Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
File: KVZYS3DOhHwam0AFSLFNsDG-3_I.mft (raw, json)
Hash identifier: tTPXqZxiL5KAo/XXEa+jsNStjqhl8AfWOyz9eDDtdd0=
Subject key identifier: 6F:AF:4A:E2:06:0F:AB:F3:90:E4:97:84:E0:8E:61:40:30:A5:55:EE
Authority key identifier: 29:56:58:4B:70:CE:84:7C:1A:9B:40:05:48:B1:4D:B0:31:BE:DF:F2
Certificate issuer: /CN=2956584b70ce847c1a9b400548b14db031bedff2
Certificate serial: 0196797B47DBAD1D6F9222B58AEA0FB9338D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
Manifest number: 07F5
Signing time: Sun 27 Apr 2025 23:00:44 +0000
Manifest this update: Sun 27 Apr 2025 23:00:44 +0000
Manifest next update: Mon 28 Apr 2025 23:00:44 +0000
Files and hashes: 1: Hg9ftZU-9AaUb-uuud6YLmFeeqc.roa (hash: kIMrWnLBKnZqV6WvzFWIcWQTCQyb5mE+suXdE7Wee/M=)
2: KVZYS3DOhHwam0AFSLFNsDG-3_I.crl (hash: 1HwrtPm23uJfq4zlEIV0iMKKQF9oZeF58VEs3Vw4maA=)
3: UY5PADzbeIj93cBuCOAZIezRods.roa (hash: 94p+JoB1n19vWg1B3h2izrs5nmNxhhnj9iR596bjT+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:47:db:ad:1d:6f:92:22:b5:8a:ea:0f:b9:33:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2956584b70ce847c1a9b400548b14db031bedff2
Validity
Not Before: Apr 27 23:00:44 2025 GMT
Not After : Apr 28 23:00:44 2025 GMT
Subject: CN=6faf4ae2060fabf390e49784e08e614030a555ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:b8:13:26:24:a0:1b:ff:a2:34:43:63:ac:
17:98:7b:61:19:58:a9:73:71:17:ba:2a:e8:f8:84:
f5:a5:46:f5:34:5f:25:f6:49:f3:aa:d5:27:58:d6:
30:7f:97:c0:77:34:25:67:47:fd:8a:49:09:02:af:
bf:08:3c:ca:48:ca:16:4b:13:c9:28:d3:1d:07:d6:
c9:12:2a:69:7c:a0:9a:40:4e:cd:d4:c0:9b:89:0c:
2c:64:39:f0:65:4d:40:c6:3f:22:ec:b4:66:a9:d3:
f6:b9:bf:6f:b8:66:28:de:52:32:91:4b:a4:8d:05:
a7:96:cb:a7:78:d8:00:2d:62:54:a5:74:1b:8c:c0:
3a:bf:fb:32:76:88:31:f4:41:d9:78:a7:07:68:5a:
92:c7:67:64:93:d6:68:d3:de:e2:28:7a:86:1f:7c:
b1:84:2e:f9:76:f2:00:be:90:48:e6:7c:c5:3c:ac:
c3:de:37:41:ad:1e:19:83:9a:1e:c5:4a:93:f3:07:
80:02:0f:60:07:5e:6f:68:c9:1d:af:b8:eb:d8:57:
fb:0c:24:58:28:3c:a3:4c:a6:d6:44:f1:ac:3c:e5:
0b:73:5a:c9:94:a4:d9:3a:c1:b9:0b:5d:a3:3d:c2:
f9:72:53:96:23:df:11:16:02:0c:a3:29:42:f6:78:
05:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AF:4A:E2:06:0F:AB:F3:90:E4:97:84:E0:8E:61:40:30:A5:55:EE
X509v3 Authority Key Identifier:
keyid:29:56:58:4B:70:CE:84:7C:1A:9B:40:05:48:B1:4D:B0:31:BE:DF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:fa:f9:e3:fa:f9:cd:94:97:3a:99:c5:bd:35:74:97:5c:0f:
fa:01:b7:a4:53:19:15:cc:6e:73:dc:56:69:bf:b7:a0:49:4b:
5a:21:32:b4:54:60:e0:3f:1e:07:99:47:fe:3d:99:1b:be:9e:
1e:12:f9:d4:38:2a:c5:1c:c5:7d:fe:04:4d:2c:01:f9:0b:cf:
08:2e:a6:0a:6f:ff:3d:40:67:b1:45:91:92:9d:4a:93:6a:6b:
55:37:07:bb:18:65:0c:2f:c8:5a:78:a9:f7:13:21:1c:4e:4a:
8e:23:ea:50:f1:f2:16:1d:a4:54:e5:85:95:46:a9:e3:86:d7:
0e:1c:10:a1:7d:19:14:84:57:7e:06:65:a7:3f:b2:ac:11:7a:
66:c2:bf:37:c0:3e:42:af:4c:fa:bf:e9:24:55:5c:da:cc:f2:
2b:68:94:9c:bb:0a:a5:5a:8e:82:2d:3f:a0:8f:92:a0:df:f2:
c6:de:ba:c9:77:2e:ca:e1:5b:1a:8f:69:62:0c:c2:c3:e0:63:
aa:46:c9:e2:21:ff:91:aa:d8:61:83:cb:8d:06:60:79:6f:3c:
b9:46:1a:6e:b2:8a:a8:84:c9:41:fb:51:2a:f6:bc:e1:0b:14:
23:91:57:d3:cd:15:7d:a7:b9:d5:6d:63:61:9f:7b:b9:55:65:
21:44:37:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5e0fbrR1vkiK1iuoPuTONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NTY1ODRiNzBjZTg0N2MxYTliNDAwNTQ4YjE0ZGIwMzFi
ZWRmZjIwHhcNMjUwNDI3MjMwMDQ0WhcNMjUwNDI4MjMwMDQ0WjAzMTEwLwYDVQQD
Eyg2ZmFmNGFlMjA2MGZhYmYzOTBlNDk3ODRlMDhlNjE0MDMwYTU1NWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUe4EyYkoBv/ojRDY6wXmHthGVip
c3EXuiro+IT1pUb1NF8l9knzqtUnWNYwf5fAdzQlZ0f9ikkJAq+/CDzKSMoWSxPJ
KNMdB9bJEippfKCaQE7N1MCbiQwsZDnwZU1Axj8i7LRmqdP2ub9vuGYo3lIykUuk
jQWnlsuneNgALWJUpXQbjMA6v/sydogx9EHZeKcHaFqSx2dkk9Zo097iKHqGH3yx
hC75dvIAvpBI5nzFPKzD3jdBrR4Zg5oexUqT8weAAg9gB15vaMkdr7jr2Ff7DCRY
KDyjTKbWRPGsPOULc1rJlKTZOsG5C12jPcL5clOWI98RFgIMoylC9ngFnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+vSuIGD6vzkOSXhOCOYUAwpVXuMB8GA1UdIwQY
MBaAFClWWEtwzoR8GptABUixTbAxvt/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZaWVMzRE9oSHdhbTBBRlNMRk5zREctM19JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi82NGZlN2QtODYyZC00ZTFhLTlmZDAt
MDZiNDFlZjEzOThkLzEvS1ZaWVMzRE9oSHdhbTBBRlNMRk5zREctM19JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi82NGZlN2QtODYyZC00ZTFhLTlmZDAtMDZiNDFlZjEzOThk
LzEvS1ZaWVMzRE9oSHdhbTBBRlNMRk5zREctM19JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/r54/r5
zZSXOpnFvTV0l1wP+gG3pFMZFcxuc9xWab+3oElLWiEytFRg4D8eB5lH/j2ZG76e
HhL51DgqxRzFff4ETSwB+QvPCC6mCm//PUBnsUWRkp1Kk2prVTcHuxhlDC/IWnip
9xMhHE5KjiPqUPHyFh2kVOWFlUap44bXDhwQoX0ZFIRXfgZlpz+yrBF6ZsK/N8A+
Qq9M+r/pJFVc2szyK2iUnLsKpVqOgi0/oI+SoN/yxt66yXcuyuFbGo9pYgzCw+Bj
qkbJ4iH/karYYYPLjQZgeW88uUYabrKKqITJQftRKva84QsUI5FX080Vfae51W1j
YZ97uVVlIUQ3Og==
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:42:28 2025 by rpki-client