Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
File: krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json)
Hash identifier: ql59z9Wk5P5tFL/4WvLeN+kv0UIziu6K5rCpg4zDZUo=
Subject key identifier: 57:B8:AE:08:09:A5:20:3B:0D:8F:81:44:45:A5:2E:F2:56:9D:33:24
Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Certificate issuer: /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Certificate serial: 019611A181D0991EB727BC5FAE99292593BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
Manifest number: 1401
Signing time: Mon 07 Apr 2025 19:01:59 +0000
Manifest this update: Mon 07 Apr 2025 19:01:59 +0000
Manifest next update: Tue 08 Apr 2025 19:01:59 +0000
Files and hashes: 1: GCdodDNbb8kK5Nk7F_0-nAXSuto.roa (hash: +rPewf2fSfxIULsaTk1i8u3POGDLVTn+S/ryNeqw1mw=)
2: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: yKDhsByoI6Z16k/0OnDtQO/7R8cIeb7cZVFMgfPydXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a1:81:d0:99:1e:b7:27:bc:5f:ae:99:29:25:93:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Validity
Not Before: Apr 7 19:01:59 2025 GMT
Not After : Apr 8 19:01:59 2025 GMT
Subject: CN=57b8ae0809a5203b0d8f814445a52ef2569d3324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:23:e2:a8:d1:9c:db:18:ff:b2:3e:00:42:
64:b6:e5:be:7b:5b:00:77:7a:3b:50:a0:22:c8:54:
52:c4:90:45:95:e4:dc:c5:fb:a1:75:4b:a8:ca:42:
6c:4e:3e:a7:f2:92:91:36:0e:47:38:69:66:61:b6:
52:32:9a:78:c2:fd:61:20:01:43:74:69:77:94:dc:
17:3d:41:27:80:3b:d7:ab:5d:bd:3a:65:46:3d:8f:
1f:a2:38:52:b6:6f:e0:f7:07:80:e2:52:ba:78:22:
7a:6d:2e:1e:1a:3f:67:b8:5c:fd:2a:12:29:5e:86:
3d:62:76:13:a9:a4:28:39:ad:98:83:09:cd:13:fa:
cb:b8:32:46:2b:e7:cf:94:5f:e4:bd:ae:c8:60:95:
8a:d7:13:8c:b8:e8:ea:e2:27:83:1d:90:5e:67:07:
05:a6:d8:19:16:43:79:09:9b:55:6f:53:c0:7c:48:
a8:82:76:b1:4c:99:36:67:b8:1f:73:dd:36:cc:6e:
d5:94:0f:05:86:f4:9f:7c:1f:ae:ec:e4:27:5a:6b:
6c:2f:50:dc:5e:a5:14:9f:82:c2:b4:8f:7e:7f:f6:
f2:ae:d6:06:03:ea:85:f6:d5:3f:6f:e4:6a:07:a1:
66:02:33:1b:cd:37:cc:a1:d4:04:46:cc:78:4a:18:
0a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B8:AE:08:09:A5:20:3B:0D:8F:81:44:45:A5:2E:F2:56:9D:33:24
X509v3 Authority Key Identifier:
keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:dd:24:86:96:90:e5:92:f0:eb:58:6c:96:15:36:4e:66:06:
d9:68:be:fc:62:f4:3f:9e:46:5f:ec:d3:45:51:67:7b:9b:97:
bc:2a:52:80:1b:cc:e0:1a:2b:97:b9:b7:d5:bc:b0:c1:be:48:
3d:20:b8:17:a3:8d:9a:7d:9e:d2:3b:04:c4:25:f6:6c:97:cb:
2e:25:9b:40:01:32:85:eb:1b:b1:4f:05:91:15:d4:0e:dd:21:
97:37:6f:ff:c3:8c:4b:6e:10:fe:71:50:fe:b6:47:b3:ce:5d:
38:b9:3b:cb:15:2d:a0:a5:48:9c:a1:5c:6a:85:8c:42:d0:10:
ae:fa:02:a6:08:b9:22:f9:fb:d0:fc:6d:99:c3:d0:28:33:b8:
5a:c4:d4:19:e1:d7:84:30:93:e8:e3:53:a7:0f:32:93:9d:f6:
77:b9:71:c7:72:cd:38:ea:fd:d3:56:b2:ec:c9:3e:57:f6:6e:
07:12:76:73:d0:23:b7:19:6c:a7:23:28:03:40:a1:16:4b:9a:
b7:8c:fa:41:e4:81:8f:3a:71:69:8f:a9:c8:4c:34:f9:4b:cc:
8e:e1:a8:4b:1e:58:60:18:f6:d1:e2:d0:f3:03:7b:d4:ff:7c:
3d:ca:55:cc:55:51:4e:33:8f:f3:e8:4f:26:b4:64:27:aa:dd:
72:5a:fe:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYRoYHQmR63J7xfrpkpJZO/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYjVhYzg4ZjJjZGIxNDkzNDgzMGMxYWMwOTZhNWVmNzMw
OThmMTIwHhcNMjUwNDA3MTkwMTU5WhcNMjUwNDA4MTkwMTU5WjAzMTEwLwYDVQQD
Eyg1N2I4YWUwODA5YTUyMDNiMGQ4ZjgxNDQ0NWE1MmVmMjU2OWQzMzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTcj4qjRnNsY/7I+AEJktuW+e1sA
d3o7UKAiyFRSxJBFleTcxfuhdUuoykJsTj6n8pKRNg5HOGlmYbZSMpp4wv1hIAFD
dGl3lNwXPUEngDvXq129OmVGPY8fojhStm/g9weA4lK6eCJ6bS4eGj9nuFz9KhIp
XoY9YnYTqaQoOa2YgwnNE/rLuDJGK+fPlF/kva7IYJWK1xOMuOjq4ieDHZBeZwcF
ptgZFkN5CZtVb1PAfEiognaxTJk2Z7gfc902zG7VlA8FhvSffB+u7OQnWmtsL1Dc
XqUUn4LCtI9+f/byrtYGA+qF9tU/b+RqB6FmAjMbzTfModQERsx4ShgKLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFe4rggJpSA7DY+BREWlLvJWnTMkMB8GA1UdIwQY
MBaAFJK1rIjyzbFJNIMMGsCWpe9zCY8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lNDE3YmQtMTRlYi00Y2E1LTgwZjct
MzZjNDZmOTBkOWE1LzEva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lNDE3YmQtMTRlYi00Y2E1LTgwZjctMzZjNDZmOTBkOWE1
LzEva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE90khpaQ
5ZLw61hslhU2TmYG2Wi+/GL0P55GX+zTRVFne5uXvCpSgBvM4Borl7m31bywwb5I
PSC4F6ONmn2e0jsExCX2bJfLLiWbQAEyhesbsU8FkRXUDt0hlzdv/8OMS24Q/nFQ
/rZHs85dOLk7yxUtoKVInKFcaoWMQtAQrvoCpgi5Ivn70PxtmcPQKDO4WsTUGeHX
hDCT6ONTpw8yk532d7lxx3LNOOr901ay7Mk+V/ZuBxJ2c9AjtxlspyMoA0ChFkua
t4z6QeSBjzpxaY+pyEw0+UvMjuGoSx5YYBj20eLQ8wN71P98PcpVzFVRTjOP8+hP
JrRkJ6rdclr+8A==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:18 2025 by rpki-client