Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
File: 1kgpREOu0W0GuGrxT1pfClCDd0o.mft (raw, json)
Hash identifier: KVSdgpwKz3wmf4FS4qvXTiE5vmp+6NEk2cmhVm+cyxA=
Subject key identifier: 33:12:33:44:05:0B:76:AC:21:63:A0:67:5E:C4:2D:C1:59:2D:72:D4
Authority key identifier: D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A
Certificate issuer: /CN=d648294443aed16d06b86af14f5a5f0a5083774a
Certificate serial: 019674C2DC2CD48531F0F5B7B1ED99D43DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 01:00:49 +0000
Manifest this update: Sun 27 Apr 2025 01:00:49 +0000
Manifest next update: Mon 28 Apr 2025 01:00:49 +0000
Files and hashes: 1: 1kgpREOu0W0GuGrxT1pfClCDd0o.crl (hash: D4tj56TKwpSq8PjcRx+W15VS0+uYmBK7hgdCz5qF1gw=)
2: HUiYQLYoRn-P8-AKIUmGnSk_fUQ.roa (hash: ozdi5qHnRcow/nH1EVH0214AE7vAhAxmdAJcuT+IzE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:dc:2c:d4:85:31:f0:f5:b7:b1:ed:99:d4:3d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d648294443aed16d06b86af14f5a5f0a5083774a
Validity
Not Before: Apr 27 01:00:49 2025 GMT
Not After : Apr 28 01:00:49 2025 GMT
Subject: CN=33123344050b76ac2163a0675ec42dc1592d72d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:d4:33:6c:03:80:11:24:a8:84:da:10:16:
f7:96:11:3a:a5:41:75:fc:c8:52:0b:33:b6:00:50:
80:34:79:bf:9c:58:5f:65:b2:97:20:68:01:0e:d3:
c8:78:c3:e1:45:d0:ce:39:5e:b0:9d:ed:94:b7:7c:
c3:7f:d7:b3:2d:ca:6d:16:72:f5:a9:c3:8e:fc:9a:
f0:1d:15:b2:48:b5:c1:b7:d0:72:21:b1:ec:b4:45:
d0:67:da:41:b3:fd:3b:2d:89:4e:37:54:a4:01:28:
8d:62:36:70:06:7d:67:83:1f:ee:cb:a3:95:d8:f2:
2a:d8:7d:be:b2:fd:72:20:9b:63:ec:e6:25:78:05:
88:75:6f:66:74:9a:a2:da:5b:a2:1d:7a:98:d5:4f:
ab:47:14:cb:fa:23:37:87:3c:86:ea:1b:23:d5:a3:
88:1d:e2:8a:46:50:aa:9b:a4:b4:41:f2:63:f2:5f:
a6:f3:72:41:56:22:21:b2:2e:3d:5a:d6:f8:79:6b:
37:85:08:06:aa:44:10:3d:b3:29:d2:60:a8:5b:26:
0c:8a:ac:67:ca:fc:2b:77:1a:d7:60:2e:05:e6:a5:
09:98:25:ca:b1:4c:7a:d8:df:cc:e9:dd:41:8b:3d:
25:d8:91:85:b6:0f:15:a2:d6:a3:d9:c1:69:96:9d:
ea:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:12:33:44:05:0B:76:AC:21:63:A0:67:5E:C4:2D:C1:59:2D:72:D4
X509v3 Authority Key Identifier:
keyid:D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0e:58:8e:22:2c:c0:5a:3b:9b:73:dd:41:c2:1e:b8:cd:de:
31:42:31:e3:b3:eb:2c:30:ea:20:de:2b:d5:90:ac:64:f5:c8:
