Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
File: Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft (raw, json)
Hash identifier: 2hfchr6WxSXxDvR1xc929XmmXfIuE2syRL6lzkfURPY=
Subject key identifier: C3:0B:E2:ED:4B:D4:7D:72:99:C6:32:C4:B1:15:41:84:97:1E:D9:BB
Authority key identifier: 2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9
Certificate issuer: /CN=2ace126fa5830911083e45f583cadb08a63ec6f9
Certificate serial: 0196507F2F9DD179F308F0166D4CA61A1A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 00:00:34 +0000
Manifest this update: Sun 20 Apr 2025 00:00:34 +0000
Manifest next update: Mon 21 Apr 2025 00:00:34 +0000
Files and hashes: 1: Et82Ox-YoPWswPFqxd1JmT5HiVY.roa (hash: dKjp2M/qEJfQktMuqf3U3untvmBMHbGfy5ZX8hyRWlU=)
2: Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl (hash: t7ISaCenHp0yIW5AZwcoyaB/RiQ4a3gUJP5uTdpa05s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:2f:9d:d1:79:f3:08:f0:16:6d:4c:a6:1a:1a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace126fa5830911083e45f583cadb08a63ec6f9
Validity
Not Before: Apr 20 00:00:34 2025 GMT
Not After : Apr 21 00:00:34 2025 GMT
Subject: CN=c30be2ed4bd47d7299c632c4b1154184971ed9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:8f:ea:43:e0:c3:71:24:8b:46:2f:ed:5b:
fe:d6:09:7a:b1:cb:48:fe:ff:fe:e3:ec:70:48:79:
aa:dc:cc:d3:e8:b1:25:5f:f3:92:42:ae:2b:17:65:
29:fc:b4:39:da:5e:7a:0c:0e:48:15:a4:ab:af:b1:
e2:7e:05:2a:65:70:30:31:5d:12:0c:f7:e2:a7:ea:
eb:3c:12:a9:f9:1f:ce:5d:5e:0f:2a:e8:20:43:52:
df:2f:55:49:cc:f9:ed:66:15:25:8b:bd:0b:c9:31:
1b:ce:b4:05:15:fd:ad:6e:5f:64:e2:97:bc:b2:bb:
c1:77:01:14:05:c3:59:0b:45:24:52:38:77:af:00:
12:07:31:e2:0e:b4:66:5b:b9:00:14:d3:db:49:bf:
d0:6c:9e:8f:99:d8:ec:41:b4:84:54:11:56:bf:3a:
10:a6:f7:49:bf:58:f5:19:73:1d:c8:76:c8:45:de:
b6:86:b3:52:54:10:b3:4e:39:ae:4a:4c:8e:37:38:
62:de:da:46:88:ac:72:3d:8d:8d:2f:d6:23:5a:6a:
ae:36:73:5e:bf:7e:60:11:ab:0c:60:6b:9c:52:63:
27:5c:1f:72:64:8b:6a:24:b1:dc:a8:fb:70:aa:ed:
97:ab:fe:1d:9b:a5:17:e5:74:71:d9:30:4a:82:15:
b2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0B:E2:ED:4B:D4:7D:72:99:C6:32:C4:B1:15:41:84:97:1E:D9:BB
X509v3 Authority Key Identifier:
keyid:2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:3f:df:61:8b:8d:40:e1:7b:2d:b7:b7:a0:8f:ff:fb:55:bd:
01:d2:90:33:4e:c6:27:ee:7c:86:45:e5:f6:77:4d:b7:14:94:
f1:8e:19:8a:fe:ec:97:c2:5b:30:ad:e4:12:ed:0c:0a:f4:d2:
21:b0:3e:b5:6d:e0:c5:c9:6e:05:6a:ca:07:df:76:af:2a:3a:
b8:a0:55:16:db:6c:d2:39:4e:cc:47:13:e6:55:28:fb:5b:a3:
88:ab:b0:c4:6c:ce:b0:21:75:5d:b0:09:47:32:19:69:c5:47:
07:e7:03:98:61:be:87:71:e3:d2:94:57:ae:4e:23:4c:88:eb:
04:8d:1a:26:d5:56:47:d7:65:7f:4c:b3:59:87:eb:72:53:77:
5c:19:9d:79:f3:62:bc:10:e5:f6:fe:bf:f4:b9:7f:ee:9d:d7:
84:2e:8d:25:7f:8e:b3:86:33:1d:e8:96:62:5a:e1:48:b4:03:
fa:a9:a1:7f:4a:97:e7:90:42:32:42:68:55:ae:21:96:64:6e:
45:4b:41:a5:3b:36:ec:a0:21:bd:62:4b:b8:9a:29:ae:43:c4:
44:09:96:4d:f0:33:a8:e3:61:36:17:da:a3:03:1a:4f:15:1f:
55:fa:e8:ab:cc:fc:f9:40:88:24:d8:58:9b:38:c6:be:ad:aa:
9a:82:c9:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQfy+d0XnzCPAWbUymGhovMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhY2UxMjZmYTU4MzA5MTEwODNlNDVmNTgzY2FkYjA4YTYz
ZWM2ZjkwHhcNMjUwNDIwMDAwMDM0WhcNMjUwNDIxMDAwMDM0WjAzMTEwLwYDVQQD
EyhjMzBiZTJlZDRiZDQ3ZDcyOTljNjMyYzRiMTE1NDE4NDk3MWVkOWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof6P6kPgw3Eki0Yv7Vv+1gl6sctI
/v/+4+xwSHmq3MzT6LElX/OSQq4rF2Up/LQ52l56DA5IFaSrr7HifgUqZXAwMV0S
DPfip+rrPBKp+R/OXV4PKuggQ1LfL1VJzPntZhUli70LyTEbzrQFFf2tbl9k4pe8
srvBdwEUBcNZC0UkUjh3rwASBzHiDrRmW7kAFNPbSb/QbJ6PmdjsQbSEVBFWvzoQ
pvdJv1j1GXMdyHbIRd62hrNSVBCzTjmuSkyONzhi3tpGiKxyPY2NL9YjWmquNnNe
v35gEasMYGucUmMnXB9yZItqJLHcqPtwqu2Xq/4dm6UX5XRx2TBKghWyFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMML4u1L1H1ymcYyxLEVQYSXHtm7MB8GA1UdIwQY
MBaAFCrOEm+lgwkRCD5F9YPK2wimPsb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iNzNiZDItYWI5NC00YWMzLTkzYzQt
NmNiY2I3ZTNkOGQyLzEvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9iNzNiZDItYWI5NC00YWMzLTkzYzQtNmNiY2I3ZTNkOGQy
LzEvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyj/fYYuN
QOF7Lbe3oI//+1W9AdKQM07GJ+58hkXl9ndNtxSU8Y4Ziv7sl8JbMK3kEu0MCvTS
IbA+tW3gxcluBWrKB992ryo6uKBVFtts0jlOzEcT5lUo+1ujiKuwxGzOsCF1XbAJ
RzIZacVHB+cDmGG+h3Hj0pRXrk4jTIjrBI0aJtVWR9dlf0yzWYfrclN3XBmdefNi
vBDl9v6/9Ll/7p3XhC6NJX+Os4YzHeiWYlrhSLQD+qmhf0qX55BCMkJoVa4hlmRu
RUtBpTs27KAhvWJLuJoprkPERAmWTfAzqONhNhfaowMaTxUfVfroq8z8+UCIJNhY
mzjGvq2qmoLJcg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:35:22 2025 by rpki-client