Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
File: kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft (raw, json)
Hash identifier: wceWCF/1+n4/JQgc35PTLOBpuL92t0W7fh5Q9KcMjLU=
Subject key identifier: 32:22:D7:F2:61:DF:67:FC:D1:5B:C4:52:96:80:8F:BF:E5:54:7F:CE
Authority key identifier: 90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
Certificate issuer: /CN=901f648dce927fe41833f86d575160b0bc5130a2
Certificate serial: 019677558019FC67397A1217A4E171F09742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
Manifest number: 01A3
Signing time: Sun 27 Apr 2025 13:00:14 +0000
Manifest this update: Sun 27 Apr 2025 13:00:14 +0000
Manifest next update: Mon 28 Apr 2025 13:00:14 +0000
Files and hashes: 1: kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl (hash: Ehnru8jj1BpLVyVkcDPYbGW4CZrwhniIl7JZ05yp2Q8=)
2: zfxMRbf5mdjUMmv1wfh1AaOn2cM.roa (hash: jcUlXj90sAjd3pxsJhlKVr5rFOgIRX3LrqrBra0uGW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:80:19:fc:67:39:7a:12:17:a4:e1:71:f0:97:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901f648dce927fe41833f86d575160b0bc5130a2
Validity
Not Before: Apr 27 13:00:14 2025 GMT
Not After : Apr 28 13:00:14 2025 GMT
Subject: CN=3222d7f261df67fcd15bc45296808fbfe5547fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dd:e3:ec:7b:d9:ab:10:f8:98:1e:a3:a4:f2:
0a:79:bb:a9:4a:79:9e:85:3a:c9:b1:d9:d7:fd:c8:
6a:c1:d9:dd:78:c6:bf:e2:ab:03:2d:bc:44:75:5c:
23:0e:16:40:bb:f7:9b:c4:b2:66:73:46:af:0c:10:
a0:25:89:88:e5:2e:79:ed:7f:eb:ae:6d:de:89:d3:
45:e7:09:d4:8f:e0:60:d0:00:76:42:e9:53:53:2c:
d2:b7:00:b5:38:2b:d5:ac:58:06:69:fc:d4:08:4e:
6c:37:14:8c:ec:22:17:a5:a0:db:80:cb:da:eb:4a:
32:63:a4:77:3a:27:c9:0e:c8:b1:a2:e1:c0:fa:b4:
d5:73:c2:d6:bd:cd:03:65:f8:29:88:dd:e2:26:d1:
c0:ba:d9:60:28:b0:4b:a8:5e:77:83:43:88:d6:30:
be:02:bb:f2:77:38:99:f2:1f:18:c4:f6:b5:6f:8c:
c0:e3:b7:45:5e:b6:c5:16:6a:a5:44:1d:25:01:cd:
4d:fd:b7:56:5a:96:7f:b3:5d:82:76:75:dd:43:66:
93:9f:69:7c:31:13:e4:eb:33:03:4a:fa:2e:e7:26:
91:d7:ab:57:15:09:2b:b2:dd:92:b3:40:51:2d:83:
0b:93:ca:5c:e3:11:2f:a4:4f:ca:2c:65:34:1f:08:
c6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:22:D7:F2:61:DF:67:FC:D1:5B:C4:52:96:80:8F:BF:E5:54:7F:CE
X509v3 Authority Key Identifier:
keyid:90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:76:63:99:7e:14:d9:dc:f5:28:49:f7:71:15:ca:ce:0c:9f:
