Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
File: kQRcV5lsmjyeYnekMmsRgyFdW2o.mft (raw, json)
Hash identifier: kqJc0MW03DiLXlxcLG9jdeQxP2Wp0MjCEHyE2R+NsHU=
Subject key identifier: 4A:7E:A0:C8:52:F1:9B:BF:91:05:C1:F4:23:64:B9:E1:A8:3A:C1:3E
Authority key identifier: 91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
Certificate issuer: /CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Certificate serial: 01965537F075FDBF23CB1535EC6BEA2AF11C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
Manifest number: 0EF8
Signing time: Sun 20 Apr 2025 22:00:51 +0000
Manifest this update: Sun 20 Apr 2025 22:00:51 +0000
Manifest next update: Mon 21 Apr 2025 22:00:51 +0000
Files and hashes: 1: 75qkVCY5XXIcFQQiW3dyFVzW6eQ.roa (hash: dXFNWNpycxDfWS4F1kZ68a/+XDX33UqEzrugZvo8DVg=)
2: kQRcV5lsmjyeYnekMmsRgyFdW2o.crl (hash: C3YMPhSMCKpkioLWCV3fFoK5mTMvXEJ1UEEJKUuFSeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:f0:75:fd:bf:23:cb:15:35:ec:6b:ea:2a:f1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Validity
Not Before: Apr 20 22:00:51 2025 GMT
Not After : Apr 21 22:00:51 2025 GMT
Subject: CN=4a7ea0c852f19bbf9105c1f42364b9e1a83ac13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:a0:40:8f:68:db:54:df:21:79:28:50:96:
d4:86:3d:f1:fa:1a:e5:f5:8e:17:12:02:90:11:6d:
b8:fd:79:f8:0c:72:03:e6:5a:76:c6:47:f1:3f:c3:
dd:bc:8d:2b:cb:74:9c:dd:9f:4f:df:3c:e2:d7:e2:
7c:7e:fc:be:5f:69:e9:94:66:e2:fb:e2:5b:35:c9:
7f:c3:72:f9:a5:52:45:c1:c7:3b:6b:de:e4:c5:23:
07:df:da:29:aa:6d:bb:b7:f2:b3:b6:9a:93:1c:47:
2f:84:01:ce:1a:0e:23:06:e0:cd:ae:6f:7e:c9:ce:
8e:ae:ac:12:8b:ca:43:32:1d:63:29:f9:af:52:96:
b7:5b:07:8f:c1:dc:02:5c:47:a6:41:01:0e:b9:5a:
97:3f:26:f9:0f:82:a0:d8:72:30:02:d7:7a:31:92:
b3:f0:79:93:95:f7:8e:df:76:28:18:6d:42:e4:c8:
dc:c4:24:da:ad:6d:96:20:e7:13:02:91:86:1d:34:
89:b4:4c:ef:a1:1a:f3:c8:8d:83:3f:c4:b0:60:88:
f9:99:99:bd:6c:5b:22:95:77:3d:62:5c:09:48:4d:
d3:59:62:63:04:22:13:09:b6:ec:fc:c9:b7:07:c8:
cb:c5:5b:40:34:8d:69:3a:3a:b4:61:e6:25:f2:9a:
49:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7E:A0:C8:52:F1:9B:BF:91:05:C1:F4:23:64:B9:E1:A8:3A:C1:3E
X509v3 Authority Key Identifier:
keyid:91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:62:1a:40:e5:f9:21:7b:d2:d2:88:ad:43:fb:d5:ac:90:cd:
8e:04:f3:09:f1:eb:db:44:29:33:91:74:6e:6c:61:40:74:cb:
2c:1a:54:12:94:3b:a7:a8:52:51:24:c7:43:e3:c8:95:4b:41:
5b:92:41:ab:a1:54:cd:f2:11:04:70:1a:b3:eb:21:03:4f:36:
bf:5f:4a:40:76:fb:19:b9:39:53:c9:3a:de:6f:f7:8c:64:98:
12:e7:7c:1b:3a:f2:81:ad:b4:b0:70:0d:4d:91:df:7d:f0:f1:
96:70:df:e6:9e:37:16:c4:f2:4f:cd:b3:a3:36:29:16:96:ce:
ad:9e:5a:39:72:f0:a4:82:6c:08:d2:fc:fc:d7:f4:23:98:a3:
30:cd:35:dd:9b:65:a5:04:89:4d:e9:d1:8d:be:92:ee:13:59:
fa:63:92:a2:ab:5a:3e:45:5e:e2:dd:1f:da:4f:86:c1:6c:2a:
6b:ab:a3:53:74:f0:9f:bb:e5:fb:9c:81:36:53:db:b2:08:96:
36:56:29:2e:4d:a9:18:3e:8f:a7:bd:4b:16:a2:df:55:c3:03:
8b:4b:59:13:83:91:ad:4b:b5:ea:c6:df:1d:91:a4:d2:15:a1:
cc:e0:0b:f6:86:32:ec:8e:97:5b:cd:2f:f0:f5:f4:5d:86:a5:
91:c8:ff:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVN/B1/b8jyxU17GvqKvEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMDQ1YzU3OTk2YzlhM2M5ZTYyNzdhNDMyNmIxMTgzMjE1
ZDViNmEwHhcNMjUwNDIwMjIwMDUxWhcNMjUwNDIxMjIwMDUxWjAzMTEwLwYDVQQD
Eyg0YTdlYTBjODUyZjE5YmJmOTEwNWMxZjQyMzY0YjllMWE4M2FjMTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbigQI9o21TfIXkoUJbUhj3x+hrl
9Y4XEgKQEW24/Xn4DHID5lp2xkfxP8PdvI0ry3Sc3Z9P3zzi1+J8fvy+X2nplGbi
++JbNcl/w3L5pVJFwcc7a97kxSMH39opqm27t/KztpqTHEcvhAHOGg4jBuDNrm9+
yc6OrqwSi8pDMh1jKfmvUpa3WwePwdwCXEemQQEOuVqXPyb5D4Kg2HIwAtd6MZKz
8HmTlfeO33YoGG1C5MjcxCTarW2WIOcTApGGHTSJtEzvoRrzyI2DP8SwYIj5mZm9
bFsilXc9YlwJSE3TWWJjBCITCbbs/Mm3B8jLxVtANI1pOjq0YeYl8ppJhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEp+oMhS8Zu/kQXB9CNkueGoOsE+MB8GA1UdIwQY
MBaAFJEEXFeZbJo8nmJ3pDJrEYMhXVtqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1FSY1Y1bHNtanllWW5la01tc1JneUZkVzJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81ZmE2ODEtMjU2Ni00MGVlLTlmMDQt
NWRmNDQyOTViNGM5LzEva1FSY1Y1bHNtanllWW5la01tc1JneUZkVzJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS81ZmE2ODEtMjU2Ni00MGVlLTlmMDQtNWRmNDQyOTViNGM5
LzEva1FSY1Y1bHNtanllWW5la01tc1JneUZkVzJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGIaQOX5
IXvS0oitQ/vVrJDNjgTzCfHr20QpM5F0bmxhQHTLLBpUEpQ7p6hSUSTHQ+PIlUtB
W5JBq6FUzfIRBHAas+shA082v19KQHb7Gbk5U8k63m/3jGSYEud8Gzryga20sHAN
TZHfffDxlnDf5p43FsTyT82zozYpFpbOrZ5aOXLwpIJsCNL8/Nf0I5ijMM013Ztl
pQSJTenRjb6S7hNZ+mOSoqtaPkVe4t0f2k+GwWwqa6ujU3Twn7vl+5yBNlPbsgiW
NlYpLk2pGD6Pp71LFqLfVcMDi0tZE4ORrUu16sbfHZGk0hWhzOAL9oYy7I6XW80v
8PX0XYalkcj/JA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:32:22 2025 by rpki-client