Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
File: k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft (raw, json)
Hash identifier: KGdn8lIyDsnKlg1fzMQKXCIPY8lKxx0xksua/kDv4Qg=
Subject key identifier: 02:93:EA:62:9F:D7:3A:E5:8E:6F:B3:5C:BA:CA:9A:C8:8B:13:ED:F5
Authority key identifier: 93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
Certificate issuer: /CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Certificate serial: 019688805860EE027820FB33785C594CD01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 21:00:34 +0000
Manifest this update: Wed 30 Apr 2025 21:00:34 +0000
Manifest next update: Thu 01 May 2025 21:00:34 +0000
Files and hashes: 1: I9i3fnf4Nk0WsFMmWEWJhe5vh40.roa (hash: llYywC4U70yW6sSChiJ+ZHwIZzZjQAej/EchqIalMeA=)
2: IGJfVzvhS1XNfQJqw7b44W8rh5Q.roa (hash: ps4BuWOubuNVlVOQpqaTImNMOhN/B2m1xTG8lC4cqCo=)
3: k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl (hash: uRtPN8f9AHIBjqKJ7SIyZzZ5ZtRstUc55ziTcyr+YMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:80:58:60:ee:02:78:20:fb:33:78:5c:59:4c:d0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Validity
Not Before: Apr 30 21:00:34 2025 GMT
Not After : May 1 21:00:34 2025 GMT
Subject: CN=0293ea629fd73ae58e6fb35cbaca9ac88b13edf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:33:67:cc:b7:14:08:29:d9:57:0f:49:4f:0d:
f4:50:20:20:0c:18:3a:95:6d:e9:02:4e:a2:45:9f:
ec:de:4c:5a:22:47:1a:26:27:62:aa:4b:3a:bd:7d:
cb:98:8a:4f:1c:80:b1:b4:aa:61:b3:e2:98:5d:73:
34:04:40:81:31:84:cc:ed:cd:9e:6e:04:af:14:58:
aa:ee:75:5d:d2:d3:38:f7:4b:47:77:88:75:f2:5f:
04:22:93:1c:b1:8d:7e:a7:73:c4:f3:22:58:2a:60:
b0:22:99:ba:1c:62:d7:bf:d5:bc:94:60:bf:12:4a:
87:fe:c5:1f:8f:34:1e:df:87:49:96:9a:9c:ed:3b:
98:06:30:bd:c2:81:e2:9f:a7:2a:b7:60:b7:68:e6:
9c:75:63:04:a5:72:47:cb:5e:fc:4e:99:81:85:22:
89:51:14:73:48:a7:02:6d:30:f1:e3:88:f9:e9:2b:
91:06:d9:11:15:c5:69:11:f1:48:c3:2d:89:05:97:
eb:8e:8d:fc:65:78:4c:51:f8:61:6d:e5:83:36:bc:
79:79:cc:c6:20:b6:24:9a:e7:aa:53:62:82:97:56:
a9:0c:7a:ec:26:5e:3f:83:76:1d:ce:54:6e:67:6c:
37:1a:a8:af:59:fd:a5:6d:93:fb:92:fc:60:7b:73:
7d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:93:EA:62:9F:D7:3A:E5:8E:6F:B3:5C:BA:CA:9A:C8:8B:13:ED:F5
X509v3 Authority Key Identifier:
keyid:93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:01:af:af:a4:06:c4:2f:7a:7d:13:77:db:20:ea:45:58:7b:
db:f9:87:b3:00:f3:72:c5:09:5c:a8:a9:cf:6e:b3:a4:58:ad:
96:90:ec:3b:45:2a:c9:a0:ce:dd:7b:0c:b1:ef:d4:c6:f9:31:
0e:94:8b:3b:ed:a8:82:c5:17:6e:80:63:12:c4:52:79:11:c5:
f2:7e:d8:f5:f4:4d:b2:72:4b:27:29:1c:63:b4:cf:4c:ab:ba:
1f:c0:f5:7e:a1:04:c5:4d:2d:c7:ea:21:be:fe:11:89:94:bc:
86:b3:44:58:ae:6a:98:96:9d:2b:30:50:63:a8:af:63:21:59:
e5:48:d7:02:2c:7f:84:53:76:dc:bd:95:df:a3:b2:d7:29:85:
5d:b2:06:3e:f8:95:b8:1c:44:95:76:30:60:9b:71:7f:d4:9b:
c7:7c:f4:3b:c6:37:af:93:a2:16:9a:d8:05:99:45:fc:61:6f:
ce:71:c0:61:da:05:ad:5d:66:77:f7:c5:b9:25:ac:0a:d9:df:
63:3e:78:9f:28:39:fb:e0:b3:46:46:92:9a:32:9c:c2:71:d6:
7c:26:48:25:7f:72:57:2f:e7:15:d3:79:be:f5:09:e8:ae:41:
d4:26:5e:81:09:19:9f:8d:9b:4b:3f:b4:09:ed:8f:3d:86:51:
47:a2:b7:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaIgFhg7gJ4IPszeFxZTNAdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZGM0NWZmZTEzZjg0MWYxODhhZjc0M2JkN2RjMzRlZDU0
ODA1ZDQwHhcNMjUwNDMwMjEwMDM0WhcNMjUwNTAxMjEwMDM0WjAzMTEwLwYDVQQD
EygwMjkzZWE2MjlmZDczYWU1OGU2ZmIzNWNiYWNhOWFjODhiMTNlZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDNnzLcUCCnZVw9JTw30UCAgDBg6
lW3pAk6iRZ/s3kxaIkcaJidiqks6vX3LmIpPHICxtKphs+KYXXM0BECBMYTM7c2e
bgSvFFiq7nVd0tM490tHd4h18l8EIpMcsY1+p3PE8yJYKmCwIpm6HGLXv9W8lGC/
EkqH/sUfjzQe34dJlpqc7TuYBjC9woHin6cqt2C3aOacdWMEpXJHy178TpmBhSKJ
URRzSKcCbTDx44j56SuRBtkRFcVpEfFIwy2JBZfrjo38ZXhMUfhhbeWDNrx5eczG
ILYkmueqU2KCl1apDHrsJl4/g3YdzlRuZ2w3GqivWf2lbZP7kvxge3N9UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKT6mKf1zrljm+zXLrKmsiLE+31MB8GA1UdIwQY
MBaAFJPcRf/hP4QfGIr3Q719w07VSAXUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazl4Rl8tRV9oQjhZaXZkRHZYM0RUdFZJQmRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yZDBiMTktMGFmZi00MTJmLWEyZmQt
MjE4OTU3MjhiYTRlLzEvazl4Rl8tRV9oQjhZaXZkRHZYM0RUdFZJQmRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8yZDBiMTktMGFmZi00MTJmLWEyZmQtMjE4OTU3MjhiYTRl
LzEvazl4Rl8tRV9oQjhZaXZkRHZYM0RUdFZJQmRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkAGvr6QG
xC96fRN32yDqRVh72/mHswDzcsUJXKipz26zpFitlpDsO0UqyaDO3XsMse/Uxvkx
DpSLO+2ogsUXboBjEsRSeRHF8n7Y9fRNsnJLJykcY7TPTKu6H8D1fqEExU0tx+oh
vv4RiZS8hrNEWK5qmJadKzBQY6ivYyFZ5UjXAix/hFN23L2V36Oy1ymFXbIGPviV
uBxElXYwYJtxf9Sbx3z0O8Y3r5OiFprYBZlF/GFvznHAYdoFrV1md/fFuSWsCtnf
Yz54nyg5++CzRkaSmjKcwnHWfCZIJX9yVy/nFdN5vvUJ6K5B1CZegQkZn42bSz+0
Ce2PPYZRR6K37w==
-----END CERTIFICATE-----
Generated at Thu May 1 02:53:35 2025 by rpki-client