Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
File: KQzE0K1dr8J6pONC-oDjSBToRcM.mft (raw, json)
Hash identifier: Av5guP4S3wYhhHroSP5zfsKstYaKs5CApkKcUeigDfU=
Subject key identifier: EB:D0:ED:7B:32:35:73:B9:96:D6:D6:4E:B4:90:6B:DF:4B:8E:F9:AB
Authority key identifier: 29:0C:C4:D0:AD:5D:AF:C2:7A:A4:E3:42:FA:80:E3:48:14:E8:45:C3
Certificate issuer: /CN=290cc4d0ad5dafc27aa4e342fa80e34814e845c3
Certificate serial: 0196778CC8CEF9A8733292852F24553B91D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
Manifest number: 054D
Signing time: Sun 27 Apr 2025 14:00:37 +0000
Manifest this update: Sun 27 Apr 2025 14:00:37 +0000
Manifest next update: Mon 28 Apr 2025 14:00:37 +0000
Files and hashes: 1: 187N4PB5lNzYnkhVyKxTgG2ufTQ.roa (hash: nnFT2Pv1VSMMW5/AFw9H17xWytd4IEI7JaypDZR0hFg=)
2: KQzE0K1dr8J6pONC-oDjSBToRcM.crl (hash: 5RIPmNmjNGHmfa6OrI1+648B47kztEUlW0P6ZvCDszk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:c8:ce:f9:a8:73:32:92:85:2f:24:55:3b:91:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290cc4d0ad5dafc27aa4e342fa80e34814e845c3
Validity
Not Before: Apr 27 14:00:37 2025 GMT
Not After : Apr 28 14:00:37 2025 GMT
Subject: CN=ebd0ed7b323573b996d6d64eb4906bdf4b8ef9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:7d:72:4b:eb:b3:3a:e5:fb:c2:65:06:41:
17:3b:3d:ae:65:b1:f0:f2:c6:18:4d:f6:ce:f2:d8:
38:33:63:d1:49:36:61:2e:bf:6d:2e:db:f0:c1:c3:
f7:a9:65:c1:6c:2f:fe:8d:b5:20:fd:48:ca:f2:3c:
16:a1:2d:a9:4a:ba:ad:dc:9d:fc:57:69:59:dd:bb:
97:86:58:cd:ff:5a:1f:fa:cf:2e:ce:e7:67:ff:30:
e4:77:f6:cd:4d:0d:74:6b:9c:d7:81:56:12:4e:de:
d3:89:c9:1b:47:b5:19:be:48:86:af:4e:a2:64:56:
95:cf:fa:8b:32:31:19:4d:8d:e0:e4:bd:9d:75:70:
0c:da:de:70:8a:f5:e6:db:2d:3e:92:cc:db:84:cf:
0f:9e:c4:8d:b8:80:e2:88:c5:3f:59:d2:fb:41:30:
31:aa:ba:5d:fd:fd:09:80:f7:07:d3:a6:bb:52:a1:
22:22:5a:5a:01:bc:21:b4:bd:b5:de:a8:bf:4f:54:
22:21:7f:b1:0f:56:ac:72:fa:72:ba:2e:7b:83:fe:
0d:b7:07:5b:16:7a:60:6c:fd:32:13:79:6a:ba:74:
77:c3:a9:c9:1e:fe:4b:62:15:81:36:6b:68:9e:bb:
59:f6:53:e4:34:3b:9e:b4:44:fc:78:ec:54:7d:40:
db:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D0:ED:7B:32:35:73:B9:96:D6:D6:4E:B4:90:6B:DF:4B:8E:F9:AB
X509v3 Authority Key Identifier:
keyid:29:0C:C4:D0:AD:5D:AF:C2:7A:A4:E3:42:FA:80:E3:48:14:E8:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d5:88:af:71:62:3a:c8:3a:b1:85:d6:f8:f8:50:d0:ec:4e:
b7:3c:5a:20:79:1c:6a:82:91:b8:ae:ea:a6:9c:97:ab:5a:c5:
2e:21:a3:7b:9c:e1:9f:19:fa:07:c9:61:ef:aa:f6:6a:d6:0b:
9d:62:c3:8f:f8:3a:1e:15:d1:61:10:ec:74:53:d9:b0:15:be:
6b:9e:d2:6d:de:a3:09:fc:fb:59:b8:b8:0e:b7:53:70:72:4a:
7f:26:16:dc:2c:c6:00:eb:0d:99:45:6c:04:cf:d4:2b:4a:c4:
10:78:c1:5e:9f:55:40:9d:e8:a7:07:16:68:b8:5e:c7:ca:12:
e3:6b:a9:9c:2c:e1:f7:37:bd:1b:a6:67:ea:47:29:1c:30:e8:
12:23:62:9b:4c:d7:4c:e2:da:d8:ab:ed:26:4c:d7:9f:d0:f9:
fb:57:e7:41:b7:54:4d:25:00:d3:fa:48:0e:73:2e:cd:e1:51:
a4:f8:28:21:5e:81:13:92:c9:ff:6e:9f:3c:e6:7d:fd:4a:52:
61:af:88:c0:1d:17:41:d5:52:0b:04:a3:41:3b:5f:e4:3b:07:
ec:1b:3a:31:33:88:98:7b:a7:ac:f1:c0:2e:4a:c2:c2:de:19:
11:aa:12:88:2a:26:a7:dc:f6:bb:36:35:15:a6:44:de:36:7b:
f5:1a:c9:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3jMjO+ahzMpKFLyRVO5HSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MGNjNGQwYWQ1ZGFmYzI3YWE0ZTM0MmZhODBlMzQ4MTRl
ODQ1YzMwHhcNMjUwNDI3MTQwMDM3WhcNMjUwNDI4MTQwMDM3WjAzMTEwLwYDVQQD
EyhlYmQwZWQ3YjMyMzU3M2I5OTZkNmQ2NGViNDkwNmJkZjRiOGVmOWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7t9ckvrszrl+8JlBkEXOz2uZbHw
8sYYTfbO8tg4M2PRSTZhLr9tLtvwwcP3qWXBbC/+jbUg/UjK8jwWoS2pSrqt3J38
V2lZ3buXhljN/1of+s8uzudn/zDkd/bNTQ10a5zXgVYSTt7TickbR7UZvkiGr06i
ZFaVz/qLMjEZTY3g5L2ddXAM2t5wivXm2y0+kszbhM8PnsSNuIDiiMU/WdL7QTAx
qrpd/f0JgPcH06a7UqEiIlpaAbwhtL213qi/T1QiIX+xD1ascvpyui57g/4Ntwdb
FnpgbP0yE3lqunR3w6nJHv5LYhWBNmtonrtZ9lPkNDuetET8eOxUfUDbSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvQ7XsyNXO5ltbWTrSQa99LjvmrMB8GA1UdIwQY
MBaAFCkMxNCtXa/CeqTjQvqA40gU6EXDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1F6RTBLMWRyOEo2cE9OQy1vRGpTQlRvUmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85MjM1MmYtNDA1MS00NTBlLWIzYTYt
MmUwMDc4Y2VlMTgyLzEvS1F6RTBLMWRyOEo2cE9OQy1vRGpTQlRvUmNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS85MjM1MmYtNDA1MS00NTBlLWIzYTYtMmUwMDc4Y2VlMTgy
LzEvS1F6RTBLMWRyOEo2cE9OQy1vRGpTQlRvUmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAodWIr3Fi
Osg6sYXW+PhQ0OxOtzxaIHkcaoKRuK7qppyXq1rFLiGje5zhnxn6B8lh76r2atYL
nWLDj/g6HhXRYRDsdFPZsBW+a57Sbd6jCfz7Wbi4DrdTcHJKfyYW3CzGAOsNmUVs
BM/UK0rEEHjBXp9VQJ3opwcWaLhex8oS42upnCzh9ze9G6Zn6kcpHDDoEiNim0zX
TOLa2KvtJkzXn9D5+1fnQbdUTSUA0/pIDnMuzeFRpPgoIV6BE5LJ/26fPOZ9/UpS
Ya+IwB0XQdVSCwSjQTtf5DsH7Bs6MTOImHunrPHALkrCwt4ZEaoSiComp9z2uzY1
FaZE3jZ79RrJkA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:05:49 2025 by rpki-client