Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
File: KqggK00MXBEdN08emLc9tJJNZLE.mft (raw, json)
Hash identifier: qqVWBw+BaK0QJbar03s65+yccrMXeQ1MAzYO5vuU770=
Subject key identifier: E1:81:B9:AD:E6:BC:8C:69:F5:64:CF:E1:7A:20:C2:91:7F:ED:61:4E
Authority key identifier: 2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
Certificate issuer: /CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Certificate serial: 0196914C5D37A89281541E0B075115120BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
Manifest number: 0B52
Signing time: Fri 02 May 2025 14:00:23 +0000
Manifest this update: Fri 02 May 2025 14:00:23 +0000
Manifest next update: Sat 03 May 2025 14:00:23 +0000
Files and hashes: 1: 8nLoMcIcsiOT94ggaJIYQQl2oRM.roa (hash: qT9FeEnewJoNeBMjY4zbOI1Gsyx72sYu0a6uEXjvmkY=)
2: KqggK00MXBEdN08emLc9tJJNZLE.crl (hash: RxmGCI05jIZrRxkXeLx70Z35f32Lt1DMbQ3Er4PhElQ=)
3: vT6MkqafH5VOMm1ZMgN21UjQYFs.roa (hash: dIHvBtvVugb4PHXdIHdFzDigve4LKcNg9oX/bIFSdDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:4c:5d:37:a8:92:81:54:1e:0b:07:51:15:12:0b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Validity
Not Before: May 2 14:00:23 2025 GMT
Not After : May 3 14:00:23 2025 GMT
Subject: CN=e181b9ade6bc8c69f564cfe17a20c2917fed614e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d8:2d:e8:a6:3b:5f:62:9c:c6:2d:ab:4c:1a:
a8:87:62:1c:05:b1:44:bb:ce:95:97:60:79:9f:ea:
64:d0:ed:ae:aa:cf:fb:0f:2b:42:b3:bd:7b:80:15:
f4:9a:13:1f:99:94:7c:5d:6b:9f:60:43:18:5e:42:
19:f4:05:b6:75:59:34:b8:87:0e:f8:f3:f1:85:d2:
b6:f7:0a:bb:a0:06:32:35:cd:7b:5b:2b:58:70:2c:
46:4b:8c:1f:40:41:74:ea:a7:fd:e3:a5:dd:04:2b:
6f:cb:62:15:93:98:f0:af:f8:c1:ca:c3:de:8a:e6:
2b:a8:c3:71:03:a6:bd:e7:90:68:1f:9f:25:a9:a5:
e1:fe:9c:d7:cb:bd:09:38:e3:86:ae:f4:94:74:ce:
b2:5c:3b:8d:20:90:67:2a:86:c4:ac:2a:c3:84:28:
66:6c:3f:ea:27:5d:f2:52:a6:12:cc:60:2d:17:af:
25:6e:ed:f5:f0:d3:fc:76:48:70:13:cb:b3:a8:46:
3b:50:aa:aa:8d:6a:a7:16:50:bd:e5:31:85:e5:53:
c8:03:be:b5:86:78:14:0a:02:5a:d6:92:93:42:98:
4d:23:e7:90:06:db:cf:71:8b:33:ab:14:24:c5:9e:
62:1d:81:17:fb:f0:54:dd:65:b9:82:5f:42:d1:1a:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:81:B9:AD:E6:BC:8C:69:F5:64:CF:E1:7A:20:C2:91:7F:ED:61:4E
X509v3 Authority Key Identifier:
keyid:2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:db:3e:62:07:7d:76:68:f4:d5:6a:b6:2e:d7:73:3f:5b:40:
94:59:31:26:15:3a:70:32:4d:ab:af:2e:b7:22:22:50:7b:b8:
61:8a:b3:c8:6b:33:9a:83:b8:82:db:e4:fe:9b:41:17:59:52:
11:c8:d6:e5:c6:05:98:f5:5e:b6:eb:e6:e1:5e:bd:1c:5f:f8:
60:db:4f:9f:d6:cf:64:c0:3b:aa:60:ce:57:e2:99:4b:bd:ca:
29:ce:a8:1d:55:74:e1:49:bc:74:6e:9e:aa:93:a0:35:90:29:
95:86:aa:ed:29:ac:24:6f:9d:b8:ab:cc:14:4f:7d:3f:ab:75:
3d:23:7a:95:89:e6:0f:42:9f:d2:34:38:53:c5:7e:7c:73:13:
d5:b7:14:50:78:c3:f5:c7:77:20:cf:5a:a6:b3:05:8a:b8:f9:
7c:bd:ff:99:69:e4:8a:88:e1:f5:28:4f:49:7a:72:39:76:dd:
fb:10:b8:67:fe:96:27:47:f1:84:e4:ba:18:b5:4a:bd:67:58:
c9:fe:71:81:a6:ea:8f:c5:8c:04:05:a0:73:39:60:d7:2f:5b:
ff:76:67:fe:d2:2a:ab:54:0d:05:7e:f2:6b:74:4b:e2:31:c7:
fd:f9:f3:0b:0d:ce:e3:cd:5e:1f:a3:6f:83:ad:59:1c:11:4f:
b0:41:38:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaRTF03qJKBVB4LB1EVEgvIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTgyMDJiNGQwYzVjMTExZDM3NGYxZTk4YjczZGI0OTI0
ZDY0YjEwHhcNMjUwNTAyMTQwMDIzWhcNMjUwNTAzMTQwMDIzWjAzMTEwLwYDVQQD
EyhlMTgxYjlhZGU2YmM4YzY5ZjU2NGNmZTE3YTIwYzI5MTdmZWQ2MTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9gt6KY7X2Kcxi2rTBqoh2IcBbFE
u86Vl2B5n+pk0O2uqs/7DytCs717gBX0mhMfmZR8XWufYEMYXkIZ9AW2dVk0uIcO
+PPxhdK29wq7oAYyNc17WytYcCxGS4wfQEF06qf946XdBCtvy2IVk5jwr/jBysPe
iuYrqMNxA6a955BoH58lqaXh/pzXy70JOOOGrvSUdM6yXDuNIJBnKobErCrDhChm
bD/qJ13yUqYSzGAtF68lbu318NP8dkhwE8uzqEY7UKqqjWqnFlC95TGF5VPIA761
hngUCgJa1pKTQphNI+eQBtvPcYszqxQkxZ5iHYEX+/BU3WW5gl9C0Rp4BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGBua3mvIxp9WTP4XogwpF/7WFOMB8GA1UdIwQY
MBaAFCqoICtNDFwRHTdPHpi3PbSSTWSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yN2IzYjMtNGIyMi00NzQwLWE2NWEt
NmU3YmFlNWZmODk4LzEvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8yN2IzYjMtNGIyMi00NzQwLWE2NWEtNmU3YmFlNWZmODk4
LzEvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApts+Ygd9
dmj01Wq2LtdzP1tAlFkxJhU6cDJNq68utyIiUHu4YYqzyGszmoO4gtvk/ptBF1lS
EcjW5cYFmPVetuvm4V69HF/4YNtPn9bPZMA7qmDOV+KZS73KKc6oHVV04Um8dG6e
qpOgNZAplYaq7SmsJG+duKvMFE99P6t1PSN6lYnmD0Kf0jQ4U8V+fHMT1bcUUHjD
9cd3IM9aprMFirj5fL3/mWnkiojh9ShPSXpyOXbd+xC4Z/6WJ0fxhOS6GLVKvWdY
yf5xgabqj8WMBAWgczlg1y9b/3Zn/tIqq1QNBX7ya3RL4jHH/fnzCw3O481eH6Nv
g61ZHBFPsEE4gg==
-----END CERTIFICATE-----
Generated at Fri May 2 23:24:47 2025 by rpki-client