Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
File: KPVnVJmD9DrdmYw26PeL0V9Fosw.mft (raw, json)
Hash identifier: F4eusUy9DstGFnf7RokjaXb72uo9yxuSbg9ERGHAuoQ=
Subject key identifier: F9:4C:3D:1A:B5:28:F5:AC:1F:D8:32:85:CF:12:2C:25:52:9C:41:2F
Authority key identifier: 28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
Certificate issuer: /CN=28f567549983f43add998c36e8f78bd15f45a2cc
Certificate serial: 019681D96A3F8B809D58165DC232422095C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
Manifest number: 0B1A
Signing time: Tue 29 Apr 2025 14:00:31 +0000
Manifest this update: Tue 29 Apr 2025 14:00:31 +0000
Manifest next update: Wed 30 Apr 2025 14:00:31 +0000
Files and hashes: 1: JQ4W3G2wBUo6PRPPv0dVzYu4y4w.roa (hash: JHM9O5mRc/9ugG6o1WcR1yYfnaT1Q2KD2tNJG5Hqsco=)
2: KPVnVJmD9DrdmYw26PeL0V9Fosw.crl (hash: re9rGnD4M1rXgYi5/TiVt3OHe2ehCCgLcYmdKOKND9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:6a:3f:8b:80:9d:58:16:5d:c2:32:42:20:95:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f567549983f43add998c36e8f78bd15f45a2cc
Validity
Not Before: Apr 29 14:00:31 2025 GMT
Not After : Apr 30 14:00:31 2025 GMT
Subject: CN=f94c3d1ab528f5ac1fd83285cf122c25529c412f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:9e:4b:4d:72:62:b2:3b:df:92:19:1d:30:
f7:cc:87:e8:ed:d0:74:3c:46:8e:17:db:91:e0:4e:
31:c8:21:41:0f:fa:13:21:28:88:ca:2a:53:3b:30:
00:6a:de:76:54:7d:9c:4b:90:2b:39:b8:78:1d:db:
07:32:7b:67:40:b6:f4:4c:32:5b:00:a3:ea:a2:05:
d6:f4:47:08:51:cc:73:02:24:18:b4:d5:34:5f:76:
b5:34:6c:03:28:86:96:63:e6:03:9d:bf:e4:53:a8:
2d:a2:3f:c3:10:1e:b4:be:56:95:9e:8f:6d:be:ae:
70:bc:66:75:b8:5e:73:40:89:6e:81:54:d1:ea:78:
11:e5:9f:16:c7:31:e6:68:a4:52:b1:ba:16:f4:b3:
58:b6:14:df:c2:69:ad:48:e8:ac:8f:92:4c:85:70:
77:34:ae:6c:2b:96:cf:cb:57:30:2a:19:13:1a:8e:
00:08:c7:5b:7e:a3:02:a0:25:a0:ec:d9:ab:63:b9:
7a:a7:d1:7a:ff:37:11:ec:d6:21:94:de:63:4f:f8:
5f:c9:7e:1f:63:85:52:49:a5:a9:b3:fa:d6:88:57:
8b:43:68:1a:a0:98:e9:ff:f8:63:c2:53:80:cf:ef:
3c:84:04:0c:8d:c0:9b:06:42:37:5b:5e:b4:9e:83:
47:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4C:3D:1A:B5:28:F5:AC:1F:D8:32:85:CF:12:2C:25:52:9C:41:2F
X509v3 Authority Key Identifier:
keyid:28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b3:eb:2c:f0:62:9e:d4:f4:84:b4:21:c0:2d:51:f4:11:9d:
b1:78:30:9f:a2:74:15:0e:e0:99:06:dc:36:80:34:a9:7b:71:
