Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File: kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier: mBIWe/LCb5Eh9ZZNJwnWOxULbeur5XdzamF66I7D/oc=
Subject key identifier: 0E:84:2E:85:B8:7C:7E:4A:83:E8:7E:03:37:75:20:10:26:A9:5C:66
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial: 019650117FC3B65F1AAAA22FC417D37642E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number: 0815
Signing time: Sat 19 Apr 2025 22:00:46 +0000
Manifest this update: Sat 19 Apr 2025 22:00:46 +0000
Manifest next update: Sun 20 Apr 2025 22:00:46 +0000
Files and hashes: 1: i0TYuxJTadWsH2nNCaLA3ELCG_g.roa (hash: WKF6rqlqDJ5rXyoCDaodVLIXE1F+Y/5SEavY6SvlaFE=)
2: joszl7vjeMm9I7xAP3JhFk1aZ5s.roa (hash: jKG1eRBOq5nJNcRDVBOsW2QarCcd5ds9sjRhL8pufpI=)
3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: uotfKd91WAgVrRE7x++JmS8/rEDVJvJOhX36yBpy8B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:7f:c3:b6:5f:1a:aa:a2:2f:c4:17:d3:76:42:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
Validity
Not Before: Apr 19 22:00:46 2025 GMT
Not After : Apr 20 22:00:46 2025 GMT
Subject: CN=0e842e85b87c7e4a83e87e033775201026a95c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:c4:3a:30:6e:2d:d3:d0:3b:a9:cc:d8:39:
53:6f:a8:72:5d:c8:2c:73:68:98:56:36:d4:2d:f4:
18:95:d8:1d:20:7f:1d:df:af:e9:24:08:41:27:44:
9a:9d:7f:94:09:82:90:cf:cd:0d:80:67:8f:5c:33:
c4:34:b9:f0:9e:33:21:96:44:c9:e7:6e:09:e1:1f:
d4:c3:c6:53:c1:80:24:3f:18:bf:de:78:87:d1:65:
0f:a3:ee:19:6b:cc:e8:bc:f4:b4:4e:a7:90:f8:35:
70:28:03:7a:e2:03:54:ea:ea:de:d5:89:d2:85:f4:
8b:ee:28:ea:e5:3c:b5:48:30:d0:82:d5:45:cd:97:
3d:9d:95:d0:f9:1a:1d:df:5b:24:95:6d:2e:72:97:
a9:74:be:3a:9b:16:9f:b1:62:18:e7:d4:c7:71:85:
c6:d5:c3:49:dc:60:13:fe:29:40:a1:86:a0:8b:d4:
6c:d1:af:c2:3c:2a:8e:d7:a7:79:2a:cf:44:d9:9d:
60:43:68:6f:e9:51:8b:e3:79:61:a4:ce:05:e0:d9:
f9:ef:a6:18:d9:dc:10:3d:73:7b:d6:62:b1:ec:d8:
59:d1:55:15:be:8a:b2:a8:7c:1d:d2:e3:07:24:12:
ca:e3:d2:a1:f5:f1:c8:d2:56:18:86:8f:66:d1:54:
cd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:84:2E:85:B8:7C:7E:4A:83:E8:7E:03:37:75:20:10:26:A9:5C:66
X509v3 Authority Key Identifier:
keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e0:3e:a8:b0:17:9e:91:47:7d:80:ec:fb:94:cd:a6:1a:4b:
cc:71:09:09:ba:d0:d3:14:82:30:fd:13:c0:93:8a:15:ba:cf:
10:f6:82:c5:29:d8:62:ad:56:ea:38:29:b5:38:fe:e4:b2:53:
47:1c:6a:a0:d7:4e:b7:56:d6:98:a2:be:e2:f0:ff:bc:8b:f8:
bb:1e:16:a9:fc:83:81:ee:cf:80:72:e5:11:50:a2:1e:3e:0d:
04:5e:d5:e4:c1:39:69:02:1b:fe:99:5a:7d:4c:55:42:0e:14:
88:3d:be:25:1f:1e:0b:90:78:f2:3f:98:6f:51:d6:d4:e0:5c:
2c:32:f7:5b:72:93:bf:1c:bb:7f:43:42:b6:bc:8f:85:36:cb:
81:a2:a5:d7:81:f7:3d:84:12:cf:4d:8f:c8:16:e5:07:42:b8:
c0:3d:25:2c:90:3c:65:15:60:ac:85:b8:8f:9f:5a:45:9b:d6:
98:42:9b:95:af:e3:10:88:f8:dc:6e:e2:36:db:f3:4f:09:93:
8b:ae:ac:1f:6c:17:4d:0a:e2:b6:ab:ef:ac:ef:6e:69:60:a7:
7a:16:dd:86:d4:e2:df:83:46:1c:a6:da:1b:f4:e2:c1:75:6f:
97:ea:cf:06:1d:aa:62:c5:fc:e1:41:75:e9:bd:9b:f8:29:f0:
15:e7:09:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQEX/Dtl8aqqIvxBfTdkLmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMjAyMTI5OTY5NTc2Y2UzNTdmYWUyNmM5YzdjZjk4YTgy
NTBlYTYwHhcNMjUwNDE5MjIwMDQ2WhcNMjUwNDIwMjIwMDQ2WjAzMTEwLwYDVQQD
EygwZTg0MmU4NWI4N2M3ZTRhODNlODdlMDMzNzc1MjAxMDI2YTk1YzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1bEOjBuLdPQO6nM2DlTb6hyXcgs
c2iYVjbULfQYldgdIH8d36/pJAhBJ0SanX+UCYKQz80NgGePXDPENLnwnjMhlkTJ
524J4R/Uw8ZTwYAkPxi/3niH0WUPo+4Za8zovPS0TqeQ+DVwKAN64gNU6ure1YnS
hfSL7ijq5Ty1SDDQgtVFzZc9nZXQ+Rod31sklW0ucpepdL46mxafsWIY59THcYXG
1cNJ3GAT/ilAoYagi9Rs0a/CPCqO16d5Ks9E2Z1gQ2hv6VGL43lhpM4F4Nn576YY
2dwQPXN71mKx7NhZ0VUVvoqyqHwd0uMHJBLK49Kh9fHI0lYYho9m0VTNXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6ELoW4fH5Kg+h+Azd1IBAmqVxmMB8GA1UdIwQY
MBaAFJMgISmWlXbONX+uJsnHz5ioJQ6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kNmU3OTYtMGUxNC00NWIxLTljZjMt
NWFkNThhYmZiYjFmLzEva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9kNmU3OTYtMGUxNC00NWIxLTljZjMtNWFkNThhYmZiYjFm
LzEva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+A+qLAX
npFHfYDs+5TNphpLzHEJCbrQ0xSCMP0TwJOKFbrPEPaCxSnYYq1W6jgptTj+5LJT
RxxqoNdOt1bWmKK+4vD/vIv4ux4WqfyDge7PgHLlEVCiHj4NBF7V5ME5aQIb/pla
fUxVQg4UiD2+JR8eC5B48j+Yb1HW1OBcLDL3W3KTvxy7f0NCtryPhTbLgaKl14H3
PYQSz02PyBblB0K4wD0lLJA8ZRVgrIW4j59aRZvWmEKbla/jEIj43G7iNtvzTwmT
i66sH2wXTQritqvvrO9uaWCnehbdhtTi34NGHKbaG/TiwXVvl+rPBh2qYsX84UF1
6b2b+CnwFecJsA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:22:48 2025 by rpki-client