Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.mft
File: kiUzU7pknevuknmYugLIYUOZ-WE.mft (raw, json)
Hash identifier: 2yVJFBYq+zKGzFyxSOkd75QiKyuBDtdQa4cvwa/SgvI=
Subject key identifier: 84:F3:F3:7F:18:1C:6D:24:19:71:01:C7:C3:D9:46:FA:FC:A8:99:DD
Authority key identifier: 92:25:33:53:BA:64:9D:EB:EE:92:79:98:BA:02:C8:61:43:99:F9:61
Certificate issuer: /CN=92253353ba649debee927998ba02c8614399f961
Certificate serial: 0196715370A36F0B1798786B9BE0621001A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiUzU7pknevuknmYugLIYUOZ-WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.mft
Manifest number: 0469
Signing time: Sat 26 Apr 2025 09:00:15 +0000
Manifest this update: Sat 26 Apr 2025 09:00:15 +0000
Manifest next update: Sun 27 Apr 2025 09:00:15 +0000
Files and hashes: 1: IRskINg41VtTIRpf8KUQyejfOZ4.roa (hash: gqvze0bjn5WFe15kL+WtLc59rxWgOyihFu31fqipvOk=)
2: kiUzU7pknevuknmYugLIYUOZ-WE.crl (hash: yKXLHpTg9eiP4rgssESOkIAR9GIa+q4EmmuKVt4NFKg=)
3: l8L6M193NRwOqknRUwjUMCL_3js.roa (hash: ZJE5lHxeiMDM24dTZ0outFe8poOxQlVnbOZwmTZc8Kw=)
4: wFVtObJLn_ZTGOz4m3KMnRCYDtU.roa (hash: pKpy02tSACF4gXXOnC0pf4UqBhrOt1/BvJq4Baa5gaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiUzU7pknevuknmYugLIYUOZ-WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:53:70:a3:6f:0b:17:98:78:6b:9b:e0:62:10:01:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92253353ba649debee927998ba02c8614399f961
Validity
Not Before: Apr 26 09:00:15 2025 GMT
Not After : Apr 27 09:00:15 2025 GMT
Subject: CN=84f3f37f181c6d24197101c7c3d946fafca899dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:34:13:45:e5:86:9a:b2:63:09:db:f0:60:9b:
b6:12:06:5f:cb:c3:b4:f0:5b:65:de:a2:68:49:b0:
87:00:af:36:28:34:c1:95:1b:46:1a:e6:78:a4:69:
7c:dc:01:7e:96:85:c0:dc:4c:c5:e3:bf:b2:02:a2:
c7:76:9b:29:a1:7b:37:54:07:7e:27:3b:c2:5c:24:
4d:d5:50:91:14:7c:4a:35:23:5f:63:b7:5f:c7:54:
36:a4:b2:34:f2:7d:96:48:96:b8:0f:76:a5:a0:a8:
dc:fc:4f:16:63:8f:16:61:b4:a7:9c:62:97:6f:1d:
da:07:f6:5f:26:99:6e:88:55:74:13:b1:17:ff:3c:
f8:66:f5:21:61:3a:13:b5:c1:12:84:78:e4:d4:b7:
c7:97:d4:25:34:df:7a:70:4e:75:d4:12:2b:ed:9a:
de:04:03:9d:0a:dd:54:5d:e1:43:20:f6:8b:1e:16:
d7:4e:ee:b7:27:a6:e5:d3:64:00:4b:21:e9:5f:47:
ae:49:e3:42:c2:73:7c:54:11:27:e1:e5:84:1c:3c:
13:51:92:81:0d:61:36:7c:ca:79:b1:0c:7f:b2:d0:
6c:88:c1:4a:ec:c5:9c:d7:19:a5:75:0e:8a:89:3f:
7e:cc:da:90:57:6c:f4:b8:4b:80:87:bf:7a:7e:6b:
81:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F3:F3:7F:18:1C:6D:24:19:71:01:C7:C3:D9:46:FA:FC:A8:99:DD
X509v3 Authority Key Identifier:
keyid:92:25:33:53:BA:64:9D:EB:EE:92:79:98:BA:02:C8:61:43:99:F9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiUzU7pknevuknmYugLIYUOZ-WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:62:f9:0b:ec:ef:72:fe:c5:98:c5:4d:9f:d1:67:cd:3b:83:
ff:97:77:34:6b:05:50:d5:80:65:88:21:4c:1e:2c:e5:8d:1e:
12:f6:ec:0d:3f:67:72:cd:24:a6:be:10:d2:07:c2:cf:33:33:
56:a3:3d:be:7b:75:80:19:72:cd:e2:b5:7c:af:b1:59:4b:17:
09:8a:e9:b9:02:46:60:22:27:71:2a:ba:ae:70:4b:c2:72:27:
96:d2:f0:87:aa:b4:63:89:61:4c:83:0f:a6:cb:ac:89:38:55:
a5:c6:07:fe:15:de:e6:e3:ff:8d:2e:29:57:48:ac:12:67:08:
bc:22:2f:c7:59:35:52:e9:75:b8:05:50:a5:48:04:69:ba:25:
8a:dd:49:24:a7:fe:3d:32:38:69:fe:e6:24:48:bd:a7:84:26:
e4:1a:6c:09:08:9b:51:d5:9f:02:7f:c6:1b:8c:e6:91:85:6c:
46:37:c3:30:b5:50:cc:67:2b:d5:22:e3:6f:0c:83:a4:b0:86:
c0:3d:b8:d8:be:f9:17:4d:07:dc:a4:93:cf:a9:26:fc:bf:ce:
51:3d:de:15:2c:bc:e4:eb:94:71:06:79:04:eb:85:fa:df:e6:
1d:b6:58:93:d4:b1:6a:1b:b3:dc:78:31:e1:92:a9:31:5f:c4:
a7:17:8e:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZxU3CjbwsXmHhrm+BiEAGpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMjUzMzUzYmE2NDlkZWJlZTkyNzk5OGJhMDJjODYxNDM5
OWY5NjEwHhcNMjUwNDI2MDkwMDE1WhcNMjUwNDI3MDkwMDE1WjAzMTEwLwYDVQQD
Eyg4NGYzZjM3ZjE4MWM2ZDI0MTk3MTAxYzdjM2Q5NDZmYWZjYTg5OWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDQTReWGmrJjCdvwYJu2EgZfy8O0
8Ftl3qJoSbCHAK82KDTBlRtGGuZ4pGl83AF+loXA3EzF47+yAqLHdpspoXs3VAd+
JzvCXCRN1VCRFHxKNSNfY7dfx1Q2pLI08n2WSJa4D3aloKjc/E8WY48WYbSnnGKX
bx3aB/ZfJpluiFV0E7EX/zz4ZvUhYToTtcEShHjk1LfHl9QlNN96cE511BIr7Zre
BAOdCt1UXeFDIPaLHhbXTu63J6bl02QASyHpX0euSeNCwnN8VBEn4eWEHDwTUZKB
DWE2fMp5sQx/stBsiMFK7MWc1xmldQ6KiT9+zNqQV2z0uEuAh796fmuBBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITz838YHG0kGXEBx8PZRvr8qJndMB8GA1UdIwQY
MBaAFJIlM1O6ZJ3r7pJ5mLoCyGFDmflhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lVelU3cGtuZXZ1a25tWXVnTElZVU9aLVdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80NTNhZTMtZjIyNy00ZTBkLWJkMDYt
Njk5N2IyNTc5YTM0LzEva2lVelU3cGtuZXZ1a25tWXVnTElZVU9aLVdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80NTNhZTMtZjIyNy00ZTBkLWJkMDYtNjk5N2IyNTc5YTM0
LzEva2lVelU3cGtuZXZ1a25tWXVnTElZVU9aLVdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtWL5C+zv
cv7FmMVNn9FnzTuD/5d3NGsFUNWAZYghTB4s5Y0eEvbsDT9ncs0kpr4Q0gfCzzMz
VqM9vnt1gBlyzeK1fK+xWUsXCYrpuQJGYCIncSq6rnBLwnInltLwh6q0Y4lhTIMP
psusiThVpcYH/hXe5uP/jS4pV0isEmcIvCIvx1k1Uul1uAVQpUgEabolit1JJKf+
PTI4af7mJEi9p4Qm5BpsCQibUdWfAn/GG4zmkYVsRjfDMLVQzGcr1SLjbwyDpLCG
wD242L75F00H3KSTz6km/L/OUT3eFSy85OuUcQZ5BOuF+t/mHbZYk9Sxahuz3Hgx
4ZKpMV/EpxeOlA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:13:51 2025 by rpki-client