Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
File: KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft (raw, json)
Hash identifier: b/8iKiJtq/6K5v+OzIGQk90syD+iLoC03MeBq/o7yTQ=
Subject key identifier: 8F:8A:D3:CB:48:7D:C4:A6:5F:A8:27:43:AD:6C:82:C5:2E:70:B9:12
Authority key identifier: 29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
Certificate issuer: /CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Certificate serial: 0196BDEE76027D0B5A162FC163C3B080DBBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
Manifest number: 05E0
Signing time: Sun 11 May 2025 06:00:43 +0000
Manifest this update: Sun 11 May 2025 06:00:43 +0000
Manifest next update: Mon 12 May 2025 06:00:43 +0000
Files and hashes: 1: 0ew3GDGdcko8IEl72SU1gGU7W_k.roa (hash: 9xx5BwMCjSrUJr+68yVrM18oEIPDjZ9uwovBe4fuSRQ=)
2: KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl (hash: onHJBTtFufbpenOYA19ReuJeus/pK2TqkTY99HPNdCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:76:02:7d:0b:5a:16:2f:c1:63:c3:b0:80:db:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Validity
Not Before: May 11 06:00:43 2025 GMT
Not After : May 12 06:00:43 2025 GMT
Subject: CN=8f8ad3cb487dc4a65fa82743ad6c82c52e70b912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ff:61:07:9c:8c:df:cb:a7:d8:82:16:74:d3:
4e:e6:36:f6:78:87:67:6d:91:4f:7e:d9:df:b9:10:
73:ef:52:5d:83:fa:34:61:f6:3e:dc:e9:46:bb:22:
92:06:3a:2e:35:d3:58:85:a5:6f:17:5d:70:50:d7:
6d:ec:ea:df:b4:93:19:97:ae:e9:7e:7f:4a:54:4e:
02:b8:cf:ad:db:59:68:d8:0c:18:a5:bb:49:3e:84:
ec:2d:d2:22:51:2b:e0:a6:e1:6b:9f:88:8b:c8:65:
63:26:0e:1a:46:fa:64:4b:d1:1d:21:19:f8:e2:b1:
92:6e:87:bd:cd:3f:7b:a0:80:e9:84:67:87:6b:e9:
7f:39:6e:91:17:c1:3d:9a:c1:62:cf:01:29:20:36:
71:0b:ae:ce:0f:56:64:c0:ba:78:30:bc:06:b9:5e:
ce:9a:f1:e8:ca:ea:fe:2f:54:80:81:b5:88:43:c5:
65:16:c6:5b:a2:e4:bb:be:d9:96:30:2c:12:ca:4f:
04:61:91:e2:7c:9d:a7:ff:99:14:a0:2c:5d:01:9e:
dc:84:6d:82:19:e9:80:19:f4:a0:c8:5b:67:2c:3c:
07:72:88:85:66:6e:45:19:80:65:b9:e7:9a:39:cd:
74:59:84:2a:fd:07:f8:eb:4e:14:93:c7:a0:7b:29:
70:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8A:D3:CB:48:7D:C4:A6:5F:A8:27:43:AD:6C:82:C5:2E:70:B9:12
X509v3 Authority Key Identifier:
keyid:29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:eb:14:ed:23:a4:ee:f6:7e:8e:57:01:e0:7a:72:22:09:20:
f3:00:63:03:d5:5c:3b:99:47:85:b9:1a:93:19:ac:e9:38:88:
