Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
File: KflnDuKjDqyMCjncR_96jNJHOwA.mft (raw, json)
Hash identifier: UhpD7Nxw2libMeNTi0Xlfm45rrb7wsX21wOEs7TwwBQ=
Subject key identifier: 67:26:24:31:4B:B8:71:C8:42:25:14:6B:F1:3F:59:06:06:46:92:9A
Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
Certificate issuer: /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Certificate serial: 01967DC63D075138D9969EFBC355A9BEF60F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
Manifest number: 0CDF
Signing time: Mon 28 Apr 2025 19:01:05 +0000
Manifest this update: Mon 28 Apr 2025 19:01:05 +0000
Manifest next update: Tue 29 Apr 2025 19:01:05 +0000
Files and hashes: 1: KflnDuKjDqyMCjncR_96jNJHOwA.crl (hash: VotUTWGXZTzUheVaJSJDHPjwip+8UulsY2y0QpNcvNA=)
2: mL9iMZ16_8ZjCy4qonDTON3ib5Q.roa (hash: ZVZsKyrcHGv4PPqTEb+ceebYDVLTESRPFX1GG8GQzE8=)
3: mUB9Mn63gmxSfZpMf68Tr-CQjA4.roa (hash: j5sd8G9co8tEBEb8Kjzqu6zB4AaZ/F0GaTIxGbtmjPc=)
4: y2LXjfv6XAO363F71AjmXKGlqgQ.roa (hash: 4mLPhNeJT0HKJvx3+B0TdXW/+X53H3DeeKwHTkudT30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:3d:07:51:38:d9:96:9e:fb:c3:55:a9:be:f6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Validity
Not Before: Apr 28 19:01:05 2025 GMT
Not After : Apr 29 19:01:05 2025 GMT
Subject: CN=672624314bb871c84225146bf13f59060646929a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fa:6a:91:22:4b:0a:82:f1:e0:e1:6a:4a:5e:
c7:3e:da:12:96:21:13:e5:b1:d3:e6:ac:ce:ce:1c:
73:c9:b8:53:54:b2:c4:5f:c9:8c:fc:2b:06:53:83:
9e:f9:dc:af:d5:2a:32:29:ea:cd:d4:24:bb:70:26:
01:1d:34:5b:4b:a2:c1:86:1c:66:45:6e:0a:1e:40:
d1:5e:59:16:e9:93:56:2c:78:ba:d2:af:79:31:3b:
1a:0f:14:56:99:23:48:8a:d3:08:e3:0a:0c:78:1b:
c3:e8:c4:d0:60:e1:5d:04:b4:8e:85:38:a8:ea:04:
80:a2:a7:dc:f8:1d:3f:25:f4:de:6b:a6:06:98:22:
f6:7b:eb:d9:cc:25:f2:0d:1c:02:4c:25:56:af:9e:
f1:14:ef:12:d1:f6:ea:41:b9:bc:8f:af:9b:8d:17:
2a:54:0f:e3:9b:80:54:db:e3:da:1d:90:b6:c1:d7:
ce:2a:85:3b:09:74:58:c5:dc:1c:19:89:b7:43:97:
f1:85:10:4b:73:36:15:45:fc:a8:a5:5e:24:60:d4:
8c:7d:9a:70:94:63:c7:4d:ec:48:42:f5:a5:e0:0f:
14:43:1d:f0:be:38:c4:09:bb:c4:a5:47:a2:67:3c:
27:13:04:2d:7b:b3:d6:90:ca:99:1d:7e:1d:bf:e4:
17:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:26:24:31:4B:B8:71:C8:42:25:14:6B:F1:3F:59:06:06:46:92:9A
X509v3 Authority Key Identifier:
keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a1:31:2d:40:ef:a5:50:e5:e3:6b:fc:d8:c6:40:30:b9:76:
a4:ca:52:81:54:37:88:18:5b:51:e0:5e:e7:4c:08:5e:71:43:
fb:25:18:55:8f:4a:ea:e1:ef:a2:6c:ff:d2:c4:a9:8a:cd:eb:
33:c6:6d:b1:36:22:ed:e2:27:22:6c:a8:80:63:d3:68:c4:97:
4a:52:3b:ff:8b:98:1e:e6:2b:75:ba:dd:8a:4b:c2:62:51:af:
36:28:a0:b1:a6:8d:60:11:3a:c8:49:7c:b7:43:24:e8:37:64:
65:ec:e2:b3:d8:00:31:96:c7:5e:20:c1:88:73:99:30:4d:0f:
48:c5:f5:71:35:3e:35:be:a7:d8:ed:34:c8:0b:32:50:60:c6:
53:38:da:ef:14:b1:a0:28:d9:c5:dc:88:d8:12:35:30:77:11:
4c:3a:3b:82:41:68:aa:a6:3e:7d:97:47:76:39:99:5c:fd:e4:
a5:16:2e:4d:c2:98:6c:4f:b8:86:dd:d0:3f:f6:c4:23:fd:cb:
d8:37:58:0e:e2:bd:ca:fe:2c:fb:ce:13:df:f4:5d:91:7e:14:
58:07:1e:bf:00:42:47:c1:27:46:84:d1:86:55:eb:f4:c3:da:
b9:6c:88:6f:a8:92:ec:16:57:c0:24:03:bb:a0:a2:0f:94:6e:
dd:1b:b3:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9xj0HUTjZlp77w1WpvvYPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5Zjk2NzBlZTJhMzBlYWM4YzBhMzlkYzQ3ZmY3YThjZDI0
NzNiMDAwHhcNMjUwNDI4MTkwMTA1WhcNMjUwNDI5MTkwMTA1WjAzMTEwLwYDVQQD
Eyg2NzI2MjQzMTRiYjg3MWM4NDIyNTE0NmJmMTNmNTkwNjA2NDY5MjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/pqkSJLCoLx4OFqSl7HPtoSliET
5bHT5qzOzhxzybhTVLLEX8mM/CsGU4Oe+dyv1SoyKerN1CS7cCYBHTRbS6LBhhxm
RW4KHkDRXlkW6ZNWLHi60q95MTsaDxRWmSNIitMI4woMeBvD6MTQYOFdBLSOhTio
6gSAoqfc+B0/JfTea6YGmCL2e+vZzCXyDRwCTCVWr57xFO8S0fbqQbm8j6+bjRcq
VA/jm4BU2+PaHZC2wdfOKoU7CXRYxdwcGYm3Q5fxhRBLczYVRfyopV4kYNSMfZpw
lGPHTexIQvWl4A8UQx3wvjjECbvEpUeiZzwnEwQte7PWkMqZHX4dv+QX4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcmJDFLuHHIQiUUa/E/WQYGRpKaMB8GA1UdIwQY
MBaAFCn5Zw7iow6sjAo53Ef/eozSRzsAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2ZsbkR1S2pEcXlNQ2puY1JfOTZqTkpIT3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yZmY3NmQtZjExNi00NDMwLTg0MDct
NmUyOWVmZGZkNGUzLzEvS2ZsbkR1S2pEcXlNQ2puY1JfOTZqTkpIT3dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8yZmY3NmQtZjExNi00NDMwLTg0MDctNmUyOWVmZGZkNGUz
LzEvS2ZsbkR1S2pEcXlNQ2puY1JfOTZqTkpIT3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqExLUDv
pVDl42v82MZAMLl2pMpSgVQ3iBhbUeBe50wIXnFD+yUYVY9K6uHvomz/0sSpis3r
M8ZtsTYi7eInImyogGPTaMSXSlI7/4uYHuYrdbrdikvCYlGvNiigsaaNYBE6yEl8
t0Mk6DdkZezis9gAMZbHXiDBiHOZME0PSMX1cTU+Nb6n2O00yAsyUGDGUzja7xSx
oCjZxdyI2BI1MHcRTDo7gkFoqqY+fZdHdjmZXP3kpRYuTcKYbE+4ht3QP/bEI/3L
2DdYDuK9yv4s+84T3/RdkX4UWAcevwBCR8EnRoTRhlXr9MPauWyIb6iS7BZXwCQD
u6CiD5Ru3RuzAQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:43:31 2025 by rpki-client