Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
File: KqeI7abIDvkCuV1gOHAKXafW0Mw.mft (raw, json)
Hash identifier: Elduws9MiEgqGfibgMK2QgN97vnOiu3wnJlmQGJGq6I=
Subject key identifier: 4B:3F:3E:64:53:A7:AB:19:22:09:92:BE:6C:A6:B9:10:F3:6D:1F:AE
Authority key identifier: 2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
Certificate issuer: /CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Certificate serial: 019688EE231172F71D1C05A1C3EF543A2689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
Manifest number: 022F
Signing time: Wed 30 Apr 2025 23:00:30 +0000
Manifest this update: Wed 30 Apr 2025 23:00:30 +0000
Manifest next update: Thu 01 May 2025 23:00:30 +0000
Files and hashes: 1: 4F3kZ7GYIkoJqlMsPFZBwlzQSuw.roa (hash: ItB+wlPpdA+q/aEoNNR8SWZkkiYGjXwWKDPOB3X3e6A=)
2: KqeI7abIDvkCuV1gOHAKXafW0Mw.crl (hash: Niy+bLkGMNMkVcsVDI8aVCYZbUvx3glvd/0XDr4/u0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:ee:23:11:72:f7:1d:1c:05:a1:c3:ef:54:3a:26:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Validity
Not Before: Apr 30 23:00:30 2025 GMT
Not After : May 1 23:00:30 2025 GMT
Subject: CN=4b3f3e6453a7ab19220992be6ca6b910f36d1fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:8c:75:ce:0b:51:cf:43:fe:5c:07:b8:d9:
b7:48:81:0d:d5:d4:49:96:79:c1:74:ef:73:15:d8:
99:50:83:62:53:a9:e9:d6:04:7c:b2:5c:eb:e8:cc:
95:de:6a:d7:dc:d3:8f:89:4c:2b:60:b4:9d:ef:8d:
f8:86:3c:6f:0d:8a:bd:f4:55:32:2e:8b:a0:b6:56:
35:48:d0:61:86:56:a8:b5:a2:a4:28:f3:92:93:4d:
38:18:b7:e1:a9:e3:74:9c:3c:a3:46:cd:9d:3a:c0:
6f:61:75:71:fc:38:8e:7a:da:bd:20:3d:27:ab:0e:
90:c3:76:43:c8:09:98:b5:8a:c0:3d:bb:86:ab:5d:
3c:12:75:e3:e4:bc:58:87:68:4e:aa:10:d9:ac:e6:
2c:e8:e1:34:81:a5:98:27:a2:df:09:05:8a:be:c0:
77:72:c3:31:f3:1f:01:4c:74:af:7c:ec:fb:c7:48:
6e:10:fa:bc:f9:a3:46:3d:3b:04:76:af:ce:72:10:
0f:58:52:8d:e4:0d:d2:74:57:7f:5f:91:97:bc:a0:
d8:86:32:44:38:77:69:03:9f:97:e3:78:26:24:82:
9c:2d:7f:57:a2:64:99:49:5d:0d:27:14:42:d8:9b:
03:74:e7:c7:e7:a7:9a:69:2f:5a:2b:a0:03:96:9e:
68:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3F:3E:64:53:A7:AB:19:22:09:92:BE:6C:A6:B9:10:F3:6D:1F:AE
X509v3 Authority Key Identifier:
keyid:2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f9:d5:9d:32:fd:d8:ec:7e:b6:ad:3a:5e:40:35:42:5a:f6:
7c:52:34:5e:fd:57:27:84:84:ac:e7:fe:97:90:74:73:ba:a3:
50:95:aa:34:a9:58:92:c3:4b:cc:16:10:73:42:67:7a:9b:47:
aa:3a:ad:fd:09:7c:b4:24:e6:cb:27:fd:ac:f0:79:34:8e:c3:
68:23:e3:07:a4:0f:38:9f:29:e4:31:cf:de:30:b0:4e:49:10:
11:9b:80:50:14:cf:59:5f:87:95:77:66:66:f7:1f:d8:ad:c1:
3e:36:bb:f7:3a:81:b3:19:fd:3c:42:d9:48:7b:58:c8:82:ea:
af:67:58:b2:be:58:fd:46:f1:87:12:db:49:7d:b7:cb:04:59:
6c:cc:e7:95:fe:97:68:76:7d:d3:df:a6:7a:27:b3:05:c6:73:
56:ed:fd:3b:58:60:3b:f4:3c:78:55:43:25:9d:20:13:b0:00:
01:e3:c2:6f:8a:93:18:5d:d7:8f:4c:cf:78:ca:5a:58:2b:0b:
f4:35:2b:a6:63:6f:f0:46:e1:8e:0e:70:46:ae:36:a7:67:26:
f7:80:ed:29:c1:0f:1e:f3:14:c4:85:b5:45:7a:ff:b4:a7:64:
cc:54:e8:48:7c:3c:7c:1e:59:55:b8:7c:00:16:96:22:f2:24:
6c:69:32:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaI7iMRcvcdHAWhw+9UOiaJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTc4OGVkYTZjODBlZjkwMmI5NWQ2MDM4NzAwYTVkYTdk
NmQwY2MwHhcNMjUwNDMwMjMwMDMwWhcNMjUwNTAxMjMwMDMwWjAzMTEwLwYDVQQD
Eyg0YjNmM2U2NDUzYTdhYjE5MjIwOTkyYmU2Y2E2YjkxMGYzNmQxZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4KMdc4LUc9D/lwHuNm3SIEN1dRJ
lnnBdO9zFdiZUINiU6np1gR8slzr6MyV3mrX3NOPiUwrYLSd7434hjxvDYq99FUy
LougtlY1SNBhhlaotaKkKPOSk004GLfhqeN0nDyjRs2dOsBvYXVx/DiOetq9ID0n
qw6Qw3ZDyAmYtYrAPbuGq108EnXj5LxYh2hOqhDZrOYs6OE0gaWYJ6LfCQWKvsB3
csMx8x8BTHSvfOz7x0huEPq8+aNGPTsEdq/OchAPWFKN5A3SdFd/X5GXvKDYhjJE
OHdpA5+X43gmJIKcLX9XomSZSV0NJxRC2JsDdOfH56eaaS9aK6ADlp5ofwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEs/PmRTp6sZIgmSvmymuRDzbR+uMB8GA1UdIwQY
MBaAFCqniO2myA75ArldYDhwCl2n1tDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FlSTdhYklEdmtDdVYxZ09IQUtYYWZXME13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hNjU3NGQtZmI2ZC00N2RiLWJhMGMt
ZjE2ZjFlZTRmODkxLzEvS3FlSTdhYklEdmtDdVYxZ09IQUtYYWZXME13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9hNjU3NGQtZmI2ZC00N2RiLWJhMGMtZjE2ZjFlZTRmODkx
LzEvS3FlSTdhYklEdmtDdVYxZ09IQUtYYWZXME13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPnVnTL9
2Ox+tq06XkA1Qlr2fFI0Xv1XJ4SErOf+l5B0c7qjUJWqNKlYksNLzBYQc0JneptH
qjqt/Ql8tCTmyyf9rPB5NI7DaCPjB6QPOJ8p5DHP3jCwTkkQEZuAUBTPWV+HlXdm
Zvcf2K3BPja79zqBsxn9PELZSHtYyILqr2dYsr5Y/UbxhxLbSX23ywRZbMznlf6X
aHZ909+meiezBcZzVu39O1hgO/Q8eFVDJZ0gE7AAAePCb4qTGF3Xj0zPeMpaWCsL
9DUrpmNv8Ebhjg5wRq42p2cm94DtKcEPHvMUxIW1RXr/tKdkzFToSHw8fB5ZVbh8
ABaWIvIkbGkysg==
-----END CERTIFICATE-----
Generated at Thu May 1 09:28:36 2025 by rpki-client