Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
File: kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft (raw, json)
Hash identifier: M9oouKHaI+JyZGJtK/xWQpiBBtIuyJwoZnaLQzmhhUk=
Subject key identifier: 89:F5:E7:8D:E9:E7:70:FF:0C:62:75:D0:52:A1:B0:34:BE:6E:F4:94
Authority key identifier: 92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37
Certificate issuer: /CN=924a97d912d71f80fd36b73efc0fc7969762f337
Certificate serial: 01963BAE9E20C3B77919A6BA753D3836C489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
Manifest number: 14F1
Signing time: Tue 15 Apr 2025 23:00:21 +0000
Manifest this update: Tue 15 Apr 2025 23:00:21 +0000
Manifest next update: Wed 16 Apr 2025 23:00:21 +0000
Files and hashes: 1: 1-JNlJinjq7kuel35O_T8kUcWQBw.roa (hash: 1A2mPTXvGu8ShjNKjNG8ljmXuNzR5l5s2QNyKormBf0=)
2: kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl (hash: ZhJSZl9x7EDqzts1492Z0yP2BgCxK0yeI9/tatRWimg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 23:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:ae:9e:20:c3:b7:79:19:a6:ba:75:3d:38:36:c4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924a97d912d71f80fd36b73efc0fc7969762f337
Validity
Not Before: Apr 15 23:00:21 2025 GMT
Not After : Apr 16 23:00:21 2025 GMT
Subject: CN=89f5e78de9e770ff0c6275d052a1b034be6ef494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5b:6b:eb:49:1c:50:22:3d:48:d6:f7:89:88:
a2:54:9d:12:2f:44:fe:cf:15:a6:bf:d6:fe:62:23:
f1:2d:bc:8e:b3:5f:4c:48:93:e3:72:3f:bc:90:ec:
1a:2a:a2:01:16:78:df:d7:31:56:a3:68:40:e9:0f:
e3:87:82:cf:3a:06:39:fb:63:5b:94:f9:e7:e2:f9:
70:eb:ae:38:f0:dc:eb:04:6b:aa:f4:2d:de:52:4d:
9b:4d:01:78:1b:93:14:ee:27:b3:14:e8:b6:c1:89:
03:21:77:3a:fd:5b:2a:b9:1a:a3:5c:e1:b8:b8:0f:
49:af:30:a2:9e:d2:8e:e4:29:bd:ad:5c:41:70:cc:
96:88:40:b2:9d:0a:9a:2e:f9:f5:8f:78:40:92:aa:
4d:2f:a2:ed:c5:ae:be:84:7e:6c:23:d1:b1:4b:37:
4d:8f:6d:1b:a1:d4:b9:ae:82:d4:c5:5e:90:44:3d:
67:3c:97:ed:7f:0d:c4:22:c8:4d:dd:56:fa:2d:1d:
50:77:b0:37:d3:fe:da:a9:dc:11:21:12:61:da:6b:
53:51:d6:a6:c4:10:25:c5:d1:09:33:5f:7b:e2:32:
f9:24:eb:1e:1e:49:a8:40:b4:68:f1:9f:ff:65:96:
e4:01:1d:da:29:aa:f1:02:8f:a1:c6:2a:c6:0c:29:
15:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F5:E7:8D:E9:E7:70:FF:0C:62:75:D0:52:A1:B0:34:BE:6E:F4:94
X509v3 Authority Key Identifier:
keyid:92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1d:80:2e:f9:28:6a:25:ae:10:1f:8f:47:7d:45:5f:93:b9:
40:87:43:f1:34:ea:08:b5:93:ae:ea:c4:65:2b:42:86:90:4c:
ea:54:c9:6a:4b:27:39:09:7f:4b:6d:ae:94:fd:a3:5e:c7:0b:
12:c5:14:58:c2:1a:4a:7b:3c:32:58:73:f8:3a:af:8b:d4:31:
ba:e8:68:33:13:ff:58:ec:a0:78:1d:98:1b:24:78:23:23:d7:
8b:1f:6b:b2:f6:67:cd:1e:5a:ab:9f:df:a8:9d:e6:5f:e8:06:
19:b2:5b:0b:92:07:ce:e7:77:19:56:66:3a:be:37:4d:4d:dc:
34:b0:3d:d7:58:8d:02:7c:2b:94:70:ef:c4:88:47:ec:53:7a:
b6:a7:41:cb:e4:c8:41:00:a9:87:46:b0:b9:41:69:fa:e2:b2:
79:e6:a9:09:03:4c:cb:ac:f9:a2:e8:53:fe:db:b8:9d:04:e9:
2b:2f:f0:14:77:1f:c8:38:cf:97:e0:78:b3:26:0a:05:3a:14:
87:f8:ee:ab:9c:8f:0a:6a:be:02:91:5a:29:c0:6b:5a:8f:d9:
f6:f7:90:9e:17:38:19:78:b7:08:0c:3c:bd:c6:92:38:72:0a:
45:6c:42:96:16:93:8c:7d:c5:ca:7f:39:ae:9d:d4:3f:a5:c8:
7c:e8:f0:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY7rp4gw7d5Gaa6dT04NsSJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNGE5N2Q5MTJkNzFmODBmZDM2YjczZWZjMGZjNzk2OTc2
MmYzMzcwHhcNMjUwNDE1MjMwMDIxWhcNMjUwNDE2MjMwMDIxWjAzMTEwLwYDVQQD
Eyg4OWY1ZTc4ZGU5ZTc3MGZmMGM2Mjc1ZDA1MmExYjAzNGJlNmVmNDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1tr60kcUCI9SNb3iYiiVJ0SL0T+
zxWmv9b+YiPxLbyOs19MSJPjcj+8kOwaKqIBFnjf1zFWo2hA6Q/jh4LPOgY5+2Nb
lPnn4vlw66448NzrBGuq9C3eUk2bTQF4G5MU7iezFOi2wYkDIXc6/VsquRqjXOG4
uA9JrzCintKO5Cm9rVxBcMyWiECynQqaLvn1j3hAkqpNL6Ltxa6+hH5sI9GxSzdN
j20bodS5roLUxV6QRD1nPJftfw3EIshN3Vb6LR1Qd7A30/7aqdwRIRJh2mtTUdam
xBAlxdEJM1974jL5JOseHkmoQLRo8Z//ZZbkAR3aKarxAo+hxirGDCkVDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIn1543p53D/DGJ10FKhsDS+bvSUMB8GA1UdIwQY
MBaAFJJKl9kS1x+A/Ta3PvwPx5aXYvM3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2txWDJSTFhINEQ5TnJjLV9BX0hscGRpOHpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hZDM1ODYtYTAyOC00NzQ2LWIzZGEt
ODE0ODU2ZTFiMWY0LzEva2txWDJSTFhINEQ5TnJjLV9BX0hscGRpOHpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9hZDM1ODYtYTAyOC00NzQ2LWIzZGEtODE0ODU2ZTFiMWY0
LzEva2txWDJSTFhINEQ5TnJjLV9BX0hscGRpOHpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdR2ALvko
aiWuEB+PR31FX5O5QIdD8TTqCLWTrurEZStChpBM6lTJaksnOQl/S22ulP2jXscL
EsUUWMIaSns8Mlhz+Dqvi9QxuuhoMxP/WOygeB2YGyR4IyPXix9rsvZnzR5aq5/f
qJ3mX+gGGbJbC5IHzud3GVZmOr43TU3cNLA911iNAnwrlHDvxIhH7FN6tqdBy+TI
QQCph0awuUFp+uKyeeapCQNMy6z5ouhT/tu4nQTpKy/wFHcfyDjPl+B4syYKBToU
h/juq5yPCmq+ApFaKcBrWo/Z9veQnhc4GXi3CAw8vcaSOHIKRWxClhaTjH3Fyn85
rp3UP6XIfOjwwg==
-----END CERTIFICATE-----
Generated at Wed Apr 16 09:20:34 2025 by rpki-client