Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
File: k19T9eQH5VojMNnVI6gEwHIspWU.mft (raw, json)
Hash identifier: NMEFRWMi8w7LeNQ2N6l6zIMmhBwXjAS+QGUerS5TPgY=
Subject key identifier: B9:20:92:04:9A:C5:04:2D:0B:FD:C0:38:11:8E:43:B8:07:0F:54:5D
Authority key identifier: 93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
Certificate issuer: /CN=935f53f5e407e55a2330d9d523a804c0722ca565
Certificate serial: 01965613E5DACE40B617F7B3BA90E08D0F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 02:01:06 +0000
Manifest this update: Mon 21 Apr 2025 02:01:06 +0000
Manifest next update: Tue 22 Apr 2025 02:01:06 +0000
Files and hashes: 1: CEKF3MXHpQR2CGHCMQpTxxuuRIY.roa (hash: Rh5DOeHi5/pgsxZpTOekiFMDHUB1zlvv4XKyE6PrDFE=)
2: cXHMvnYXUn58neLwmoRSc042tjs.roa (hash: SBDcDeTpbKOEPbrOKMYmcpYN3NXUYeqARSNljTNUetg=)
3: k19T9eQH5VojMNnVI6gEwHIspWU.crl (hash: hUMDInL/dVadl1y/To8J7vRuVIZgovB0ftz381tiCrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:e5:da:ce:40:b6:17:f7:b3:ba:90:e0:8d:0f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935f53f5e407e55a2330d9d523a804c0722ca565
Validity
Not Before: Apr 21 02:01:06 2025 GMT
Not After : Apr 22 02:01:06 2025 GMT
Subject: CN=b92092049ac5042d0bfdc038118e43b8070f545d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ca:42:6c:60:0e:54:a4:ab:29:ad:f5:90:50:
39:58:c6:7b:32:0b:de:c4:8e:65:4c:ef:99:74:d9:
98:66:d7:e0:ce:8e:1d:e1:7b:69:32:62:32:66:59:
a6:2f:53:1c:da:3a:ee:d5:58:4d:c7:33:bb:9c:f2:
ad:1a:02:30:b8:fc:8f:9d:9d:8c:92:d9:cb:f2:cb:
77:7c:d9:65:66:c9:87:09:fd:71:f5:24:fb:32:bf:
f8:b4:cf:80:14:96:00:8d:2b:86:9d:6c:35:ae:e9:
5d:c0:4f:64:15:df:89:05:c4:a4:43:cd:aa:66:da:
3a:ce:e1:b0:69:8f:56:7d:01:5b:6b:ac:7b:a7:aa:
5a:71:e4:78:f8:9c:d0:ad:75:17:f5:6f:c6:3f:0a:
7a:78:2b:f8:06:10:76:46:68:d0:b9:fa:f9:45:07:
ec:35:9a:7e:9e:59:5c:36:57:ca:07:9b:0e:15:69:
18:c2:cf:17:cb:32:26:ff:15:47:f4:1d:54:92:22:
c1:50:11:0d:c5:db:3e:19:03:31:05:f6:d2:64:bd:
c6:0b:ea:29:99:aa:5f:30:56:1f:9c:d1:3e:64:44:
98:a6:31:13:44:99:d0:74:31:cb:15:95:5b:b8:c2:
3c:73:f5:81:46:be:df:56:31:2f:ab:6b:82:5a:f3:
e3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:20:92:04:9A:C5:04:2D:0B:FD:C0:38:11:8E:43:B8:07:0F:54:5D
X509v3 Authority Key Identifier:
keyid:93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ae:10:4f:d2:cf:fc:fb:6a:65:93:78:79:40:a5:e3:dd:f4:
85:aa:bd:88:f0:71:84:a9:0b:b6:22:0b:be:2c:0d:c2:1e:b7:
