Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
File: kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft (raw, json)
Hash identifier: riZzpJQuuSQRQvIP7bGneOGg0i62OyVN6FNZngaXsuQ=
Subject key identifier: 4E:CE:9B:93:CA:F5:C7:2F:69:96:52:A9:AA:D0:B4:99:8E:BA:98:78
Authority key identifier: 90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
Certificate issuer: /CN=90f76537ff745893e3142fa0984f449b725b8fd3
Certificate serial: 01967B326173ABD150544743C36E6B6DFD5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 07:00:21 +0000
Manifest this update: Mon 28 Apr 2025 07:00:21 +0000
Manifest next update: Tue 29 Apr 2025 07:00:21 +0000
Files and hashes: 1: 4h8beUu4miiEn1n13esJcxX7gpc.roa (hash: 33+qj2eaRd7O8N5EQLS3e9QL955CTXDuq4VOYW0my7E=)
2: kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl (hash: 9N9DBKHdi6LADQnFQMhCBmQylgLOnWmW/3iksRA2UEU=)
3: zcJuMPKqinNoidJ9rHaaDdmdVvA.roa (hash: 9UsWhn4/INB/JJvJuTs6CMag+GLrqc1ZuXSO78kkqu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:61:73:ab:d1:50:54:47:43:c3:6e:6b:6d:fd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f76537ff745893e3142fa0984f449b725b8fd3
Validity
Not Before: Apr 28 07:00:21 2025 GMT
Not After : Apr 29 07:00:21 2025 GMT
Subject: CN=4ece9b93caf5c72f699652a9aad0b4998eba9878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f2:d8:4c:41:17:4a:b9:40:1e:5f:b8:34:89:
47:de:e3:3a:74:17:a0:47:a7:da:a1:31:e8:0a:bb:
7c:c7:06:fb:ba:16:82:db:3a:1c:0e:ab:7e:4e:03:
7a:86:d2:5e:da:65:31:e3:98:5a:cc:fd:63:78:b5:
cb:60:96:a6:33:db:6c:49:03:4e:ec:8c:e5:97:ef:
c5:c1:ae:11:45:25:98:c0:0c:b9:3c:e1:7a:cd:28:
c9:9c:6e:fe:18:27:a8:62:76:c9:11:36:20:25:88:
c0:d0:f5:bf:67:9b:43:59:49:44:03:a1:4b:c4:e6:
e6:d0:a7:34:83:db:fb:c5:ef:be:96:5a:99:09:47:
6b:0e:d4:1c:64:9f:43:8f:e6:cd:05:9f:1b:15:a7:
b1:ef:59:dc:b1:ee:91:41:ad:45:d2:27:13:92:d9:
9d:a5:fe:17:cd:35:da:ca:6c:bd:e9:fa:e2:76:d5:
a7:32:ed:ab:1e:d4:34:27:c2:64:85:16:27:91:22:
95:26:0a:e9:6c:19:d0:90:30:25:d3:81:14:5e:e0:
c1:87:aa:bb:f1:11:51:be:eb:66:84:82:4b:ef:93:
d0:fb:a5:6a:f3:a9:ed:ba:95:1b:4f:ca:ff:65:2e:
4b:2a:05:88:e7:b9:d2:51:d6:35:a1:ba:5e:42:aa:
49:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CE:9B:93:CA:F5:C7:2F:69:96:52:A9:AA:D0:B4:99:8E:BA:98:78
X509v3 Authority Key Identifier:
keyid:90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:99:07:84:93:8d:1d:ba:83:e8:7d:41:e6:d5:3a:cb:95:ee:
61:43:d9:43:e1:05:9f:7b:42:b2:1d:bc:4a:68:26:1a:92:17:
10:cd:38:53:4a:8f:b3:fb:ff:d9:91:70:2a:1b:39:b2:cd:ab:
0e:2d:d5:8e:20:f8:8a:cc:1f:ce:ad:b7:93:cb:ae:b0:aa:de:
41:ca:92:1c:bf:c6:13:fa:bc:bf:d2:55:c6:b6:c8:52:b2:00:
ae:c3:f4:d5:ca:81:a7:fb:76:f3:15:8d:f4:5e:da:45:79:62:
2e:cb:77:f4:f9:29:5a:3c:4d:9a:61:cf:ed:5b:e5:dc:23:38:
6c:16:d3:79:68:fc:61:9d:ee:18:1d:1d:46:68:a5:e6:d8:1a:
32:a9:6a:5c:be:4f:10:f4:08:50:af:dd:83:b5:fe:36:92:b5:
0a:d4:70:6b:74:10:23:0a:99:b0:f3:1c:9e:c0:e7:7f:73:0e:
ab:88:74:c0:ed:0d:8c:1c:3c:8e:5c:48:1b:18:24:4d:a5:c0:
80:e4:ee:7b:9b:30:29:d2:72:31:50:a3:ff:d6:ce:88:4a:fe:
6d:0b:43:5a:05:dc:a7:71:42:4d:25:b6:48:70:73:76:e3:26:
de:09:bf:45:90:64:30:64:2c:ac:26:e5:5f:66:bb:a8:61:e2:
67:6c:74:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7MmFzq9FQVEdDw25rbf1cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjc2NTM3ZmY3NDU4OTNlMzE0MmZhMDk4NGY0NDliNzI1
YjhmZDMwHhcNMjUwNDI4MDcwMDIxWhcNMjUwNDI5MDcwMDIxWjAzMTEwLwYDVQQD
Eyg0ZWNlOWI5M2NhZjVjNzJmNjk5NjUyYTlhYWQwYjQ5OThlYmE5ODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPLYTEEXSrlAHl+4NIlH3uM6dBeg
R6faoTHoCrt8xwb7uhaC2zocDqt+TgN6htJe2mUx45hazP1jeLXLYJamM9tsSQNO
7Izll+/Fwa4RRSWYwAy5POF6zSjJnG7+GCeoYnbJETYgJYjA0PW/Z5tDWUlEA6FL
xObm0Kc0g9v7xe++llqZCUdrDtQcZJ9Dj+bNBZ8bFaex71ncse6RQa1F0icTktmd
pf4XzTXaymy96fridtWnMu2rHtQ0J8JkhRYnkSKVJgrpbBnQkDAl04EUXuDBh6q7
8RFRvutmhIJL75PQ+6Vq86ntupUbT8r/ZS5LKgWI57nSUdY1obpeQqpJLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7Om5PK9ccvaZZSqarQtJmOuph4MB8GA1UdIwQY
MBaAFJD3ZTf/dFiT4xQvoJhPRJtyW4/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BkbE5fOTBXSlBqRkMtZ21FOUVtM0piajlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80Zjc2ODAtODFhYi00YzFmLWEwN2It
N2M2MmQ1YzMxNWJmLzEva1BkbE5fOTBXSlBqRkMtZ21FOUVtM0piajlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80Zjc2ODAtODFhYi00YzFmLWEwN2ItN2M2MmQ1YzMxNWJm
LzEva1BkbE5fOTBXSlBqRkMtZ21FOUVtM0piajlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpkHhJON
HbqD6H1B5tU6y5XuYUPZQ+EFn3tCsh28SmgmGpIXEM04U0qPs/v/2ZFwKhs5ss2r
Di3VjiD4iswfzq23k8uusKreQcqSHL/GE/q8v9JVxrbIUrIArsP01cqBp/t28xWN
9F7aRXliLst39PkpWjxNmmHP7Vvl3CM4bBbTeWj8YZ3uGB0dRmil5tgaMqlqXL5P
EPQIUK/dg7X+NpK1CtRwa3QQIwqZsPMcnsDnf3MOq4h0wO0NjBw8jlxIGxgkTaXA
gOTue5swKdJyMVCj/9bOiEr+bQtDWgXcp3FCTSW2SHBzduMm3gm/RZBkMGQsrCbl
X2a7qGHiZ2x0Og==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:03:49 2025 by rpki-client