Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
File: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft (raw, json)
Hash identifier: KHrYvG7g6rmTnGkAQyobOHJRAyio4zvJ+beSyTAjL4w=
Subject key identifier: 78:80:BF:82:9A:12:EF:65:55:2A:1E:50:68:81:1D:C3:49:29:2A:59
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 0196BC000F9DC08E86AA9986320E71F74835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 21:00:42 +0000
Manifest this update: Sat 10 May 2025 21:00:42 +0000
Manifest next update: Sun 11 May 2025 21:00:42 +0000
Files and hashes: 1: 1-BYmurPr5LAEsZbg3IkqQQ8bTE.roa (hash: gSRreBFbCS0pgQwKCm4p7z2bTAJn0+Iu8NoE2w5inzM=)
2: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl (hash: yC5+gwqvDiwJt/B67kbo4Izkp4XzOSO1HOWxY7AfYds=)
3: LkIHKYAztrvXyS2uvM19nitM_J8.roa (hash: bSmM4xvjjm+xIUvcYXqsQ49ZAFIaGh2KEBGQ0EzdDJQ=)
4: YZbRz0TPn2AkN3pts4pehGKPFCQ.roa (hash: +Ns94ZDDFJ4TJopF8u7U1uG56GwRweZl/hjdoUef2a0=)
5: _vdRTtZt9JtL5ja2GczGggJ0SbM.roa (hash: lAHlgKcde7+6Ag5a4YHN2NUrJtyFsbjpueclzD4vqNA=)
6: cPcxLO1mqeKGQGyRnW90EvAI0HE.roa (hash: k9JzzhuzIaxECEDTAdASrMOBk8mvIm/aEbc0qToiokc=)
7: dx0WinCfMz9mrqqCW13H5COmXU8.roa (hash: ljXXTzc+Ws09xCBJIxWwoc/Db/5IEktc/whbot/5Ato=)
8: fx8MLGTxK80dTB_4NJYiocZMPwQ.roa (hash: ktdhmccH0NnIum2PWLW59Gn98yD870nWte0K3STRnHs=)
9: uwiEBGof-KAkpEFhZy-WaLfAvIs.roa (hash: ZnbTLkj0SeUC00zQu5XoWyUlIHf81vfWL1Buec+9xEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:0f:9d:c0:8e:86:aa:99:86:32:0e:71:f7:48:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: May 10 21:00:42 2025 GMT
Not After : May 11 21:00:42 2025 GMT
Subject: CN=7880bf829a12ef65552a1e5068811dc349292a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:84:0c:5f:fb:45:38:ef:7d:ab:24:07:32:
f7:3e:7b:67:74:14:0c:7a:b9:43:7b:b5:2e:5d:e1:
68:7a:83:40:8a:b1:1d:cf:87:4c:15:37:ad:d0:7d:
11:ad:dc:a2:e3:1f:4c:76:34:e3:85:f8:47:b1:bc:
32:0d:4c:93:09:e9:f2:e3:2a:ac:f0:48:b1:43:eb:
68:f5:c4:1a:48:a0:25:c9:26:a2:41:be:e1:6b:22:
2d:f1:3b:d2:4e:e1:36:93:7d:81:74:47:e5:fd:33:
d9:c9:fb:ff:aa:e6:87:b3:ef:bd:f3:89:81:98:f4:
41:ae:4a:20:69:0b:b8:5b:16:ae:fb:62:2c:53:93:
5b:d4:1d:17:08:34:a2:eb:93:c6:44:57:e6:7c:d9:
13:a0:1d:7e:ec:51:f0:2d:4a:d1:6f:bb:9f:da:10:
9f:0d:75:5b:34:4d:6b:7b:7e:a4:6b:73:fa:0a:f1:
ec:63:19:8d:38:ed:f0:a9:c5:c4:7f:24:67:0a:5d:
9b:5b:f4:59:75:8b:0d:61:e7:6e:8c:3b:89:c4:fc:
1f:78:32:17:d3:a9:fe:33:55:8b:a5:d7:29:cc:46:
53:23:e5:50:5c:a4:10:53:96:9f:3a:d2:a1:8e:e5:
