Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier: 1C0bfD7fonSbWCYuHhqdB5wKHRRxIIJfzmtoEU9v9Pw=
Subject key identifier: 8A:DC:7F:8E:6F:11:98:C1:BB:92:49:5E:C8:29:F9:D3:F4:5E:9B:B5
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial: 0196C83ABC4F5BB8FE6F8AE3B32937A9B190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number: 0402
Signing time: Tue 13 May 2025 06:00:14 +0000
Manifest this update: Tue 13 May 2025 06:00:14 +0000
Manifest next update: Wed 14 May 2025 06:00:14 +0000
Files and hashes: 1: D46Ir3fESQdKV4ntE1MciVCeNwY.roa (hash: ND9cgWv5J0hNtKyrA/zDulukUC/W3FHSN0hW88QXa3s=)
2: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: FYvAuEzQjPEaYkB6pUP8dWFiEmVtuBoJW34tZuOReQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:3a:bc:4f:5b:b8:fe:6f:8a:e3:b3:29:37:a9:b1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Validity
Not Before: May 13 06:00:14 2025 GMT
Not After : May 14 06:00:14 2025 GMT
Subject: CN=8adc7f8e6f1198c1bb92495ec829f9d3f45e9bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:2d:0b:4a:3f:8c:5a:55:5d:ca:6c:39:68:
cb:3d:7a:b9:a4:94:4a:45:80:0f:85:d5:40:c2:cd:
16:53:b1:ff:5a:d5:36:2f:f3:00:9a:63:f7:09:f2:
ee:ec:4d:d5:7c:6a:50:56:75:24:3f:94:17:ed:f6:
6e:eb:d0:aa:d4:45:52:cc:29:c6:e3:bc:a7:5f:db:
7c:39:d3:04:96:0f:f4:87:79:2d:3a:95:c9:44:5b:
2f:4c:78:2c:8f:c6:6b:33:5a:6a:9f:e1:67:fb:19:
7a:56:b5:28:bb:f5:cc:a3:74:51:e5:63:d7:19:41:
64:11:1c:af:e7:1f:9b:6d:fd:f0:4f:35:90:69:d2:
d6:de:c2:a8:a8:2b:0d:d6:dd:bb:0d:9b:43:8b:b4:
c2:85:d9:ca:64:ee:d0:ac:7d:57:90:16:6d:9e:1c:
1c:d8:5e:bf:c0:2b:1f:c4:5c:1b:5c:40:db:96:7e:
08:6a:ee:52:df:a1:84:02:24:40:93:6f:ce:eb:4e:
50:3c:30:b4:99:95:a9:00:db:68:51:12:a9:c4:3e:
d3:53:e7:39:bf:99:b5:5f:af:ee:fa:d7:fe:36:df:
b1:50:16:9f:b3:bb:33:e2:2c:fc:ea:49:53:5b:68:
cf:7a:59:63:44:54:0d:fd:b4:35:14:da:b8:03:fc:
35:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DC:7F:8E:6F:11:98:C1:BB:92:49:5E:C8:29:F9:D3:F4:5E:9B:B5
X509v3 Authority Key Identifier:
keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f3:61:b6:8d:79:b8:e3:d6:93:c0:c6:ff:d6:78:2e:69:62:
a1:c7:3b:6d:4e:0e:11:2a:88:df:55:d9:a7:ad:7e:de:7c:a7:
e8:99:d9:5d:c6:d2:86:f8:f1:7b:12:94:5f:47:6a:f6:9f:09:
fd:a3:8d:45:e1:de:41:be:53:80:18:ad:73:94:e4:cb:e2:42:
04:65:46:2e:df:d1:42:ac:ab:4f:e2:42:5d:db:0d:c0:56:77:
03:78:50:82:8d:69:db:58:6a:6f:de:4b:4d:4a:34:30:f5:85:
85:b9:cd:f8:23:04:9f:54:b5:e0:55:1b:2c:7b:17:1d:77:80:
87:8e:a8:f7:bc:f7:53:ee:c9:4f:c0:44:2c:20:d4:7c:4e:a2:
54:1c:a6:f1:0b:94:c1:ff:dd:1d:e1:cc:96:3f:b1:25:e7:c4:
0d:25:de:1e:6f:88:4b:e9:a1:63:bd:93:a4:37:ff:e4:42:b1:
80:32:34:63:13:ac:43:ff:58:74:1e:f2:d4:1f:d6:f8:ed:73:
7b:88:fd:5b:92:e2:fb:f8:cb:65:a4:07:51:f0:c3:a0:b1:bc:
8a:68:79:ca:15:70:19:43:65:3f:0d:25:ca:43:0d:15:a2:db:
69:42:27:93:20:72:7f:c0:ca:64:90:b2:24:82:53:c0:d2:b7:
44:0f:e7:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbIOrxPW7j+b4rjsyk3qbGQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NDQyN2RjZWJhYjQwZWJjMTk4MzlmMmQyNWVlYTJjZTBh
NTYyZmYwHhcNMjUwNTEzMDYwMDE0WhcNMjUwNTE0MDYwMDE0WjAzMTEwLwYDVQQD
Eyg4YWRjN2Y4ZTZmMTE5OGMxYmI5MjQ5NWVjODI5ZjlkM2Y0NWU5YmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneQtC0o/jFpVXcpsOWjLPXq5pJRK
RYAPhdVAws0WU7H/WtU2L/MAmmP3CfLu7E3VfGpQVnUkP5QX7fZu69Cq1EVSzCnG
47ynX9t8OdMElg/0h3ktOpXJRFsvTHgsj8ZrM1pqn+Fn+xl6VrUou/XMo3RR5WPX
GUFkERyv5x+bbf3wTzWQadLW3sKoqCsN1t27DZtDi7TChdnKZO7QrH1XkBZtnhwc
2F6/wCsfxFwbXEDbln4Iau5S36GEAiRAk2/O605QPDC0mZWpANtoURKpxD7TU+c5
v5m1X6/u+tf+Nt+xUBafs7sz4iz86klTW2jPelljRFQN/bQ1FNq4A/w1hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrcf45vEZjBu5JJXsgp+dP0Xpu1MB8GA1UdIwQY
MBaAFChEJ9zrq0DrwZg58tJe6izgpWL/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0VRbjNPdXJRT3ZCbURueTBsN3FMT0NsWXY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80NmQ4YjQtOGY0Ny00ZTkzLWFjYzIt
NTBkMDA1NzgyZmFiLzEvS0VRbjNPdXJRT3ZCbURueTBsN3FMT0NsWXY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS80NmQ4YjQtOGY0Ny00ZTkzLWFjYzItNTBkMDA1NzgyZmFi
LzEvS0VRbjNPdXJRT3ZCbURueTBsN3FMT0NsWXY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPNhto15
uOPWk8DG/9Z4Lmliocc7bU4OESqI31XZp61+3nyn6JnZXcbShvjxexKUX0dq9p8J
/aONReHeQb5TgBitc5Tky+JCBGVGLt/RQqyrT+JCXdsNwFZ3A3hQgo1p21hqb95L
TUo0MPWFhbnN+CMEn1S14FUbLHsXHXeAh46o97z3U+7JT8BELCDUfE6iVBym8QuU
wf/dHeHMlj+xJefEDSXeHm+IS+mhY72TpDf/5EKxgDI0YxOsQ/9YdB7y1B/W+O1z
e4j9W5Li+/jLZaQHUfDDoLG8imh5yhVwGUNlPw0lykMNFaLbaUInkyByf8DKZJCy
JIJTwNK3RA/nyw==
-----END CERTIFICATE-----
Generated at Tue May 13 13:29:15 2025 by rpki-client