Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: D4b7H4lChIMYDgQaKhw/ZmzpTkzrP+ejsW5T76d2tiQ=
Subject key identifier: 5F:19:84:DC:9D:F7:20:35:3E:52:9B:AE:AF:99:29:51:12:62:21:D3
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 0196556EA2FA1361B8F8993E3F4F8FA4B425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 10C1
Signing time: Sun 20 Apr 2025 23:00:36 +0000
Manifest this update: Sun 20 Apr 2025 23:00:36 +0000
Manifest next update: Mon 21 Apr 2025 23:00:36 +0000
Files and hashes: 1: CWePTkWPKqmq8XCrzmvHtdzJ66c.roa (hash: w47SbHpgg+8nHiedozoZtpn2WeqKZNjvBRbXbOYH5sQ=)
2: QxrO5EAVR8eFM8jH9BCfhqlcchk.roa (hash: YI48GxiCUKeQBfw8EzcAM9WtfO8HGqURFBVLVXq05fo=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: onAUmxsoQX23qb02PIqhQbK+6KWxb/VzF5lU6FXIAuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:a2:fa:13:61:b8:f8:99:3e:3f:4f:8f:a4:b4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: Apr 20 23:00:36 2025 GMT
Not After : Apr 21 23:00:36 2025 GMT
Subject: CN=5f1984dc9df720353e529baeaf992951126221d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:85:0e:24:d0:80:89:31:24:1d:e4:8f:a5:f4:
6c:ca:24:40:57:d5:94:b6:fe:3f:9b:53:69:bc:92:
41:11:66:7a:66:b4:e5:8e:00:8f:9f:1f:e6:d7:6d:
da:65:07:8c:93:5e:d4:31:a1:bd:8c:ff:64:bb:32:
a0:c1:33:a7:97:6d:2b:d9:c3:df:a6:79:ab:13:8e:
04:62:98:09:a9:87:8b:fc:0b:74:10:3c:74:f2:27:
32:ba:ac:fa:d0:5d:f7:c6:59:f8:d8:c9:36:7e:de:
42:45:41:71:b3:32:ae:78:a6:72:3d:9f:12:cc:33:
0a:6b:e3:55:8c:e9:4f:1f:62:fe:7b:ea:03:da:6d:
11:70:21:65:84:c8:65:3d:a5:ee:42:8f:19:41:2f:
27:7f:6e:0d:66:77:0a:1e:cd:d2:15:20:e1:ab:76:
e2:c7:a6:7f:50:f2:c1:9b:ee:a5:57:7d:f2:fa:1b:
60:1d:56:7f:28:ee:50:f5:76:17:ed:f3:9d:d5:65:
bd:7e:73:01:ac:44:09:9c:fd:6d:63:ca:a5:fe:71:
1b:af:fb:87:5f:44:54:af:d9:67:d0:d4:3c:0f:c7:
53:18:86:53:d0:a9:ee:4d:95:bf:95:18:96:21:49:
ad:f5:34:1b:f8:65:94:b1:93:0d:40:b4:01:46:51:
ab:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:19:84:DC:9D:F7:20:35:3E:52:9B:AE:AF:99:29:51:12:62:21:D3
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:22:a6:9c:ca:da:c2:57:bb:12:04:59:5e:5d:90:f7:03:54:
90:68:fb:fe:e0:ef:30:79:c1:95:9d:23:b4:d0:59:25:be:43:
5c:10:58:1e:cd:c8:34:58:b2:c2:af:9d:47:d8:76:8d:66:7d:
d8:08:07:ec:bd:97:07:ce:a7:fa:60:a7:63:65:cf:d1:bc:33:
70:4b:ba:8e:f3:fb:2c:30:95:ed:96:99:d2:23:f1:0c:b4:2b:
21:96:76:bb:f7:1c:a1:08:7b:c2:58:03:a2:6d:b5:d7:8b:55:
e6:f5:9d:a3:06:e3:06:87:ba:fd:4f:ae:9d:b3:da:77:a8:b8:
bb:d2:b6:d2:eb:8c:f0:99:59:ca:a0:ea:6b:e1:e0:1a:e1:4c:
cc:36:53:14:b3:b0:11:a6:d3:e4:86:92:11:fa:f0:fd:ac:75:
07:e2:82:a3:eb:50:a5:60:09:a0:17:11:a5:3c:db:18:ea:b0:
12:18:ee:54:39:59:a5:f4:d4:13:7e:a5:ce:b8:e3:25:7a:f6:
f7:41:d0:88:16:dc:18:ef:29:0e:6a:85:f4:08:29:43:e3:f3:
5c:14:8f:2b:2e:37:21:b3:86:32:73:dd:d0:76:86:3c:8d:c4:
9b:00:59:0f:04:ca:f3:12:7c:35:85:e2:2c:17:3f:ad:ba:6d:
c4:be:3f:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVbqL6E2G4+Jk+P0+PpLQlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMjA1ZjVhNjRlYTFmYjA5MGFkMjZkY2ZkYjE4Y2VmYjlh
YWJkOGQwHhcNMjUwNDIwMjMwMDM2WhcNMjUwNDIxMjMwMDM2WjAzMTEwLwYDVQQD
Eyg1ZjE5ODRkYzlkZjcyMDM1M2U1MjliYWVhZjk5Mjk1MTEyNjIyMWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIUOJNCAiTEkHeSPpfRsyiRAV9WU
tv4/m1NpvJJBEWZ6ZrTljgCPnx/m123aZQeMk17UMaG9jP9kuzKgwTOnl20r2cPf
pnmrE44EYpgJqYeL/At0EDx08icyuqz60F33xln42Mk2ft5CRUFxszKueKZyPZ8S
zDMKa+NVjOlPH2L+e+oD2m0RcCFlhMhlPaXuQo8ZQS8nf24NZncKHs3SFSDhq3bi
x6Z/UPLBm+6lV33y+htgHVZ/KO5Q9XYX7fOd1WW9fnMBrEQJnP1tY8ql/nEbr/uH
X0RUr9ln0NQ8D8dTGIZT0KnuTZW/lRiWIUmt9TQb+GWUsZMNQLQBRlGrwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8ZhNyd9yA1PlKbrq+ZKVESYiHTMB8GA1UdIwQY
MBaAFJIgX1pk6h+wkK0m3P2xjO+5qr2NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lCZldtVHFIN0NRclNiY19iR003N21xdlkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82NTIyNjctZWExMy00ODkyLTlmZmEt
MDljMWI3MzM2YTUxLzEva2lCZldtVHFIN0NRclNiY19iR003N21xdlkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82NTIyNjctZWExMy00ODkyLTlmZmEtMDljMWI3MzM2YTUx
LzEva2lCZldtVHFIN0NRclNiY19iR003N21xdlkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4SKmnMra
wle7EgRZXl2Q9wNUkGj7/uDvMHnBlZ0jtNBZJb5DXBBYHs3INFiywq+dR9h2jWZ9
2AgH7L2XB86n+mCnY2XP0bwzcEu6jvP7LDCV7ZaZ0iPxDLQrIZZ2u/ccoQh7wlgD
om2114tV5vWdowbjBoe6/U+unbPad6i4u9K20uuM8JlZyqDqa+HgGuFMzDZTFLOw
EabT5IaSEfrw/ax1B+KCo+tQpWAJoBcRpTzbGOqwEhjuVDlZpfTUE36lzrjjJXr2
90HQiBbcGO8pDmqF9AgpQ+PzXBSPKy43IbOGMnPd0HaGPI3EmwBZDwTK8xJ8NYXi
LBc/rbptxL4/TQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:43:28 2025 by rpki-client