Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json)
Hash identifier: +h448NIHbOTAbquJavoRFk6+D0S+RsVSj/IEyteUGJ8=
Subject key identifier: 92:5F:94:A4:7F:66:D5:DC:62:53:B3:68:23:D0:33:7E:61:FE:E1:DD
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 01968BB88C3B3178C1F8629196C387601053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
Manifest number: 0475
Signing time: Thu 01 May 2025 12:00:49 +0000
Manifest this update: Thu 01 May 2025 12:00:49 +0000
Manifest next update: Fri 02 May 2025 12:00:49 +0000
Files and hashes: 1: BEBiIFhite7xZ0bNEP-JA8QrqMg.roa (hash: QbnrrPHP3fwKy8016pI0qpDqUM0JJdXwZKXHEa0y/SQ=)
2: LARL1hIKcaD4vW3zR5MLoEhaFxc.roa (hash: b6NkmGlDSYN3he0zDu5SwrD1JA7+YMRtU9hknGZasjA=)
3: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: vrOeef5VVRdn8biBaORiMYaEG03Kf9q9mPpOeO9vNas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:b8:8c:3b:31:78:c1:f8:62:91:96:c3:87:60:10:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: May 1 12:00:49 2025 GMT
Not After : May 2 12:00:49 2025 GMT
Subject: CN=925f94a47f66d5dc6253b36823d0337e61fee1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e2:d2:06:d5:e9:13:5c:07:c6:f2:b7:63:10:
a2:ee:d7:92:35:ee:85:88:a8:c0:76:b7:8d:4c:7e:
17:32:3c:a0:5d:dc:74:06:d2:64:e6:8b:c5:f7:62:
c0:ef:bf:2d:31:8f:95:38:3d:21:2b:5e:61:ac:8a:
5a:f3:89:b5:c6:f0:23:9c:69:04:59:fc:f2:c5:50:
97:47:f8:3a:84:10:d9:ac:52:37:46:12:e7:be:ff:
9b:df:44:ff:01:fb:7c:7a:e3:fe:36:b4:0d:97:15:
eb:49:32:6b:9e:7a:21:ba:89:e3:ee:19:d1:53:5a:
3d:bd:cb:74:1b:3f:de:63:6e:b7:15:3d:fe:9b:2f:
61:91:7b:d8:79:78:e2:76:0e:4a:c3:81:b2:75:c1:
f0:e8:6e:f1:49:da:bc:f8:5c:2b:7b:50:c3:c6:13:
5d:41:16:28:f3:d5:d0:80:6f:92:98:0f:c6:bd:8a:
bd:56:8d:e1:fe:1a:54:73:d1:37:a8:20:00:67:12:
38:fa:00:55:28:5c:86:1e:dc:ea:37:7d:48:ff:11:
7e:3f:36:c0:3d:d4:78:c5:c7:aa:49:5a:0f:43:c7:
de:c5:27:69:16:28:4b:d8:3a:ed:1c:8c:fe:9f:57:
21:b8:32:0d:81:bc:2e:46:5a:33:b5:1f:89:57:e9:
ff:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5F:94:A4:7F:66:D5:DC:62:53:B3:68:23:D0:33:7E:61:FE:E1:DD
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c9:1a:2c:06:53:06:e6:e2:18:ad:b6:74:a7:44:38:be:39:
9a:56:dc:3c:50:de:bf:18:2f:0e:17:e4:a8:5d:98:9c:bd:2d:
6c:2a:e1:14:e9:64:34:a2:f8:61:03:6c:05:b7:16:b1:6a:b2:
be:4f:5f:41:16:7a:83:ae:07:36:3f:5e:bb:5a:32:7d:c9:ee:
12:bb:cd:d5:39:36:0b:53:c9:4a:1b:09:08:bd:06:75:d3:a3:
fd:09:d7:1d:d6:b2:f7:26:a9:78:53:c5:71:88:9a:4c:83:a2:
61:6f:c0:7d:25:a3:20:d4:05:45:ac:89:60:c8:21:3c:6b:2f:
94:6c:f6:d2:d1:97:04:5b:4b:2b:93:ac:04:a1:62:e6:16:ba:
48:74:cf:f5:34:e6:99:e2:66:ef:39:3b:52:7d:b1:ef:b4:a4:
da:16:ad:8f:2d:38:f0:96:2a:4b:5e:36:93:a6:76:30:9d:e0:
d4:2b:15:6d:43:61:08:39:0d:3b:de:fb:68:6e:8e:b0:e5:6e:
f4:64:a5:6b:30:5e:d6:72:7b:2d:91:69:ce:a7:45:1b:d4:7d:
7b:cf:52:39:77:f9:98:a6:bf:5f:cb:90:8c:0d:b0:94:ff:ca:
8f:12:e0:5b:4a:80:e6:f1:a1:1f:b6:7e:37:88:a8:1c:69:4d:
d3:ce:bd:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaLuIw7MXjB+GKRlsOHYBBTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDkwODlhOGUzMjhkMzJkNmRlMTZkN2RhMjU3YjgxMWIw
NTIzOWQwHhcNMjUwNTAxMTIwMDQ5WhcNMjUwNTAyMTIwMDQ5WjAzMTEwLwYDVQQD
Eyg5MjVmOTRhNDdmNjZkNWRjNjI1M2IzNjgyM2QwMzM3ZTYxZmVlMWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+LSBtXpE1wHxvK3YxCi7teSNe6F
iKjAdreNTH4XMjygXdx0BtJk5ovF92LA778tMY+VOD0hK15hrIpa84m1xvAjnGkE
WfzyxVCXR/g6hBDZrFI3RhLnvv+b30T/Aft8euP+NrQNlxXrSTJrnnohuonj7hnR
U1o9vct0Gz/eY263FT3+my9hkXvYeXjidg5Kw4GydcHw6G7xSdq8+Fwre1DDxhNd
QRYo89XQgG+SmA/GvYq9Vo3h/hpUc9E3qCAAZxI4+gBVKFyGHtzqN31I/xF+PzbA
PdR4xceqSVoPQ8fexSdpFihL2DrtHIz+n1chuDINgbwuRloztR+JV+n/7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJflKR/ZtXcYlOzaCPQM35h/uHdMB8GA1UdIwQY
MBaAFJLZCJqOMo0y1t4W19ole4EbBSOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80MzE2MzQtMzVjYi00NTQ1LTg3N2It
ZGYzYzA3ZjM0MTFlLzEva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC80MzE2MzQtMzVjYi00NTQ1LTg3N2ItZGYzYzA3ZjM0MTFl
LzEva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALskaLAZT
BubiGK22dKdEOL45mlbcPFDevxgvDhfkqF2YnL0tbCrhFOlkNKL4YQNsBbcWsWqy
vk9fQRZ6g64HNj9eu1oyfcnuErvN1Tk2C1PJShsJCL0GddOj/QnXHday9yapeFPF
cYiaTIOiYW/AfSWjINQFRayJYMghPGsvlGz20tGXBFtLK5OsBKFi5ha6SHTP9TTm
meJm7zk7Un2x77Sk2hatjy048JYqS142k6Z2MJ3g1CsVbUNhCDkNO977aG6OsOVu
9GSlazBe1nJ7LZFpzqdFG9R9e89SOXf5mKa/X8uQjA2wlP/KjxLgW0qA5vGhH7Z+
N4ioHGlN0869NQ==
-----END CERTIFICATE-----
Generated at Thu May 1 15:00:39 2025 by rpki-client