Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
File: kaBxUIM4JgVRpV8B_QcI_fXggoc.mft (raw, json)
Hash identifier: o3BrcoMwoqbziNX0WEFELsB0bLsRIT7cRZD+HGVD8ic=
Subject key identifier: 8D:DE:D3:74:71:3A:ED:6D:6F:FD:A2:76:A5:1A:DB:5B:F5:09:52:95
Authority key identifier: 91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
Certificate issuer: /CN=91a071508338260551a55f01fd0708fdf5e08287
Certificate serial: 01968AA5A4566B25F679C8B26F278C97597B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
Manifest number: 151B
Signing time: Thu 01 May 2025 07:00:33 +0000
Manifest this update: Thu 01 May 2025 07:00:33 +0000
Manifest next update: Fri 02 May 2025 07:00:33 +0000
Files and hashes: 1: Cgt_gy7EMOYMV19k2tz2rtLd7TU.roa (hash: j2CPj0aVUdndtIwS2SsvRubF8DiJi7ArwXEuxy5F6uI=)
2: LtAL3K8AdfyisGKqq9Vjp_7EH0w.roa (hash: ExkUCXkAhlWeYSrTyMjTF0LGwM8Q8/UHTNY3ZJzGHYE=)
3: kaBxUIM4JgVRpV8B_QcI_fXggoc.crl (hash: GNN8Zi4HU3XPZroNBpee4A0wWbYORrWtFmHBoqrC78Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:a5:a4:56:6b:25:f6:79:c8:b2:6f:27:8c:97:59:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a071508338260551a55f01fd0708fdf5e08287
Validity
Not Before: May 1 07:00:33 2025 GMT
Not After : May 2 07:00:33 2025 GMT
Subject: CN=8dded374713aed6d6ffda276a51adb5bf5095295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6b:dd:03:99:dc:b7:26:e3:f4:8c:6d:8e:57:
f2:40:0a:b2:4d:c9:5c:65:22:35:7a:14:c6:cd:56:
7c:92:e6:14:6d:b1:28:fb:55:7a:4e:4c:33:c4:00:
85:e7:8c:72:3e:e3:f7:0a:5c:c5:32:d3:11:70:65:
bb:2f:a0:de:85:a3:21:66:4c:a0:62:07:4c:e4:95:
db:00:f0:10:00:27:4e:80:80:4e:08:c5:09:20:5f:
8e:be:3b:38:70:e6:b5:ad:d0:3d:c5:00:9b:5c:20:
59:38:af:91:34:a3:f8:64:7a:d9:40:7a:1b:b3:85:
1c:3d:7f:35:94:a9:03:43:0e:c2:b8:09:45:6d:e1:
04:1a:cc:b5:5f:25:69:dd:96:0e:8f:60:38:a3:5f:
a1:6b:f9:07:02:b3:96:eb:4e:2f:a7:18:05:d1:a9:
0a:f1:5c:a7:ab:fd:35:42:5d:37:39:b4:c1:8a:c2:
0f:a6:de:83:2a:27:d5:5a:38:19:03:62:f5:70:dd:
1a:5e:fc:d3:23:4b:fa:e4:6e:15:00:4e:54:04:5a:
94:fe:00:c9:80:eb:4c:7e:44:43:d9:6c:bd:b4:a9:
1e:a5:5a:99:77:9f:ae:88:13:31:3f:82:97:d6:99:
e6:04:1a:8d:3f:2b:02:fe:3a:2d:67:a6:2a:64:f9:
38:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DE:D3:74:71:3A:ED:6D:6F:FD:A2:76:A5:1A:DB:5B:F5:09:52:95
X509v3 Authority Key Identifier:
keyid:91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6f:57:0a:dd:d6:dc:0c:c6:5a:4a:a9:35:d5:40:02:3a:d6:
8f:87:06:34:bc:f6:df:1e:35:36:3d:1e:2c:e1:94:a1:a2:af:
97:70:02:bf:38:cf:c4:df:7a:d1:c4:b9:e3:a2:0b:77:bf:fc:
c4:32:42:69:8e:43:b5:c4:72:0b:17:87:58:ad:29:b9:4d:5f:
ca:31:51:45:ef:d6:20:f7:db:4d:27:c1:59:68:a7:3e:0b:e8:
5e:ae:df:ed:59:4d:02:da:ac:c7:14:be:49:29:68:c6:f4:09:
ad:3f:e2:d6:f3:7d:2d:82:fb:c6:64:23:f6:33:5a:9d:0f:b5:
30:49:25:c5:c9:98:22:cb:77:5c:93:4c:82:ea:1a:76:10:0e:
bc:99:2a:cc:01:0c:c6:07:d5:6d:16:e4:56:64:31:39:84:13:
5a:f1:87:19:76:43:21:a7:bb:b7:1d:30:3f:e9:32:33:5d:58:
e0:78:f6:5b:59:1f:b4:e0:bb:14:af:8d:95:83:8e:0f:89:ee:
0d:33:67:9f:59:e2:dc:85:ef:a0:5e:3e:f5:54:58:50:95:bd:
29:bb:fe:f0:a3:7b:a4:06:74:36:a4:2d:dd:6f:58:62:59:a2:
19:52:95:a0:52:c3:e9:66:d1:c4:3d:49:31:79:fa:ec:6d:2c:
2d:39:b4:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaKpaRWayX2eciybyeMl1l7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYTA3MTUwODMzODI2MDU1MWE1NWYwMWZkMDcwOGZkZjVl
MDgyODcwHhcNMjUwNTAxMDcwMDMzWhcNMjUwNTAyMDcwMDMzWjAzMTEwLwYDVQQD
Eyg4ZGRlZDM3NDcxM2FlZDZkNmZmZGEyNzZhNTFhZGI1YmY1MDk1Mjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mvdA5nctybj9IxtjlfyQAqyTclc
ZSI1ehTGzVZ8kuYUbbEo+1V6TkwzxACF54xyPuP3ClzFMtMRcGW7L6DehaMhZkyg
YgdM5JXbAPAQACdOgIBOCMUJIF+Ovjs4cOa1rdA9xQCbXCBZOK+RNKP4ZHrZQHob
s4UcPX81lKkDQw7CuAlFbeEEGsy1XyVp3ZYOj2A4o1+ha/kHArOW604vpxgF0akK
8Vynq/01Ql03ObTBisIPpt6DKifVWjgZA2L1cN0aXvzTI0v65G4VAE5UBFqU/gDJ
gOtMfkRD2Wy9tKkepVqZd5+uiBMxP4KX1pnmBBqNPysC/jotZ6YqZPk4ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3e03RxOu1tb/2idqUa21v1CVKVMB8GA1UdIwQY
MBaAFJGgcVCDOCYFUaVfAf0HCP314IKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xNWNjNTItNTFlZS00NjBlLTlhZWIt
ZWU1NTU5YjM2NThiLzEva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xNWNjNTItNTFlZS00NjBlLTlhZWItZWU1NTU5YjM2NThi
LzEva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASW9XCt3W
3AzGWkqpNdVAAjrWj4cGNLz23x41Nj0eLOGUoaKvl3ACvzjPxN960cS546ILd7/8
xDJCaY5DtcRyCxeHWK0puU1fyjFRRe/WIPfbTSfBWWinPgvoXq7f7VlNAtqsxxS+
SSloxvQJrT/i1vN9LYL7xmQj9jNanQ+1MEklxcmYIst3XJNMguoadhAOvJkqzAEM
xgfVbRbkVmQxOYQTWvGHGXZDIae7tx0wP+kyM11Y4Hj2W1kftOC7FK+NlYOOD4nu
DTNnn1ni3IXvoF4+9VRYUJW9Kbv+8KN7pAZ0NqQt3W9YYlmiGVKVoFLD6WbRxD1J
MXn67G0sLTm0iA==
-----END CERTIFICATE-----
Generated at Thu May 1 11:18:24 2025 by rpki-client