b5:4a:c6:35:98:f7:7d:fa:54:43:45:aa:1c:04:9c:f7:14:69:
23:be:be:7b:06:8f:cf:cb:1d:71:19:3c:f9:42:07:39:38:26:
3a:bc:a9:8c:0c:58:40:2d:13:61:a1:7a:3b:7f:ad:71:04:c0:
b8:6a:10:11:f5:7d:3f:60:82:c3:ec:52:01:5d:0d:1a:dc:f5:
56:82:34:84:69:ab:b7:c8:23:3f:e2:45:92:d8:e8:84:bf:83:
6e:6a:cc:dd:ca:6a:10:7b:ae:df:d5:3b:c4:a0:ee:97:9f:2d:
32:9a:ee:ca:35:2c:ba:16:11:18:6f:8e:7e:72:12:72:c1:7f:
18:fd:c0:85:9b:e3:d9:05:71:ac:7f:dc:7c:19:42:0d:b5:fb:
33:8c:d1:27:b0:48:f2:65:ca:e9:8f:79:49:8c:36:35:72:10:
2f:09:db:1e:03:14:f8:c1:81:e9:50:fb:4b:70:d1:88:81:37:
c8:62:ab:53:7d:e8:7f:5a:51:ec:91:48:b5:ea:fa:dc:85:4a:
91:16:01:e3:6d:7b:a9:e4:2a:04:f6:38:b0:9f:f1:bf:34:7e:
c4:15:75:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaB2Wo/i4CdWBZdwjJCIJXHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZjU2NzU0OTk4M2Y0M2FkZDk5OGMzNmU4Zjc4YmQxNWY0
NWEyY2MwHhcNMjUwNDI5MTQwMDMxWhcNMjUwNDMwMTQwMDMxWjAzMTEwLwYDVQQD
EyhmOTRjM2QxYWI1MjhmNWFjMWZkODMyODVjZjEyMmMyNTUyOWM0MTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQyeS01yYrI735IZHTD3zIfo7dB0
PEaOF9uR4E4xyCFBD/oTISiIyipTOzAAat52VH2cS5ArObh4HdsHMntnQLb0TDJb
AKPqogXW9EcIUcxzAiQYtNU0X3a1NGwDKIaWY+YDnb/kU6gtoj/DEB60vlaVno9t
vq5wvGZ1uF5zQIlugVTR6ngR5Z8WxzHmaKRSsboW9LNYthTfwmmtSOisj5JMhXB3
NK5sK5bPy1cwKhkTGo4ACMdbfqMCoCWg7NmrY7l6p9F6/zcR7NYhlN5jT/hfyX4f
Y4VSSaWps/rWiFeLQ2gaoJjp//hjwlOAz+88hAQMjcCbBkI3W160noNHVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlMPRq1KPWsH9gyhc8SLCVSnEEvMB8GA1UdIwQY
MBaAFCj1Z1SZg/Q63ZmMNuj3i9FfRaLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1BWblZKbUQ5RHJkbVl3MjZQZUwwVjlGb3N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85Y2ZkOGUtMjNjZC00NDdhLTlkMmMt
ZDBiMTExYmE0MTQ4LzEvS1BWblZKbUQ5RHJkbVl3MjZQZUwwVjlGb3N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni85Y2ZkOGUtMjNjZC00NDdhLTlkMmMtZDBiMTExYmE0MTQ4
LzEvS1BWblZKbUQ5RHJkbVl3MjZQZUwwVjlGb3N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLPrLPBi
ntT0hLQhwC1R9BGdsXgwn6J0FQ7gmQbcNoA0qXtxtUrGNZj3ffpUQ0WqHASc9xRp
I76+ewaPz8sdcRk8+UIHOTgmOrypjAxYQC0TYaF6O3+tcQTAuGoQEfV9P2CCw+xS
AV0NGtz1VoI0hGmrt8gjP+JFktjohL+DbmrM3cpqEHuu39U7xKDul58tMpruyjUs
uhYRGG+OfnIScsF/GP3AhZvj2QVxrH/cfBlCDbX7M4zRJ7BI8mXK6Y95SYw2NXIQ
LwnbHgMU+MGB6VD7S3DRiIE3yGKrU33of1pR7JFIter63IVKkRYB4217qeQqBPY4
sJ/xvzR+xBV1Qg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:12:20 2025 by rpki-client