
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
File: k4yI3syI92r_E7wIWNs4eDS-FxE.mft (raw, json)
Hash identifier: j7JJ5a0DBwpkumgr660BJU/7gIFnhN+qnVLZzEPo0KI=
Subject key identifier: 2F:9E:C5:FA:D2:E7:07:71:64:DB:8B:B7:38:36:98:BA:BD:76:35:80
Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
Certificate issuer: /CN=938c88decc88f76aff13bc0858db387834be1711
Certificate serial: 01963F8B807E6A1CC80CC8070871565937C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
Manifest number: 0F94
Signing time: Wed 16 Apr 2025 17:00:29 +0000
Manifest this update: Wed 16 Apr 2025 17:00:29 +0000
Manifest next update: Thu 17 Apr 2025 17:00:29 +0000
Files and hashes: 1: GzSJNC8rXvHPR5ECqFrqBc47EjY.roa (hash: DpRxP+N8EisPg5SdQn8IRQde36mD1fsRwPBj23IbYe0=)
2: k4yI3syI92r_E7wIWNs4eDS-FxE.crl (hash: wQriLEDgGTT2Rp3I90VHw+ZHeG+erFx7pFsa3NkuvWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:80:7e:6a:1c:c8:0c:c8:07:08:71:56:59:37:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938c88decc88f76aff13bc0858db387834be1711
Validity
Not Before: Apr 16 17:00:29 2025 GMT
Not After : Apr 17 17:00:29 2025 GMT
Subject: CN=2f9ec5fad2e7077164db8bb7383698babd763580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:e8:6f:d7:3e:56:08:10:dd:07:0c:b5:15:
17:dd:bd:54:ca:fa:d8:af:a4:ff:2f:fa:d5:db:55:
18:d2:98:8d:ba:39:f1:e7:4e:35:39:44:0d:67:4f:
75:28:02:80:8f:24:f2:43:47:e4:38:ba:02:d8:78:
24:58:5e:12:07:c2:f6:74:cd:47:6b:3f:db:2f:1b:
5e:16:ba:6a:6b:2a:d4:02:f3:d5:31:90:99:c5:e5:
0d:56:f8:b8:c3:c2:66:50:3b:50:24:30:4e:30:02:
08:f7:a1:3f:fb:01:0b:81:d9:49:3a:0d:61:f0:f6:
b3:e5:ab:20:d2:2a:3e:ea:73:60:84:a0:54:42:d7:
37:2b:7c:3d:a2:40:e1:2e:53:fe:34:13:24:ce:c1:
25:9d:d2:96:b7:91:b8:36:10:d8:d3:55:f2:3b:92:
27:a6:27:de:41:0d:b7:24:52:21:9b:16:0b:55:61:
c2:63:b1:a5:ca:21:9f:48:d1:e7:c1:48:22:37:c4:
ab:94:c9:01:72:a7:83:66:64:e7:ad:4b:3c:5b:4c:
5a:dd:f3:68:0a:44:72:4a:3e:11:2f:da:40:c0:ac:
0c:02:cb:1c:e5:89:3e:97:30:ff:e3:ce:23:df:e1:
54:ec:c2:d5:1b:10:83:2a:57:b3:d0:e3:6f:2b:98:
1a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9E:C5:FA:D2:E7:07:71:64:DB:8B:B7:38:36:98:BA:BD:76:35:80
X509v3 Authority Key Identifier:
keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ab:3a:24:dd:bd:a3:9c:f3:68:14:35:a6:1e:ad:0b:0a:a2:
aa:a9:a5:71:2e:6b:81:de:a3:37:06:c5:a2:ee:53:97:16:7b:
d1:08:41:51:51:10:ec:14:6c:f2:6d:42:ab:77:f0:18:99:b4:
c6:57:fa:0c:37:7f:9e:d5:ae:f3:86:74:dc:60:45:c1:a5:70:
b7:c5:7d:d5:10:7c:dd:eb:46:77:e2:30:f7:25:34:59:8b:ec:
96:94:0e:76:63:7e:7d:b7:67:c6:7c:bc:22:a8:f5:87:dc:f1:
ca:95:ad:a7:41:56:e5:92:4b:9d:6b:b8:ca:de:16:ad:68:8c:
01:2c:87:22:97:0b:dc:5b:18:94:ee:9c:f5:5b:7d:8e:00:3c:
72:d3:fd:64:9c:b0:b5:f0:35:66:01:cd:f8:0a:14:67:dd:3e:
2f:c2:0a:2e:6f:88:7f:c9:2c:3d:71:b1:19:42:2e:fb:2c:a7:
09:7b:cf:c9:86:07:79:70:76:aa:27:33:c7:5e:9a:77:c5:6a:
15:37:46:1a:17:52:91:5e:4b:15:20:61:37:e8:32:eb:f3:23:
67:c0:02:6d:72:33:7b:0b:16:3a:b8:70:ee:30:46:ae:02:58:
09:29:d3:08:45:66:74:89:e1:3f:cc:b1:b0:6e:b7:aa:33:86:
e8:07:99:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/i4B+ahzIDMgHCHFWWTfAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzOGM4OGRlY2M4OGY3NmFmZjEzYmMwODU4ZGIzODc4MzRi
ZTE3MTEwHhcNMjUwNDE2MTcwMDI5WhcNMjUwNDE3MTcwMDI5WjAzMTEwLwYDVQQD
EygyZjllYzVmYWQyZTcwNzcxNjRkYjhiYjczODM2OThiYWJkNzYzNTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqXob9c+VggQ3QcMtRUX3b1UyvrY
r6T/L/rV21UY0piNujnx5041OUQNZ091KAKAjyTyQ0fkOLoC2HgkWF4SB8L2dM1H
az/bLxteFrpqayrUAvPVMZCZxeUNVvi4w8JmUDtQJDBOMAII96E/+wELgdlJOg1h
8Paz5asg0io+6nNghKBUQtc3K3w9okDhLlP+NBMkzsElndKWt5G4NhDY01XyO5In
pifeQQ23JFIhmxYLVWHCY7GlyiGfSNHnwUgiN8SrlMkBcqeDZmTnrUs8W0xa3fNo
CkRySj4RL9pAwKwMAssc5Yk+lzD/484j3+FU7MLVGxCDKlez0ONvK5gaGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+exfrS5wdxZNuLtzg2mLq9djWAMB8GA1UdIwQY
MBaAFJOMiN7MiPdq/xO8CFjbOHg0vhcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yMzIyNmYtN2MyMS00MzM4LTlkY2Et
ZmY5ZjUwM2UyZGQzLzEvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yMzIyNmYtN2MyMS00MzM4LTlkY2EtZmY5ZjUwM2UyZGQz
LzEvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqs6JN29
o5zzaBQ1ph6tCwqiqqmlcS5rgd6jNwbFou5TlxZ70QhBUVEQ7BRs8m1Cq3fwGJm0
xlf6DDd/ntWu84Z03GBFwaVwt8V91RB83etGd+Iw9yU0WYvslpQOdmN+fbdnxny8
Iqj1h9zxypWtp0FW5ZJLnWu4yt4WrWiMASyHIpcL3FsYlO6c9Vt9jgA8ctP9ZJyw
tfA1ZgHN+AoUZ90+L8IKLm+If8ksPXGxGUIu+yynCXvPyYYHeXB2qiczx16ad8Vq
FTdGGhdSkV5LFSBhN+gy6/MjZ8ACbXIzewsWOrhw7jBGrgJYCSnTCEVmdInhP8yx
sG63qjOG6AeZeA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:35:29 2025 by rpki-client