Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
File: kUqlV8PT0ea38FJcNMwdSIpakpQ.mft (raw, json)
Hash identifier: F6CStE2shzZmrqp+XGFyV5+ky/fIN706XnYWS8TOuLo=
Subject key identifier: B8:F1:78:86:14:DD:36:18:6E:33:2D:ED:60:5A:41:66:61:C9:CF:49
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01965B02E9AB89DB5E8CFA91E25C8EEF3DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
Manifest number: D4
Signing time: Tue 22 Apr 2025 01:00:39 +0000
Manifest this update: Tue 22 Apr 2025 01:00:39 +0000
Manifest next update: Wed 23 Apr 2025 01:00:39 +0000
Files and hashes: 1: 86J3w2KHwC3IOQFcig1RsCiNiqI.roa (hash: YYIEpXZweId3RWAxfqfUUaYUG93HllQHD6f5j3LzIes=)
2: J_xoJpVlUQZtO5xQ-ZJbdQWL7W0.roa (hash: 6G5GWl1Jw65Lth4hieAeSDHM9k5/dMHA09XCXnp56S4=)
3: _fQHDe_QsKzj39wSIbj-uT5L7fw.roa (hash: z8zH4/OhWjUk6gre54FhJk9W2UZF11eYo2fYY4nmoyM=)
4: hmn_AtvA-Ozxps7hZvX6vOOVyVg.roa (hash: 5jXJ2NBBgkVftUv2ESVvBBtb97mqw/HikDlyo874QWk=)
5: kUqlV8PT0ea38FJcNMwdSIpakpQ.crl (hash: jCxXybsx2uK4BXWKB/+WnWv3eYOHoC6YdVbSEJtgduU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:02:e9:ab:89:db:5e:8c:fa:91:e2:5c:8e:ef:3d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Apr 22 01:00:39 2025 GMT
Not After : Apr 23 01:00:39 2025 GMT
Subject: CN=b8f1788614dd36186e332ded605a416661c9cf49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:85:95:4a:80:c4:94:23:4d:d3:90:e5:a1:fa:
2f:e9:43:cd:22:ca:cc:1d:0b:fa:e9:48:1b:5b:47:
7f:43:a6:4a:37:d0:6b:7f:39:4e:81:48:e4:a6:b3:
f5:4f:0c:36:fc:19:66:76:b5:58:c6:98:ed:35:18:
9d:e1:ad:a5:f4:f9:51:21:ae:88:39:7b:25:a4:4c:
54:56:d5:99:eb:87:b9:91:8a:b2:3c:c5:86:63:4b:
d6:f8:88:c6:54:ae:e3:15:85:07:0a:13:6e:f2:cd:
aa:48:92:f4:cc:1b:df:43:d8:e2:51:87:b7:23:6d:
b4:59:8c:09:4b:29:46:37:e2:61:1b:bf:84:66:da:
60:79:3b:7f:76:a6:9e:71:ab:e2:04:47:a0:6e:fc:
de:7c:bd:17:00:04:ff:6a:24:d0:aa:c8:af:67:22:
61:e5:2c:c7:bd:25:43:b9:23:1b:d1:94:9e:9c:fe:
3b:e8:4b:51:fa:c4:92:c6:81:e7:eb:9d:72:47:b6:
51:75:59:be:2e:50:7c:31:11:f2:c4:6a:ef:b5:2a:
dd:de:f6:8f:25:c6:b8:e7:36:9b:22:1b:11:f7:f5:
de:d1:f5:91:e4:46:57:1d:8c:38:c1:82:d4:64:a0:
ad:12:49:43:f6:a5:31:a2:64:a5:64:1c:6a:05:c3:
18:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F1:78:86:14:DD:36:18:6E:33:2D:ED:60:5A:41:66:61:C9:CF:49
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:0b:c2:b2:17:3b:75:3b:23:72:3d:df:79:4e:df:61:29:de:
2f:5d:da:ed:79:3c:4a:26:0e:14:c9:75:d0:7a:e6:3c:7a:6a:
75:48:a0:68:ee:c3:a3:99:31:b0:31:16:f4:8b:66:88:f9:d1:
59:a9:40:17:a5:c6:4f:2e:d1:7e:07:61:9a:96:68:66:5a:b8:
a3:f3:6b:22:8e:b1:c1:ee:8c:31:a8:23:39:d0:e2:7a:e4:51:
ec:3c:3d:60:6c:49:f5:37:d5:cf:f9:0e:b2:b3:18:36:01:b7:
bc:86:70:24:55:79:4a:8f:18:fd:5d:63:9d:70:74:93:9f:81:
7a:af:b9:bf:6f:15:7a:84:e4:e2:e9:72:fe:13:9f:b8:d3:3e:
02:2c:08:1c:d5:d8:52:ca:6d:2f:7f:94:5a:f0:5b:22:f5:4e:
d6:df:4b:16:84:db:a8:9e:cb:ab:63:48:06:e1:78:76:3e:55:
7b:40:9c:5e:a0:fb:11:95:01:34:f0:6f:a7:8f:10:36:87:be:
35:45:17:59:63:f5:fd:79:b4:5f:b8:3d:0b:31:43:92:9c:a3:
cb:3b:52:bd:fe:62:36:ef:04:20:91:9c:0d:ce:11:a9:45:54:
30:c7:e3:bd:44:28:91:5e:a5:38:77:8b:d0:82:39:ea:5b:3c:
3b:df:8a:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbAumridtejPqR4lyO7z3MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjUwNDIyMDEwMDM5WhcNMjUwNDIzMDEwMDM5WjAzMTEwLwYDVQQD
EyhiOGYxNzg4NjE0ZGQzNjE4NmUzMzJkZWQ2MDVhNDE2NjYxYzljZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4WVSoDElCNN05Dlofov6UPNIsrM
HQv66UgbW0d/Q6ZKN9BrfzlOgUjkprP1Tww2/BlmdrVYxpjtNRid4a2l9PlRIa6I
OXslpExUVtWZ64e5kYqyPMWGY0vW+IjGVK7jFYUHChNu8s2qSJL0zBvfQ9jiUYe3
I220WYwJSylGN+JhG7+EZtpgeTt/dqaecaviBEegbvzefL0XAAT/aiTQqsivZyJh
5SzHvSVDuSMb0ZSenP476EtR+sSSxoHn651yR7ZRdVm+LlB8MRHyxGrvtSrd3vaP
Jca45zabIhsR9/Xe0fWR5EZXHYw4wYLUZKCtEklD9qUxomSlZBxqBcMY3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjxeIYU3TYYbjMt7WBaQWZhyc9JMB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwvCshc7
dTsjcj3feU7fYSneL13a7Xk8SiYOFMl10HrmPHpqdUigaO7Do5kxsDEW9ItmiPnR
WalAF6XGTy7RfgdhmpZoZlq4o/NrIo6xwe6MMagjOdDieuRR7Dw9YGxJ9TfVz/kO
srMYNgG3vIZwJFV5So8Y/V1jnXB0k5+Beq+5v28VeoTk4uly/hOfuNM+AiwIHNXY
UsptL3+UWvBbIvVO1t9LFoTbqJ7Lq2NIBuF4dj5Ve0CcXqD7EZUBNPBvp48QNoe+
NUUXWWP1/Xm0X7g9CzFDkpyjyztSvf5iNu8EIJGcDc4RqUVUMMfjvUQokV6lOHeL
0II56ls8O9+Kiw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 04:19:24 2025 by rpki-client