Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
File: k47pUc2rw86AXsjfC_NAO9-pxlc.mft (raw, json)
Hash identifier: hkmq5Z2+OkoWwjm+5dYWnjg830xlq2ZhVbRJaz+Wz/k=
Subject key identifier: 30:CD:8A:0B:5D:76:1A:9B:DE:78:C6:60:28:53:2E:79:40:17:A4:EA
Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
Certificate issuer: /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Certificate serial: 0196C0B86B8E1561B88670E385A6C07A8D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 19:00:33 +0000
Manifest this update: Sun 11 May 2025 19:00:33 +0000
Manifest next update: Mon 12 May 2025 19:00:33 +0000
Files and hashes: 1: O1ywiFiLkq1fR5di5oR2ZQ0O0VU.roa (hash: SE/6ae9nVewYClVlXFv1//+tibHGjvE3o8ZX8Ja08V4=)
2: k47pUc2rw86AXsjfC_NAO9-pxlc.crl (hash: hosV4qNeOVD8EQZSWq3URbLsD9+koS7OlaMU9Z+JjkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:6b:8e:15:61:b8:86:70:e3:85:a6:c0:7a:8d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Validity
Not Before: May 11 19:00:33 2025 GMT
Not After : May 12 19:00:33 2025 GMT
Subject: CN=30cd8a0b5d761a9bde78c66028532e794017a4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:3a:65:71:20:4a:19:65:a0:d5:b6:ed:58:
b3:0e:12:55:75:b1:62:ec:c5:18:30:64:e2:b6:f6:
7a:70:f3:2d:b4:38:23:5c:30:85:32:ca:60:db:4b:
12:f5:89:fb:c0:f5:71:d0:b6:3e:38:08:91:4a:3d:
c6:3b:56:86:67:12:34:a3:a3:91:d5:be:a4:7f:fd:
3e:3f:f4:dc:72:ed:3c:37:c2:b3:4b:87:dd:39:d9:
af:92:c5:c0:c9:e9:98:54:f9:53:9c:d5:95:82:86:
c8:56:34:02:6c:a4:02:9a:01:a0:61:e3:45:5b:70:
f2:3f:35:f0:3b:f0:aa:cd:ea:a8:3d:e1:6e:3d:2f:
e8:93:ca:1d:26:b8:d0:2d:1b:ac:2e:0f:ce:e9:e3:
86:a6:73:b1:b9:41:1d:5e:68:e2:41:d5:6f:7d:aa:
7d:a3:77:e0:a8:94:9e:79:c3:e7:04:42:08:52:f3:
ab:da:09:a4:21:13:84:0a:a8:1a:09:e1:e0:8e:cd:
7b:1f:51:25:31:e0:1b:91:fa:3d:db:70:f7:c7:b7:
75:a5:72:87:45:c3:87:d9:9e:f7:43:2c:d6:95:19:
c0:7d:10:fd:53:eb:e8:2a:8b:1d:bc:d3:3d:35:c6:
e1:2c:07:6f:1f:f6:e5:5c:13:c7:19:93:ee:34:f4:
3a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CD:8A:0B:5D:76:1A:9B:DE:78:C6:60:28:53:2E:79:40:17:A4:EA
X509v3 Authority Key Identifier:
keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:2f:4e:e5:91:21:cb:58:4c:20:c6:5f:95:01:3d:88:2a:f4:
79:38:7e:ec:6f:56:04:b3:0a:6f:9f:4f:b2:61:c9:37:17:b8:
5f:28:66:f8:74:6c:af:e0:86:c4:d2:12:88:03:7b:02:55:e6:
34:94:40:a3:6f:92:be:97:d1:30:92:14:7e:95:0f:9f:e4:6b:
d6:72:4f:d6:db:c8:e4:cd:61:b7:6f:6a:fa:55:3a:3a:df:44:
35:c4:81:ce:0e:85:0a:9c:b6:b1:c2:5a:c6:e5:66:cc:97:06:
33:6f:3d:fd:a5:f1:5d:f8:27:35:46:cf:cc:f1:11:46:4e:66:
4a:53:88:0d:95:a9:79:20:ee:56:fa:31:20:dd:13:38:bd:a9:
ce:7b:eb:ac:15:4f:03:82:76:26:1c:cb:2c:87:29:50:d3:67:
c1:25:fd:52:01:ee:32:fb:ea:fc:25:48:05:be:68:28:50:12:
a5:96:4a:81:78:16:c9:9c:77:c1:c5:e1:27:b0:36:ab:59:2c:
06:39:39:75:75:ed:1c:47:22:81:36:90:6f:e4:79:36:e1:2f:
4f:9c:f8:b4:c3:4e:c9:12:a3:36:cc:9b:ea:09:e0:ac:60:a6:
40:9d:a3:37:64:8b:0e:fd:41:54:68:85:08:77:6f:fe:62:46:
9e:f2:1b:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAuGuOFWG4hnDjhabAeo0/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzOGVlOTUxY2RhYmMzY2U4MDVlYzhkZjBiZjM0MDNiZGZh
OWM2NTcwHhcNMjUwNTExMTkwMDMzWhcNMjUwNTEyMTkwMDMzWjAzMTEwLwYDVQQD
EygzMGNkOGEwYjVkNzYxYTliZGU3OGM2NjAyODUzMmU3OTQwMTdhNGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIU6ZXEgShlloNW27VizDhJVdbFi
7MUYMGTitvZ6cPMttDgjXDCFMspg20sS9Yn7wPVx0LY+OAiRSj3GO1aGZxI0o6OR
1b6kf/0+P/Tccu08N8KzS4fdOdmvksXAyemYVPlTnNWVgobIVjQCbKQCmgGgYeNF
W3DyPzXwO/CqzeqoPeFuPS/ok8odJrjQLRusLg/O6eOGpnOxuUEdXmjiQdVvfap9
o3fgqJSeecPnBEIIUvOr2gmkIROECqgaCeHgjs17H1ElMeAbkfo923D3x7d1pXKH
RcOH2Z73QyzWlRnAfRD9U+voKosdvNM9NcbhLAdvH/blXBPHGZPuNPQ6yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDNigtddhqb3njGYChTLnlAF6TqMB8GA1UdIwQY
MBaAFJOO6VHNq8POgF7I3wvzQDvfqcZXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazQ3cFVjMnJ3ODZBWHNqZkNfTkFPOS1weGxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hOGZlNWItNmFjZS00MjM2LThhOTAt
ZTBmNWQ4NmUzN2EzLzEvazQ3cFVjMnJ3ODZBWHNqZkNfTkFPOS1weGxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9hOGZlNWItNmFjZS00MjM2LThhOTAtZTBmNWQ4NmUzN2Ez
LzEvazQ3cFVjMnJ3ODZBWHNqZkNfTkFPOS1weGxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArC9O5ZEh
y1hMIMZflQE9iCr0eTh+7G9WBLMKb59PsmHJNxe4Xyhm+HRsr+CGxNISiAN7AlXm
NJRAo2+SvpfRMJIUfpUPn+Rr1nJP1tvI5M1ht29q+lU6Ot9ENcSBzg6FCpy2scJa
xuVmzJcGM289/aXxXfgnNUbPzPERRk5mSlOIDZWpeSDuVvoxIN0TOL2pznvrrBVP
A4J2JhzLLIcpUNNnwSX9UgHuMvvq/CVIBb5oKFASpZZKgXgWyZx3wcXhJ7A2q1ks
Bjk5dXXtHEcigTaQb+R5NuEvT5z4tMNOyRKjNsyb6gngrGCmQJ2jN2SLDv1BVGiF
CHdv/mJGnvIb/A==
-----END CERTIFICATE-----
Generated at Sun May 11 21:03:49 2025 by rpki-client