Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
File: KCyT0maFJ4jkmYLZ96Yg222fWI0.mft (raw, json)
Hash identifier: kHfwdFT8guhHbGDGnUu5zO3dS2a6RwaUAFAWmUI4ZFk=
Subject key identifier: EA:98:F7:E4:91:3E:D3:24:4E:5D:AD:79:88:4C:9E:CE:B6:9D:F8:42
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial: 019671C1F957829735ED3C6C65B868F889AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
Manifest number: 0A29
Signing time: Sat 26 Apr 2025 11:00:59 +0000
Manifest this update: Sat 26 Apr 2025 11:00:59 +0000
Manifest next update: Sun 27 Apr 2025 11:00:59 +0000
Files and hashes: 1: FCRIl5Vt1LPdQ6IrZpaUR6T2zRk.roa (hash: dI7TXuZLS0+y6udtXa2yol0ikupwyIZAlaHrmt/VDI0=)
2: KCyT0maFJ4jkmYLZ96Yg222fWI0.crl (hash: 8pq/HTnTqqM5OPfKP+tjAjCChW6IxgMKENYCQuKkrVY=)
3: z3-dsZKj9j7nCKXS-M2vtq4aJrk.roa (hash: 28apFTsYy4v/YWMNME9MOhYcWfL7kBuIz5Y1C6vARJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c1:f9:57:82:97:35:ed:3c:6c:65:b8:68:f8:89:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
Validity
Not Before: Apr 26 11:00:59 2025 GMT
Not After : Apr 27 11:00:59 2025 GMT
Subject: CN=ea98f7e4913ed3244e5dad79884c9eceb69df842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a6:7c:67:80:b4:a7:89:b2:8b:c2:0a:dc:be:
c3:54:a3:f2:06:59:7a:9f:46:48:d3:31:8e:ba:23:
8f:47:8f:42:8a:0b:d0:a9:07:d4:7e:94:1e:dd:8a:
0b:b5:fd:ef:8c:1f:6e:33:40:62:21:0b:9f:4d:69:
f4:f5:5e:ed:ef:50:e4:31:f1:18:4d:1c:91:d9:1c:
4c:6c:33:5a:64:cd:f9:08:76:0e:3f:bd:f2:54:fb:
9f:b8:7e:35:80:82:0f:c9:cd:a2:5c:1c:2a:b4:21:
5d:7f:b5:c8:b2:a3:1d:c0:2c:5a:35:a6:53:8e:b5:
cb:70:4d:42:2f:76:36:75:a2:3d:ca:32:f5:29:99:
fa:a3:29:e3:a6:93:fc:40:b1:38:b2:23:c7:8c:73:
e9:a2:99:78:05:93:6b:4e:84:46:63:7a:57:71:c2:
55:ab:1e:61:90:8f:5a:1e:58:2b:4e:84:ec:8a:45:
74:21:12:5d:3b:44:40:4e:1b:1a:09:69:0d:03:da:
2c:69:5f:1c:5b:26:b1:dc:bd:21:ab:ed:12:de:2b:
06:2c:dd:26:6f:ed:3e:c4:ac:f1:5b:de:5d:05:7c:
90:49:51:ca:57:3f:d0:eb:4a:f5:42:11:f2:3a:d8:
db:62:49:de:27:9b:e1:cc:85:1c:50:36:91:8c:b4:
e2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:98:F7:E4:91:3E:D3:24:4E:5D:AD:79:88:4C:9E:CE:B6:9D:F8:42
X509v3 Authority Key Identifier:
keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:01:43:ac:5b:17:02:c5:53:c7:af:0b:48:00:5d:d0:af:2f:
0c:e5:51:66:94:11:7f:c9:00:5d:48:2e:81:f7:14:c0:11:3d:
48:ef:c1:7e:af:77:2d:eb:4f:11:6f:36:8f:00:9a:63:57:8a:
df:1c:01:14:3c:12:60:02:b4:a3:d8:b7:fd:79:38:19:1b:4a:
94:0a:3f:85:7f:3a:68:a8:03:6e:23:8f:89:8a:5d:83:33:c2:
5a:f0:2e:a3:02:dd:54:46:15:14:16:02:5b:98:88:60:a4:75:
0c:f3:76:ab:94:b3:77:b0:21:bd:27:9e:19:46:8d:b6:bc:23:
59:a9:e5:4c:4d:e1:c2:ea:4b:3d:f3:08:41:c0:21:16:d4:72:
fd:0b:92:e3:88:54:0f:e1:63:7d:68:3a:3b:91:b1:16:04:ce:
95:d4:4e:2b:45:0c:c5:96:e5:06:4b:ed:1b:bd:39:0e:71:7e:
ec:41:57:e2:7c:6a:96:d5:1a:a9:48:03:87:3b:ca:e0:3b:e2:
1a:81:b5:df:44:59:95:86:85:82:e5:db:95:82:3f:47:26:6e:
c8:9a:2f:ee:2e:32:69:00:c6:24:7b:e6:b4:fb:89:5f:7a:85:
e8:07:35:4e:86:7f:55:5d:a4:89:a0:29:64:98:2a:1d:44:6b:
29:69:52:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZxwflXgpc17TxsZbho+ImrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MmM5M2QyNjY4NTI3ODhlNDk5ODJkOWY3YTYyMGRiNmQ5
ZjU4OGQwHhcNMjUwNDI2MTEwMDU5WhcNMjUwNDI3MTEwMDU5WjAzMTEwLwYDVQQD
EyhlYTk4ZjdlNDkxM2VkMzI0NGU1ZGFkNzk4ODRjOWVjZWI2OWRmODQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaZ8Z4C0p4myi8IK3L7DVKPyBll6
n0ZI0zGOuiOPR49CigvQqQfUfpQe3YoLtf3vjB9uM0BiIQufTWn09V7t71DkMfEY
TRyR2RxMbDNaZM35CHYOP73yVPufuH41gIIPyc2iXBwqtCFdf7XIsqMdwCxaNaZT
jrXLcE1CL3Y2daI9yjL1KZn6oynjppP8QLE4siPHjHPpopl4BZNrToRGY3pXccJV
qx5hkI9aHlgrToTsikV0IRJdO0RAThsaCWkNA9osaV8cWyax3L0hq+0S3isGLN0m
b+0+xKzxW95dBXyQSVHKVz/Q60r1QhHyOtjbYkneJ5vhzIUcUDaRjLTiqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqY9+SRPtMkTl2teYhMns62nfhCMB8GA1UdIwQY
MBaAFCgsk9JmhSeI5JmC2femINttn1iNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8zODJmZjQtNGZjMi00MzAyLWFmOTAt
OTZhZGZmZTJlODZhLzEvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8zODJmZjQtNGZjMi00MzAyLWFmOTAtOTZhZGZmZTJlODZh
LzEvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFwFDrFsX
AsVTx68LSABd0K8vDOVRZpQRf8kAXUgugfcUwBE9SO/Bfq93LetPEW82jwCaY1eK
3xwBFDwSYAK0o9i3/Xk4GRtKlAo/hX86aKgDbiOPiYpdgzPCWvAuowLdVEYVFBYC
W5iIYKR1DPN2q5Szd7AhvSeeGUaNtrwjWanlTE3hwupLPfMIQcAhFtRy/QuS44hU
D+FjfWg6O5GxFgTOldROK0UMxZblBkvtG705DnF+7EFX4nxqltUaqUgDhzvK4Dvi
GoG130RZlYaFguXblYI/RyZuyJov7i4yaQDGJHvmtPuJX3qF6Ac1ToZ/VV2kiaAp
ZJgqHURrKWlS8Q==
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:19:16 2025 by rpki-client