0e:3e:07:23:db:99:f3:84:2d:d9:e9:cc:9e:5e:44:d3:b1:1b:
c6:20:5d:aa:98:d0:e7:00:e5:33:08:07:07:46:70:67:9f:bf:
a0:07:0a:92:77:7e:0a:39:b5:e2:70:66:b4:47:9e:90:76:9d:
25:9f:ea:4f:f8:64:78:e2:d6:4e:fe:36:22:55:d0:ef:d7:dc:
63:45:5a:8f:90:9c:1d:e5:7f:2b:43:3a:3b:27:11:b6:d4:f5:
26:65:a6:57:42:71:67:36:c5:a9:b0:bf:80:f5:f2:ab:b1:bf:
2d:50:ea:41:8e:77:e7:ce:72:52:28:6d:d1:39:81:e5:a3:73:
34:d7:05:3a:70:5c:1e:ba:aa:47:c8:5f:f9:41:da:68:52:a4:
48:df:ec:3d:98:27:f8:01:6d:1b:11:6f:67:93:4a:63:9a:9f:
13:c3:e2:e6:c1:64:c8:e0:18:32:03:f5:a9:30:af:84:b1:4b:
e8:ed:de:77:f3:46:43:ac:22:85:8a:72:55:a9:40:a9:b4:81:
ce:4d:9d:ec:3a:cf:4d:9b:1f:7c:a6:86:35:b3:47:ae:c1:4b:
49:30:15:e9:56:d5:07:47:47:60:f8:2e:4d:d5:2a:93:89:3f:
d0:41:7a:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3VYAZ/Gc5ehIXpOFx8JdCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwMWY2NDhkY2U5MjdmZTQxODMzZjg2ZDU3NTE2MGIwYmM1
MTMwYTIwHhcNMjUwNDI3MTMwMDE0WhcNMjUwNDI4MTMwMDE0WjAzMTEwLwYDVQQD
EygzMjIyZDdmMjYxZGY2N2ZjZDE1YmM0NTI5NjgwOGZiZmU1NTQ3ZmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo93j7HvZqxD4mB6jpPIKebupSnme
hTrJsdnX/chqwdndeMa/4qsDLbxEdVwjDhZAu/ebxLJmc0avDBCgJYmI5S557X/r
rm3eidNF5wnUj+Bg0AB2QulTUyzStwC1OCvVrFgGafzUCE5sNxSM7CIXpaDbgMva
60oyY6R3OifJDsixouHA+rTVc8LWvc0DZfgpiN3iJtHAutlgKLBLqF53g0OI1jC+
ArvydziZ8h8YxPa1b4zA47dFXrbFFmqlRB0lAc1N/bdWWpZ/s12CdnXdQ2aTn2l8
MRPk6zMDSvou5yaR16tXFQkrst2Ss0BRLYMLk8pc4xEvpE/KLGU0HwjG9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIi1/Jh32f80VvEUpaAj7/lVH/OMB8GA1UdIwQY
MBaAFJAfZI3Okn/kGDP4bVdRYLC8UTCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0I5a2pjNlNmLVFZTV9odFYxRmdzTHhSTUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83M2MwODUtY2M0Mi00Y2MxLWExYWIt
NGMxM2M1ZTFlMWFhLzEva0I5a2pjNlNmLVFZTV9odFYxRmdzTHhSTUtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC83M2MwODUtY2M0Mi00Y2MxLWExYWItNGMxM2M1ZTFlMWFh
LzEva0I5a2pjNlNmLVFZTV9odFYxRmdzTHhSTUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB3ZjmX4U
2dz1KEn3cRXKzgyfDj4HI9uZ84Qt2enMnl5E07EbxiBdqpjQ5wDlMwgHB0ZwZ5+/
oAcKknd+Cjm14nBmtEeekHadJZ/qT/hkeOLWTv42IlXQ79fcY0Vaj5CcHeV/K0M6
OycRttT1JmWmV0JxZzbFqbC/gPXyq7G/LVDqQY53585yUiht0TmB5aNzNNcFOnBc
HrqqR8hf+UHaaFKkSN/sPZgn+AFtGxFvZ5NKY5qfE8Pi5sFkyOAYMgP1qTCvhLFL
6O3ed/NGQ6wihYpyValAqbSBzk2d7DrPTZsffKaGNbNHrsFLSTAV6VbVB0dHYPgu
TdUqk4k/0EF68w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:13:23 2025 by rpki-client