Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
File: kBewvZCCfeCNJP72G8xEhiAkv34.mft (raw, json)
Hash identifier: z94raJnY2CA+4GAXO9M+MbHIdFEFc6kVW08zwpN2vnY=
Subject key identifier: B5:FF:B9:8C:33:37:2A:4D:17:94:A9:92:B9:92:DD:F7:32:5C:7C:6D
Authority key identifier: 90:17:B0:BD:90:82:7D:E0:8D:24:FE:F6:1B:CC:44:86:20:24:BF:7E
Certificate issuer: /CN=9017b0bd90827de08d24fef61bcc44862024bf7e
Certificate serial: 019680900D0E66B3453193252438D8D2505A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kBewvZCCfeCNJP72G8xEhiAkv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
Manifest number: 0BA9
Signing time: Tue 29 Apr 2025 08:00:46 +0000
Manifest this update: Tue 29 Apr 2025 08:00:46 +0000
Manifest next update: Wed 30 Apr 2025 08:00:46 +0000
Files and hashes: 1: GDngKunQly0rXAZJTM9K6ouZldE.roa (hash: srWtclzCrCIl56nGBNOU8VqqYjtRTWRgnKIo2g1oYz4=)
2: kBewvZCCfeCNJP72G8xEhiAkv34.crl (hash: 2LIHLAfYV5IZO/cy4o38H3TLyYI7+HCk/Y9Ckhgf9Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
rsync://rpki.ripe.net/repository/DEFAULT/kBewvZCCfeCNJP72G8xEhiAkv34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:90:0d:0e:66:b3:45:31:93:25:24:38:d8:d2:50:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9017b0bd90827de08d24fef61bcc44862024bf7e
Validity
Not Before: Apr 29 08:00:46 2025 GMT
Not After : Apr 30 08:00:46 2025 GMT
Subject: CN=b5ffb98c33372a4d1794a992b992ddf7325c7c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d2:c2:5f:2d:07:ac:a4:c7:5d:fe:33:c5:19:
de:0b:85:3e:6b:fb:de:36:38:57:72:80:43:73:f7:
06:af:3e:8f:8d:40:ac:ea:70:04:e7:41:e5:a5:bf:
c8:4e:62:76:f9:7f:26:b2:eb:d2:47:37:59:0d:46:
56:88:f1:84:2d:13:57:cb:a8:31:56:a1:b1:c2:89:
3b:63:55:6f:5f:6d:64:17:a7:a5:af:f0:f9:88:b9:
3e:98:ab:16:cb:38:9c:87:27:45:a1:d8:5e:c6:d0:
77:a7:23:dd:39:8f:78:2c:b1:a5:b9:32:b9:2d:bf:
d7:ff:44:40:be:fd:05:1f:95:b1:e0:f6:6b:bf:3e:
44:7f:67:45:b1:ef:35:6f:88:2d:f5:22:aa:5f:2d:
96:28:ba:4b:75:96:42:3e:24:c4:6e:9a:7a:f6:03:
53:50:aa:e2:1c:79:b0:0c:06:c2:36:ef:71:c4:f8:
05:ba:9c:c5:6a:fd:ee:d3:72:9b:51:95:4d:89:d3:
ff:94:37:81:86:d4:0b:12:09:87:b8:f8:72:35:15:
3b:45:ae:79:c3:9c:fa:a2:3d:f8:5f:f7:9a:b7:3c:
e3:16:4f:51:ea:c7:66:ca:b3:1d:96:32:5d:98:d9:
f6:19:fe:3c:4f:44:67:58:62:6c:08:84:5d:93:46:
a7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FF:B9:8C:33:37:2A:4D:17:94:A9:92:B9:92:DD:F7:32:5C:7C:6D
X509v3 Authority Key Identifier:
keyid:90:17:B0:BD:90:82:7D:E0:8D:24:FE:F6:1B:CC:44:86:20:24:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kBewvZCCfeCNJP72G8xEhiAkv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:73:4a:c5:e4:b0:b7:5e:af:74:50:75:b3:79:82:aa:94:32:
5b:cb:73:23:d0:00:53:46:92:4d:11:65:c4:e6:43:7f:5e:3e:
2e:02:7d:ff:26:4e:f3:7c:92:9e:2b:da:9c:74:8d:a6:93:f3:
24:4f:59:29:32:43:e5:20:46:f4:38:c5:fc:53:e7:6b:8e:38:
f3:91:49:97:7d:6c:50:ad:81:67:78:52:af:aa:90:fd:30:f1:
12:c2:ab:b0:ab:52:6c:c0:29:0d:a7:65:10:b3:e0:bb:00:67:
fc:a3:15:a2:04:7b:fb:87:fa:8d:e7:75:03:96:72:60:de:ad:
2c:c2:cf:31:3e:76:e2:d9:3d:40:ca:0e:0c:49:8a:f2:fe:71:
37:18:2a:e3:2f:82:ce:80:1c:84:f6:20:4e:fc:07:1d:35:17:
16:cc:40:fb:8f:23:38:0c:8f:50:a4:90:f6:a8:75:26:aa:84:
94:ea:c6:d4:86:eb:f7:bb:e6:f1:5a:e6:3e:b0:28:8f:cf:86:
1c:eb:cb:9e:c3:44:df:08:f0:70:32:6d:b6:62:1a:fa:b5:70:
c2:f1:1b:2d:51:2d:50:84:59:76:cf:8a:4b:85:f3:dc:48:6b:
11:fc:48:e6:7d:75:a1:03:8c:32:85:b3:e3:03:42:a5:85:bc:
df:65:44:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAkA0OZrNFMZMlJDjY0lBaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwMTdiMGJkOTA4MjdkZTA4ZDI0ZmVmNjFiY2M0NDg2MjAy
NGJmN2UwHhcNMjUwNDI5MDgwMDQ2WhcNMjUwNDMwMDgwMDQ2WjAzMTEwLwYDVQQD
EyhiNWZmYjk4YzMzMzcyYTRkMTc5NGE5OTJiOTkyZGRmNzMyNWM3YzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tLCXy0HrKTHXf4zxRneC4U+a/ve
NjhXcoBDc/cGrz6PjUCs6nAE50Hlpb/ITmJ2+X8msuvSRzdZDUZWiPGELRNXy6gx
VqGxwok7Y1VvX21kF6elr/D5iLk+mKsWyzichydFodhextB3pyPdOY94LLGluTK5
Lb/X/0RAvv0FH5Wx4PZrvz5Ef2dFse81b4gt9SKqXy2WKLpLdZZCPiTEbpp69gNT
UKriHHmwDAbCNu9xxPgFupzFav3u03KbUZVNidP/lDeBhtQLEgmHuPhyNRU7Ra55
w5z6oj34X/eatzzjFk9R6sdmyrMdljJdmNn2Gf48T0RnWGJsCIRdk0anKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLX/uYwzNypNF5SpkrmS3fcyXHxtMB8GA1UdIwQY
MBaAFJAXsL2Qgn3gjST+9hvMRIYgJL9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0Jld3ZaQ0NmZUNOSlA3Mkc4eEVoaUFrdjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9iYjU2MGEtNDI4NC00ZmMwLWIwNWQt
YThiZTk5MzJhYTg5LzEva0Jld3ZaQ0NmZUNOSlA3Mkc4eEVoaUFrdjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9iYjU2MGEtNDI4NC00ZmMwLWIwNWQtYThiZTk5MzJhYTg5
LzEva0Jld3ZaQ0NmZUNOSlA3Mkc4eEVoaUFrdjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXNKxeSw
t16vdFB1s3mCqpQyW8tzI9AAU0aSTRFlxOZDf14+LgJ9/yZO83ySnivanHSNppPz
JE9ZKTJD5SBG9DjF/FPna44485FJl31sUK2BZ3hSr6qQ/TDxEsKrsKtSbMApDadl
ELPguwBn/KMVogR7+4f6jed1A5ZyYN6tLMLPMT524tk9QMoODEmK8v5xNxgq4y+C
zoAchPYgTvwHHTUXFsxA+48jOAyPUKSQ9qh1JqqElOrG1Ibr97vm8VrmPrAoj8+G
HOvLnsNE3wjwcDJttmIa+rVwwvEbLVEtUIRZds+KS4Xz3EhrEfxI5n11oQOMMoWz
4wNCpYW832VE9A==
-----END CERTIFICATE-----
Generated at Tue Apr 29 15:20:09 2025 by rpki-client