Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
File: kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json)
Hash identifier: i3960/9C6Co30ry6dKlKTlskmRbaKwcKuOBgKcisjws=
Subject key identifier: FD:D3:02:D8:D8:19:E3:5A:48:61:D8:D7:03:AD:B8:A9:F4:66:31:03
Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Certificate serial: 0196C1267D56969DD44DFBC13542EDA8F900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
Manifest number: 1539
Signing time: Sun 11 May 2025 21:00:47 +0000
Manifest this update: Sun 11 May 2025 21:00:47 +0000
Manifest next update: Mon 12 May 2025 21:00:47 +0000
Files and hashes: 1: _wZ7w3Scv14H15k_iZCT9mnEPVI.roa (hash: JHtZU8B5JlDmryEaVYDxAxM9JobFikDH6+vwZ+Ii1xM=)
2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: 53+fnOZ6bugoiq/ABCPQS/QArSXyBrlmmykMkgecrkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:7d:56:96:9d:d4:4d:fb:c1:35:42:ed:a8:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Validity
Not Before: May 11 21:00:47 2025 GMT
Not After : May 12 21:00:47 2025 GMT
Subject: CN=fdd302d8d819e35a4861d8d703adb8a9f4663103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5b:d7:74:60:a7:d5:21:df:3b:87:b2:98:fb:
05:37:96:38:45:75:76:d7:0f:61:c2:98:c9:be:57:
a9:b6:b7:9a:00:86:43:e6:81:db:ab:a4:ef:02:1c:
1d:f6:52:25:47:e1:33:48:06:3f:b9:39:0d:e6:0c:
5c:9e:f5:78:f8:1e:c4:8c:76:9a:b6:1e:57:8e:64:
13:b5:46:8f:5d:73:58:ac:bb:b2:98:f9:42:6d:d6:
65:3f:86:5e:fb:98:ee:56:a1:ea:4c:72:2d:52:98:
1f:66:06:ed:44:ad:fc:c3:8a:48:88:cd:4b:08:06:
43:34:0e:ab:fd:2b:08:3a:0c:10:a9:ed:5e:e2:3b:
30:2a:1b:9d:21:cd:88:c2:13:ba:81:b8:60:de:48:
e2:19:0c:51:ae:77:5a:77:22:70:90:83:fd:06:e8:
f9:94:b8:44:82:44:c5:a6:ef:8d:b9:5b:49:d2:f5:
53:b0:6b:ab:f1:2f:7a:88:1a:6d:56:73:5c:5c:42:
48:89:e2:45:60:a6:77:c8:62:fc:e4:b5:46:3b:d6:
42:e6:a0:99:e2:e6:b4:c9:3d:b6:44:5d:91:23:43:
e3:f8:ce:54:c2:53:c1:72:d6:ea:f3:61:75:bb:26:
21:05:94:cc:20:e8:3a:70:5f:56:17:bb:e6:a2:7b:
bf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D3:02:D8:D8:19:E3:5A:48:61:D8:D7:03:AD:B8:A9:F4:66:31:03
X509v3 Authority Key Identifier:
keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:89:b0:7f:b0:d5:c7:04:00:e3:96:e9:c4:65:b8:54:60:ac:
ee:ae:5a:4e:5e:f0:ae:fc:28:87:ef:3b:15:92:a6:77:21:22:
04:2b:56:71:b5:0c:fb:78:9d:08:dd:98:2d:dd:d0:26:ad:1e:
ba:e4:d5:25:4f:a1:92:7e:0b:b2:33:a5:d6:8e:d7:bf:5c:0c:
d4:f4:8f:b3:33:92:69:47:39:e3:3e:69:5e:60:f6:f2:89:e1:
f9:2f:33:92:d4:00:98:74:a2:e0:f2:8c:3e:87:e3:d8:26:cb:
16:9f:71:c0:6d:81:31:95:22:45:e9:33:82:e9:97:5e:73:f0:
e6:55:6f:0c:33:17:9b:8e:15:59:44:17:af:53:2d:80:93:17:
24:cf:40:22:7d:83:c0:31:3f:e1:55:80:9c:59:42:8f:ca:8b:
0e:ae:a2:48:76:b7:93:8a:c0:c2:e0:ab:8d:70:86:22:bf:b1:
dd:9d:21:1f:d1:94:5a:34:fd:b5:50:aa:e7:b2:8c:bb:fd:48:
2a:7f:ba:8d:db:b6:58:96:39:db:ad:b3:44:a8:93:36:0c:58:
d3:6f:cb:fc:51:04:c3:f1:b9:d0:4d:ed:09:61:dc:e9:d5:8d:
21:1b:ee:ba:b6:59:b1:9c:2f:4e:62:8a:e6:cb:24:b0:5b:09:
db:99:1e:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBJn1Wlp3UTfvBNULtqPkAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYWU1MzhlMmE5MTM0NmYwNDAyNTk4YjBmZjJmYjlhOTVj
MDdjMzkwHhcNMjUwNTExMjEwMDQ3WhcNMjUwNTEyMjEwMDQ3WjAzMTEwLwYDVQQD
EyhmZGQzMDJkOGQ4MTllMzVhNDg2MWQ4ZDcwM2FkYjhhOWY0NjYzMTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21vXdGCn1SHfO4eymPsFN5Y4RXV2
1w9hwpjJvleptreaAIZD5oHbq6TvAhwd9lIlR+EzSAY/uTkN5gxcnvV4+B7EjHaa
th5XjmQTtUaPXXNYrLuymPlCbdZlP4Ze+5juVqHqTHItUpgfZgbtRK38w4pIiM1L
CAZDNA6r/SsIOgwQqe1e4jswKhudIc2IwhO6gbhg3kjiGQxRrndadyJwkIP9Buj5
lLhEgkTFpu+NuVtJ0vVTsGur8S96iBptVnNcXEJIieJFYKZ3yGL85LVGO9ZC5qCZ
4ua0yT22RF2RI0Pj+M5UwlPBctbq82F1uyYhBZTMIOg6cF9WF7vmonu/yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3TAtjYGeNaSGHY1wOtuKn0ZjEDMB8GA1UdIwQY
MBaAFJCuU44qkTRvBAJZiw/y+5qVwHw5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kNDc5MDktYTU2MC00MDljLWI4Mzkt
YzVlNzgyMTU3OWYxLzEva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kNDc5MDktYTU2MC00MDljLWI4MzktYzVlNzgyMTU3OWYx
LzEva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu4mwf7DV
xwQA45bpxGW4VGCs7q5aTl7wrvwoh+87FZKmdyEiBCtWcbUM+3idCN2YLd3QJq0e
uuTVJU+hkn4LsjOl1o7Xv1wM1PSPszOSaUc54z5pXmD28onh+S8zktQAmHSi4PKM
Pofj2CbLFp9xwG2BMZUiRekzgumXXnPw5lVvDDMXm44VWUQXr1MtgJMXJM9AIn2D
wDE/4VWAnFlCj8qLDq6iSHa3k4rAwuCrjXCGIr+x3Z0hH9GUWjT9tVCq57KMu/1I
Kn+6jdu2WJY5262zRKiTNgxY02/L/FEEw/G50E3tCWHc6dWNIRvuurZZsZwvTmKK
5ssksFsJ25keOQ==
-----END CERTIFICATE-----
Generated at Sun May 11 23:34:53 2025 by rpki-client