Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier: Q6HimH41sBF/pGCVX6HbmWuwnnBckYdXp1Xn3SJ5Sh0=
Subject key identifier: 5E:68:24:12:5C:E9:FF:CE:F1:B8:57:CC:E9:F1:BC:5C:65:B6:C8:11
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 01964F6C9531D8C3403C511B7F05911FEBA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number: 1501
Signing time: Sat 19 Apr 2025 19:00:38 +0000
Manifest this update: Sat 19 Apr 2025 19:00:38 +0000
Manifest next update: Sun 20 Apr 2025 19:00:38 +0000
Files and hashes: 1: 3WOQMHHA_gyX03awABhKzOim3Bs.roa (hash: ZA+s/EckArtDe+QZpgBb9d1KuxQcRDkEk6RSEwu6Y0k=)
2: 7KoL3jGlfNGPpyhqV9AtZAaoaI0.roa (hash: Nb/Vw+/Ylb4cSX8JKW25BkVIJgSx13SRW+VCTwm5sJ8=)
3: HL23JkhmDLszmlcMKIQLjOYgOlw.roa (hash: UcG0dWZ6JWWkmOHgvKVtqjoii96EVOB2hFdkb/AhZXs=)
4: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: 79/L7TSdRB/THpsUOAuYFafpQ2GPEFRMUKaWsrpj6Ns=)
5: bLZSbio8bkJcYZljrUphK1wwfiI.roa (hash: 8pmPyotbXxfraqC1rKstG9Ljo1wkSagV+FMWF45wlzU=)
6: pZ6QLhb3L-zU8HaIuMWziHfarGQ.roa (hash: bAsLcg/vcZKidF7bKnaCdDmEHtuPe3QKZhFTHIqySAA=)
7: vgrDVzIHM-lfYbprXn7b8oE_EG0.roa (hash: pmw87KrkZDI/w+UgS4DgQBhIgi8uItz6U8fozdzX4sc=)
8: yIaElboDEcTWK_3VfQrVd7rO3sU.roa (hash: dRcI0G+6+49AKUKXqa7HKsOOK4Sxw6VtAfiMSWdhRnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:95:31:d8:c3:40:3c:51:1b:7f:05:91:1f:eb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Apr 19 19:00:38 2025 GMT
Not After : Apr 20 19:00:38 2025 GMT
Subject: CN=5e6824125ce9ffcef1b857cce9f1bc5c65b6c811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:58:0b:e1:80:e3:d6:b2:80:ce:5a:91:91:99:
8d:0e:53:00:ad:e4:b2:27:84:40:46:61:51:21:cb:
3f:5f:45:4c:77:5e:6f:63:81:ce:31:3d:46:d8:57:
98:11:7e:ed:e6:0b:8a:3b:6f:8a:30:26:38:ac:cf:
9b:3f:78:03:f4:a1:50:ec:44:22:1b:ee:33:c1:6e:
96:f5:f5:26:40:a8:b8:6a:97:bb:cf:14:d0:1f:01:
88:cd:7c:b6:b2:46:16:7a:03:fd:1e:17:38:7d:a6:
97:53:33:34:f6:1e:a1:df:13:b6:78:97:59:01:b0:
ab:fc:5c:61:23:ff:3e:06:e4:85:79:08:54:8e:f5:
9d:26:80:ba:97:90:17:77:7d:f6:fa:94:5e:5e:10:
21:45:62:6e:7d:19:62:04:c0:96:c6:62:3c:99:3d:
e2:9d:46:e0:dc:aa:1c:6a:03:0e:90:2a:c4:15:ae:
50:68:9c:6b:58:28:6d:ca:46:30:ae:62:ab:0c:3c:
50:a1:3e:5c:ef:d0:15:05:f2:db:47:ad:4d:d4:d9:
a3:8f:3b:65:4e:eb:7d:2b:29:cf:8e:a0:c4:0e:9a:
5a:57:16:97:ee:11:a0:a7:02:b9:e4:02:c5:d1:41:
4a:f3:7a:04:82:0f:51:02:52:80:99:a9:9d:9f:a5:
