Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
File: Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft (raw, json)
Hash identifier: 98wHHfu328avq4MvPImA+4QANpOvG218gAbA04IRA8I=
Subject key identifier: 55:72:FF:5D:D9:29:DA:8D:2E:92:64:26:B1:EC:B4:2C:4E:D2:EA:0A
Authority key identifier: 2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
Certificate issuer: /CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Certificate serial: 01969371A23DBB9C9E17DEB9D5B234894B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
Manifest number: 0543
Signing time: Sat 03 May 2025 00:00:19 +0000
Manifest this update: Sat 03 May 2025 00:00:19 +0000
Manifest next update: Sun 04 May 2025 00:00:19 +0000
Files and hashes: 1: E3Zl7hTQVNjV63pjgOsge1XkH0U.roa (hash: yrZmQZ4kTmjXpz++XtNl02KMrQY9DBIkid1grpWXuJM=)
2: Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl (hash: mF8ESu+nL+IzSaA3SXIHmSxrUPai+rmWkr/4hGUTZ2A=)
3: o0lO65ar-rW4jL4W8sebNaso080.roa (hash: WWdJYnb/d9BssaNMXrRC81WhzrjAYNXMX5FXKx6MRRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:71:a2:3d:bb:9c:9e:17:de:b9:d5:b2:34:89:4b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Validity
Not Before: May 3 00:00:19 2025 GMT
Not After : May 4 00:00:19 2025 GMT
Subject: CN=5572ff5dd929da8d2e926426b1ecb42c4ed2ea0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:02:1b:7f:34:d4:ca:3d:95:95:7c:f0:46:e3:
e3:6f:b1:16:0e:6b:d9:f0:88:94:af:d3:f2:39:da:
9f:3a:7e:ba:8e:f5:29:70:dd:4b:00:5a:e1:99:af:
90:f5:f4:81:fe:e8:f9:4f:05:f6:75:54:04:2a:07:
19:3a:24:05:b9:50:01:62:c4:ee:72:c1:b8:84:18:
5f:22:22:d0:98:28:6a:a3:13:ca:b1:89:f8:4c:74:
33:44:d8:74:10:0e:e3:2d:16:b4:a9:3c:1f:75:63:
de:bd:cf:c1:16:cc:50:fb:86:08:72:19:00:88:0c:
e3:41:98:7a:96:d3:ce:f7:26:b6:11:e3:5c:09:df:
11:ef:8d:a9:96:92:c8:47:d0:63:14:71:8a:e9:0c:
2b:25:e1:61:68:04:7f:a5:80:b0:31:98:f2:f7:98:
c5:f6:aa:9b:36:53:b6:a3:69:e5:0e:4a:d2:9c:e7:
93:40:31:93:4a:ba:e8:74:39:e2:51:f9:79:77:ba:
12:97:a5:76:79:b2:cb:a6:bc:ba:20:08:18:69:13:
a6:94:39:92:85:04:2f:23:fa:91:4f:8f:11:96:c1:
7e:d2:23:45:a5:8e:27:df:86:89:20:f9:1f:d7:5a:
8f:2e:20:8b:77:89:6f:ce:4c:a9:11:60:1c:f2:59:
4a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:72:FF:5D:D9:29:DA:8D:2E:92:64:26:B1:EC:B4:2C:4E:D2:EA:0A
X509v3 Authority Key Identifier:
keyid:2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1f:9f:33:71:9f:be:ea:bc:34:a6:f5:1c:50:69:3c:38:75:
06:f6:e3:96:21:bf:c5:9f:c1:cd:54:be:79:0d:65:d0:43:e1:
1e:83:a5:f4:52:63:2d:78:11:3b:f7:98:0a:1f:33:89:68:4c:
04:ce:d6:d1:46:aa:cf:ae:19:5f:87:de:b1:e4:be:af:00:99:
31:15:04:35:9a:a9:32:c6:4f:a9:6b:9b:a7:40:1f:bc:ab:11:
d9:ed:57:f2:19:2e:81:41:68:0e:1c:6a:0f:02:33:28:b9:aa:
fb:68:17:15:fd:1c:ff:de:bb:d5:97:3d:b6:34:63:4d:1b:bb:
84:e0:74:3e:f3:79:b8:61:44:c2:3e:62:c4:dd:c6:85:fd:11:
a5:3d:42:f4:29:af:38:04:f8:85:00:b2:ac:04:1d:60:99:59:
18:41:18:26:de:e5:2f:36:e8:42:63:0a:81:b0:3f:c8:6f:96:
f5:be:bd:de:ce:d0:6f:f4:7d:3d:f4:eb:6b:96:60:38:7f:64:
97:1a:4d:12:b8:47:f6:9b:03:98:05:60:d1:bd:d8:7f:60:43:
9c:cc:2c:29:48:ce:8a:68:eb:bd:a2:ad:52:b7:5f:25:77:96:
79:36:ff:08:83:8d:be:12:51:87:1d:e9:a6:05:26:69:54:89:
6e:ea:b4:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaTcaI9u5yeF9651bI0iUtPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNmY4ZmZiZTA5ODkyMjA3MWYwYzljM2E2MGY1ZGZkY2Rl
NDZkYTQwHhcNMjUwNTAzMDAwMDE5WhcNMjUwNTA0MDAwMDE5WjAzMTEwLwYDVQQD
Eyg1NTcyZmY1ZGQ5MjlkYThkMmU5MjY0MjZiMWVjYjQyYzRlZDJlYTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAIbfzTUyj2VlXzwRuPjb7EWDmvZ
8IiUr9PyOdqfOn66jvUpcN1LAFrhma+Q9fSB/uj5TwX2dVQEKgcZOiQFuVABYsTu
csG4hBhfIiLQmChqoxPKsYn4THQzRNh0EA7jLRa0qTwfdWPevc/BFsxQ+4YIchkA
iAzjQZh6ltPO9ya2EeNcCd8R742plpLIR9BjFHGK6QwrJeFhaAR/pYCwMZjy95jF
9qqbNlO2o2nlDkrSnOeTQDGTSrrodDniUfl5d7oSl6V2ebLLpry6IAgYaROmlDmS
hQQvI/qRT48RlsF+0iNFpY4n34aJIPkf11qPLiCLd4lvzkypEWAc8llKJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVy/13ZKdqNLpJkJrHstCxO0uoKMB8GA1UdIwQY
MBaAFCpvj/vgmJIgcfDJw6YPXf3N5G2kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS20tUC0tQ1lraUJ4OE1uRHBnOWRfYzNrYmFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MzhkODgtNDk1Mi00OTYwLTg3NzQt
YzFjNGQ4Y2JmNDU5LzEvS20tUC0tQ1lraUJ4OE1uRHBnOWRfYzNrYmFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MzhkODgtNDk1Mi00OTYwLTg3NzQtYzFjNGQ4Y2JmNDU5
LzEvS20tUC0tQ1lraUJ4OE1uRHBnOWRfYzNrYmFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADx+fM3Gf
vuq8NKb1HFBpPDh1BvbjliG/xZ/BzVS+eQ1l0EPhHoOl9FJjLXgRO/eYCh8ziWhM
BM7W0Uaqz64ZX4feseS+rwCZMRUENZqpMsZPqWubp0AfvKsR2e1X8hkugUFoDhxq
DwIzKLmq+2gXFf0c/9671Zc9tjRjTRu7hOB0PvN5uGFEwj5ixN3Ghf0RpT1C9Cmv
OAT4hQCyrAQdYJlZGEEYJt7lLzboQmMKgbA/yG+W9b693s7Qb/R9PfTra5ZgOH9k
lxpNErhH9psDmAVg0b3Yf2BDnMwsKUjOimjrvaKtUrdfJXeWeTb/CIONvhJRhx3p
pgUmaVSJbuq0AA==
-----END CERTIFICATE-----
Generated at Sat May 3 04:55:06 2025 by rpki-client