Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
File: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft (raw, json)
Hash identifier: B+U6Se3y4mkuRWasKbCODa+t3UHU2p5Z/9M84G7hTTc=
Subject key identifier: D5:62:38:6E:D2:DB:05:3F:B3:43:A3:07:2F:8D:E4:13:C3:2B:BE:67
Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
Certificate issuer: /CN=91c2c2912e10581587052a5ca770910b26174f14
Certificate serial: 01968B13AB8857A32A2B6049B9CB625F6D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
Manifest number: 151C
Signing time: Thu 01 May 2025 09:00:44 +0000
Manifest this update: Thu 01 May 2025 09:00:44 +0000
Manifest next update: Fri 02 May 2025 09:00:44 +0000
Files and hashes: 1: eIT32ZmD_Fr9lQPFnUP-_HGQsmc.roa (hash: IgyAOYuvEIPEY/4VEwvCRv4xZp0QVNPeSnZmgWxYe1k=)
2: hSwwAZmeTaolcY9O9J-gjnCspyc.roa (hash: GT5DIH9LX8Y0Myj2ZdVG14Q8npex7JbrhTK4BHXYqYY=)
3: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl (hash: 0iALSqTLQvggPqzNHiio9QDYHAmzwq7SGVh7eTdLztI=)
4: rPhc70wdg_DNFy8p_DFC0TNrzZE.roa (hash: izXtXZXXy5nvEOdPnUDtBt7NCMNBYID7xzPo2/E3HvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:13:ab:88:57:a3:2a:2b:60:49:b9:cb:62:5f:6d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14
Validity
Not Before: May 1 09:00:44 2025 GMT
Not After : May 2 09:00:44 2025 GMT
Subject: CN=d562386ed2db053fb343a3072f8de413c32bbe67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:76:5b:e0:26:6f:e6:76:34:08:22:81:72:
31:f2:51:34:0a:fb:0f:e6:24:1f:0c:75:19:f0:b9:
b2:86:49:9c:0a:1a:39:13:50:f1:da:42:ea:57:4b:
f6:46:7f:fe:05:44:2f:bb:28:25:85:f5:52:16:b4:
18:bb:cb:dd:d0:0a:63:7a:6b:55:d2:96:27:f4:45:
5f:02:b0:08:09:e9:3f:41:ec:d3:de:fb:a0:49:d1:
bd:99:56:08:44:6d:6c:56:0f:9d:2f:98:95:b9:13:
69:a4:82:32:36:22:20:11:3f:fc:cb:2e:b9:d1:4f:
ea:51:37:b5:78:da:15:21:f5:77:51:5e:91:38:4f:
1b:1a:e2:6e:f5:55:cc:e9:18:93:03:d2:d1:e4:81:
14:15:b8:5f:e5:32:f0:5f:0a:8f:50:fc:0b:d7:3d:
ac:e3:18:3f:68:44:2d:d4:ec:38:97:e7:cb:e8:4a:
d9:aa:13:e4:09:9a:43:c0:6d:93:a1:86:54:45:7a:
4f:36:cf:d3:ee:94:56:c7:ba:ff:ed:3f:30:91:c7:
25:0f:84:a3:fa:49:aa:27:03:dc:9c:a7:a0:cf:de:
d2:6c:02:f2:e9:a3:5e:94:0d:9d:11:f3:ce:f3:d9:
27:73:d1:18:15:99:62:25:65:ab:69:d2:c0:13:11:
dc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:62:38:6E:D2:DB:05:3F:B3:43:A3:07:2F:8D:E4:13:C3:2B:BE:67
X509v3 Authority Key Identifier:
keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:96:22:c6:38:95:fe:f2:9a:6c:9f:d9:fd:66:ec:2c:84:c7:
29:01:23:23:47:35:fb:1d:f6:d4:f9:f9:68:3e:64:bd:29:be:
37:70:21:f6:e9:17:66:cf:3c:95:65:c0:a9:12:34:bc:34:74:
08:c0:73:52:9f:d0:cb:ab:1c:a9:7a:72:dd:d8:99:1c:ac:3d:
1c:aa:71:c4:76:d3:5c:c4:25:8b:cf:cf:04:28:8e:f2:36:50:
89:e7:19:4b:8e:93:f1:b9:21:44:a8:f2:5a:08:99:01:22:ed:
eb:29:49:3f:1e:46:52:78:0c:92:cc:86:37:a7:bd:a2:69:9d:
9d:a2:cb:c5:7c:ce:ef:b4:47:39:32:cc:54:5c:2d:a3:67:d1:
e8:cd:a3:24:77:c2:61:af:ec:a5:a1:ed:1e:51:8e:58:f2:67:
96:75:3c:5c:af:78:11:75:f7:26:34:04:69:0b:32:43:1d:c6:
54:14:7f:d6:0f:02:8f:c2:37:03:70:89:9e:56:85:6e:14:c4:
e2:b3:68:dc:c4:3f:87:28:ba:5b:d6:e0:ef:59:dc:df:68:46:
33:aa:48:31:2a:e2:55:c5:13:62:47:86:8c:77:12:a3:98:78:
36:5a:3f:3d:b1:35:0b:9f:57:08:7f:fd:57:0d:5b:4c:ad:49:
e8:55:8e:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaLE6uIV6MqK2BJuctiX21eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYzJjMjkxMmUxMDU4MTU4NzA1MmE1Y2E3NzA5MTBiMjYx
NzRmMTQwHhcNMjUwNTAxMDkwMDQ0WhcNMjUwNTAyMDkwMDQ0WjAzMTEwLwYDVQQD
EyhkNTYyMzg2ZWQyZGIwNTNmYjM0M2EzMDcyZjhkZTQxM2MzMmJiZTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWV2W+Amb+Z2NAgigXIx8lE0CvsP
5iQfDHUZ8LmyhkmcCho5E1Dx2kLqV0v2Rn/+BUQvuyglhfVSFrQYu8vd0ApjemtV
0pYn9EVfArAICek/QezT3vugSdG9mVYIRG1sVg+dL5iVuRNppIIyNiIgET/8yy65
0U/qUTe1eNoVIfV3UV6ROE8bGuJu9VXM6RiTA9LR5IEUFbhf5TLwXwqPUPwL1z2s
4xg/aEQt1Ow4l+fL6ErZqhPkCZpDwG2ToYZURXpPNs/T7pRWx7r/7T8wkcclD4Sj
+kmqJwPcnKegz97SbALy6aNelA2dEfPO89knc9EYFZliJWWradLAExHcWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNViOG7S2wU/s0OjBy+N5BPDK75nMB8GA1UdIwQY
MBaAFJHCwpEuEFgVhwUqXKdwkQsmF08UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iMzBiNTctZTdlOS00YjJmLTk5YjYt
OTBmOTdmNzQ2Njc2LzEva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9iMzBiNTctZTdlOS00YjJmLTk5YjYtOTBmOTdmNzQ2Njc2
LzEva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZYixjiV
/vKabJ/Z/WbsLITHKQEjI0c1+x321Pn5aD5kvSm+N3Ah9ukXZs88lWXAqRI0vDR0
CMBzUp/Qy6scqXpy3diZHKw9HKpxxHbTXMQli8/PBCiO8jZQiecZS46T8bkhRKjy
WgiZASLt6ylJPx5GUngMksyGN6e9ommdnaLLxXzO77RHOTLMVFwto2fR6M2jJHfC
Ya/spaHtHlGOWPJnlnU8XK94EXX3JjQEaQsyQx3GVBR/1g8Cj8I3A3CJnlaFbhTE
4rNo3MQ/hyi6W9bg71nc32hGM6pIMSriVcUTYkeGjHcSo5h4Nlo/PbE1C59XCH/9
Vw1bTK1J6FWOQQ==
-----END CERTIFICATE-----
Generated at Thu May 1 16:57:19 2025 by rpki-client