05:b8:c7:f7:06:aa:cf:a3:7c:65:ba:fe:78:9c:9c:f0:2b:a0:
d0:2e:cd:08:bf:9c:2c:8b:5b:dc:a8:c0:e3:96:47:7c:44:68:
60:30:9a:df:9c:97:a1:a9:63:f4:ce:b4:9f:c2:75:0b:6c:80:
71:0f:9d:76:38:77:69:a9:2e:c2:31:5e:92:f4:0f:1b:13:1a:
c1:80:35:46:d1:a6:1a:98:bb:77:34:9f:e1:a1:f8:e7:f4:25:
a7:a3:01:21:57:bc:e8:bb:09:1b:b3:4a:22:53:e3:ab:d7:a1:
2a:cf:69:10:79:68:26:09:f4:9a:b4:80:b0:07:41:22:4c:46:
d0:1b:a2:eb:0e:56:c6:e2:64:4f:b6:d8:dd:f1:38:d9:2e:8b:
38:83:f9:be:42:19:84:b7:09:f0:09:2b:e2:ec:42:94:9a:4d:
51:b4:98:57:be:84:03:9c:b0:39:f5:eb:67:e3:bf:43:6c:12:
60:95:8d:14:d5:81:36:c0:b9:db:a7:78:a7:e5:90:58:70:f2:
20:b2:3d:fd:01:d1:92:d6:8a:a4:d9:88:cf:ba:c8:87:66:c5:
af:c0:ca:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWE+XazkC2F/ezupDgjQ9oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNWY1M2Y1ZTQwN2U1NWEyMzMwZDlkNTIzYTgwNGMwNzIy
Y2E1NjUwHhcNMjUwNDIxMDIwMTA2WhcNMjUwNDIyMDIwMTA2WjAzMTEwLwYDVQQD
EyhiOTIwOTIwNDlhYzUwNDJkMGJmZGMwMzgxMThlNDNiODA3MGY1NDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMpCbGAOVKSrKa31kFA5WMZ7Mgve
xI5lTO+ZdNmYZtfgzo4d4XtpMmIyZlmmL1Mc2jru1VhNxzO7nPKtGgIwuPyPnZ2M
ktnL8st3fNllZsmHCf1x9ST7Mr/4tM+AFJYAjSuGnWw1ruldwE9kFd+JBcSkQ82q
Zto6zuGwaY9WfQFba6x7p6paceR4+JzQrXUX9W/GPwp6eCv4BhB2RmjQufr5RQfs
NZp+nllcNlfKB5sOFWkYws8XyzIm/xVH9B1UkiLBUBENxds+GQMxBfbSZL3GC+op
mapfMFYfnNE+ZESYpjETRJnQdDHLFZVbuMI8c/WBRr7fVjEvq2uCWvPj5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkgkgSaxQQtC/3AOBGOQ7gHD1RdMB8GA1UdIwQY
MBaAFJNfU/XkB+VaIzDZ1SOoBMByLKVlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazE5VDllUUg1Vm9qTU5uVkk2Z0V3SElzcFdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84YjU1NGMtMGNlZi00MWIzLWJhM2It
MmQ1ZDY4ODQxNzNmLzEvazE5VDllUUg1Vm9qTU5uVkk2Z0V3SElzcFdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi84YjU1NGMtMGNlZi00MWIzLWJhM2ItMmQ1ZDY4ODQxNzNm
LzEvazE5VDllUUg1Vm9qTU5uVkk2Z0V3SElzcFdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQK4QT9LP
/PtqZZN4eUCl4930haq9iPBxhKkLtiILviwNwh63BbjH9waqz6N8Zbr+eJyc8Cug
0C7NCL+cLItb3KjA45ZHfERoYDCa35yXoalj9M60n8J1C2yAcQ+ddjh3aakuwjFe
kvQPGxMawYA1RtGmGpi7dzSf4aH45/Qlp6MBIVe86LsJG7NKIlPjq9ehKs9pEHlo
Jgn0mrSAsAdBIkxG0Bui6w5WxuJkT7bY3fE42S6LOIP5vkIZhLcJ8Akr4uxClJpN
UbSYV76EA5ywOfXrZ+O/Q2wSYJWNFNWBNsC526d4p+WQWHDyILI9/QHRktaKpNmI
z7rIh2bFr8DKlw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:27:31 2025 by rpki-client