Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
File: kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft (raw, json)
Hash identifier: yfY5l+49ttgT8DY0j5uvW8QNQboF9vYsIkRiSGFjgx0=
Subject key identifier: 5F:72:1A:91:61:F4:78:2B:5B:0C:F0:A6:61:36:EB:39:A3:94:AF:63
Authority key identifier: 92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37
Certificate issuer: /CN=924a97d912d71f80fd36b73efc0fc7969762f337
Certificate serial: 019694845DA43EA0D44CF476E0319436B61E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
Manifest number: 151F
Signing time: Sat 03 May 2025 05:00:24 +0000
Manifest this update: Sat 03 May 2025 05:00:24 +0000
Manifest next update: Sun 04 May 2025 05:00:24 +0000
Files and hashes: 1: 1-JNlJinjq7kuel35O_T8kUcWQBw.roa (hash: 1A2mPTXvGu8ShjNKjNG8ljmXuNzR5l5s2QNyKormBf0=)
2: kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl (hash: BM1/HwigIle85l6qaxHarM6bZr4D2Mz85XWztA6XZrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:84:5d:a4:3e:a0:d4:4c:f4:76:e0:31:94:36:b6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924a97d912d71f80fd36b73efc0fc7969762f337
Validity
Not Before: May 3 05:00:24 2025 GMT
Not After : May 4 05:00:24 2025 GMT
Subject: CN=5f721a9161f4782b5b0cf0a66136eb39a394af63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2b:e0:51:97:ab:ab:28:01:86:cf:06:72:a4:
ae:13:a5:40:19:ab:11:c0:6e:8f:57:6c:37:d4:9f:
12:a5:ef:df:e4:30:8c:c8:dc:f4:a8:1a:a0:e2:25:
5a:e6:ea:a3:b8:76:59:62:bb:80:3c:40:d3:1d:ba:
ac:0e:00:ad:8e:21:71:ba:30:37:02:ec:4d:5f:57:
28:a4:92:c8:13:86:e6:bb:1d:6c:9e:13:12:10:4e:
89:0c:1a:30:9a:82:6c:ea:d9:e7:72:52:22:c1:4c:
b2:e9:9c:1e:a4:a3:68:28:38:5a:d8:3c:f6:42:b1:
97:d3:11:27:1e:a1:f1:a8:ad:8c:22:22:c1:07:3e:
58:33:d5:f0:32:b3:01:ea:70:64:b8:a8:ff:32:1b:
df:2e:67:04:c6:41:f8:7a:40:26:1c:12:52:42:04:
68:d4:f5:57:c9:42:b9:04:87:87:5d:93:cd:50:66:
ab:65:fa:f2:b0:38:45:43:b1:44:a2:f8:e4:a8:26:
96:59:64:11:bf:d1:87:27:0c:02:36:69:dd:ef:4d:
4c:1f:2e:2e:ad:11:8b:b4:c4:7d:4c:53:4b:28:f6:
45:07:84:75:2b:21:28:59:3c:e2:52:9d:fe:d2:43:
52:38:29:78:0d:1e:d8:d6:92:cc:e1:54:61:e7:89:
c2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:72:1A:91:61:F4:78:2B:5B:0C:F0:A6:61:36:EB:39:A3:94:AF:63
X509v3 Authority Key Identifier:
keyid:92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:00:36:5e:84:61:0c:73:6b:23:95:60:43:65:2b:3f:2e:04:
f3:ed:8c:dd:8e:69:af:26:b0:82:ae:66:21:be:47:cd:08:7c:
e9:1b:43:14:a6:59:9d:37:96:e0:11:93:6f:cf:a0:b7:fb:61:
5d:ec:50:69:fb:67:c4:a3:aa:2d:43:70:00:07:b0:87:a6:76:
e8:a3:f4:38:c4:c5:70:be:dc:69:45:32:e8:6e:21:72:5a:5f:
c3:29:c9:a7:5b:8f:fc:29:74:3a:27:24:f7:5c:e5:92:96:4d:
d8:d6:62:7c:5d:2a:ea:88:31:5e:51:75:2b:83:2c:d5:bf:a3:
5d:85:05:31:5d:58:89:a9:81:8a:eb:f3:87:f0:55:f6:d1:21:
df:55:35:c0:13:3b:21:ce:d7:d1:d0:3f:fb:aa:7c:b1:dd:96:
39:9c:16:80:18:2b:70:d0:af:6f:a4:90:b3:49:68:61:4b:1b:
5d:d6:d5:5a:fd:fb:fb:50:4e:2a:81:a6:f8:b7:37:08:b4:4d:
17:98:81:27:1a:e0:45:b6:80:23:2b:d3:f5:a2:89:39:8b:e6:
e0:01:84:7a:f2:ed:eb:a7:c8:0e:7c:0d:7b:8b:68:45:59:6a:
f0:d8:bf:d1:5b:e8:cd:92:00:82:02:f9:2e:9e:d2:88:7b:fc:
dd:d0:89:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaUhF2kPqDUTPR24DGUNrYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNGE5N2Q5MTJkNzFmODBmZDM2YjczZWZjMGZjNzk2OTc2
MmYzMzcwHhcNMjUwNTAzMDUwMDI0WhcNMjUwNTA0MDUwMDI0WjAzMTEwLwYDVQQD
Eyg1ZjcyMWE5MTYxZjQ3ODJiNWIwY2YwYTY2MTM2ZWIzOWEzOTRhZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyvgUZerqygBhs8GcqSuE6VAGasR
wG6PV2w31J8Spe/f5DCMyNz0qBqg4iVa5uqjuHZZYruAPEDTHbqsDgCtjiFxujA3
AuxNX1copJLIE4bmux1snhMSEE6JDBowmoJs6tnnclIiwUyy6ZwepKNoKDha2Dz2
QrGX0xEnHqHxqK2MIiLBBz5YM9XwMrMB6nBkuKj/MhvfLmcExkH4ekAmHBJSQgRo
1PVXyUK5BIeHXZPNUGarZfrysDhFQ7FEovjkqCaWWWQRv9GHJwwCNmnd701MHy4u
rRGLtMR9TFNLKPZFB4R1KyEoWTziUp3+0kNSOCl4DR7Y1pLM4VRh54nC0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9yGpFh9HgrWwzwpmE26zmjlK9jMB8GA1UdIwQY
MBaAFJJKl9kS1x+A/Ta3PvwPx5aXYvM3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2txWDJSTFhINEQ5TnJjLV9BX0hscGRpOHpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hZDM1ODYtYTAyOC00NzQ2LWIzZGEt
ODE0ODU2ZTFiMWY0LzEva2txWDJSTFhINEQ5TnJjLV9BX0hscGRpOHpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9hZDM1ODYtYTAyOC00NzQ2LWIzZGEtODE0ODU2ZTFiMWY0
LzEva2txWDJSTFhINEQ5TnJjLV9BX0hscGRpOHpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvAA2XoRh
DHNrI5VgQ2UrPy4E8+2M3Y5pryawgq5mIb5HzQh86RtDFKZZnTeW4BGTb8+gt/th
XexQaftnxKOqLUNwAAewh6Z26KP0OMTFcL7caUUy6G4hclpfwynJp1uP/Cl0Oick
91zlkpZN2NZifF0q6ogxXlF1K4Ms1b+jXYUFMV1YiamBiuvzh/BV9tEh31U1wBM7
Ic7X0dA/+6p8sd2WOZwWgBgrcNCvb6SQs0loYUsbXdbVWv37+1BOKoGm+Lc3CLRN
F5iBJxrgRbaAIyvT9aKJOYvm4AGEevLt66fIDnwNe4toRVlq8Ni/0VvozZIAggL5
Lp7SiHv83dCJyw==
-----END CERTIFICATE-----
Generated at Sat May 3 14:07:27 2025 by rpki-client