Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
File: koCqYVCQTiD4hKRjybZq5tQWG5s.mft (raw, json)
Hash identifier: l3/ysBwl0WmD1iCynGRsYZnsUlfUSSQKjRqJ83DFxes=
Subject key identifier: 35:06:0C:ED:28:CC:74:EE:F1:F1:AC:B8:EF:12:B0:02:AE:68:79:45
Authority key identifier: 92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
Certificate issuer: /CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Certificate serial: 0196BDEE708C2D74C2445B646FE667CB6FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 06:00:42 +0000
Manifest this update: Sun 11 May 2025 06:00:42 +0000
Manifest next update: Mon 12 May 2025 06:00:42 +0000
Files and hashes: 1: 42CIzWao25DIQH989gjkrV7OjrY.roa (hash: J1v5sJHZZ0GbntLAyFYLEEa5CiZuVx8YZ/XB+JD5wdg=)
2: koCqYVCQTiD4hKRjybZq5tQWG5s.crl (hash: J3Yq6eSNdPjbt492lCBS7/9BwOupNlId8U4IbY8Tb/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:70:8c:2d:74:c2:44:5b:64:6f:e6:67:cb:6f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Validity
Not Before: May 11 06:00:42 2025 GMT
Not After : May 12 06:00:42 2025 GMT
Subject: CN=35060ced28cc74eef1f1acb8ef12b002ae687945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:36:c7:85:43:04:cf:8d:cb:93:8d:db:7e:
f6:3a:cf:f5:44:ee:a9:cf:be:40:bc:6d:b9:a8:3f:
d8:54:4e:65:19:4c:62:51:90:97:d8:6a:f5:cf:ef:
c0:83:33:60:c7:64:8f:2e:94:b3:f1:69:30:89:94:
cd:a4:3c:67:60:5c:40:aa:b3:0d:c1:9e:2c:a1:cc:
b6:83:65:71:f6:25:6a:a5:13:87:38:97:52:ca:5c:
9c:97:c9:c8:43:67:b9:e1:e1:a4:c3:77:e5:29:a4:
0e:34:26:7b:49:aa:90:4d:03:fb:76:45:fe:e1:85:
64:e2:62:42:ec:08:e4:11:d0:94:60:84:aa:4d:46:
77:3e:fd:e4:76:d4:ff:5c:1b:87:d5:4a:f1:7c:54:
1b:50:20:65:d8:d9:53:6c:73:01:1a:ec:20:77:bb:
b1:ae:70:4b:12:bf:5c:92:34:6f:c4:e2:33:03:f2:
5b:a4:e9:c3:34:2b:f4:6a:a0:ce:8e:85:f1:ff:d8:
32:56:40:c4:7d:a4:a7:be:c9:20:9f:6b:14:ee:8b:
b1:22:aa:a3:08:d2:25:f9:87:3e:8e:49:c8:96:e4:
e7:32:10:ca:a4:a7:a7:79:7b:81:c2:a7:11:b4:66:
b8:53:24:00:07:17:8c:af:14:5f:88:95:c2:6b:e2:
49:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:06:0C:ED:28:CC:74:EE:F1:F1:AC:B8:EF:12:B0:02:AE:68:79:45
X509v3 Authority Key Identifier:
keyid:92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:47:54:ce:53:6e:3e:1e:25:03:fe:9e:82:70:c3:ab:48:d2:
cc:98:0d:3e:57:45:14:0c:41:9b:81:dd:da:95:07:9b:8f:85:
66:ad:57:18:98:0c:a8:39:ba:25:49:7a:83:f3:ec:8f:57:4c:
80:06:6e:90:4e:5d:51:06:14:bb:57:3c:2f:48:1f:28:c1:69:
53:19:b7:4b:8e:7c:10:47:68:20:b4:30:bc:92:ab:4d:46:bb:
78:93:1e:41:d7:de:55:60:40:bc:42:c1:fe:2d:5f:73:70:9e:
72:32:c2:ed:4c:ad:0d:be:67:3e:23:3c:4c:03:4a:ed:50:34:
cf:6b:17:80:ee:f0:a1:1f:c4:8f:82:f8:b6:a9:7c:41:54:38:
b2:5d:2f:ed:50:cb:f4:00:ee:97:c3:44:75:df:40:ec:47:41:
f4:0c:f3:95:85:b1:94:83:23:69:ac:c7:96:07:10:e1:5c:49:
30:94:8d:c4:70:94:65:0b:92:44:33:bc:45:d4:94:c3:12:fe:
76:c8:68:d2:df:9e:b9:8b:34:f5:a2:af:50:04:6e:89:bc:94:
bf:d5:4a:ec:8f:f0:fc:8a:2a:07:fa:1d:83:da:7f:d9:f4:5a:
25:cb:27:0a:99:0e:e0:79:14:a9:88:ad:0a:13:1d:b4:58:e3:
a8:e7:1a:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa97nCMLXTCRFtkb+Zny2/kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyODBhYTYxNTA5MDRlMjBmODg0YTQ2M2M5YjY2YWU2ZDQx
NjFiOWIwHhcNMjUwNTExMDYwMDQyWhcNMjUwNTEyMDYwMDQyWjAzMTEwLwYDVQQD
EygzNTA2MGNlZDI4Y2M3NGVlZjFmMWFjYjhlZjEyYjAwMmFlNjg3OTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygs2x4VDBM+Ny5ON2372Os/1RO6p
z75AvG25qD/YVE5lGUxiUZCX2Gr1z+/AgzNgx2SPLpSz8WkwiZTNpDxnYFxAqrMN
wZ4socy2g2Vx9iVqpROHOJdSylycl8nIQ2e54eGkw3flKaQONCZ7SaqQTQP7dkX+
4YVk4mJC7AjkEdCUYISqTUZ3Pv3kdtT/XBuH1UrxfFQbUCBl2NlTbHMBGuwgd7ux
rnBLEr9ckjRvxOIzA/JbpOnDNCv0aqDOjoXx/9gyVkDEfaSnvskgn2sU7ouxIqqj
CNIl+Yc+jknIluTnMhDKpKeneXuBwqcRtGa4UyQABxeMrxRfiJXCa+JJyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUGDO0ozHTu8fGsuO8SsAKuaHlFMB8GA1UdIwQY
MBaAFJKAqmFQkE4g+ISkY8m2aubUFhubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva29DcVlWQ1FUaUQ0aEtSanliWnE1dFFXRzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9kMDhiYmQtMDhiMC00YTIyLThiNTct
N2UwMTcxMTUwY2ZiLzEva29DcVlWQ1FUaUQ0aEtSanliWnE1dFFXRzVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9kMDhiYmQtMDhiMC00YTIyLThiNTctN2UwMTcxMTUwY2Zi
LzEva29DcVlWQ1FUaUQ0aEtSanliWnE1dFFXRzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEdUzlNu
Ph4lA/6egnDDq0jSzJgNPldFFAxBm4Hd2pUHm4+FZq1XGJgMqDm6JUl6g/Psj1dM
gAZukE5dUQYUu1c8L0gfKMFpUxm3S458EEdoILQwvJKrTUa7eJMeQdfeVWBAvELB
/i1fc3CecjLC7UytDb5nPiM8TANK7VA0z2sXgO7woR/Ej4L4tql8QVQ4sl0v7VDL
9ADul8NEdd9A7EdB9AzzlYWxlIMjaazHlgcQ4VxJMJSNxHCUZQuSRDO8RdSUwxL+
dsho0t+euYs09aKvUARuibyUv9VK7I/w/IoqB/odg9p/2fRaJcsnCpkO4HkUqYit
ChMdtFjjqOcatQ==
-----END CERTIFICATE-----
Generated at Sun May 11 12:26:04 2025 by rpki-client