4f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:68:24:12:5C:E9:FF:CE:F1:B8:57:CC:E9:F1:BC:5C:65:B6:C8:11
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d4:31:e5:86:05:50:5e:b9:63:ad:c9:89:71:7c:71:de:be:
f3:33:0b:4f:4d:3b:50:7b:fd:94:90:4a:f4:92:6a:70:7c:7d:
85:49:1c:bb:f8:22:0b:3c:49:d7:59:89:29:08:46:f8:e2:5c:
54:2b:d3:01:00:f8:09:93:04:65:b0:20:3a:e6:61:40:32:6f:
9d:8c:98:65:89:7a:30:40:2c:47:ba:6e:63:83:97:29:30:29:
f1:53:63:27:31:4f:fd:fd:8f:bb:e6:ba:01:42:1c:c5:6c:c8:
47:26:de:6e:13:cd:c3:87:2b:ec:40:43:ec:cc:b1:fa:8b:8d:
0e:c7:54:78:68:b9:2a:1a:02:fe:b7:dd:aa:b3:e6:e3:6b:01:
6d:69:18:ca:ef:a1:5a:a3:59:1f:08:87:c6:d4:3b:ac:65:db:
60:fd:9b:12:43:2e:70:d3:ba:6e:a1:06:ab:87:d1:cf:c8:2f:
17:ba:15:44:87:51:47:ef:7c:c1:e4:fa:f5:73:14:91:e7:3b:
48:ed:39:ff:a2:8a:c6:e3:5c:40:66:9b:25:89:0e:0d:70:3b:
34:bd:9b:d6:37:c7:1e:10:64:28:01:6b:45:da:d9:e6:a9:06:
af:c0:d7:4d:b6:7a:4e:e7:d2:d0:6e:0b:3a:ae:fd:ea:ee:e6:
40:27:1d:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbJUx2MNAPFEbfwWRH+uhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzY0ZGMyMWNiNWZkNGQwYmNiMDJjYzJiNDNmZDc1MWZk
OTFlMWUwHhcNMjUwNDE5MTkwMDM4WhcNMjUwNDIwMTkwMDM4WjAzMTEwLwYDVQQD
Eyg1ZTY4MjQxMjVjZTlmZmNlZjFiODU3Y2NlOWYxYmM1YzY1YjZjODExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1gL4YDj1rKAzlqRkZmNDlMAreSy
J4RARmFRIcs/X0VMd15vY4HOMT1G2FeYEX7t5guKO2+KMCY4rM+bP3gD9KFQ7EQi
G+4zwW6W9fUmQKi4ape7zxTQHwGIzXy2skYWegP9Hhc4faaXUzM09h6h3xO2eJdZ
AbCr/FxhI/8+BuSFeQhUjvWdJoC6l5AXd332+pReXhAhRWJufRliBMCWxmI8mT3i
nUbg3KocagMOkCrEFa5QaJxrWChtykYwrmKrDDxQoT5c79AVBfLbR61N1Nmjjztl
Tut9KynPjqDEDppaVxaX7hGgpwK55ALF0UFK83oEgg9RAlKAmamdn6VPyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5oJBJc6f/O8bhXzOnxvFxltsgRMB8GA1UdIwQY
MBaAFCrGTcIctf1NC8sCzCtD/XUf2R4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAt
MDk3YzNjMWMyNTQwLzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAtMDk3YzNjMWMyNTQw
LzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdQx5YYF
UF65Y63JiXF8cd6+8zMLT007UHv9lJBK9JJqcHx9hUkcu/giCzxJ11mJKQhG+OJc
VCvTAQD4CZMEZbAgOuZhQDJvnYyYZYl6MEAsR7puY4OXKTAp8VNjJzFP/f2Pu+a6
AUIcxWzIRybebhPNw4cr7EBD7Myx+ouNDsdUeGi5KhoC/rfdqrPm42sBbWkYyu+h
WqNZHwiHxtQ7rGXbYP2bEkMucNO6bqEGq4fRz8gvF7oVRIdRR+98weT69XMUkec7
SO05/6KKxuNcQGabJYkODXA7NL2b1jfHHhBkKAFrRdrZ5qkGr8DXTbZ6TufS0G4L
Oq796u7mQCcdVA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:44:44 2025 by rpki-client