Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
File: KIUcb8brOBbhFsikqFHQ0XjJDzE.mft (raw, json)
Hash identifier: QALtH50hbdg4zdfnGS1EP3P0nsEXRwD0TQRSaN6m3U8=
Subject key identifier: 1D:9D:8A:AA:71:CF:0E:23:97:7F:59:93:75:E8:EA:5E:BF:B3:FC:5A
Authority key identifier: 28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
Certificate issuer: /CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Certificate serial: 0196AA9EF1006EF53DD97591D43B7A36B500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
Manifest number: 1308
Signing time: Wed 07 May 2025 12:01:05 +0000
Manifest this update: Wed 07 May 2025 12:01:05 +0000
Manifest next update: Thu 08 May 2025 12:01:05 +0000
Files and hashes: 1: KIUcb8brOBbhFsikqFHQ0XjJDzE.crl (hash: xkhiqy3PGvkXsM+uiQn4gxg5haQe59tFOjTGUrGHU1U=)
2: QKIPUY8W9rG1LSw1ZEyZOELoapA.roa (hash: Z80mVuvHDatSxJ6yGfprXykxFLoYcEum7C9B/uFuICg=)
3: ZPcs3ZKKxPUQbEu3DEs7Hfv-wYM.roa (hash: btG37/wBYGxhtViE0Hi1ryp1c5dcgao2x4gq6RXDb18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9e:f1:00:6e:f5:3d:d9:75:91:d4:3b:7a:36:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Validity
Not Before: May 7 12:01:05 2025 GMT
Not After : May 8 12:01:05 2025 GMT
Subject: CN=1d9d8aaa71cf0e23977f599375e8ea5ebfb3fc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:1b:a4:f5:51:f3:92:34:b6:8c:f2:af:3c:
52:bd:d2:90:5c:88:a3:70:cc:90:02:d3:19:b7:4d:
70:11:ca:62:68:a4:84:3b:dd:5d:0f:25:df:3d:3d:
f6:21:40:7e:30:db:9f:94:90:70:d3:4b:ce:27:7f:
fd:65:e8:8c:b5:25:99:02:b8:cd:f6:2d:08:ff:d4:
24:d3:88:d0:3d:2f:59:b1:e3:7a:a8:4d:a8:e8:31:
e0:ab:1e:3e:76:a4:72:4d:4e:61:ac:1a:7d:ec:8b:
44:a4:0a:3d:ed:87:af:d5:bd:aa:d3:9b:87:9f:98:
70:1e:e9:94:ae:d6:25:04:76:ec:f1:7b:d0:17:01:
e4:27:6b:72:60:03:00:1c:4b:68:3e:9d:cc:91:2f:
9b:d5:28:2e:5a:0c:92:3c:c0:c2:b9:78:25:e1:00:
64:73:f5:08:a9:8b:67:14:10:de:03:52:03:3c:7d:
03:c1:cc:aa:27:12:52:5e:1a:46:fc:d9:8a:d5:8d:
0d:d8:81:54:f8:d0:8f:d4:b9:b7:50:06:31:fb:81:
ee:3c:78:6a:be:bd:c8:6d:39:6a:78:34:f2:e1:e5:
f2:24:5c:12:e7:93:74:46:c5:45:d0:5b:b7:ed:79:
25:fd:22:7f:a6:42:5a:c7:d9:53:11:ab:80:3b:a3:
a9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9D:8A:AA:71:CF:0E:23:97:7F:59:93:75:E8:EA:5E:BF:B3:FC:5A
X509v3 Authority Key Identifier:
keyid:28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8a:b1:32:a9:a4:8c:33:c7:3d:d3:c9:97:03:c5:77:53:f9:
34:d4:8b:93:de:43:14:56:de:4a:09:20:64:53:03:9a:54:a6:
72:27:72:4c:a3:7e:09:5f:04:03:ac:45:6a:2c:84:ec:da:d9:
71:92:05:ba:5a:87:e6:19:1b:44:1c:d4:e2:84:bc:87:ec:cc:
59:12:97:58:b2:74:86:36:5b:f1:c9:e6:d1:5a:70:24:ff:f5:
38:d7:46:34:b5:fa:fa:c6:5a:89:73:bc:e5:1d:ae:3c:e8:54:
4f:9f:80:0c:99:15:d1:a6:90:18:c0:6f:73:6c:1b:1b:3c:5b:
fc:ab:0a:7d:6f:66:79:4b:e6:4a:80:17:33:f8:23:6f:12:c5:
f1:6a:6f:5c:3b:10:5c:50:91:d6:a1:7d:ab:38:93:26:77:48:
93:d7:cc:f6:8d:12:f5:6a:8d:c6:79:16:af:6c:67:d6:9e:c0:
c1:51:7d:91:1f:dd:5d:fb:9f:73:ab:7e:33:f3:6e:58:da:30:
ac:17:56:36:4f:24:3a:e9:9e:1a:94:c7:15:5b:61:09:c0:1f:
6a:f2:45:bb:db:00:97:17:85:90:86:3d:59:69:5e:51:f2:07:
cc:d8:2a:3a:07:96:70:bd:67:5b:8f:38:b5:d8:07:9c:ed:05:
fd:0a:04:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaqnvEAbvU92XWR1Dt6NrUAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ODUxYzZmYzZlYjM4MTZlMTE2YzhhNGE4NTFkMGQxNzhj
OTBmMzEwHhcNMjUwNTA3MTIwMTA1WhcNMjUwNTA4MTIwMTA1WjAzMTEwLwYDVQQD
EygxZDlkOGFhYTcxY2YwZTIzOTc3ZjU5OTM3NWU4ZWE1ZWJmYjNmYzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnsbpPVR85I0tozyrzxSvdKQXIij
cMyQAtMZt01wEcpiaKSEO91dDyXfPT32IUB+MNuflJBw00vOJ3/9ZeiMtSWZArjN
9i0I/9Qk04jQPS9ZseN6qE2o6DHgqx4+dqRyTU5hrBp97ItEpAo97Yev1b2q05uH
n5hwHumUrtYlBHbs8XvQFwHkJ2tyYAMAHEtoPp3MkS+b1SguWgySPMDCuXgl4QBk
c/UIqYtnFBDeA1IDPH0DwcyqJxJSXhpG/NmK1Y0N2IFU+NCP1Lm3UAYx+4HuPHhq
vr3IbTlqeDTy4eXyJFwS55N0RsVF0Fu37Xkl/SJ/pkJax9lTEauAO6OpqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2diqpxzw4jl39Zk3Xo6l6/s/xaMB8GA1UdIwQY
MBaAFCiFHG/G6zgW4RbIpKhR0NF4yQ8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0lVY2I4YnJPQmJoRnNpa3FGSFEwWGpKRHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iOWU2ZGYtZGE4Zi00NDkxLThmZTQt
NTI0NWIxMzUyMjFiLzEvS0lVY2I4YnJPQmJoRnNpa3FGSFEwWGpKRHpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9iOWU2ZGYtZGE4Zi00NDkxLThmZTQtNTI0NWIxMzUyMjFi
LzEvS0lVY2I4YnJPQmJoRnNpa3FGSFEwWGpKRHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkoqxMqmk
jDPHPdPJlwPFd1P5NNSLk95DFFbeSgkgZFMDmlSmcidyTKN+CV8EA6xFaiyE7NrZ
cZIFulqH5hkbRBzU4oS8h+zMWRKXWLJ0hjZb8cnm0VpwJP/1ONdGNLX6+sZaiXO8
5R2uPOhUT5+ADJkV0aaQGMBvc2wbGzxb/KsKfW9meUvmSoAXM/gjbxLF8WpvXDsQ
XFCR1qF9qziTJndIk9fM9o0S9WqNxnkWr2xn1p7AwVF9kR/dXfufc6t+M/NuWNow
rBdWNk8kOumeGpTHFVthCcAfavJFu9sAlxeFkIY9WWleUfIHzNgqOgeWcL1nW484
tdgHnO0F/QoEYw==
-----END CERTIFICATE-----
Generated at Wed May 7 15:18:33 2025 by rpki-client