e2:00:20:ab:f0:e5:0f:28:ea:c6:e1:76:a0:82:f5:54:97:87:
a9:b6:81:f1:ae:c1:8e:7c:41:8e:d6:f4:df:7e:1c:bf:2f:52:
fb:5a:13:3c:76:28:02:f5:49:4e:db:82:07:4b:bb:af:0a:dc:
f7:80:ee:50:5e:04:85:0d:fe:85:5d:59:4e:35:02:ce:c7:da:
39:94:e3:94:66:fd:8c:19:df:bf:6f:98:b0:fa:12:46:83:64:
a9:e9:95:80:34:6b:c3:1d:43:b5:c4:66:34:ac:2c:45:54:52:
9e:55:51:1d:7c:33:c6:26:63:68:9a:40:50:28:03:0e:fe:57:
3c:a3:f8:76:d9:59:61:83:86:ec:49:49:36:d0:fe:4d:28:c1:
74:5f:7b:d1:d9:61:84:cc:6c:fa:56:3f:4f:91:96:dd:88:98:
a7:bd:46:6e:5f:c4:0e:15:c5:4c:70:02:2a:3b:79:25:cf:29:
3a:48:38:1e:22:33:8e:89:cd:a3:b0:d5:4f:90:bb:96:21:a6:
7b:27:5a:44:e3:2a:c6:f1:94:75:21:9a:8d:88:2f:3f:dd:62:
18:f9:c3:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa97nYCfQtaFi/BY8OwgNu7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MmQ2YjgwNWUxMWVjMzgwMzRmMDc3ODlkY2QyNWQxYzE3
ZmEwMWUwHhcNMjUwNTExMDYwMDQzWhcNMjUwNTEyMDYwMDQzWjAzMTEwLwYDVQQD
Eyg4ZjhhZDNjYjQ4N2RjNGE2NWZhODI3NDNhZDZjODJjNTJlNzBiOTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf9hB5yM38un2IIWdNNO5jb2eIdn
bZFPftnfuRBz71Jdg/o0YfY+3OlGuyKSBjouNdNYhaVvF11wUNdt7OrftJMZl67p
fn9KVE4CuM+t21lo2AwYpbtJPoTsLdIiUSvgpuFrn4iLyGVjJg4aRvpkS9EdIRn4
4rGSboe9zT97oIDphGeHa+l/OW6RF8E9msFizwEpIDZxC67OD1ZkwLp4MLwGuV7O
mvHoyur+L1SAgbWIQ8VlFsZbouS7vtmWMCwSyk8EYZHifJ2n/5kUoCxdAZ7chG2C
GemAGfSgyFtnLDwHcoiFZm5FGYBlueeaOc10WYQq/Qf4604Uk8egeylwPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+K08tIfcSmX6gnQ61sgsUucLkSMB8GA1UdIwQY
MBaAFCkta4BeEew4A08HeJ3NJdHBf6AeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1MxcmdGNFI3RGdEVHdkNG5jMGwwY0Zfb0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84YjMzNDEtZjg1Yi00YzE1LWE5ODkt
NTEwY2YyNmJjYTY1LzEvS1MxcmdGNFI3RGdEVHdkNG5jMGwwY0Zfb0I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84YjMzNDEtZjg1Yi00YzE1LWE5ODktNTEwY2YyNmJjYTY1
LzEvS1MxcmdGNFI3RGdEVHdkNG5jMGwwY0Zfb0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOsU7SOk
7vZ+jlcB4HpyIgkg8wBjA9VcO5lHhbkakxms6TiI4gAgq/DlDyjqxuF2oIL1VJeH
qbaB8a7BjnxBjtb0334cvy9S+1oTPHYoAvVJTtuCB0u7rwrc94DuUF4EhQ3+hV1Z
TjUCzsfaOZTjlGb9jBnfv2+YsPoSRoNkqemVgDRrwx1DtcRmNKwsRVRSnlVRHXwz
xiZjaJpAUCgDDv5XPKP4dtlZYYOG7ElJNtD+TSjBdF970dlhhMxs+lY/T5GW3YiY
p71Gbl/EDhXFTHACKjt5Jc8pOkg4HiIzjonNo7DVT5C7liGmeydaROMqxvGUdSGa
jYgvP91iGPnDyw==
-----END CERTIFICATE-----
Generated at Sun May 11 13:27:44 2025 by rpki-client