Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
File: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft (raw, json)
Hash identifier: DYYCCLOUhCMkIdilLXy7KW98D2Jb9JQ/wVIzcnHQz8Q=
Subject key identifier: BE:A2:AA:99:79:38:BE:B0:FF:80:84:C2:5D:71:B0:58:DE:8D:8E:1D
Authority key identifier: 91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
Certificate issuer: /CN=913836859c6ce1869340edf1f273709b8094d9d4
Certificate serial: 019686C8885CF0619C99B300FB6D26796077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
Manifest number: 147F
Signing time: Wed 30 Apr 2025 13:00:11 +0000
Manifest this update: Wed 30 Apr 2025 13:00:11 +0000
Manifest next update: Thu 01 May 2025 13:00:11 +0000
Files and hashes: 1: i0znYyDIsk78QzCDDCTg60lK9ig.roa (hash: aeDo1wq5VczgcfrDX0J+4eB6IcjwVsRwiJM6vkXROSk=)
2: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl (hash: noaM5DpPVKcM29z5CrSNBkjTnwO+HPeikwdRx2gdYtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c8:88:5c:f0:61:9c:99:b3:00:fb:6d:26:79:60:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913836859c6ce1869340edf1f273709b8094d9d4
Validity
Not Before: Apr 30 13:00:11 2025 GMT
Not After : May 1 13:00:11 2025 GMT
Subject: CN=bea2aa997938beb0ff8084c25d71b058de8d8e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:27:07:37:a6:9e:42:7a:17:25:27:28:ea:d5:
d3:be:88:51:09:45:93:f4:09:5a:02:98:26:19:93:
e1:c3:6b:4c:7f:6e:1c:a8:81:66:2f:e7:28:db:a0:
2a:99:2d:df:63:53:5f:26:7b:31:a5:15:14:48:7f:
d7:34:b7:6b:2a:be:38:33:4e:20:77:da:ce:c4:55:
00:7c:cd:a4:6a:25:00:50:61:74:18:bc:9a:a7:13:
97:3a:4c:bc:99:ca:a0:64:b6:1b:e2:31:2c:3b:60:
88:b3:26:cb:c4:9b:cc:1e:41:e7:0d:30:c3:30:fa:
ed:12:e2:0f:5f:12:98:20:a1:65:f9:0a:38:00:28:
41:b8:57:e5:31:f7:c6:fb:22:f0:40:94:b5:d2:d2:
60:3f:14:0c:d0:11:2e:e9:df:5e:49:d6:29:67:99:
1e:dc:0a:ae:76:96:75:59:ed:21:f5:43:8f:0d:aa:
55:2f:c2:20:e0:bf:8c:af:eb:6a:82:6b:18:5c:68:
27:f7:c8:89:5e:f3:8b:6e:6a:9f:ba:89:5b:a5:de:
32:4f:aa:6c:44:eb:c5:54:2a:75:d5:0a:4d:a5:4a:
40:c1:65:4c:7c:dd:f2:04:27:fc:2a:8a:28:e3:78:
7c:6b:41:5d:90:c8:f5:22:2f:e4:41:4c:08:58:85:
f4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A2:AA:99:79:38:BE:B0:FF:80:84:C2:5D:71:B0:58:DE:8D:8E:1D
X509v3 Authority Key Identifier:
keyid:91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:96:12:bc:61:79:40:95:8a:e1:d0:b9:ae:df:b0:a4:8f:43:
ea:74:11:0f:c2:f2:53:d5:c4:c9:bc:a2:7b:23:ae:99:b5:80:
