Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
File: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft (raw, json)
Hash identifier: be+suR6cPTUzO/UHCiTSfG2j0OkLR8b3QmcHFyoP3z8=
Subject key identifier: 02:D1:BC:93:AF:95:75:78:35:44:46:15:86:24:97:15:17:A2:B1:C3
Authority key identifier: 91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
Certificate issuer: /CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Certificate serial: 01969F75D8144374AFFA46C250929AEBADD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
Manifest number: 0541
Signing time: Mon 05 May 2025 08:00:22 +0000
Manifest this update: Mon 05 May 2025 08:00:22 +0000
Manifest next update: Tue 06 May 2025 08:00:22 +0000
Files and hashes: 1: 1-PjUZT902dDkd6VPDrdDPHXwUZw.roa (hash: MHJPB3k7tQCL3suOF/2f4yZcUJ+jnvq9tJxwFWeEEbc=)
2: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl (hash: QPuMAsvxMspx/8+WKIG6b4GLvPlPG/zHN/WztKD/f5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:75:d8:14:43:74:af:fa:46:c2:50:92:9a:eb:ad:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Validity
Not Before: May 5 08:00:22 2025 GMT
Not After : May 6 08:00:22 2025 GMT
Subject: CN=02d1bc93af957578354446158624971517a2b1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:84:5b:4d:c0:7e:74:7f:11:6c:38:80:70:2e:
dc:58:f0:70:41:f4:d3:d8:cb:6c:e4:47:e5:3f:f6:
05:6c:45:fb:37:85:e7:88:18:38:89:2d:a6:e3:79:
51:7d:da:23:65:ec:56:c7:42:7d:1c:61:b2:22:a0:
0c:06:dc:ae:79:d9:f7:8b:70:7a:82:b5:4b:58:21:
02:2c:85:24:f9:4f:11:15:be:78:8b:6d:cf:64:54:
86:3b:79:9a:11:aa:a8:32:8d:f4:35:c7:07:35:93:
b1:9c:86:00:cc:9b:93:6e:69:62:91:65:44:45:44:
41:64:f1:fc:a0:78:4c:a9:cb:af:37:fe:bc:cb:21:
cc:6c:11:d2:93:dd:06:58:3d:19:f9:d4:d4:a1:88:
49:d9:f8:4c:5d:09:9d:49:25:81:d0:90:b5:29:bd:
c7:98:09:46:47:09:16:4e:2a:8c:dd:d5:2c:aa:2f:
b3:a6:c1:4f:6e:3b:f8:c0:fb:f9:c7:12:94:6d:19:
a0:b5:5c:b7:42:54:97:f7:97:2d:93:52:3e:93:6c:
69:c9:53:b0:ee:46:ea:35:10:f5:c8:09:39:54:d3:
fc:7e:67:a2:5d:f0:3c:5c:56:ef:6f:96:15:92:87:
a9:f1:b5:30:a3:a4:ad:ae:31:98:bd:eb:24:62:bc:
67:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D1:BC:93:AF:95:75:78:35:44:46:15:86:24:97:15:17:A2:B1:C3
X509v3 Authority Key Identifier:
keyid:91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a5:09:39:9d:d3:67:0f:66:86:47:1c:5c:0a:bd:48:c4:94:
16:a1:11:e7:67:d7:be:0e:91:3a:6a:d6:b2:67:5f:34:12:ac:
ea:a4:3f:4f:7e:38:2c:49:aa:7f:f3:d9:0d:e2:f4:02:6d:71:
e8:98:62:32:16:b1:31:c6:3f:0b:d5:8a:3b:c5:68:ce:b0:62:
93:18:59:61:bb:04:e3:af:49:fc:1e:c4:37:96:9c:0a:c5:21:
cd:0f:4d:be:af:87:51:e1:bc:61:6f:5d:14:d5:fd:da:19:15:
22:93:85:8e:1e:33:61:a0:bd:8e:61:2f:02:c1:e1:db:15:37:
d1:55:f2:eb:6f:9e:1e:0f:d2:50:18:e0:6e:ba:87:a5:11:2c:
4d:b0:7e:2f:98:f1:1d:dc:7c:d9:65:5a:ed:49:c1:48:4d:1d:
2a:ac:04:85:c3:bd:86:61:ed:d5:92:17:69:73:8f:c4:09:47:
3b:bf:bb:4b:86:a2:11:80:f9:0b:ff:6d:fe:c4:3d:6f:78:41:
e5:aa:04:d6:c2:63:99:fe:9e:38:c3:7b:4a:f6:a7:48:84:0d:
48:83:fb:a2:3c:81:0c:8c:d8:7c:af:a3:28:ed:35:5f:3e:6c:
97:ba:82:17:5e:13:90:0c:b6:ba:a0:6e:aa:ed:d8:95:18:ea:
68:2e:19:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafddgUQ3Sv+kbCUJKa663TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxN2MzM2M3NTk2MTMxOGQ4ZWUzY2IxMzQ2NGE5MGQwMGFi
OGJkMmQwHhcNMjUwNTA1MDgwMDIyWhcNMjUwNTA2MDgwMDIyWjAzMTEwLwYDVQQD
EygwMmQxYmM5M2FmOTU3NTc4MzU0NDQ2MTU4NjI0OTcxNTE3YTJiMWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4RbTcB+dH8RbDiAcC7cWPBwQfTT
2Mts5EflP/YFbEX7N4XniBg4iS2m43lRfdojZexWx0J9HGGyIqAMBtyuedn3i3B6
grVLWCECLIUk+U8RFb54i23PZFSGO3maEaqoMo30NccHNZOxnIYAzJuTbmlikWVE
RURBZPH8oHhMqcuvN/68yyHMbBHSk90GWD0Z+dTUoYhJ2fhMXQmdSSWB0JC1Kb3H
mAlGRwkWTiqM3dUsqi+zpsFPbjv4wPv5xxKUbRmgtVy3QlSX95ctk1I+k2xpyVOw
7kbqNRD1yAk5VNP8fmeiXfA8XFbvb5YVkoep8bUwo6StrjGYveskYrxnAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALRvJOvlXV4NURGFYYklxUXorHDMB8GA1UdIwQY
MBaAFJF8M8dZYTGNjuPLE0ZKkNAKuL0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1h3engxbGhNWTJPNDhzVFJrcVEwQXE0dlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hYzI3M2EtOWM4Yi00ZWY3LWE0MDAt
YzM3NjFhNzVkMDQ3LzEva1h3engxbGhNWTJPNDhzVFJrcVEwQXE0dlMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9hYzI3M2EtOWM4Yi00ZWY3LWE0MDAtYzM3NjFhNzVkMDQ3
LzEva1h3engxbGhNWTJPNDhzVFJrcVEwQXE0dlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqUJOZ3T
Zw9mhkccXAq9SMSUFqER52fXvg6ROmrWsmdfNBKs6qQ/T344LEmqf/PZDeL0Am1x
6JhiMhaxMcY/C9WKO8VozrBikxhZYbsE469J/B7EN5acCsUhzQ9Nvq+HUeG8YW9d
FNX92hkVIpOFjh4zYaC9jmEvAsHh2xU30VXy62+eHg/SUBjgbrqHpREsTbB+L5jx
Hdx82WVa7UnBSE0dKqwEhcO9hmHt1ZIXaXOPxAlHO7+7S4aiEYD5C/9t/sQ9b3hB
5aoE1sJjmf6eOMN7SvanSIQNSIP7ojyBDIzYfK+jKO01Xz5sl7qCF14TkAy2uqBu
qu3YlRjqaC4ZBA==
-----END CERTIFICATE-----
Generated at Mon May 5 18:34:10 2025 by rpki-client