13:bc:35:54:fb:9a:11:ab:79:51:45:ae:3d:73:75:d0:72:e3:
bf:50:af:1a:21:70:fc:a5:d4:bd:9a:cb:f7:1d:d0:62:b5:12:
a6:ea:d3:23:72:75:43:06:9a:bd:2d:da:7d:d6:6d:9b:69:05:
84:51:6b:63:ab:1c:00:89:66:30:37:c8:af:64:71:7a:e8:6f:
aa:41:68:94:4a:6b:1c:b1:3b:01:f7:88:ae:0c:60:12:f1:0a:
91:b0:53:f6:04:5d:1b:f3:c8:6a:30:c0:6c:45:de:56:95:2c:
70:01:50:c2:5a:40:20:6a:55:43:a0:1b:2c:de:a6:b1:dc:14:
b6:0c:db:25:37:9d:30:df:45:db:b9:6e:d2:7f:9d:0b:b9:9d:
4e:b3:86:cc:c0:22:1d:b0:f5:b2:0a:ae:c7:b6:65:fa:97:a8:
94:ed:9f:ea:27:fb:06:cb:4b:65:3c:7d:81:dc:fb:94:c7:14:
cb:70:66:80:7e:41:95:fa:17:eb:43:6a:8f:89:16:00:28:ab:
24:0f:be:ff:83:30:78:49:a0:94:31:7e:63:0f:82:d3:66:0d:
ec:20:ae:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0wtws1IUx8PW3se2Z1D2wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NDgyOTQ0NDNhZWQxNmQwNmI4NmFmMTRmNWE1ZjBhNTA4
Mzc3NGEwHhcNMjUwNDI3MDEwMDQ5WhcNMjUwNDI4MDEwMDQ5WjAzMTEwLwYDVQQD
EygzMzEyMzM0NDA1MGI3NmFjMjE2M2EwNjc1ZWM0MmRjMTU5MmQ3MmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSjUM2wDgBEkqITaEBb3lhE6pUF1
/MhSCzO2AFCANHm/nFhfZbKXIGgBDtPIeMPhRdDOOV6wne2Ut3zDf9ezLcptFnL1
qcOO/JrwHRWySLXBt9ByIbHstEXQZ9pBs/07LYlON1SkASiNYjZwBn1ngx/uy6OV
2PIq2H2+sv1yIJtj7OYleAWIdW9mdJqi2luiHXqY1U+rRxTL+iM3hzyG6hsj1aOI
HeKKRlCqm6S0QfJj8l+m83JBViIhsi49Wtb4eWs3hQgGqkQQPbMp0mCoWyYMiqxn
yvwrdxrXYC4F5qUJmCXKsUx62N/M6d1Biz0l2JGFtg8Votaj2cFplp3qFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMSM0QFC3asIWOgZ17ELcFZLXLUMB8GA1UdIwQY
MBaAFNZIKURDrtFtBrhq8U9aXwpQg3dKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWtncFJFT3UwVzBHdUdyeFQxcGZDbENEZDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNTg3ZTktMzNhOS00YTg2LThjZDkt
ZTU3Y2M4MWY1MjMzLzEvMWtncFJFT3UwVzBHdUdyeFQxcGZDbENEZDBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNTg3ZTktMzNhOS00YTg2LThjZDktZTU3Y2M4MWY1MjMz
LzEvMWtncFJFT3UwVzBHdUdyeFQxcGZDbENEZDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASw5YjiIs
wFo7m3PdQcIeuM3eMUIx47PrLDDqIN4r1ZCsZPXIE7w1VPuaEat5UUWuPXN10HLj
v1CvGiFw/KXUvZrL9x3QYrUSpurTI3J1QwaavS3afdZtm2kFhFFrY6scAIlmMDfI
r2RxeuhvqkFolEprHLE7AfeIrgxgEvEKkbBT9gRdG/PIajDAbEXeVpUscAFQwlpA
IGpVQ6AbLN6msdwUtgzbJTedMN9F27lu0n+dC7mdTrOGzMAiHbD1sgqux7Zl+peo
lO2f6if7BstLZTx9gdz7lMcUy3BmgH5BlfoX60Nqj4kWACirJA++/4MweEmglDF+
Yw+C02YN7CCubQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:40 2025 by rpki-client