07:81:80:be:89:7c:29:a1:7f:6b:01:a7:fc:7f:56:e4:35:f1:
64:87:ff:50:0f:a6:81:b0:cd:9b:4f:dd:95:b1:ba:ac:8a:9e:
31:e5:91:c7:13:2c:6f:d7:cd:1f:68:46:eb:41:6e:c4:ce:19:
be:dc:ca:ed:7d:af:24:e0:bb:dc:f6:68:77:70:d1:ac:c6:b2:
90:26:0d:60:5b:34:23:c6:c0:55:ee:06:c3:f1:df:52:47:06:
6a:68:ce:a8:2c:b2:e3:60:31:03:78:3a:af:26:b0:1a:72:11:
d9:4c:79:65:f8:5d:b3:3f:49:ac:08:61:9a:13:71:09:49:4c:
d9:bc:b8:2a:fb:7e:90:f4:e1:28:36:be:39:95:7f:1d:56:ef:
62:4b:dd:0d:b0:83:b7:5f:b7:34:86:72:86:87:5d:e5:5b:00:
d6:36:43:ea:b7:3b:1d:f4:49:ed:fc:33:01:ab:22:96:98:1b:
cd:06:5d:b6:a7:f8:5f:3a:fe:3e:3e:f3:0f:2f:ad:6e:5a:a8:
5d:0e:1c:ba:ae:c1:03:eb:d6:cf:97:3d:7b:e7:c6:7a:2e:a1:
79:93:c1:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaGyIhc8GGcmbMA+20meWB3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMzgzNjg1OWM2Y2UxODY5MzQwZWRmMWYyNzM3MDliODA5
NGQ5ZDQwHhcNMjUwNDMwMTMwMDExWhcNMjUwNTAxMTMwMDExWjAzMTEwLwYDVQQD
EyhiZWEyYWE5OTc5MzhiZWIwZmY4MDg0YzI1ZDcxYjA1OGRlOGQ4ZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2icHN6aeQnoXJSco6tXTvohRCUWT
9AlaApgmGZPhw2tMf24cqIFmL+co26AqmS3fY1NfJnsxpRUUSH/XNLdrKr44M04g
d9rOxFUAfM2kaiUAUGF0GLyapxOXOky8mcqgZLYb4jEsO2CIsybLxJvMHkHnDTDD
MPrtEuIPXxKYIKFl+Qo4AChBuFflMffG+yLwQJS10tJgPxQM0BEu6d9eSdYpZ5ke
3AqudpZ1We0h9UOPDapVL8Ig4L+Mr+tqgmsYXGgn98iJXvOLbmqfuolbpd4yT6ps
ROvFVCp11QpNpUpAwWVMfN3yBCf8Kooo43h8a0FdkMj1Ii/kQUwIWIX0CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6iqpl5OL6w/4CEwl1xsFjejY4dMB8GA1UdIwQY
MBaAFJE4NoWcbOGGk0Dt8fJzcJuAlNnUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1RnMmhaeHM0WWFUUU8zeDhuTndtNENVMmRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lOGYzNDQtZWRiMi00NDAwLWIzY2Et
NTI3YWM1NGMyMzU3LzEva1RnMmhaeHM0WWFUUU8zeDhuTndtNENVMmRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9lOGYzNDQtZWRiMi00NDAwLWIzY2EtNTI3YWM1NGMyMzU3
LzEva1RnMmhaeHM0WWFUUU8zeDhuTndtNENVMmRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJYSvGF5
QJWK4dC5rt+wpI9D6nQRD8LyU9XEybyieyOumbWAB4GAvol8KaF/awGn/H9W5DXx
ZIf/UA+mgbDNm0/dlbG6rIqeMeWRxxMsb9fNH2hG60FuxM4ZvtzK7X2vJOC73PZo
d3DRrMaykCYNYFs0I8bAVe4Gw/HfUkcGamjOqCyy42AxA3g6ryawGnIR2Ux5Zfhd
sz9JrAhhmhNxCUlM2by4Kvt+kPThKDa+OZV/HVbvYkvdDbCDt1+3NIZyhodd5VsA
1jZD6rc7HfRJ7fwzAasilpgbzQZdtqf4Xzr+Pj7zDy+tblqoXQ4cuq7BA+vWz5c9
e+fGei6heZPBGw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 15:54:19 2025 by rpki-client