Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
File: kGIGOModg1ZQ4I3c82PxB4m1MFc.mft (raw, json)
Hash identifier: lSwJGkDhacEQCuibQzZEUK8gV2lzXRgS9s/6KdHGYMM=
Subject key identifier: 2B:9B:EF:E1:B0:5C:5A:97:D0:9D:8B:C3:11:F8:8C:DC:6B:1E:E3:8B
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial: 0196A19B6541FA7D967F2F9F1A86A35DFDBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
Manifest number: 1529
Signing time: Mon 05 May 2025 18:00:37 +0000
Manifest this update: Mon 05 May 2025 18:00:37 +0000
Manifest next update: Tue 06 May 2025 18:00:37 +0000
Files and hashes: 1: 1YWYnMlB7bNjXZ-mR2gEvtLN3Bc.roa (hash: iv4yYaqxX9/BpncOJNi6FP4hgIeS1SbHKqiyIfxcth4=)
2: 4CDjeVRMh18gOoZFQB0kG87F3Ac.roa (hash: iS2zUZpr0OcJtSkJuXKr1ZglVEc7UdAcxQ+F6PuEqkI=)
3: CDG-7PWVVdm5Z7h-n4Ap6W6lHRg.roa (hash: 7yd+Jrhn2cJ3wJGfKqF6or4RqCKrwJRg13HNF9MQpQc=)
4: Kr-1FkX8isznu7LNjpkGbo9RXAQ.roa (hash: Nkup561eSF2a1lVSMy8ZbGKlbupLimNEQbbUAaz0DIc=)
5: Qxvf4dambUM4wGGmpG65pgeoc3M.roa (hash: dkmpKTZscpBI0IsTqLbisMD9yO7kEmJGfj1/YKPtkuc=)
6: RmzxPNQi61FBVP1fRDu5ucEzyaI.roa (hash: hjLdRcYfGc3ePa8Zdnij2feYL0ptV5CZuH2vbOXAvTw=)
7: SkASK4zN7bPehdagCz89JkwUfsA.roa (hash: d1RW1sYrndntlpLL9/PiKBPVX2QhXX5rJ7D+z0FCw9w=)
8: kGIGOModg1ZQ4I3c82PxB4m1MFc.crl (hash: IuXSV94SntUoF4g0JCyMabuE7XpaBUYmfCawexvsSOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:65:41:fa:7d:96:7f:2f:9f:1a:86:a3:5d:fd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
Validity
Not Before: May 5 18:00:37 2025 GMT
Not After : May 6 18:00:37 2025 GMT
Subject: CN=2b9befe1b05c5a97d09d8bc311f88cdc6b1ee38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:39:e3:5b:1b:3a:8c:17:d2:20:c0:8b:a1:
0f:d2:1b:91:4c:c9:f6:8e:23:f6:92:44:20:10:ee:
d6:e0:6a:a3:c8:10:fa:7b:58:39:47:77:ba:26:5f:
20:1b:2e:b9:77:76:70:c0:82:bb:48:b7:b2:8d:e4:
c4:ad:ff:54:64:b8:b4:d6:b5:4d:25:1e:3c:30:cd:
0e:34:54:16:54:b4:87:fb:c1:a3:a2:07:31:19:df:
ce:f6:cb:2d:01:cb:f3:df:18:70:b5:69:2b:9e:6e:
f7:0f:9a:1c:44:09:0c:c2:01:c8:d1:ff:aa:db:10:
b9:79:38:81:11:8b:f6:6c:97:6f:12:d8:a8:a2:7d:
3f:fa:48:56:97:b6:d2:e8:3c:ee:ab:cb:0a:1d:8d:
82:01:a5:b6:62:e1:fc:5f:11:90:a9:d8:8d:33:1d:
51:95:d3:3f:ed:df:12:c8:5c:f4:6d:79:33:16:ea:
ba:7a:25:94:89:8f:6f:1b:dd:e0:d1:f7:01:36:6b:
4d:14:86:86:6e:a3:95:1a:5f:9d:3b:ec:8b:a5:db:
83:0b:9e:48:87:e5:14:fd:98:ab:21:d7:49:ac:a8:
8b:88:a7:27:32:c1:62:17:16:41:85:8b:f5:3c:4a:
dd:fb:f1:26:35:fc:37:4b:1d:60:b3:cc:83:e0:0e:
00:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9B:EF:E1:B0:5C:5A:97:D0:9D:8B:C3:11:F8:8C:DC:6B:1E:E3:8B
X509v3 Authority Key Identifier:
keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ec:25:d1:de:3c:3a:1d:57:34:53:13:3a:2f:6e:4e:94:da:
8e:39:76:1c:df:6c:30:41:15:3e:43:08:51:8b:ec:c2:d8:56:
a1:f2:ed:c0:dc:bf:05:cb:b6:a2:1c:86:cb:9a:f5:c4:ee:31:
2e:af:04:b5:9e:3a:d3:60:6b:86:8d:01:62:96:4d:8a:31:5b:
85:4f:ac:ab:fa:d9:c9:87:4e:a4:f3:7a:07:20:e8:97:6d:4e:
26:56:38:db:34:e2:21:ec:9a:39:33:14:c4:fe:84:78:55:40:
ec:93:c5:7d:bf:c1:18:97:ce:bc:43:ec:78:2c:21:a6:ef:a3:
70:6f:53:e1:b7:14:9b:0f:5c:0b:e3:d3:b8:3c:42:00:ae:62:
45:ed:9f:d4:1a:d4:98:af:50:9b:e9:57:62:18:8a:6f:07:40:
f0:1c:cf:90:b2:89:4c:81:a5:74:f2:9a:9a:44:d0:c0:55:e9:
5f:a0:1f:04:23:72:4d:6d:97:3f:b2:88:9c:2c:9f:91:03:04:
8e:46:68:0f:88:b1:fb:1e:78:21:0f:bd:80:0b:bb:c6:22:a5:
b6:a8:2e:94:50:4f:8d:db:f7:a4:4c:23:55:b8:1a:31:72:93:
91:5c:01:39:d1:0c:f3:e1:3c:a2:73:78:96:b1:3f:ca:64:51:
f6:38:93:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZahm2VB+n2Wfy+fGoajXf2/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNjIwNjM4Y2ExZDgzNTY1MGUwOGRkY2YzNjNmMTA3ODli
NTMwNTcwHhcNMjUwNTA1MTgwMDM3WhcNMjUwNTA2MTgwMDM3WjAzMTEwLwYDVQQD
EygyYjliZWZlMWIwNWM1YTk3ZDA5ZDhiYzMxMWY4OGNkYzZiMWVlMzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdA541sbOowX0iDAi6EP0huRTMn2
jiP2kkQgEO7W4GqjyBD6e1g5R3e6Jl8gGy65d3ZwwIK7SLeyjeTErf9UZLi01rVN
JR48MM0ONFQWVLSH+8GjogcxGd/O9sstAcvz3xhwtWkrnm73D5ocRAkMwgHI0f+q
2xC5eTiBEYv2bJdvEtioon0/+khWl7bS6Dzuq8sKHY2CAaW2YuH8XxGQqdiNMx1R
ldM/7d8SyFz0bXkzFuq6eiWUiY9vG93g0fcBNmtNFIaGbqOVGl+dO+yLpduDC55I
h+UU/ZirIddJrKiLiKcnMsFiFxZBhYv1PErd+/EmNfw3Sx1gs8yD4A4AIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCub7+GwXFqX0J2LwxH4jNxrHuOLMB8GA1UdIwQY
MBaAFJBiBjjKHYNWUOCN3PNj8QeJtTBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMt
YzQzYWM0MjllNTNmLzEva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMtYzQzYWM0MjllNTNm
LzEva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOwl0d48
Oh1XNFMTOi9uTpTajjl2HN9sMEEVPkMIUYvswthWofLtwNy/Bcu2ohyGy5r1xO4x
Lq8EtZ4602Brho0BYpZNijFbhU+sq/rZyYdOpPN6ByDol21OJlY42zTiIeyaOTMU
xP6EeFVA7JPFfb/BGJfOvEPseCwhpu+jcG9T4bcUmw9cC+PTuDxCAK5iRe2f1BrU
mK9Qm+lXYhiKbwdA8BzPkLKJTIGldPKamkTQwFXpX6AfBCNyTW2XP7KInCyfkQME
jkZoD4ix+x54IQ+9gAu7xiKltqgulFBPjdv3pEwjVbgaMXKTkVwBOdEM8+E8onN4
lrE/ymRR9jiTWw==
-----END CERTIFICATE-----
Generated at Mon May 5 22:00:25 2025 by rpki-client