c:70:e6:13:3d:00:
b0:27:27:85:ce:9d:89:03:a6:84:5f:ad:ea:a3:4f:56:b8:db:
84:cb:7a:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbC3eUmPAo8nzRkoYs4ZxX7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNjgzNWE3ODYwMjMxZDdiYzE2NDhkNDVmOGU5NTdmNTE1
MDViMjgwHhcNMjUwNTEyMDUwMDQ0WhcNMjUwNTEzMDUwMDQ0WjAzMTEwLwYDVQQD
EygwOTNhOTQxMGYzZDBkMzlmZGZjODI1NWZiYjNjMDEyMDZjY2QxNzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjb3RQCpZjsvf7OEg1ThJug/nUIq
ogffZaqMd47vdX2jCSbJb06BSRR35UtxZJUtSOofkcrXWs5DhbiCp/kRAZEYxWI9
nd51oM1wI51BwcfXHEQtidRZscJSwAhSYYaeWRsKQbc8Bf0K/U49rNmIujVQvWVx
AUrjOXBuxlgh1usOSZK6hxgU5eEOXpQtG70hVmSo3pRlEMh2p4NIaglFLfbyN0cl
iu/JIhTRWEk9wxZBxfrT9msFnCkAEO/6E8F0TZlBNSe/aZ4KbsCBljr46g2r1Vml
DHubxHRiDc080tDEj5gGnVa53YppE7chkdf9lmcM6W0HJLH49ikqdcN6DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAk6lBDz0NOf38glX7s8ASBszRd1MB8GA1UdIwQY
MBaAFJFoNaeGAjHXvBZI1F+OlX9RUFsoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1dnMXA0WUNNZGU4RmtqVVg0NlZmMUZRV3lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lZWIxNzctMzZiOS00M2QzLTljZmEt
NGRlYmIxYWZhOTk3LzEva1dnMXA0WUNNZGU4RmtqVVg0NlZmMUZRV3lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9lZWIxNzctMzZiOS00M2QzLTljZmEtNGRlYmIxYWZhOTk3
LzEva1dnMXA0WUNNZGU4RmtqVVg0NlZmMUZRV3lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLeuLfz+
fzqM3uVi69bqJnguA5Uw8Ulk07Lmz7GhCqFyVG/gQyEaetO3VP0mBvVqCBxMA+uV
rbeeWv6oBwO/ckapfrkC3eQKU8qFmPBaYDMRGcFmAuk6sv/cvBXhhE3Moq13rxuY
fEK0i/6a9bKkg0ubnP5cnMj/UWPUzMpA0sIOlNnDGX1RYpQOmnihMdWjklsTdf1S
bL147KK1cA8YEg1FAVoj+KYyAcwuFklGpq109EHQBEBzkehM8oatCEVdo7uf269J
e7zlreB5fhPTlhcfDoDhDBUP1ssYvhNwNKSWONm2fHDmEz0AsCcnhc6diQOmhF+t
6qNPVrjbhMt6Nw==
-----END CERTIFICATE-----
Generated at Mon May 12 11:35:34 2025 by rpki-client