Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
File: khPywtBsZLiVRXq1D8SSAoOknMc.mft (raw, json)
Hash identifier: qoCo2U0EV1YmaSP2h3UDc1yPLDktCd/TJuDvB3VieWg=
Subject key identifier: B8:4E:60:A5:FB:EF:DF:B7:5C:90:59:28:92:93:70:F1:00:6A:A8:18
Authority key identifier: 92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
Certificate issuer: /CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Certificate serial: 0196741D7C367AF3637AF70EA68B244921B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
Manifest number: 1513
Signing time: Sat 26 Apr 2025 22:00:11 +0000
Manifest this update: Sat 26 Apr 2025 22:00:11 +0000
Manifest next update: Sun 27 Apr 2025 22:00:11 +0000
Files and hashes: 1: WzcaaMQRrlChBNRzpd6ejVsnjhE.roa (hash: thxrjBXbUSSC8DCWldp79G7rZSMi1abwsQ1q60K08dg=)
2: iRKQaDksCLDeAQtwp0YKQ3SovAI.roa (hash: wixldrtyd3fdUQpeC4X4fRGfwA4fNIJXJhW2tQSWdew=)
3: khPywtBsZLiVRXq1D8SSAoOknMc.crl (hash: 6knjDWM23JARyyAYPtSooL+Crk5fTRz6ioB2NRBJj2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:7c:36:7a:f3:63:7a:f7:0e:a6:8b:24:49:21:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Validity
Not Before: Apr 26 22:00:11 2025 GMT
Not After : Apr 27 22:00:11 2025 GMT
Subject: CN=b84e60a5fbefdfb75c905928929370f1006aa818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:ac:fc:78:5d:06:01:5a:7b:43:92:8c:f8:
6c:33:b8:63:e6:2b:12:c0:b3:38:a8:a8:74:61:7d:
91:ef:85:d3:64:bb:77:80:40:51:62:8b:cd:2e:1c:
0a:8a:6d:a2:63:29:e4:47:2a:ab:55:19:61:f6:14:
7a:92:3b:1b:66:3f:80:a8:a0:33:d3:3c:98:ae:59:
78:37:e5:0c:1f:e6:39:65:18:61:5a:74:86:43:68:
ee:25:98:f8:7b:69:6f:e8:35:a6:b3:01:9f:96:d1:
18:f7:84:63:85:b7:40:eb:6b:bd:91:e4:25:dc:14:
20:ca:6c:34:39:14:d8:4b:53:16:e6:ba:5e:0b:2d:
3f:ea:15:0a:f1:be:e8:c0:07:ad:4a:b6:ca:71:0e:
94:72:ca:52:3d:9d:75:1a:22:40:58:57:29:fb:a5:
20:e2:a1:73:c0:82:6d:a8:6a:9b:37:d4:c4:49:d8:
5b:87:2a:ef:48:71:12:91:c2:e4:75:06:fd:51:96:
c0:ff:02:69:01:24:69:f9:a5:95:d2:04:7a:a2:05:
26:a2:c1:d9:27:12:b1:2d:12:85:2b:8a:ed:1f:5f:
49:86:f5:9d:1e:2b:1c:6f:7f:0e:59:7f:cb:0e:19:
71:11:c9:ae:aa:dd:5e:84:d1:ac:73:e9:85:41:67:
ce:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4E:60:A5:FB:EF:DF:B7:5C:90:59:28:92:93:70:F1:00:6A:A8:18
X509v3 Authority Key Identifier:
keyid:92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cc:c8:8a:71:80:75:33:1d:42:08:ea:99:d5:8c:ed:54:eb:
db:d6:e8:7c:80:66:bb:5e:c3:13:d8:ca:85:70:55:7b:32:6a:
2a:0e:53:0d:82:3f:41:f7:e6:a5:82:19:12:61:f6:b0:a9:e0:
2a:b1:5e:d7:b9:0e:fa:47:45:b0:c1:92:c4:96:af:da:fb:0f:
b9:93:c2:0e:d2:cf:c0:c8:48:8f:c8:be:88:76:7a:56:9c:6e:
f7:49:aa:e5:f3:14:58:8d:95:f3:96:c9:12:95:c5:ae:a3:55:
b5:fe:6e:1b:e9:24:0f:54:0f:58:c4:75:03:0b:6d:73:af:ad:
fc:45:5f:bc:57:c5:82:3e:ec:2d:15:1b:de:12:cf:26:50:61:
67:4a:7a:e7:88:99:e4:c8:ad:68:0d:b2:2a:92:53:de:65:3c:
25:e2:6a:4b:e9:2a:d1:14:fe:7f:29:7c:a1:58:b1:19:51:77:
b1:7d:7d:7c:78:69:d7:62:2e:9d:7f:ce:10:df:fa:1c:29:b9:
09:ad:4b:d8:6d:84:d6:61:bf:15:2f:a0:55:0b:9d:e8:d5:cc:
8b:11:25:43:89:58:95:24:fc:e5:03:f2:e1:9f:93:07:ca:a8:
a9:d3:ef:21:47:b7:cc:8e:9a:0e:b3:82:de:34:db:ec:4d:99:
68:b5:b6:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0HXw2evNjevcOposkSSGzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMTNmMmMyZDA2YzY0Yjg5NTQ1N2FiNTBmYzQ5MjAyODNh
NDljYzcwHhcNMjUwNDI2MjIwMDExWhcNMjUwNDI3MjIwMDExWjAzMTEwLwYDVQQD
EyhiODRlNjBhNWZiZWZkZmI3NWM5MDU5Mjg5MjkzNzBmMTAwNmFhODE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWCs/HhdBgFae0OSjPhsM7hj5isS
wLM4qKh0YX2R74XTZLt3gEBRYovNLhwKim2iYynkRyqrVRlh9hR6kjsbZj+AqKAz
0zyYrll4N+UMH+Y5ZRhhWnSGQ2juJZj4e2lv6DWmswGfltEY94RjhbdA62u9keQl
3BQgymw0ORTYS1MW5rpeCy0/6hUK8b7owAetSrbKcQ6UcspSPZ11GiJAWFcp+6Ug
4qFzwIJtqGqbN9TESdhbhyrvSHESkcLkdQb9UZbA/wJpASRp+aWV0gR6ogUmosHZ
JxKxLRKFK4rtH19JhvWdHiscb38OWX/LDhlxEcmuqt1ehNGsc+mFQWfO2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhOYKX779+3XJBZKJKTcPEAaqgYMB8GA1UdIwQY
MBaAFJIT8sLQbGS4lUV6tQ/EkgKDpJzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8zMWE2YTQtOGE5ZC00N2EyLThmYmIt
YjlkZmYzZTdhMzJlLzEva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8zMWE2YTQtOGE5ZC00N2EyLThmYmItYjlkZmYzZTdhMzJl
LzEva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMzIinGA
dTMdQgjqmdWM7VTr29bofIBmu17DE9jKhXBVezJqKg5TDYI/QffmpYIZEmH2sKng
KrFe17kO+kdFsMGSxJav2vsPuZPCDtLPwMhIj8i+iHZ6Vpxu90mq5fMUWI2V85bJ
EpXFrqNVtf5uG+kkD1QPWMR1Awttc6+t/EVfvFfFgj7sLRUb3hLPJlBhZ0p654iZ
5MitaA2yKpJT3mU8JeJqS+kq0RT+fyl8oVixGVF3sX19fHhp12IunX/OEN/6HCm5
Ca1L2G2E1mG/FS+gVQud6NXMixElQ4lYlST85QPy4Z+TB8qoqdPvIUe3zI6aDrOC
3jTb7E2ZaLW2Xg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:07:20 2025 by rpki-client