Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
File: K76x-Fza0UW9L5et3QlB0y11jec.mft (raw, json)
Hash identifier: 01Exi2KclDEOfimSmR3kNWCTanS+j5HP8ttnVndcq84=
Subject key identifier: 55:5D:6C:47:99:78:0A:FA:3A:71:D2:72:34:B8:77:53:22:95:20:AE
Authority key identifier: 2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
Certificate issuer: /CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Certificate serial: 01967C0E1EEFBF2CCEC9C6E3CFDF4A11FD5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
Manifest number: 0278
Signing time: Mon 28 Apr 2025 11:00:22 +0000
Manifest this update: Mon 28 Apr 2025 11:00:22 +0000
Manifest next update: Tue 29 Apr 2025 11:00:22 +0000
Files and hashes: 1: 8Zt8UHUusx_XQrfwEnBO0zgttVQ.roa (hash: 99GtToN6lghv1t5UehgYXJgLt9TbyulNLZ07g/FzqO4=)
2: K76x-Fza0UW9L5et3QlB0y11jec.crl (hash: hjqm0f5JAZ0TZ8MHfB5bKgi6r9d+P73QT7FaOMr91Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:1e:ef:bf:2c:ce:c9:c6:e3:cf:df:4a:11:fd:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Validity
Not Before: Apr 28 11:00:22 2025 GMT
Not After : Apr 29 11:00:22 2025 GMT
Subject: CN=555d6c4799780afa3a71d27234b87753229520ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:32:27:e6:9c:68:9e:81:67:cd:df:61:51:
af:9a:04:e9:c1:67:f2:a5:53:9a:14:c2:e3:1e:fe:
12:9e:c7:f7:a9:85:8d:1c:bc:4e:c9:8b:5f:ec:4a:
c6:d5:26:ec:00:68:e7:96:39:8f:e2:5c:2a:e5:3f:
62:aa:95:3f:c4:44:8d:72:6e:f0:c8:b2:99:ad:35:
04:83:81:ee:e8:27:d2:a4:ad:79:16:08:38:0f:6e:
27:d0:2a:d1:b8:df:08:c8:98:2c:cc:34:62:aa:f3:
2a:7e:87:64:86:a8:db:00:da:dc:2d:61:89:df:51:
68:b0:b6:32:0e:05:ea:fc:f5:53:46:47:de:09:82:
3c:76:4a:82:f1:9b:99:b0:0e:dd:22:fc:6c:ef:cb:
fb:e8:52:be:70:63:b1:72:09:a2:2b:f3:b6:5a:3e:
8d:2b:fc:66:19:f9:4b:8b:90:df:b9:a8:90:d8:a1:
5f:e5:0e:c9:50:36:38:7a:61:95:83:21:12:cb:12:
f0:3c:31:60:9f:c8:ea:8e:68:92:70:55:ae:3e:14:
8c:04:07:02:a0:51:2f:4f:f8:3a:2c:e4:5e:49:8f:
42:a8:a7:59:4d:fb:43:95:1e:cc:b4:47:62:93:9f:
b4:6f:bd:a9:f6:64:29:b6:c7:0a:4b:13:42:f1:12:
a9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5D:6C:47:99:78:0A:FA:3A:71:D2:72:34:B8:77:53:22:95:20:AE
X509v3 Authority Key Identifier:
keyid:2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:54:16:71:1a:5c:ae:c2:75:cf:63:3f:14:30:b8:fc:ac:7d:
5e:71:fb:e7:29:bb:41:97:af:16:b5:ca:ae:6b:d2:3b:a2:e1:
29:e5:8d:24:fa:c5:31:a3:4b:8b:70:17:9a:e8:12:4e:b2:69:
55:4f:cf:2a:02:a7:50:24:f4:ce:f5:69:f7:77:e6:04:6c:96:
c4:5d:bc:a7:6e:1a:fa:a4:63:a0:de:20:ed:16:9a:1c:98:73:
a3:52:a2:30:3f:97:0a:ff:84:6c:45:87:2c:fa:64:8c:b4:c1:
4a:a1:16:67:be:d4:55:7a:7e:ad:ad:d4:49:f9:9f:76:5e:9c:
79:b3:48:71:5b:d2:df:a5:98:23:de:23:01:1f:2a:b9:2b:0b:
e6:53:97:15:2b:c2:da:7f:01:4a:65:3c:0c:f3:c1:c0:c2:62:
f4:c9:f8:22:eb:38:fc:70:36:47:0c:8b:17:e7:bb:21:06:4c:
61:eb:f9:16:a8:a5:f9:4a:1a:02:a5:02:28:c5:a9:21:80:f0:
2f:43:6c:ac:98:d7:6c:93:af:f3:0d:a7:ac:c9:12:85:81:95:
9e:94:d5:35:69:4e:c4:9f:22:83:c2:b3:e4:4b:21:c7:9c:35:
e6:3e:2c:5f:69:e0:b5:34:65:49:9b:71:ee:58:26:e6:6f:64:
5e:a7:e1:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8Dh7vvyzOycbjz99KEf1fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYmViMWY4NWNkYWQxNDViZDJmOTdhZGRkMDk0MWQzMmQ3
NThkZTcwHhcNMjUwNDI4MTEwMDIyWhcNMjUwNDI5MTEwMDIyWjAzMTEwLwYDVQQD
Eyg1NTVkNmM0Nzk5NzgwYWZhM2E3MWQyNzIzNGI4Nzc1MzIyOTUyMGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9UyJ+acaJ6BZ83fYVGvmgTpwWfy
pVOaFMLjHv4Snsf3qYWNHLxOyYtf7ErG1SbsAGjnljmP4lwq5T9iqpU/xESNcm7w
yLKZrTUEg4Hu6CfSpK15Fgg4D24n0CrRuN8IyJgszDRiqvMqfodkhqjbANrcLWGJ
31FosLYyDgXq/PVTRkfeCYI8dkqC8ZuZsA7dIvxs78v76FK+cGOxcgmiK/O2Wj6N
K/xmGflLi5DfuaiQ2KFf5Q7JUDY4emGVgyESyxLwPDFgn8jqjmiScFWuPhSMBAcC
oFEvT/g6LOReSY9CqKdZTftDlR7MtEdik5+0b72p9mQptscKSxNC8RKpUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVdbEeZeAr6OnHScjS4d1MilSCuMB8GA1UdIwQY
MBaAFCu+sfhc2tFFvS+Xrd0JQdMtdY3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9hNWYyYmEtMzI2ZC00ODQ1LWI3YTMt
MDJmZDhlOTliZmUxLzEvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9hNWYyYmEtMzI2ZC00ODQ1LWI3YTMtMDJmZDhlOTliZmUx
LzEvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVQWcRpc
rsJ1z2M/FDC4/Kx9XnH75ym7QZevFrXKrmvSO6LhKeWNJPrFMaNLi3AXmugSTrJp
VU/PKgKnUCT0zvVp93fmBGyWxF28p24a+qRjoN4g7RaaHJhzo1KiMD+XCv+EbEWH
LPpkjLTBSqEWZ77UVXp+ra3USfmfdl6cebNIcVvS36WYI94jAR8quSsL5lOXFSvC
2n8BSmU8DPPBwMJi9Mn4Ius4/HA2RwyLF+e7IQZMYev5Fqil+UoaAqUCKMWpIYDw
L0NsrJjXbJOv8w2nrMkShYGVnpTVNWlOxJ8ig8Kz5Eshx5w15j4sX2ngtTRlSZtx
7lgm5m9kXqfhpg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:02:40 2025 by rpki-client