Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: Y3sqBS9Lw1M77gGxObSfsKjUChb0KPC+ogLKfQ2kjak=
Subject key identifier: 9E:06:13:AF:D6:3E:22:C6:BC:17:67:C7:7B:C4:1F:90:24:26:22:18
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 019645569F83F15DBE4599DF22CA84AD514F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 13CE
Signing time: Thu 17 Apr 2025 20:00:26 +0000
Manifest this update: Thu 17 Apr 2025 20:00:26 +0000
Manifest next update: Fri 18 Apr 2025 20:00:26 +0000
Files and hashes: 1: YV0LpnxtBTAq4lz06bEpbCvyfLw.roa (hash: 9MkObNOUwLuOccH80DPJr9LOnHYQQUzirjuDL+0jWhk=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: YpD8+/gysSYO6j3i69nhExfU+laPc/UA+fFXLoWFzRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:9f:83:f1:5d:be:45:99:df:22:ca:84:ad:51:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Apr 17 20:00:26 2025 GMT
Not After : Apr 18 20:00:26 2025 GMT
Subject: CN=9e0613afd63e22c6bc1767c77bc41f9024262218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9d:66:34:88:b8:db:9a:ce:aa:14:15:5a:bc:
43:69:33:c0:63:13:d9:ba:78:3c:29:1e:94:c6:96:
9d:6d:62:43:89:d4:9a:c2:af:1c:9e:d1:45:05:18:
41:8d:6b:e0:1a:1a:ca:90:d7:cc:5d:45:18:f7:9d:
b4:b8:8f:ec:e8:06:72:cf:dd:4f:b3:ca:e3:d4:07:
19:4e:c9:7c:c9:bd:bd:04:2b:a8:b4:8d:fe:10:da:
dc:93:d1:9b:00:ba:dc:31:0b:fc:84:8e:ef:9b:98:
bf:d9:6f:d0:ef:0b:53:7e:4a:c7:9d:a5:d9:21:1b:
77:95:fd:c9:79:e4:cb:a6:b2:50:34:83:ae:63:29:
6e:49:5c:73:02:aa:e8:71:6b:8a:a8:f0:6a:02:fc:
a6:57:21:af:cb:cf:c5:05:99:44:d8:c9:6b:91:80:
85:8d:3e:42:53:a7:7d:04:de:53:04:ca:2f:0e:7a:
4f:45:8b:de:6e:48:3a:af:41:a7:8b:bd:6b:c1:74:
b1:31:36:a7:08:92:d7:43:6a:bf:90:71:2b:6c:05:
52:1f:74:c8:a1:41:22:f4:ad:e7:26:eb:43:e5:c3:
b0:f2:40:80:55:97:4c:d8:5c:bc:44:7b:ff:c7:3a:
4b:d4:15:8c:fa:6a:d9:8f:10:eb:ee:72:fa:99:69:
95:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:06:13:AF:D6:3E:22:C6:BC:17:67:C7:7B:C4:1F:90:24:26:22:18
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a0:ff:1e:ad:13:c7:21:0d:79:57:06:0c:dc:de:0c:4a:49:
d8:50:a0:3f:ae:47:cb:d4:cf:37:ad:2c:9f:50:5c:a4:ef:a6:
d0:ed:e7:6c:6a:f7:67:c7:37:2c:a8:91:1c:bf:2b:a9:ef:0a:
65:53:05:fc:a5:ed:46:09:25:42:02:78:a9:d6:33:76:e7:3c:
c3:e9:00:db:57:66:ec:15:10:22:9d:8c:0b:56:05:13:a7:79:
15:1d:b9:ca:60:21:88:f0:f9:62:c1:23:c6:96:eb:30:9f:9b:
db:c3:da:d5:ec:b7:14:3d:bf:97:56:1a:f1:b7:12:a3:71:52:
2d:51:bc:f3:a0:25:7e:7f:ec:a2:04:2f:81:eb:29:90:75:75:
73:d9:b3:9b:76:7d:db:43:ce:3e:f6:db:de:79:04:fb:13:cd:
0c:f9:46:70:2e:38:0a:b6:48:f3:1b:08:31:9a:2a:ac:15:a0:
50:54:4d:20:7b:67:0a:5b:cc:a5:a2:e8:fc:57:a3:4c:48:ee:
e5:72:61:ea:98:dd:d8:92:f2:2e:4c:05:91:e5:55:f7:14:0e:
c0:43:11:aa:84:4a:e1:1c:90:fa:3a:18:01:66:57:de:0a:d5:
fb:ec:83:67:f7:66:98:f9:e1:ae:a3:de:1f:db:ff:eb:0f:2b:
4a:24:59:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFVp+D8V2+RZnfIsqErVFPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDhiNzZiMjE2NDc2OTZjOWY0ZDYzODJiNTI1ZDgzYTA1
ODBmNGEwHhcNMjUwNDE3MjAwMDI2WhcNMjUwNDE4MjAwMDI2WjAzMTEwLwYDVQQD
Eyg5ZTA2MTNhZmQ2M2UyMmM2YmMxNzY3Yzc3YmM0MWY5MDI0MjYyMjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ1mNIi425rOqhQVWrxDaTPAYxPZ
ung8KR6UxpadbWJDidSawq8cntFFBRhBjWvgGhrKkNfMXUUY9520uI/s6AZyz91P
s8rj1AcZTsl8yb29BCuotI3+ENrck9GbALrcMQv8hI7vm5i/2W/Q7wtTfkrHnaXZ
IRt3lf3JeeTLprJQNIOuYyluSVxzAqrocWuKqPBqAvymVyGvy8/FBZlE2MlrkYCF
jT5CU6d9BN5TBMovDnpPRYvebkg6r0Gni71rwXSxMTanCJLXQ2q/kHErbAVSH3TI
oUEi9K3nJutD5cOw8kCAVZdM2Fy8RHv/xzpL1BWM+mrZjxDr7nL6mWmVRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4GE6/WPiLGvBdnx3vEH5AkJiIYMB8GA1UdIwQY
MBaAFJLYt2shZHaWyfTWOCtSXYOgWA9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82ZjFmMmQtOTliYi00NGUwLWFkYzUt
OGRmZDViMTUyZjc5LzEva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi82ZjFmMmQtOTliYi00NGUwLWFkYzUtOGRmZDViMTUyZjc5
LzEva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqD/Hq0T
xyENeVcGDNzeDEpJ2FCgP65Hy9TPN60sn1BcpO+m0O3nbGr3Z8c3LKiRHL8rqe8K
ZVMF/KXtRgklQgJ4qdYzduc8w+kA21dm7BUQIp2MC1YFE6d5FR25ymAhiPD5YsEj
xpbrMJ+b28Pa1ey3FD2/l1Ya8bcSo3FSLVG886Alfn/sogQvgespkHV1c9mzm3Z9
20POPvbb3nkE+xPNDPlGcC44CrZI8xsIMZoqrBWgUFRNIHtnClvMpaLo/FejTEju
5XJh6pjd2JLyLkwFkeVV9xQOwEMRqoRK4RyQ+joYAWZX3grV++yDZ/dmmPnhrqPe
H9v/6w8rSiRZyA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:54:34 2025 by rpki-client