Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File: KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier: rwtGL3ErP9bB8oZYZGfz4U+9Kkd5jnZEYtFZqRo+N8Y=
Subject key identifier: 90:B3:CA:F4:8A:32:13:92:79:B7:7B:1F:D0:65:5E:07:6B:68:34:2A
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 01967F7D03C7A53606F438765812C7EC9982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number: 137F
Signing time: Tue 29 Apr 2025 03:00:21 +0000
Manifest this update: Tue 29 Apr 2025 03:00:21 +0000
Manifest next update: Wed 30 Apr 2025 03:00:21 +0000
Files and hashes: 1: 2Cp_JC-1gSdENPjM_UWn9lNVG7o.roa (hash: +35xjqek9Nhlc/Z0+VDCYx/DAJw10REdvRuvu6t5M3s=)
2: 30p15OIB4xzHle9tD78XYhbRDYI.roa (hash: 9HVb43mRInURyExw74+VWFanW5TCiRHL7zKkRNQfWwc=)
3: 46l3zcDNK_2V63AreaLMsQrAgaE.roa (hash: yY63fb353nPGfB15WkNs5SfqIg+XAt04c2yklxwzqUk=)
4: DrQJgIgCadGbo__38qvLm4f2buQ.roa (hash: Wx23py7fw++y8qecqXEe1C97qUaOVg6INU3OjKvg+YE=)
5: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: O79CZ9Q/wOH1oCp9coyQUw9jq7phibr6lHuL+2A8Tow=)
6: Kc-1Z4R9k1b9QbprK1lrnIRFuzo.roa (hash: mIf5b4mKVeZgEr7VsdotpcNIdYch/DFkBdwgO8kit9A=)
7: lTAav4yQpZ87qw_zIchzIsq-5gM.roa (hash: 3b9+qDTSwpfJP/SrqHspJoxR/TN3seQEWvBLhEVGMW0=)
8: x8RX4rKBNmZcMpsvt4Nm7APSjAM.roa (hash: zc30VoGi96Z1iHoOnbaFFXszAPpJE3UJpyJWRy15Byo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:03:c7:a5:36:06:f4:38:76:58:12:c7:ec:99:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Apr 29 03:00:21 2025 GMT
Not After : Apr 30 03:00:21 2025 GMT
Subject: CN=90b3caf48a32139279b77b1fd0655e076b68342a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:32:66:c9:fe:ea:72:42:1e:b5:3a:10:df:
aa:a3:d7:aa:f7:cb:ba:c4:3f:d2:35:21:61:94:f9:
fa:d6:6e:a5:ad:7b:2d:60:25:d6:40:1f:cf:45:a0:
e3:b3:ad:9e:61:cd:f9:88:ce:ee:6d:0d:f3:0b:46:
43:60:88:77:53:32:4b:2b:3b:fa:71:f3:cf:75:57:
22:2d:14:8a:0b:54:fd:f8:6a:12:31:89:f3:9b:89:
c7:d7:8e:f6:ad:ec:b5:26:da:80:06:cd:c9:cb:55:
6e:f9:26:42:ef:fb:eb:a6:8b:63:c1:6b:58:4e:15:
1d:26:6b:5b:9a:1c:d3:16:1a:7a:6a:2b:ff:cb:d9:
c4:38:07:ba:15:93:5f:1b:1e:21:17:a6:34:99:3f:
1d:26:27:32:93:b4:8a:53:76:30:f3:e6:2b:b3:ab:
ab:3f:4c:89:36:74:00:fa:d6:e5:f1:54:df:28:e6:
19:54:54:6c:f7:ab:c7:35:9c:43:7b:dd:37:cc:a8:
eb:d0:98:2d:61:5b:6b:aa:c6:eb:8e:81:73:26:87:
6c:09:32:af:7f:8c:67:74:b1:ca:ac:8b:69:c6:b2:
4a:f3:11:16:df:58:63:7b:81:bd:bb:89:68:5b:5c:
56:68:75:b8:cf:c1:5d:d9:7a:b0:a0:ac:74:10:0a:
7f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B3:CA:F4:8A:32:13:92:79:B7:7B:1F:D0:65:5E:07:6B:68:34:2A
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6f:74:c6:87:05:8c:97:fd:e1:5c:21:eb:8e:d8:8d:1e:ce:
6a:59:20:8f:ac:4c:71:6d:fd:ae:a0:75:70:95:b3:f6:5a:2a:
63:d7:15:5b:ea:24:a9:74:30:6f:d1:63:4b:45:1e:30:42:57:
8e:c1:a3:12:71:4e:ca:20:63:48:e6:bc:67:b8:c4:b9:d5:6c:
00:35:1d:3a:0d:cd:7f:d6:ba:db:09:d2:c5:5e:32:03:a3:ce:
4a:43:47:6c:d3:80:68:fb:45:b2:5b:b4:f9:11:aa:ec:25:b2:
9b:57:57:12:de:51:38:af:d8:2e:10:4e:70:ef:83:c7:df:fc:
9b:85:8d:8f:86:37:a9:17:fa:64:d2:5f:b9:3e:14:5c:a9:18:
7f:a6:b2:db:1e:05:67:dc:71:45:c9:e2:94:57:52:2a:8a:35:
78:0e:dc:31:d4:54:a6:53:d6:4b:ec:7e:67:f5:fe:2a:33:72:
35:d5:4f:6a:a5:15:3b:35:ef:8a:b4:8e:e7:08:d4:70:c5:69:
d0:8f:d9:45:a3:db:19:7c:c2:be:be:73:e7:55:63:ed:0a:0f:
d6:f7:9b:40:be:bb:9b:a2:6f:cd:0e:4e:9b:a7:39:e4:d1:da:
1a:5d:d9:6d:bb:96:91:c6:f6:a7:15:43:ec:55:3e:05:7c:ef:
70:ee:50:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/fQPHpTYG9Dh2WBLH7JmCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NzM2NGY1MDI1MzRlODc3MWEwYzYyNTk3OTRjMjZlMjZk
NGJjYTQwHhcNMjUwNDI5MDMwMDIxWhcNMjUwNDMwMDMwMDIxWjAzMTEwLwYDVQQD
Eyg5MGIzY2FmNDhhMzIxMzkyNzliNzdiMWZkMDY1NWUwNzZiNjgzNDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDIyZsn+6nJCHrU6EN+qo9eq98u6
xD/SNSFhlPn61m6lrXstYCXWQB/PRaDjs62eYc35iM7ubQ3zC0ZDYIh3UzJLKzv6
cfPPdVciLRSKC1T9+GoSMYnzm4nH1472rey1JtqABs3Jy1Vu+SZC7/vrpotjwWtY
ThUdJmtbmhzTFhp6aiv/y9nEOAe6FZNfGx4hF6Y0mT8dJicyk7SKU3Yw8+Yrs6ur
P0yJNnQA+tbl8VTfKOYZVFRs96vHNZxDe903zKjr0JgtYVtrqsbrjoFzJodsCTKv
f4xndLHKrItpxrJK8xEW31hje4G9u4loW1xWaHW4z8Fd2XqwoKx0EAp/CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCzyvSKMhOSebd7H9BlXgdraDQqMB8GA1UdIwQY
MBaAFClzZPUCU06HcaDGJZeUwm4m1LykMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUt
MGEwZjNlNzhhNDkzLzEvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUtMGEwZjNlNzhhNDkz
LzEvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm290xocF
jJf94Vwh647YjR7Oalkgj6xMcW39rqB1cJWz9loqY9cVW+okqXQwb9FjS0UeMEJX
jsGjEnFOyiBjSOa8Z7jEudVsADUdOg3Nf9a62wnSxV4yA6POSkNHbNOAaPtFslu0
+RGq7CWym1dXEt5ROK/YLhBOcO+Dx9/8m4WNj4Y3qRf6ZNJfuT4UXKkYf6ay2x4F
Z9xxRcnilFdSKoo1eA7cMdRUplPWS+x+Z/X+KjNyNdVPaqUVOzXvirSO5wjUcMVp
0I/ZRaPbGXzCvr5z51Vj7QoP1vebQL67m6JvzQ5Om6c55NHaGl3ZbbuWkcb2pxVD
7FU+BXzvcO5QGA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:28:57 2025 by rpki-client