Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
File: Kf8VWBu5BPG5BTh0IRiwH576pmI.mft (raw, json)
Hash identifier: 3ybGYF2p1xVAxLfTXNAeebgU1WXUWj1ce0bsQ+ePimA=
Subject key identifier: DB:94:13:F9:7A:44:5D:AF:29:F3:EF:9B:51:49:A1:54:85:CF:87:B5
Authority key identifier: 29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
Certificate issuer: /CN=29ff15581bb904f1b90538742118b01f9efaa662
Certificate serial: 0196D4E410B46C43906E69990C03046C977A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
Manifest number: 1541
Signing time: Thu 15 May 2025 17:00:38 +0000
Manifest this update: Thu 15 May 2025 17:00:38 +0000
Manifest next update: Fri 16 May 2025 17:00:38 +0000
Files and hashes: 1: Kf8VWBu5BPG5BTh0IRiwH576pmI.crl (hash: /AEfzL81pjy8RrV41bXg2J6zjEVXqoIE+AtQLUgQrkM=)
2: Pt5jCGzvovgNs5CdDynFwkh2QzQ.roa (hash: nVdxdKNGSJEZ6402xd/EQ5NSj2OrYk/HxmlnqTUvP6Y=)
3: c_ThGFbqhteIloHLISS2D3Is-B0.roa (hash: dWKCcE+KdsbeTu7uVlboc1SJNBL/6lqMpvChZHMYdHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:e4:10:b4:6c:43:90:6e:69:99:0c:03:04:6c:97:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ff15581bb904f1b90538742118b01f9efaa662
Validity
Not Before: May 15 17:00:38 2025 GMT
Not After : May 16 17:00:38 2025 GMT
Subject: CN=db9413f97a445daf29f3ef9b5149a15485cf87b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:65:c8:ff:41:0c:1d:8d:5f:4a:6d:4e:82:38:
1f:2a:fd:ab:77:84:5d:2d:69:28:b7:97:16:3b:cb:
fe:e0:da:5f:0c:53:de:1e:95:c1:37:2a:32:b3:d7:
d1:de:81:62:0f:b1:a6:2a:73:60:af:40:f4:74:68:
5f:0f:84:f5:c7:35:76:ff:72:fb:25:06:44:9b:53:
1a:e6:a4:b4:3f:5f:28:1b:d9:f6:99:a8:22:da:12:
11:9f:4c:9e:41:67:14:55:6a:ef:fc:c2:98:59:09:
84:92:61:96:52:8b:d2:73:ac:68:23:30:c0:e7:5d:
cb:be:a8:f4:9e:93:7d:b6:0e:a2:61:58:a4:75:da:
88:3b:d3:99:79:a7:39:9d:f7:d3:8d:2e:16:f3:67:
70:ce:8a:4a:15:90:2e:1a:2b:74:30:1d:f0:ea:2c:
a7:85:f1:17:36:3f:25:64:b7:d4:4b:a9:e7:17:b0:
bd:a7:0c:ac:39:3a:d3:12:3a:16:24:1d:04:b5:ab:
3b:e7:8b:df:6b:73:eb:62:6a:ef:7c:62:7f:89:35:
e0:24:21:9a:46:6d:7f:f2:41:56:2f:6c:21:17:32:
98:e2:b3:d6:32:b7:4b:d4:83:ea:c4:6f:8f:97:14:
26:ad:57:d7:bb:88:ac:de:48:a4:59:6f:cd:b8:c1:
38:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:94:13:F9:7A:44:5D:AF:29:F3:EF:9B:51:49:A1:54:85:CF:87:B5
X509v3 Authority Key Identifier:
keyid:29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ee:e5:b6:9b:b9:26:d7:75:57:96:a2:c3:b5:4d:a8:62:24:
1a:f4:d4:bb:7a:52:7c:3f:f5:98:fa:1e:1c:32:b8:8a:6c:7e:
16:fd:71:93:ec:ec:aa:c7:28:54:58:c0:d4:05:7d:50:fb:38:
7a:4e:93:a8:ff:67:bd:f1:42:95:22:49:af:03:73:b9:0e:46:
a1:31:c2:3c:10:0b:10:6f:80:ac:9f:84:d8:f1:10:19:a4:47:
fa:ae:ef:69:36:1b:71:4e:02:b7:56:dc:6e:10:7a:0d:31:9d:
a3:d8:4a:7a:53:67:83:30:2e:7e:a2:e0:74:20:f0:ca:f3:89:
6c:b0:27:60:aa:e0:3d:24:bb:94:16:96:94:4a:8f:45:64:ae:
e7:8d:fd:d1:d6:8c:28:ed:d6:b5:63:87:88:26:c7:65:03:f1:
74:99:52:5d:49:0b:23:1b:85:df:04:f3:e9:f6:4c:bf:cf:97:
9b:c8:41:6e:cc:f3:94:9f:b1:b2:65:47:37:5c:1e:b8:04:55:
34:0b:c4:d4:96:50:3c:47:8b:e4:eb:a7:bf:b0:7e:62:b2:12:
5c:27:21:2a:2f:7f:7a:81:82:09:ad:5a:18:66:11:9c:37:06:
4f:61:7f:e7:84:5c:88:e0:32:8d:e1:4d:3f:1e:cc:e4:5d:eb:
bf:f5:fe:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbU5BC0bEOQbmmZDAMEbJd6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZmYxNTU4MWJiOTA0ZjFiOTA1Mzg3NDIxMThiMDFmOWVm
YWE2NjIwHhcNMjUwNTE1MTcwMDM4WhcNMjUwNTE2MTcwMDM4WjAzMTEwLwYDVQQD
EyhkYjk0MTNmOTdhNDQ1ZGFmMjlmM2VmOWI1MTQ5YTE1NDg1Y2Y4N2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWXI/0EMHY1fSm1OgjgfKv2rd4Rd
LWkot5cWO8v+4NpfDFPeHpXBNyoys9fR3oFiD7GmKnNgr0D0dGhfD4T1xzV2/3L7
JQZEm1Ma5qS0P18oG9n2magi2hIRn0yeQWcUVWrv/MKYWQmEkmGWUovSc6xoIzDA
513Lvqj0npN9tg6iYVikddqIO9OZeac5nffTjS4W82dwzopKFZAuGit0MB3w6iyn
hfEXNj8lZLfUS6nnF7C9pwysOTrTEjoWJB0Etas754vfa3PrYmrvfGJ/iTXgJCGa
Rm1/8kFWL2whFzKY4rPWMrdL1IPqxG+PlxQmrVfXu4is3kikWW/NuME4QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNuUE/l6RF2vKfPvm1FJoVSFz4e1MB8GA1UdIwQY
MBaAFCn/FVgbuQTxuQU4dCEYsB+e+qZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2Y4VldCdTVCUEc1QlRoMElSaXdINTc2cG1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9kYjYyMzEtM2E3YS00ODRkLThiZWUt
M2I4ZDhiNzZiN2Y2LzEvS2Y4VldCdTVCUEc1QlRoMElSaXdINTc2cG1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9kYjYyMzEtM2E3YS00ODRkLThiZWUtM2I4ZDhiNzZiN2Y2
LzEvS2Y4VldCdTVCUEc1QlRoMElSaXdINTc2cG1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOu7ltpu5
Jtd1V5aiw7VNqGIkGvTUu3pSfD/1mPoeHDK4imx+Fv1xk+zsqscoVFjA1AV9UPs4
ek6TqP9nvfFClSJJrwNzuQ5GoTHCPBALEG+ArJ+E2PEQGaRH+q7vaTYbcU4Ct1bc
bhB6DTGdo9hKelNngzAufqLgdCDwyvOJbLAnYKrgPSS7lBaWlEqPRWSu54390daM
KO3WtWOHiCbHZQPxdJlSXUkLIxuF3wTz6fZMv8+Xm8hBbszzlJ+xsmVHN1weuARV
NAvE1JZQPEeL5Ounv7B+YrISXCchKi9/eoGCCa1aGGYRnDcGT2F/54RciOAyjeFN
Px7M5F3rv/X+RA==
-----END CERTIFICATE-----
Generated at Thu May 15 23:48:08 2025 by rpki-client