Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
File: k8JEvms6_7bU5Ufy4ePF6sGyarI.mft (raw, json)
Hash identifier: SMyVOpjRsZgm6UWsM9J+txrFCwlsRsX7ezZz5GnrUyU=
Subject key identifier: 4D:04:A9:9C:0D:52:65:01:EF:10:CE:BA:8B:76:01:E8:0F:09:D4:32
Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
Certificate issuer: /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Certificate serial: 0196876DF70AA3AA75AA9353E91AD871A914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
Manifest number: 0C2A
Signing time: Wed 30 Apr 2025 16:00:52 +0000
Manifest this update: Wed 30 Apr 2025 16:00:52 +0000
Manifest next update: Thu 01 May 2025 16:00:52 +0000
Files and hashes: 1: W--ZKr5ij0BtuIXs5rvJyXt3d8w.roa (hash: GOtvHAAEQEDyzwtDsA3aSlZZHxuWNeU6Rlg4PiHPszw=)
2: k8JEvms6_7bU5Ufy4ePF6sGyarI.crl (hash: omUA+4bB4lxe5HCcKsE4S6VHlvqF0tdbfaagVIDDMrc=)
3: uG74c7I0myUDPmZfaSmD4tc9rV4.roa (hash: gFdqnU7r/rSwGKvKSrZSTL5gnMsfd1TYUTvAqWItcO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6d:f7:0a:a3:aa:75:aa:93:53:e9:1a:d8:71:a9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Validity
Not Before: Apr 30 16:00:52 2025 GMT
Not After : May 1 16:00:52 2025 GMT
Subject: CN=4d04a99c0d526501ef10ceba8b7601e80f09d432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:e2:af:bd:20:de:c2:d3:65:0f:7f:45:19:
ae:aa:f4:05:8e:7f:99:02:c2:94:f5:26:5f:07:6b:
6f:2e:88:29:76:90:b4:c4:37:44:6d:db:b1:c6:01:
af:d7:d8:4c:b6:72:23:95:45:51:48:82:be:99:cb:
d2:12:25:b3:bc:82:cf:48:4a:66:c8:27:6e:4d:14:
85:ba:c3:51:1f:70:6d:6e:ff:4c:4e:96:a7:4f:ae:
fd:0c:71:b6:fe:90:17:dd:95:f3:85:75:aa:15:e0:
49:06:d3:5d:26:d6:56:9d:fc:0a:53:86:31:fa:0d:
ea:2c:2d:b6:d3:c7:91:62:21:5f:d3:13:26:22:0c:
06:7a:0c:16:c1:9a:08:42:6b:36:ec:b9:6a:c9:5e:
6c:99:81:8a:cd:a5:6c:9a:ea:9c:2f:ca:e8:af:ba:
ca:51:9d:58:1a:aa:64:ff:67:b4:c4:4e:26:b5:21:
bc:14:63:bd:45:99:ee:b2:d8:79:d8:93:00:c2:3a:
e0:fd:c8:6f:85:ab:79:01:e4:e4:39:e7:1e:83:e9:
8a:02:a7:b0:e9:5f:dc:d8:9a:b8:74:ca:f4:ae:5f:
d3:23:07:90:60:2a:99:e9:b3:85:25:70:8a:d6:0d:
06:a2:50:6b:80:fd:b6:f6:df:a5:94:88:0d:3c:14:
94:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:04:A9:9C:0D:52:65:01:EF:10:CE:BA:8B:76:01:E8:0F:09:D4:32
X509v3 Authority Key Identifier:
keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e4:58:ef:0c:6b:04:2d:83:5c:48:bb:fd:9a:14:bd:0d:75:
5a:3b:5b:af:f5:5a:be:00:95:90:3b:04:f8:fc:44:27:91:d2:
18:48:82:84:fb:a8:31:f3:e2:81:ad:4e:7d:66:cd:64:5c:97:
76:a3:f3:da:5d:3e:d0:7b:42:e3:af:2f:27:c9:1c:ef:aa:b9:
25:10:14:85:44:db:2e:19:ee:a5:71:1c:f1:e3:6b:fc:bb:74:
e8:7d:9d:1e:4b:75:56:37:4c:c4:cd:e2:9f:6e:b3:2c:3a:59:
68:cd:04:24:09:e2:1f:36:53:4c:79:2e:83:fc:7f:e4:e2:5b:
e3:97:72:1e:cf:97:06:fe:c9:43:29:c1:44:34:3e:85:d8:43:
5e:9b:39:e5:a5:d8:56:68:4a:4f:08:7a:af:20:33:0f:71:b8:
07:f4:9d:e7:57:84:ce:fb:f2:04:dc:fd:55:cd:04:06:c1:eb:
a8:73:a3:c1:d8:04:e0:07:ec:5f:99:81:14:5f:64:6b:85:60:
3f:d5:1f:e7:3a:99:ac:dd:83:6e:f7:e3:66:a2:80:6f:f8:af:
e1:84:95:c3:a8:d6:53:38:d2:bb:9a:09:32:52:80:49:02:98:
e2:3a:2f:a6:9f:80:f3:46:be:85:d9:db:65:c1:48:ec:51:b3:
b0:19:cc:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaHbfcKo6p1qpNT6RrYcakUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYzI0NGJlNmIzYWZmYjZkNGU1NDdmMmUxZTNjNWVhYzFi
MjZhYjIwHhcNMjUwNDMwMTYwMDUyWhcNMjUwNTAxMTYwMDUyWjAzMTEwLwYDVQQD
Eyg0ZDA0YTk5YzBkNTI2NTAxZWYxMGNlYmE4Yjc2MDFlODBmMDlkNDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjvir70g3sLTZQ9/RRmuqvQFjn+Z
AsKU9SZfB2tvLogpdpC0xDdEbduxxgGv19hMtnIjlUVRSIK+mcvSEiWzvILPSEpm
yCduTRSFusNRH3Btbv9MTpanT679DHG2/pAX3ZXzhXWqFeBJBtNdJtZWnfwKU4Yx
+g3qLC2208eRYiFf0xMmIgwGegwWwZoIQms27LlqyV5smYGKzaVsmuqcL8ror7rK
UZ1YGqpk/2e0xE4mtSG8FGO9RZnusth52JMAwjrg/chvhat5AeTkOeceg+mKAqew
6V/c2Jq4dMr0rl/TIweQYCqZ6bOFJXCK1g0GolBrgP229t+llIgNPBSUpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0EqZwNUmUB7xDOuot2AegPCdQyMB8GA1UdIwQY
MBaAFJPCRL5rOv+21OVH8uHjxerBsmqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazhKRXZtczZfN2JVNVVmeTRlUEY2c0d5YXJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81MDFlOGYtYzdlMS00YWE0LTg1ODMt
NjZkNzRlNzNmMjU0LzEvazhKRXZtczZfN2JVNVVmeTRlUEY2c0d5YXJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS81MDFlOGYtYzdlMS00YWE0LTg1ODMtNjZkNzRlNzNmMjU0
LzEvazhKRXZtczZfN2JVNVVmeTRlUEY2c0d5YXJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+RY7wxr
BC2DXEi7/ZoUvQ11Wjtbr/VavgCVkDsE+PxEJ5HSGEiChPuoMfPiga1OfWbNZFyX
dqPz2l0+0HtC468vJ8kc76q5JRAUhUTbLhnupXEc8eNr/Lt06H2dHkt1VjdMxM3i
n26zLDpZaM0EJAniHzZTTHkug/x/5OJb45dyHs+XBv7JQynBRDQ+hdhDXps55aXY
VmhKTwh6ryAzD3G4B/Sd51eEzvvyBNz9Vc0EBsHrqHOjwdgE4AfsX5mBFF9ka4Vg
P9Uf5zqZrN2DbvfjZqKAb/iv4YSVw6jWUzjSu5oJMlKASQKY4jovpp+A80a+hdnb
ZcFI7FGzsBnMBA==
-----END CERTIFICATE-----
Generated at Thu May 1 00:08:35 2025 by rpki-client