Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
File: kniPTrt0HAw2mg_TBZTNAQHcdHY.mft (raw, json)
Hash identifier: Odi7kTzpRyDsFSp/cepTBL2pT6EsZmOWI6z6+gvVE24=
Subject key identifier: 08:23:AE:E2:40:C3:DB:D4:C0:1B:FB:97:D5:1A:91:46:D5:BA:DD:8E
Authority key identifier: 92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76
Certificate issuer: /CN=92788f4ebb741c0c369a0fd30594cd0101dc7476
Certificate serial: 019683912372962D4752F4B1E292509FCA60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 22:00:49 +0000
Manifest this update: Tue 29 Apr 2025 22:00:49 +0000
Manifest next update: Wed 30 Apr 2025 22:00:49 +0000
Files and hashes: 1: K-YJm4wOeLJG8aJ7KI41BLWAM-4.roa (hash: +ltmXAJQfzovJoKfgWj4x9gqmeiriedONmDgSBwWFc4=)
2: kniPTrt0HAw2mg_TBZTNAQHcdHY.crl (hash: 1bcfq+NTe2AZkuzWIES9zZ2LcpqVSYDtYWBjpimUpik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:23:72:96:2d:47:52:f4:b1:e2:92:50:9f:ca:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92788f4ebb741c0c369a0fd30594cd0101dc7476
Validity
Not Before: Apr 29 22:00:49 2025 GMT
Not After : Apr 30 22:00:49 2025 GMT
Subject: CN=0823aee240c3dbd4c01bfb97d51a9146d5badd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:97:0a:0c:03:ef:32:68:b6:0b:88:c0:24:41:
2b:fa:f3:6a:b8:32:b0:3a:73:0f:db:69:fb:43:05:
d3:ca:ef:f2:5c:e8:c4:e0:76:31:d7:f2:62:e8:3a:
6b:41:de:60:c1:18:e3:e6:42:79:4a:1f:01:64:18:
16:a7:9d:1f:d7:d2:63:56:ef:76:ea:1b:48:7c:0f:
8f:f8:89:51:10:3a:cc:8e:62:bc:f7:11:95:f1:16:
d6:4f:91:38:93:93:98:22:e1:5f:97:4a:d0:44:63:
59:36:16:fb:38:02:b8:b6:b5:6c:5d:38:a5:41:5f:
42:46:cf:d1:ea:75:ab:f8:35:7b:b1:c3:cc:9d:10:
21:35:69:d2:6f:4c:a1:19:ae:50:c9:15:31:c4:ac:
a1:15:bd:77:a4:44:35:8a:3c:d9:24:d8:84:49:84:
22:60:1b:b6:26:ed:67:eb:a4:de:66:e2:48:3d:7e:
07:5b:03:bb:86:7b:6f:75:34:fd:c4:95:3c:5b:e7:
ee:60:a2:12:f4:20:ae:de:cf:b1:27:e1:bd:ae:3e:
d4:b3:ec:4a:5c:bb:cf:4e:8a:2d:a3:06:ac:87:55:
93:60:bd:fe:17:25:6d:dd:45:74:eb:7e:b5:3d:d6:
7f:42:c9:1f:3c:f1:f5:c0:a0:7d:0d:97:a4:35:5b:
00:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:23:AE:E2:40:C3:DB:D4:C0:1B:FB:97:D5:1A:91:46:D5:BA:DD:8E
X509v3 Authority Key Identifier:
keyid:92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9d:a2:04:af:ea:f8:e5:25:12:a8:20:29:19:66:ac:4e:5d:
88:01:db:5a:26:22:c6:5f:b9:43:4c:d2:2f:7c:87:b2:07:d0:
a3:36:09:fc:6c:45:de:84:a4:6b:91:5b:5c:a6:f6:ba:2d:49:
46:74:ec:6f:93:27:47:88:05:e1:26:cd:ac:69:e3:cd:72:d4:
dd:b3:ff:46:99:f8:06:bc:92:cb:23:6d:12:98:be:8d:36:a6:
3e:5c:c3:49:ca:9f:3e:4b:14:a6:12:d5:c9:b0:9e:e6:51:81:
db:a6:6e:ea:f3:05:e4:df:59:20:70:4d:af:52:b3:e2:3f:3a:
e2:fc:a9:f5:95:a6:e0:b5:77:2d:d9:e6:81:d3:c2:d5:81:c5:
a1:09:4a:a2:5f:5d:e0:b3:14:9b:2a:38:b4:b9:24:50:21:64:
d4:11:d3:3d:64:97:35:59:7f:52:a1:a8:01:6e:32:76:67:df:
eb:2f:77:89:98:43:25:e2:20:80:62:76:b8:73:d6:3d:37:d5:
43:7f:a3:79:f2:1e:f7:51:1d:cd:68:77:8e:a4:22:fe:35:0a:
16:9d:d8:f4:e9:c2:30:21:1c:2c:51:30:43:f4:ea:22:03:ff:
a7:24:3f:b4:22:0c:dc:5d:f4:61:47:9d:a0:e9:d6:8a:b7:0c:
10:6e:2f:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkSNyli1HUvSx4pJQn8pgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNzg4ZjRlYmI3NDFjMGMzNjlhMGZkMzA1OTRjZDAxMDFk
Yzc0NzYwHhcNMjUwNDI5MjIwMDQ5WhcNMjUwNDMwMjIwMDQ5WjAzMTEwLwYDVQQD
EygwODIzYWVlMjQwYzNkYmQ0YzAxYmZiOTdkNTFhOTE0NmQ1YmFkZDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5cKDAPvMmi2C4jAJEEr+vNquDKw
OnMP22n7QwXTyu/yXOjE4HYx1/Ji6DprQd5gwRjj5kJ5Sh8BZBgWp50f19JjVu92
6htIfA+P+IlREDrMjmK89xGV8RbWT5E4k5OYIuFfl0rQRGNZNhb7OAK4trVsXTil
QV9CRs/R6nWr+DV7scPMnRAhNWnSb0yhGa5QyRUxxKyhFb13pEQ1ijzZJNiESYQi
YBu2Ju1n66TeZuJIPX4HWwO7hntvdTT9xJU8W+fuYKIS9CCu3s+xJ+G9rj7Us+xK
XLvPTootowash1WTYL3+FyVt3UV06361PdZ/QskfPPH1wKB9DZekNVsAUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgjruJAw9vUwBv7l9UakUbVut2OMB8GA1UdIwQY
MBaAFJJ4j067dBwMNpoP0wWUzQEB3HR2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25pUFRydDBIQXcybWdfVEJaVE5BUUhjZEhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NzFlNzctYzY0OS00N2YzLTk5YTgt
ZGJmYWMwMGZiMGVmLzEva25pUFRydDBIQXcybWdfVEJaVE5BUUhjZEhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83NzFlNzctYzY0OS00N2YzLTk5YTgtZGJmYWMwMGZiMGVm
LzEva25pUFRydDBIQXcybWdfVEJaVE5BUUhjZEhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcp2iBK/q
+OUlEqggKRlmrE5diAHbWiYixl+5Q0zSL3yHsgfQozYJ/GxF3oSka5FbXKb2ui1J
RnTsb5MnR4gF4SbNrGnjzXLU3bP/Rpn4BrySyyNtEpi+jTamPlzDScqfPksUphLV
ybCe5lGB26Zu6vMF5N9ZIHBNr1Kz4j864vyp9ZWm4LV3LdnmgdPC1YHFoQlKol9d
4LMUmyo4tLkkUCFk1BHTPWSXNVl/UqGoAW4ydmff6y93iZhDJeIggGJ2uHPWPTfV
Q3+jefIe91EdzWh3jqQi/jUKFp3Y9OnCMCEcLFEwQ/TqIgP/pyQ/tCIM3F30YUed
oOnWircMEG4vSQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:27:25 2025 by rpki-client