Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier: eH5+Gv9bP3+WB55Lg3xh1ReTkmKrs1xs8hRPBjS7Jn0=
Subject key identifier: 16:1C:48:9C:4C:6B:D5:2D:71:C5:2D:EE:6C:D3:76:22:C7:85:53:B3
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 0196157D6676EB69D44BFACECCD1B5EF10C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number: 14DC
Signing time: Tue 08 Apr 2025 13:01:01 +0000
Manifest this update: Tue 08 Apr 2025 13:01:01 +0000
Manifest next update: Wed 09 Apr 2025 13:01:01 +0000
Files and hashes: 1: deIOkmJ8ssMd2RwtI-v-jMre1M8.roa (hash: 1DQjFOIdMCv4n8BARwPWSteFX1+/0FvbC04tqMoZb0Q=)
2: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: 4RnH1JFGcJPZDA+jwosikx52TfOuTIT7DMnO9kblauM=)
3: pNxIm0SmH7kBUMbare2mFQXDHOk.roa (hash: FL47b2q1GAJAcT+EDiWHDQ+iV/Lo12DMIiUY1wrMTeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:7d:66:76:eb:69:d4:4b:fa:ce:cc:d1:b5:ef:10:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: Apr 8 13:01:01 2025 GMT
Not After : Apr 9 13:01:01 2025 GMT
Subject: CN=161c489c4c6bd52d71c52dee6cd37622c78553b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:c3:a0:3f:35:26:75:69:39:f0:06:ca:03:
d0:bd:a6:ed:d4:6f:a0:ec:4f:43:f0:be:85:a2:6f:
b7:98:66:20:91:df:9f:8e:a9:df:7e:a9:57:bc:c1:
62:f2:73:f6:f0:1c:cb:02:81:59:11:e5:ef:50:09:
be:b9:04:d3:c6:46:93:d9:d9:8d:0f:b0:fc:5a:45:
3d:dd:77:f2:9b:ba:0f:54:08:bb:52:1f:ea:1b:31:
18:16:06:c4:bd:eb:2a:7b:fb:27:88:90:76:c6:f3:
14:d3:b8:d7:b4:b3:38:ec:87:12:2e:35:a8:c2:e1:
36:65:36:8f:8e:97:92:4f:e6:b5:79:9b:f2:b8:97:
ba:16:c9:34:d0:27:9e:b0:ae:af:a0:e4:0e:6c:3c:
a7:12:f3:17:6b:c7:81:9c:b4:24:16:8d:74:00:ce:
b0:3c:63:02:21:ca:fd:33:e8:ff:17:93:ec:40:13:
30:75:dd:1c:0c:22:9f:6f:f4:48:36:cb:17:aa:c7:
43:39:cd:b8:db:af:56:bc:a9:62:9c:26:39:4b:cb:
d0:af:3e:73:60:ab:63:f1:89:48:7b:89:dc:0e:2b:
9d:db:c2:c4:96:f6:53:78:b9:25:e0:a0:f0:d9:df:
8b:ba:81:a6:ea:f0:e3:ad:e2:92:59:01:6d:1f:9f:
f3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1C:48:9C:4C:6B:D5:2D:71:C5:2D:EE:6C:D3:76:22:C7:85:53:B3
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b0:ac:a8:bd:58:b3:7f:c5:d2:e5:1c:c2:4e:f1:ca:58:73:
a4:8f:31:53:9e:e6:bf:1e:af:80:8f:df:4d:87:d1:69:b4:98:
a5:84:32:fe:97:2f:1a:ca:43:6b:5d:75:ef:68:2a:95:df:c9:
da:db:30:c3:95:86:d7:37:39:1c:e2:44:68:7e:73:ad:10:56:
28:68:f5:77:ff:a7:4d:0c:b8:d4:80:f6:84:92:17:72:f9:fd:
63:b6:1e:fa:4c:f3:b0:49:8e:32:47:2a:99:fc:b5:cb:40:2d:
9c:ea:16:79:5e:11:2e:48:38:9e:d1:78:d7:58:8c:ea:e6:fe:
83:80:4a:f7:51:4a:ef:db:10:36:1f:19:54:f0:c1:8c:e9:c8:
75:a0:da:f7:8c:2c:e4:68:d8:c1:c1:16:8f:af:ca:92:d4:28:
4a:a8:e3:ac:c6:78:63:0c:13:88:16:b7:8c:52:d6:f8:e6:9a:
d2:31:64:39:2f:c4:68:ee:7a:ae:fe:77:6f:b3:e0:cd:ba:20:
fc:36:3a:9a:d6:73:a9:fa:22:5a:da:cb:cd:74:c9:ee:9e:a8:
a6:31:42:d5:bc:c3:db:21:a8:1e:87:26:78:ba:61:c6:0f:65:
bf:e2:90:f0:42:7a:9f:8c:4a:52:ce:0e:89:5d:d2:7f:63:4a:
50:6a:2d:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYVfWZ262nUS/rOzNG17xDAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMmUzMzBiNTg3OTU5MGFiYWU4MWJmNDBhOTFhNTEwMWJj
MThmYTAwHhcNMjUwNDA4MTMwMTAxWhcNMjUwNDA5MTMwMTAxWjAzMTEwLwYDVQQD
EygxNjFjNDg5YzRjNmJkNTJkNzFjNTJkZWU2Y2QzNzYyMmM3ODU1M2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI3DoD81JnVpOfAGygPQvabt1G+g
7E9D8L6Fom+3mGYgkd+fjqnffqlXvMFi8nP28BzLAoFZEeXvUAm+uQTTxkaT2dmN
D7D8WkU93Xfym7oPVAi7Uh/qGzEYFgbEvesqe/sniJB2xvMU07jXtLM47IcSLjWo
wuE2ZTaPjpeST+a1eZvyuJe6Fsk00CeesK6voOQObDynEvMXa8eBnLQkFo10AM6w
PGMCIcr9M+j/F5PsQBMwdd0cDCKfb/RINssXqsdDOc24269WvKlinCY5S8vQrz5z
YKtj8YlIe4ncDiud28LElvZTeLkl4KDw2d+LuoGm6vDjreKSWQFtH5/zJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYcSJxMa9UtccUt7mzTdiLHhVOzMB8GA1UdIwQY
MBaAFJIuMwtYeVkKuugb9AqRpRAbwY+gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2k0ekMxaDVXUXE2NkJ2MENwR2xFQnZCajZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mMTgwZmYtMzM2Yy00YjQ1LTkzNzgt
NTY4NjcyYzI1Y2E4LzEva2k0ekMxaDVXUXE2NkJ2MENwR2xFQnZCajZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mMTgwZmYtMzM2Yy00YjQ1LTkzNzgtNTY4NjcyYzI1Y2E4
LzEva2k0ekMxaDVXUXE2NkJ2MENwR2xFQnZCajZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrCsqL1Y
s3/F0uUcwk7xylhzpI8xU57mvx6vgI/fTYfRabSYpYQy/pcvGspDa11172gqld/J
2tsww5WG1zc5HOJEaH5zrRBWKGj1d/+nTQy41ID2hJIXcvn9Y7Ye+kzzsEmOMkcq
mfy1y0AtnOoWeV4RLkg4ntF411iM6ub+g4BK91FK79sQNh8ZVPDBjOnIdaDa94ws
5GjYwcEWj6/KktQoSqjjrMZ4YwwTiBa3jFLW+Oaa0jFkOS/EaO56rv53b7Pgzbog
/DY6mtZzqfoiWtrLzXTJ7p6opjFC1bzD2yGoHocmeLphxg9lv+KQ8EJ6n4xKUs4O
iV3Sf2NKUGot4w==
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:19:42 2025 by rpki-client