Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
File: kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft (raw, json)
Hash identifier: AjKiyFr38CoORoB6y35v4Fqhp5sVN8jmFv64MKGPojU=
Subject key identifier: 0E:DC:EA:A7:04:55:70:FA:7F:D5:C7:B8:24:2E:57:0F:E4:B0:EA:95
Authority key identifier: 90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
Certificate issuer: /CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Certificate serial: 01967CEA4307340B1E0DC1C765E711C11F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
Manifest number: 080F
Signing time: Mon 28 Apr 2025 15:00:49 +0000
Manifest this update: Mon 28 Apr 2025 15:00:49 +0000
Manifest next update: Tue 29 Apr 2025 15:00:49 +0000
Files and hashes: 1: NfRATxtwxdk8t5k10NmnaIEBcI8.roa (hash: 48zogp0gFyhuprEhPJDieZAGrOKDhLcNh+8XpGM82yA=)
2: kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl (hash: aMkYbPai2T0FL2QBzHJmDJalHsXWTTrqWZF8CafoTT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:ea:43:07:34:0b:1e:0d:c1:c7:65:e7:11:c1:1f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Validity
Not Before: Apr 28 15:00:49 2025 GMT
Not After : Apr 29 15:00:49 2025 GMT
Subject: CN=0edceaa7045570fa7fd5c7b8242e570fe4b0ea95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:4f:3d:63:1d:6d:da:41:06:ba:2e:63:e3:
bd:c5:0f:e6:91:3e:f6:f1:31:48:38:eb:33:df:31:
f2:8b:b2:27:2e:fe:7d:95:83:81:52:b2:65:4a:df:
14:78:9b:93:b6:5c:09:7e:12:e5:20:6f:40:5f:16:
10:f2:3a:30:b5:65:fd:f2:98:21:50:92:23:39:1e:
c9:c0:c9:9d:1d:11:30:79:0c:dc:3e:79:62:db:bb:
40:85:35:67:d3:79:de:80:ae:59:25:90:2b:a5:d4:
be:56:a8:e0:19:13:7b:30:d9:7c:4f:21:19:5f:13:
ee:d2:d7:8b:7b:16:78:07:e8:2e:a0:fd:02:a5:18:
87:67:9e:4e:b1:60:42:36:6a:85:b7:2c:8b:d2:30:
1e:7b:da:02:7e:ed:60:57:a6:54:5b:9d:82:76:02:
11:7f:49:47:8f:bc:99:47:aa:5c:2a:10:8a:1d:3e:
f1:e8:17:9a:46:2e:e9:61:d5:b7:8d:88:aa:ae:71:
ef:69:a2:9b:d3:3b:55:f3:42:c9:f8:d7:07:e6:0d:
a6:fa:94:34:1a:35:9a:c3:a9:4b:31:52:fb:0f:76:
f4:e7:dd:9c:4b:57:75:df:9f:9e:42:d1:a5:39:78:
12:e8:37:2c:23:27:7d:46:38:75:55:eb:02:d5:57:
61:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DC:EA:A7:04:55:70:FA:7F:D5:C7:B8:24:2E:57:0F:E4:B0:EA:95
X509v3 Authority Key Identifier:
keyid:90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b2:dd:b5:fd:5d:75:aa:d8:44:d6:3d:f8:85:32:f8:58:78:
8e:b1:5b:7d:43:69:29:05:cd:eb:9d:ec:37:ec:53:28:d3:a8:
4d:25:67:7a:d1:f6:35:65:16:ba:53:6e:7c:a5:4c:b5:4a:73:
32:24:3b:14:e8:f8:94:8b:da:1a:fd:c3:29:e3:11:aa:41:5a:
35:f2:44:8f:a0:29:c5:82:29:ce:36:74:d4:a0:51:15:56:db:
73:78:74:7c:85:79:b8:36:9e:0d:15:e7:e3:70:73:72:de:a0:
2a:3b:10:52:c8:81:20:7d:92:81:48:b2:6f:4f:a1:6f:d2:d4:
97:5d:f6:82:0f:d5:32:60:c5:d7:14:d5:23:1a:fc:7e:9f:52:
c7:3d:78:20:87:39:13:44:f0:13:5f:ca:e7:78:70:00:6a:08:
bb:bc:48:13:e0:94:0f:e8:12:88:94:aa:b7:0c:76:6a:63:6c:
76:93:81:7d:e1:4d:f0:fa:6f:0c:00:f0:6b:49:0d:b3:51:7b:
d5:76:0b:62:01:d3:0f:8a:ff:ec:df:dd:9d:d2:00:de:9d:9a:
0f:b1:50:33:f8:25:2f:96:71:bd:a1:61:a4:b7:f6:d2:35:dc:
67:ce:f4:61:3d:1e:9a:fc:37:71:02:4c:9c:df:80:e2:b8:64:
22:74:4d:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ86kMHNAseDcHHZecRwR8YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjhmYWZjZjdjNDQxYWU0OWMxY2VmOTVjNTE4YjI4MjI4
YzdjNjIwHhcNMjUwNDI4MTUwMDQ5WhcNMjUwNDI5MTUwMDQ5WjAzMTEwLwYDVQQD
EygwZWRjZWFhNzA0NTU3MGZhN2ZkNWM3YjgyNDJlNTcwZmU0YjBlYTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuFPPWMdbdpBBrouY+O9xQ/mkT72
8TFIOOsz3zHyi7InLv59lYOBUrJlSt8UeJuTtlwJfhLlIG9AXxYQ8jowtWX98pgh
UJIjOR7JwMmdHREweQzcPnli27tAhTVn03negK5ZJZArpdS+VqjgGRN7MNl8TyEZ
XxPu0teLexZ4B+guoP0CpRiHZ55OsWBCNmqFtyyL0jAee9oCfu1gV6ZUW52CdgIR
f0lHj7yZR6pcKhCKHT7x6BeaRi7pYdW3jYiqrnHvaaKb0ztV80LJ+NcH5g2m+pQ0
GjWaw6lLMVL7D3b0592cS1d135+eQtGlOXgS6DcsIyd9Rjh1VesC1VdhgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7c6qcEVXD6f9XHuCQuVw/ksOqVMB8GA1UdIwQY
MBaAFJD4+vz3xEGuScHO+VxRiygijHxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iNzhlNjktMjlkYy00ZTVjLWFjNDct
OGFhNGViYWQ0ZTY1LzEva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9iNzhlNjktMjlkYy00ZTVjLWFjNDctOGFhNGViYWQ0ZTY1
LzEva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7Ldtf1d
darYRNY9+IUy+Fh4jrFbfUNpKQXN653sN+xTKNOoTSVnetH2NWUWulNufKVMtUpz
MiQ7FOj4lIvaGv3DKeMRqkFaNfJEj6ApxYIpzjZ01KBRFVbbc3h0fIV5uDaeDRXn
43Bzct6gKjsQUsiBIH2SgUiyb0+hb9LUl132gg/VMmDF1xTVIxr8fp9Sxz14IIc5
E0TwE1/K53hwAGoIu7xIE+CUD+gSiJSqtwx2amNsdpOBfeFN8PpvDADwa0kNs1F7
1XYLYgHTD4r/7N/dndIA3p2aD7FQM/glL5ZxvaFhpLf20jXcZ870YT0emvw3cQJM
nN+A4rhkInRNhw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 19:01:33 2025 by rpki-client