Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
File: ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft (raw, json)
Hash identifier: GfVrLsVui9HzCjMHwup5VYkNaCceBOjaiJR0e+q2pVk=
Subject key identifier: 69:53:C2:F3:32:29:F8:3A:F8:6A:CB:FA:AF:0E:5A:CA:60:82:FE:BB
Authority key identifier: 92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
Certificate issuer: /CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Certificate serial: 01958C610D263B4D0BD0EB8A811529BA73E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
Manifest number: 012C
Signing time: Wed 12 Mar 2025 22:02:05 +0000
Manifest this update: Wed 12 Mar 2025 22:02:05 +0000
Manifest next update: Thu 13 Mar 2025 22:02:05 +0000
Files and hashes: 1: jOZUYryfotd3VTVGeBf6KTjWoz0.roa (hash: JyJSKW3JZ65ZSPqlG2CxfcAq5uNzQ++VbUTzOkT80MI=)
2: ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl (hash: SqAIscSPaa09sZKmkPULuNsxMkxLbBxWX97ubNSUbcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:61:0d:26:3b:4d:0b:d0:eb:8a:81:15:29:ba:73:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Validity
Not Before: Mar 12 22:02:05 2025 GMT
Not After : Mar 13 22:02:05 2025 GMT
Subject: CN=6953c2f33229f83af86acbfaaf0e5aca6082febb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3c:29:47:8a:32:18:70:0b:00:66:1d:79:58:
6e:0d:3d:10:18:df:04:5f:96:f9:ab:1b:15:59:ef:
7c:6d:6c:4e:8e:ad:59:dd:39:0e:dd:c5:34:5a:38:
b7:72:35:a5:04:94:19:c7:9f:42:38:ee:ee:24:24:
18:88:24:b3:dd:90:44:39:d2:5a:16:a7:25:03:1d:
15:f9:a8:fa:b2:51:87:5d:3b:2a:54:a2:bc:c2:43:
3e:5e:e5:fa:d9:d2:6e:73:46:40:7f:7e:ca:b3:9e:
8f:63:57:f5:1d:5b:32:bd:5b:32:40:07:7f:ed:78:
69:76:c8:ba:00:8f:8b:ca:75:4d:23:be:7a:ab:c0:
3a:39:c4:e5:34:78:8d:32:9b:7f:e2:9c:ba:99:ee:
b5:1c:73:83:29:93:8a:59:aa:2d:a8:6e:44:85:1f:
9e:dc:c4:51:ab:6c:84:74:e8:7c:e9:ec:2d:14:f8:
1d:f0:49:ff:80:d1:35:ed:b5:ab:8f:fc:cf:c6:ec:
55:fc:5f:05:2b:3d:af:0f:ec:86:5d:b8:93:8f:19:
ed:55:24:2b:ee:55:ad:80:ae:12:e1:37:62:30:b6:
a2:ee:df:af:73:0a:2a:2e:54:6d:a0:53:12:c8:f6:
05:a6:6e:08:bd:97:16:b9:b9:0a:70:5d:d8:04:e3:
8e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:53:C2:F3:32:29:F8:3A:F8:6A:CB:FA:AF:0E:5A:CA:60:82:FE:BB
X509v3 Authority Key Identifier:
keyid:92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1c:28:3a:9c:e2:95:bd:14:90:77:08:ea:4f:ff:cf:87:5d:
5d:f1:97:16:0f:49:17:ab:a0:47:9d:b2:e3:40:ee:57:40:f5:
dd:de:6f:0f:e3:a2:80:aa:a7:aa:ee:97:34:91:8e:04:ca:a4:
c7:46:3e:64:cc:1b:49:3a:26:86:0f:8a:2e:0f:fe:d9:dc:af:
e7:66:ce:cf:9c:e4:f2:7e:16:09:78:bf:13:37:b0:1f:7d:de:
18:c4:c6:0c:20:80:2b:02:13:12:c1:21:90:33:0b:a6:d1:20:
70:ee:0e:58:22:47:0a:e1:0b:93:69:f5:27:9a:2f:03:1a:53:
19:61:7e:60:09:18:aa:ff:ab:a5:04:3b:6e:9b:66:8d:9f:dd:
e0:be:76:08:d1:3b:76:c6:fa:50:28:57:72:8c:05:dc:37:88:
be:97:9e:a4:98:bf:3c:c0:4f:09:48:8f:60:2c:6d:b3:d9:a6:
6e:5e:d1:a9:40:29:85:48:a0:0d:53:f4:c4:e6:88:5d:d4:99:
81:a2:1d:75:18:6f:34:00:1d:39:d1:94:86:b0:9e:d2:31:5d:
9c:92:82:3d:61:05:c7:9a:4d:c3:7a:6d:8e:1f:d9:6c:06:82:
97:72:cf:41:f5:9d:3c:bb:9c:bc:4f:ca:4e:51:84:69:34:6a:
46:6a:52:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMYQ0mO00L0OuKgRUpunPhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYzQyNDg0ZDc1YWQ3YTQyN2RjZjYxYjVhYzlhYzU2NTQz
ZTlmMzMwHhcNMjUwMzEyMjIwMjA1WhcNMjUwMzEzMjIwMjA1WjAzMTEwLwYDVQQD
Eyg2OTUzYzJmMzMyMjlmODNhZjg2YWNiZmFhZjBlNWFjYTYwODJmZWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zwpR4oyGHALAGYdeVhuDT0QGN8E
X5b5qxsVWe98bWxOjq1Z3TkO3cU0Wji3cjWlBJQZx59COO7uJCQYiCSz3ZBEOdJa
FqclAx0V+aj6slGHXTsqVKK8wkM+XuX62dJuc0ZAf37Ks56PY1f1HVsyvVsyQAd/
7Xhpdsi6AI+LynVNI756q8A6OcTlNHiNMpt/4py6me61HHODKZOKWaotqG5EhR+e
3MRRq2yEdOh86ewtFPgd8En/gNE17bWrj/zPxuxV/F8FKz2vD+yGXbiTjxntVSQr
7lWtgK4S4TdiMLai7t+vcwoqLlRtoFMSyPYFpm4IvZcWubkKcF3YBOOOswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlTwvMyKfg6+GrL+q8OWspggv67MB8GA1UdIwQY
MBaAFJLEJITXWtekJ9z2G1rJrFZUPp8zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3NRa2hOZGExNlFuM1BZYldzbXNWbFEtbnpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iOTJkMGQtMzZmMS00NmY2LWE2NjEt
MjkyZmVhZDEyZDU5LzEva3NRa2hOZGExNlFuM1BZYldzbXNWbFEtbnpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iOTJkMGQtMzZmMS00NmY2LWE2NjEtMjkyZmVhZDEyZDU5
LzEva3NRa2hOZGExNlFuM1BZYldzbXNWbFEtbnpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRwoOpzi
lb0UkHcI6k//z4ddXfGXFg9JF6ugR52y40DuV0D13d5vD+OigKqnqu6XNJGOBMqk
x0Y+ZMwbSTomhg+KLg/+2dyv52bOz5zk8n4WCXi/EzewH33eGMTGDCCAKwITEsEh
kDMLptEgcO4OWCJHCuELk2n1J5ovAxpTGWF+YAkYqv+rpQQ7bptmjZ/d4L52CNE7
dsb6UChXcowF3DeIvpeepJi/PMBPCUiPYCxts9mmbl7RqUAphUigDVP0xOaIXdSZ
gaIddRhvNAAdOdGUhrCe0jFdnJKCPWEFx5pNw3ptjh/ZbAaCl3LPQfWdPLucvE/K
TlGEaTRqRmpS2A==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:42 2025 by rpki-client