b6:f5:7e:a4:b3:04:32:b7:7d:41:3c:67:d2:6f:d8:
9e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:80:BF:82:9A:12:EF:65:55:2A:1E:50:68:81:1D:C3:49:29:2A:59
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:26:5e:b3:7f:74:65:78:ec:d9:5f:d0:b7:6f:48:eb:51:2d:
67:e9:0d:07:8d:13:7e:be:c1:01:5e:24:44:4b:27:6e:a3:06:
0d:9d:32:08:0f:4b:14:d4:5d:39:bf:b9:e7:2a:2e:4a:08:e6:
29:c3:45:c4:2a:d3:96:57:10:d2:4c:1c:8f:2e:a8:95:52:5b:
e1:4c:b3:47:3c:ee:be:6b:20:c4:be:3e:97:2f:b0:5e:fa:99:
c8:fc:81:60:29:75:f8:06:59:16:f2:74:c6:65:df:04:54:93:
66:52:dd:d7:d6:bc:11:70:c9:e9:58:dd:0c:fa:ea:7b:87:8f:
ae:40:4c:d1:b0:07:22:5c:98:eb:38:c1:9e:f4:9b:d2:3d:a6:
fe:96:cb:b9:e5:db:32:42:c9:6f:9e:b9:51:59:9a:96:af:57:
6e:a7:9e:e6:19:c8:09:84:1c:f3:37:11:2a:c5:ad:b5:b6:2e:
f5:08:de:ab:b5:b7:2b:b3:d7:b3:c0:3b:13:0f:cb:2b:d3:dd:
1a:c5:14:3e:55:0e:4c:73:c8:b0:1f:f6:ba:eb:0b:cc:a6:13:
f5:95:e5:5b:cf:02:0f:4c:6f:d6:57:e0:e3:79:95:b4:f3:76:
15:13:11:40:62:57:95:45:dd:2b:aa:d9:9e:6b:2a:f6:f3:3a:
0b:3b:55:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8AA+dwI6GqpmGMg5x90g1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MWYwYjczZTY3ZDYzYzVhNGM5MDQ2ODE0MTY2YTllMjE2
MjVmMjgwHhcNMjUwNTEwMjEwMDQyWhcNMjUwNTExMjEwMDQyWjAzMTEwLwYDVQQD
Eyg3ODgwYmY4MjlhMTJlZjY1NTUyYTFlNTA2ODgxMWRjMzQ5MjkyYTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZaEDF/7RTjvfaskBzL3PntndBQM
erlDe7UuXeFoeoNAirEdz4dMFTet0H0Rrdyi4x9MdjTjhfhHsbwyDUyTCeny4yqs
8EixQ+to9cQaSKAlySaiQb7hayIt8TvSTuE2k32BdEfl/TPZyfv/quaHs++984mB
mPRBrkogaQu4Wxau+2IsU5Nb1B0XCDSi65PGRFfmfNkToB1+7FHwLUrRb7uf2hCf
DXVbNE1re36ka3P6CvHsYxmNOO3wqcXEfyRnCl2bW/RZdYsNYedujDuJxPwfeDIX
06n+M1WLpdcpzEZTI+VQXKQQU5afOtKhjuW29X6kswQyt31BPGfSb9ielQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHiAv4KaEu9lVSoeUGiBHcNJKSpZMB8GA1UdIwQY
MBaAFCkfC3PmfWPFpMkEaBQWap4hYl8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQt
MzhlZThmZDY0ZTdkLzEvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQtMzhlZThmZDY0ZTdk
LzEvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoiZes390
ZXjs2V/Qt29I61EtZ+kNB40Tfr7BAV4kREsnbqMGDZ0yCA9LFNRdOb+55youSgjm
KcNFxCrTllcQ0kwcjy6olVJb4UyzRzzuvmsgxL4+ly+wXvqZyPyBYCl1+AZZFvJ0
xmXfBFSTZlLd19a8EXDJ6VjdDPrqe4ePrkBM0bAHIlyY6zjBnvSb0j2m/pbLueXb
MkLJb565UVmalq9Xbqee5hnICYQc8zcRKsWttbYu9Qjeq7W3K7PXs8A7Ew/LK9Pd
GsUUPlUOTHPIsB/2uusLzKYT9ZXlW88CD0xv1lfg43mVtPN2FRMRQGJXlUXdK6rZ
nmsq9vM6CztVcQ==
-----END CERTIFICATE-----
Generated at Sun May 11 05:03:24 2025 by rpki-client