Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
File: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft (raw, json)
Hash identifier: 0p/ZLmSrTU4vYVAKotdxaEW5qM82To+yFLG0YlGZqc8=
Subject key identifier: 20:A2:11:F7:53:2D:F3:4E:9C:B2:7F:0D:AA:14:F5:62:50:1D:54:4A
Authority key identifier: 91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
Certificate issuer: /CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Certificate serial: 0196146B1EE053D2C505825C977E458565B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
Manifest number: 04F9
Signing time: Tue 08 Apr 2025 08:01:26 +0000
Manifest this update: Tue 08 Apr 2025 08:01:26 +0000
Manifest next update: Wed 09 Apr 2025 08:01:26 +0000
Files and hashes: 1: 1-PjUZT902dDkd6VPDrdDPHXwUZw.roa (hash: MHJPB3k7tQCL3suOF/2f4yZcUJ+jnvq9tJxwFWeEEbc=)
2: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl (hash: 1jij8ljMnW+qxZRJKF7gf4bBi+e8qWVFu6Kdgoe8w94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:6b:1e:e0:53:d2:c5:05:82:5c:97:7e:45:85:65:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Validity
Not Before: Apr 8 08:01:26 2025 GMT
Not After : Apr 9 08:01:26 2025 GMT
Subject: CN=20a211f7532df34e9cb27f0daa14f562501d544a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:01:26:be:6b:be:7c:2d:7c:8a:a8:44:21:
bc:8b:81:12:34:2c:65:f1:b5:ff:01:6b:b7:b3:44:
0e:ed:8c:f5:4b:a1:ff:8d:c9:a2:f9:73:13:4c:6b:
6e:a8:3a:26:c9:ef:11:74:c4:5b:73:53:84:66:02:
1b:52:89:a3:78:ff:29:10:83:69:0a:7f:4b:3d:bd:
f7:64:13:f3:56:38:bd:30:65:d3:3f:ad:b2:8b:e1:
b0:79:f3:f7:dc:c7:2b:48:cb:f7:93:04:e3:85:b5:
c1:f3:02:a0:37:92:39:8d:63:7b:1d:0c:0e:d6:03:
ea:91:93:4f:05:c7:1a:8a:58:ff:5e:96:eb:ec:61:
1b:af:c3:ce:98:be:0e:49:53:71:f1:67:ae:53:39:
0d:9e:f9:ea:aa:54:8d:25:a1:8e:6f:b3:83:ec:b7:
07:c3:02:50:41:04:60:af:59:fd:5b:27:89:33:cf:
28:f6:d9:40:58:7d:e4:fd:e2:89:a5:8b:78:81:31:
5c:9d:8c:c0:31:cd:a1:b4:49:9c:d1:2f:ea:d8:5e:
4f:91:53:05:2a:ed:b0:71:7b:58:34:7f:b2:0c:00:
ea:cf:8d:43:ae:07:15:0c:11:05:4f:d5:99:c4:09:
24:89:c9:51:75:6f:33:8f:85:84:f2:b2:b0:b0:a0:
c5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A2:11:F7:53:2D:F3:4E:9C:B2:7F:0D:AA:14:F5:62:50:1D:54:4A
X509v3 Authority Key Identifier:
keyid:91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:73:49:17:80:0e:cf:5f:53:6f:d0:de:58:85:e8:11:8d:e0:
4d:eb:b3:83:ca:ee:30:c8:af:f1:74:05:a8:d9:d1:b5:0f:80:
eb:94:da:9e:99:b8:e7:f0:d0:89:50:9d:f3:21:f3:85:ac:75:
b6:c9:9f:6e:33:31:f5:4e:e9:cd:10:ae:a4:49:1f:93:71:1f:
b1:3b:3d:98:5a:5f:44:4e:06:7d:2a:2f:c8:c5:f2:0e:90:a5:
0b:d5:94:29:70:c5:8e:2b:d0:cf:5c:2f:3b:d3:b5:59:fb:b1:
b4:34:47:07:2f:74:8e:e0:22:0b:e5:91:e6:00:48:42:67:89:
39:05:39:89:6b:f5:40:a6:8f:68:8d:4b:e6:23:d0:48:5e:0f:
82:a6:61:3c:ca:c8:76:23:d2:70:cd:0d:85:bf:d8:8a:98:8f:
ca:2f:64:85:77:ec:db:e3:0b:8a:12:73:6a:9d:bf:97:da:49:
69:52:db:7e:83:42:3b:ad:ed:b7:89:5a:ec:6d:a0:1d:7a:38:
e4:77:49:33:08:39:f9:75:65:4c:63:c1:ad:11:62:ca:bb:38:
9c:38:9b:15:70:03:bc:f7:2f:e3:99:3e:92:18:74:dd:54:b2:
fa:e4:1a:be:26:a0:8b:b8:86:0d:a6:22:2f:33:7f:ac:45:6f:
b0:e4:ea:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYUax7gU9LFBYJcl35FhWWwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxN2MzM2M3NTk2MTMxOGQ4ZWUzY2IxMzQ2NGE5MGQwMGFi
OGJkMmQwHhcNMjUwNDA4MDgwMTI2WhcNMjUwNDA5MDgwMTI2WjAzMTEwLwYDVQQD
EygyMGEyMTFmNzUzMmRmMzRlOWNiMjdmMGRhYTE0ZjU2MjUwMWQ1NDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcoBJr5rvnwtfIqoRCG8i4ESNCxl
8bX/AWu3s0QO7Yz1S6H/jcmi+XMTTGtuqDomye8RdMRbc1OEZgIbUomjeP8pEINp
Cn9LPb33ZBPzVji9MGXTP62yi+GwefP33McrSMv3kwTjhbXB8wKgN5I5jWN7HQwO
1gPqkZNPBccailj/Xpbr7GEbr8POmL4OSVNx8WeuUzkNnvnqqlSNJaGOb7OD7LcH
wwJQQQRgr1n9WyeJM88o9tlAWH3k/eKJpYt4gTFcnYzAMc2htEmc0S/q2F5PkVMF
Ku2wcXtYNH+yDADqz41DrgcVDBEFT9WZxAkkiclRdW8zj4WE8rKwsKDF8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCiEfdTLfNOnLJ/DaoU9WJQHVRKMB8GA1UdIwQY
MBaAFJF8M8dZYTGNjuPLE0ZKkNAKuL0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1h3engxbGhNWTJPNDhzVFJrcVEwQXE0dlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hYzI3M2EtOWM4Yi00ZWY3LWE0MDAt
YzM3NjFhNzVkMDQ3LzEva1h3engxbGhNWTJPNDhzVFJrcVEwQXE0dlMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9hYzI3M2EtOWM4Yi00ZWY3LWE0MDAtYzM3NjFhNzVkMDQ3
LzEva1h3engxbGhNWTJPNDhzVFJrcVEwQXE0dlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnNJF4AO
z19Tb9DeWIXoEY3gTeuzg8ruMMiv8XQFqNnRtQ+A65Tanpm45/DQiVCd8yHzhax1
tsmfbjMx9U7pzRCupEkfk3EfsTs9mFpfRE4GfSovyMXyDpClC9WUKXDFjivQz1wv
O9O1WfuxtDRHBy90juAiC+WR5gBIQmeJOQU5iWv1QKaPaI1L5iPQSF4PgqZhPMrI
diPScM0Nhb/YipiPyi9khXfs2+MLihJzap2/l9pJaVLbfoNCO63tt4la7G2gHXo4
5HdJMwg5+XVlTGPBrRFiyrs4nDibFXADvPcv45k+khh03VSy+uQaviagi7iGDaYi
LzN/rEVvsOTqLw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:51:44 2025 by rpki-client