Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: 47HN0HvMrv0A68nbpwJ2TkkxlPGEj4q0LMiflOzyKNY=
Subject key identifier: 32:E9:A8:1C:78:37:4C:F3:FF:71:00:4F:65:AC:96:26:21:D9:CF:9D
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 0196797B70CF57B94B1725D3DE57A047A086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 23:00:55 +0000
Manifest this update: Sun 27 Apr 2025 23:00:55 +0000
Manifest next update: Mon 28 Apr 2025 23:00:55 +0000
Files and hashes: 1: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: vqdog3coTOp8eZJn6ey8xCW7KNECOIh3SbFZISWdKf8=)
2: veklkDiCqI48H1uQ5ixFAlK84NY.roa (hash: KUIRIFDZrVheg1iXYyW8LsCjhDrH33Kf+Op6ybMvK2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:70:cf:57:b9:4b:17:25:d3:de:57:a0:47:a0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: Apr 27 23:00:55 2025 GMT
Not After : Apr 28 23:00:55 2025 GMT
Subject: CN=32e9a81c78374cf3ff71004f65ac962621d9cf9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ec:93:9b:c4:c6:7b:81:fa:9c:ac:c7:2a:16:
5e:65:c3:d4:2d:a3:5a:a8:14:c9:0e:1c:ea:25:12:
04:ff:ba:16:1f:f7:ab:1c:d8:f0:18:fc:19:ce:1f:
13:6c:7a:c5:96:a4:e0:07:f7:de:d6:69:f2:b2:55:
ae:e9:93:f9:5f:24:63:4c:0b:bd:1f:3f:c5:4c:32:
a0:d9:3d:64:02:64:c6:51:c4:15:3a:93:a8:bc:0b:
26:c6:22:51:a5:55:71:af:30:aa:71:d9:82:b1:12:
9c:04:b1:76:7e:6e:4d:36:71:fa:1d:d2:57:5a:45:
a1:6b:1f:cc:86:8b:53:f2:a3:0c:93:66:33:c1:04:
52:67:df:d1:cc:ed:4a:ac:49:97:53:93:38:a1:3b:
f7:d6:75:e9:c5:47:a7:24:dd:2a:e3:be:d9:53:1e:
36:62:33:a5:ee:15:d2:ac:dd:d7:b8:b2:6c:5a:da:
c1:79:d8:4e:80:a7:78:a4:eb:9b:43:20:09:30:5b:
65:aa:ce:d9:e3:0c:69:d2:ac:34:32:0f:81:59:a2:
11:89:97:26:8f:5e:e9:09:59:a1:f8:bd:95:9a:5f:
24:9c:7e:40:16:04:c3:95:64:21:42:f1:d6:54:f4:
9e:bd:6d:6c:ea:a5:0d:64:12:ce:39:bc:c7:01:a2:
46:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E9:A8:1C:78:37:4C:F3:FF:71:00:4F:65:AC:96:26:21:D9:CF:9D
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:9b:3f:37:f1:d4:98:de:94:1b:92:6b:d1:03:5a:aa:cf:05:
3a:ad:31:bd:a0:bd:b9:6b:69:87:0c:33:d2:3e:e5:94:5e:9e:
76:ff:85:ee:58:14:fc:66:1e:a6:38:92:37:a7:97:33:af:c0:
76:e1:82:47:e4:1a:49:a5:ce:8f:bd:ae:1d:2f:be:7d:e7:6d:
e7:85:21:91:8f:83:7a:b8:59:ee:66:da:dd:6b:9b:8c:f9:e3:
ca:85:06:df:c7:0a:54:59:57:8f:48:26:e7:d2:53:60:df:da:
eb:87:06:67:6a:fc:4a:f0:21:9b:3a:12:29:b8:73:bf:92:ed:
a7:6b:ad:4e:ef:42:4f:f3:30:03:b1:64:34:5e:f1:a8:94:42:
fd:d4:6a:93:f5:24:79:db:05:e6:6b:17:e0:3c:32:09:1a:4f:
80:08:23:17:04:02:91:9a:60:77:83:00:bc:b4:8c:95:fa:d9:
ac:2d:36:3b:9d:a3:9f:74:8b:32:06:ca:be:d0:fa:97:b4:2d:
69:0a:c2:0e:64:a8:14:f9:7c:75:a0:f7:96:30:5e:2f:2e:91:
88:1f:d8:0b:5a:15:d2:3f:9c:2e:8c:d2:cc:92:43:76:6e:d9:
a2:7b:a7:2d:5a:12:d4:7b:5f:d4:6d:bb:c0:9b:86:70:54:3f:
12:c4:f7:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5e3DPV7lLFyXT3legR6CGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMDRlYmEyYTk3YTA5YzliM2IwOGNmZjgzZGZiNDc3MTQx
YmMxY2IwHhcNMjUwNDI3MjMwMDU1WhcNMjUwNDI4MjMwMDU1WjAzMTEwLwYDVQQD
EygzMmU5YTgxYzc4Mzc0Y2YzZmY3MTAwNGY2NWFjOTYyNjIxZDljZjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+yTm8TGe4H6nKzHKhZeZcPULaNa
qBTJDhzqJRIE/7oWH/erHNjwGPwZzh8TbHrFlqTgB/fe1mnyslWu6ZP5XyRjTAu9
Hz/FTDKg2T1kAmTGUcQVOpOovAsmxiJRpVVxrzCqcdmCsRKcBLF2fm5NNnH6HdJX
WkWhax/MhotT8qMMk2YzwQRSZ9/RzO1KrEmXU5M4oTv31nXpxUenJN0q477ZUx42
YjOl7hXSrN3XuLJsWtrBedhOgKd4pOubQyAJMFtlqs7Z4wxp0qw0Mg+BWaIRiZcm
j17pCVmh+L2Vml8knH5AFgTDlWQhQvHWVPSevW1s6qUNZBLOObzHAaJGLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLpqBx4N0zz/3EAT2WsliYh2c+dMB8GA1UdIwQY
MBaAFJME66KpegnJs7CM/4PftHcUG8HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hYjIzZmYtZTUzYi00ZDA4LTgzOTIt
OWFmOTkzYjAzNDNlLzEva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hYjIzZmYtZTUzYi00ZDA4LTgzOTItOWFmOTkzYjAzNDNl
LzEva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5s/N/HU
mN6UG5Jr0QNaqs8FOq0xvaC9uWtphwwz0j7llF6edv+F7lgU/GYepjiSN6eXM6/A
duGCR+QaSaXOj72uHS++fedt54UhkY+DerhZ7mba3WubjPnjyoUG38cKVFlXj0gm
59JTYN/a64cGZ2r8SvAhmzoSKbhzv5Ltp2utTu9CT/MwA7FkNF7xqJRC/dRqk/Uk
edsF5msX4DwyCRpPgAgjFwQCkZpgd4MAvLSMlfrZrC02O52jn3SLMgbKvtD6l7Qt
aQrCDmSoFPl8daD3ljBeLy6RiB/YC1oV0j+cLozSzJJDdm7ZonunLVoS1Htf1G27
wJuGcFQ/EsT3sw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 02:05:34 2025 by rpki-client