Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
File: krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json)
Hash identifier: jNAQI1Sn+kKEAh0Bru73dl7LGJkSNHy52orIahFv7pE=
Subject key identifier: A7:D2:44:F3:12:A1:EC:92:7F:D1:82:7A:6C:B5:5B:7F:62:04:E2:70
Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Certificate issuer: /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Certificate serial: 0196B7B52ABF00A66A13F94BD8D8F3C62449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
Manifest number: 1457
Signing time: Sat 10 May 2025 01:00:25 +0000
Manifest this update: Sat 10 May 2025 01:00:25 +0000
Manifest next update: Sun 11 May 2025 01:00:25 +0000
Files and hashes: 1: GCdodDNbb8kK5Nk7F_0-nAXSuto.roa (hash: +rPewf2fSfxIULsaTk1i8u3POGDLVTn+S/ryNeqw1mw=)
2: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: t9zYomXDyM1B8qbFWMsVIyo/wfADZAW8gmodmcb6U2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:2a:bf:00:a6:6a:13:f9:4b:d8:d8:f3:c6:24:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Validity
Not Before: May 10 01:00:25 2025 GMT
Not After : May 11 01:00:25 2025 GMT
Subject: CN=a7d244f312a1ec927fd1827a6cb55b7f6204e270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:27:17:10:4f:01:47:54:c2:dd:42:90:e4:
67:82:4d:c9:02:36:fb:23:ba:1e:cf:dc:2b:8c:14:
7f:a7:dd:43:7c:ea:97:85:bd:39:99:63:6e:9e:5a:
8a:82:d7:19:31:c9:87:44:37:4f:2d:19:5f:f7:26:
13:fc:28:33:bb:63:77:8a:52:3e:5f:eb:4a:d4:2d:
89:d5:f1:d4:84:a4:3b:8f:97:0e:a6:87:fd:df:5d:
01:b5:63:65:fb:0a:8c:05:c3:bb:f1:ae:97:27:91:
62:53:2e:26:34:71:d3:82:db:23:05:2f:e5:71:d7:
f9:5c:fd:36:23:e4:4d:09:89:e1:bc:31:65:8c:49:
53:f8:23:3c:d3:6b:3e:e7:5c:7e:f7:c0:32:f6:2a:
06:49:5f:9e:a7:e6:84:ae:3f:1b:5c:84:5c:87:9e:
d8:34:3b:ee:01:81:ac:67:6b:cf:a2:f3:9f:17:ef:
39:92:ae:95:a8:c2:a0:55:8f:85:ae:77:0a:0d:9b:
35:6a:67:51:82:09:4b:50:2f:8e:2d:80:b7:1c:f4:
e7:ee:50:57:eb:59:e0:5e:20:5c:de:bf:4a:2c:3c:
31:ff:1b:f5:1c:5b:21:49:b7:4c:58:66:ed:12:cb:
e2:d5:92:71:78:17:67:d0:96:c8:fb:56:c7:86:cf:
2a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D2:44:F3:12:A1:EC:92:7F:D1:82:7A:6C:B5:5B:7F:62:04:E2:70
X509v3 Authority Key Identifier:
keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c9:6c:d8:cf:29:05:a4:cf:b2:d4:30:e9:cf:9b:32:d5:86:
2f:36:6a:8c:93:64:10:5b:1a:75:1c:5e:43:8d:a2:c1:ca:b2:
1e:aa:19:da:ec:b0:d6:f7:1c:f9:53:c1:b7:5e:04:75:7a:16:
18:cf:78:3c:53:39:35:8b:85:a5:65:85:5c:36:ea:ea:d0:7b:
84:c1:a9:08:be:8b:77:23:a0:03:1f:2c:07:90:6d:a9:b1:9a:
59:91:60:96:48:89:82:65:ec:32:b5:55:40:f8:22:e9:11:00:
df:4f:9b:81:3c:59:15:c8:ae:79:6a:35:48:0d:d7:de:e4:33:
f2:96:0a:2d:05:8e:66:1c:27:a1:28:67:1a:25:58:81:92:d0:
f0:ea:2a:db:78:79:ef:6f:1d:f3:df:e9:58:2a:f4:60:bb:cb:
70:4c:97:7e:df:d8:56:79:65:ad:2b:ae:08:ca:ad:2d:4c:0c:
6b:ef:eb:3b:08:32:b9:54:3a:95:7c:3c:d9:66:c1:cd:4a:99:
55:77:c4:22:fe:e2:11:fa:2b:d4:5b:d1:91:a6:cd:bb:6a:f5:
e5:bc:d8:c4:38:ff:c6:bf:c2:de:5b:51:10:4d:09:cd:88:50:
07:8b:1b:f8:73:66:10:1e:83:02:1f:07:8c:a3:a2:ce:d2:2b:
5f:4b:88:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3tSq/AKZqE/lL2NjzxiRJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYjVhYzg4ZjJjZGIxNDkzNDgzMGMxYWMwOTZhNWVmNzMw
OThmMTIwHhcNMjUwNTEwMDEwMDI1WhcNMjUwNTExMDEwMDI1WjAzMTEwLwYDVQQD
EyhhN2QyNDRmMzEyYTFlYzkyN2ZkMTgyN2E2Y2I1NWI3ZjYyMDRlMjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6gnFxBPAUdUwt1CkORngk3JAjb7
I7oez9wrjBR/p91DfOqXhb05mWNunlqKgtcZMcmHRDdPLRlf9yYT/Cgzu2N3ilI+
X+tK1C2J1fHUhKQ7j5cOpof9310BtWNl+wqMBcO78a6XJ5FiUy4mNHHTgtsjBS/l
cdf5XP02I+RNCYnhvDFljElT+CM802s+51x+98Ay9ioGSV+ep+aErj8bXIRch57Y
NDvuAYGsZ2vPovOfF+85kq6VqMKgVY+FrncKDZs1amdRgglLUC+OLYC3HPTn7lBX
61ngXiBc3r9KLDwx/xv1HFshSbdMWGbtEsvi1ZJxeBdn0JbI+1bHhs8qXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfSRPMSoeySf9GCemy1W39iBOJwMB8GA1UdIwQY
MBaAFJK1rIjyzbFJNIMMGsCWpe9zCY8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lNDE3YmQtMTRlYi00Y2E1LTgwZjct
MzZjNDZmOTBkOWE1LzEva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lNDE3YmQtMTRlYi00Y2E1LTgwZjctMzZjNDZmOTBkOWE1
LzEva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8ls2M8p
BaTPstQw6c+bMtWGLzZqjJNkEFsadRxeQ42iwcqyHqoZ2uyw1vcc+VPBt14EdXoW
GM94PFM5NYuFpWWFXDbq6tB7hMGpCL6LdyOgAx8sB5BtqbGaWZFglkiJgmXsMrVV
QPgi6REA30+bgTxZFciueWo1SA3X3uQz8pYKLQWOZhwnoShnGiVYgZLQ8Ooq23h5
728d89/pWCr0YLvLcEyXft/YVnllrSuuCMqtLUwMa+/rOwgyuVQ6lXw82WbBzUqZ
VXfEIv7iEfor1FvRkabNu2r15bzYxDj/xr/C3ltREE0JzYhQB4sb+HNmEB6DAh8H
jKOiztIrX0uIfw==
-----END CERTIFICATE-----
Generated at Sat May 10 08:36:07 2025 by rpki-client