Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
File: kGSznoDKHN5MrcC8jqK0HqbSfHY.mft (raw, json)
Hash identifier: TMsvgLO++Aufaz3gXuR1DUEH4VitVgndmr6eRaPpuss=
Subject key identifier: DD:A0:13:A5:A7:F7:DC:24:4D:07:AB:8A:CA:14:9B:0C:08:F6:66:B9
Authority key identifier: 90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
Certificate issuer: /CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Certificate serial: 019676E8472FE01D15CE81A554688FEDAC52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 11:00:56 +0000
Manifest this update: Sun 27 Apr 2025 11:00:56 +0000
Manifest next update: Mon 28 Apr 2025 11:00:56 +0000
Files and hashes: 1: FKW3Mb8twN-jkMzdiCWs_x2VU-o.roa (hash: zIG0SkUcjt7d+bJLn+B2ubk7D8sMo7IcD8uDUAn5toQ=)
2: kGSznoDKHN5MrcC8jqK0HqbSfHY.crl (hash: Maw+mXRxY+DL+O9v9AwTK0jO3OesKcou1Wkxhzrl2MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:47:2f:e0:1d:15:ce:81:a5:54:68:8f:ed:ac:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Validity
Not Before: Apr 27 11:00:56 2025 GMT
Not After : Apr 28 11:00:56 2025 GMT
Subject: CN=dda013a5a7f7dc244d07ab8aca149b0c08f666b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3e:f4:56:90:93:dc:ba:4a:74:ea:fa:20:e6:
e1:e1:c6:11:f8:32:9d:18:b2:6f:84:90:74:ce:1c:
3e:f6:6e:64:37:8a:05:e9:75:59:7f:0a:0b:4a:41:
99:d4:b3:d7:47:f6:e7:04:34:28:d6:c1:75:2e:8d:
90:68:21:df:96:30:7f:8c:e6:82:93:12:92:2e:fd:
70:b3:c8:a8:e8:1a:39:93:88:18:a6:86:43:b2:15:
67:a2:91:e2:34:66:9c:13:f0:4c:07:74:f8:f8:ae:
70:24:67:e6:58:a2:77:b3:4e:bd:ad:9c:27:d4:f9:
8c:5f:97:b1:2c:e0:19:71:de:5f:64:d8:d6:18:76:
fd:aa:1b:28:69:83:05:dd:82:9d:bc:f5:8c:2d:fd:
99:60:62:59:83:17:79:eb:0b:f2:e8:69:58:ed:4f:
9a:8d:dc:14:0b:4b:1a:35:58:ab:fc:81:9a:d4:ef:
e1:5c:5f:52:10:1e:05:3d:e2:e3:68:3b:ac:fc:7e:
41:01:8d:92:4c:ab:22:5c:b8:f0:74:42:77:ce:c1:
d3:ed:9f:af:57:be:6e:24:ff:d3:d7:64:e5:1b:68:
d9:2b:21:e3:21:bc:d7:e9:55:d6:43:59:e2:64:85:
5d:8d:10:2c:83:cf:71:98:ff:2b:80:b1:1b:76:9b:
6f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A0:13:A5:A7:F7:DC:24:4D:07:AB:8A:CA:14:9B:0C:08:F6:66:B9
X509v3 Authority Key Identifier:
keyid:90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:27:54:c7:17:17:82:a9:46:cf:43:0f:8d:b0:82:7f:3c:3b:
00:ba:11:e9:c6:63:11:37:98:88:37:2e:80:57:f0:81:78:5f:
e4:7f:9c:58:47:5d:7c:2b:97:d4:e8:3a:7f:a6:1d:23:03:b2:
0a:e7:12:d9:2b:c5:18:21:ee:2e:16:23:a4:8a:6a:cb:76:64:
d5:6d:8f:2d:30:92:6b:4f:f0:10:dc:78:30:c0:80:cc:9d:93:
30:90:92:f9:2f:15:dc:c3:74:ff:b9:bf:d1:71:88:2f:c7:03:
87:5c:e8:58:85:7b:5f:34:fe:36:48:51:12:3d:c5:0a:9f:79:
d4:60:5d:d1:57:42:f6:5c:3b:d3:83:57:72:7f:34:ba:fd:60:
64:e3:00:d1:69:78:a9:95:a2:04:10:be:df:a1:3e:d0:bf:72:
ca:92:2d:6f:61:78:d8:77:74:7c:5d:76:77:52:4a:31:12:47:
37:6e:42:6d:82:02:b7:3e:66:26:14:df:73:2c:ce:60:83:53:
14:28:fa:56:68:e1:2f:e3:0f:ca:d2:a5:28:3e:89:cf:6b:8b:
75:b5:8b:9f:2f:b3:5e:b4:59:66:a1:1b:69:e4:b0:03:ad:45:
95:fd:19:07:54:e5:05:8d:f0:83:15:73:6c:52:7a:56:3f:ff:
c9:3d:10:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ26Ecv4B0VzoGlVGiP7axSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNjRiMzllODBjYTFjZGU0Y2FkYzBiYzhlYTJiNDFlYTZk
MjdjNzYwHhcNMjUwNDI3MTEwMDU2WhcNMjUwNDI4MTEwMDU2WjAzMTEwLwYDVQQD
EyhkZGEwMTNhNWE3ZjdkYzI0NGQwN2FiOGFjYTE0OWIwYzA4ZjY2NmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD70VpCT3LpKdOr6IObh4cYR+DKd
GLJvhJB0zhw+9m5kN4oF6XVZfwoLSkGZ1LPXR/bnBDQo1sF1Lo2QaCHfljB/jOaC
kxKSLv1ws8io6Bo5k4gYpoZDshVnopHiNGacE/BMB3T4+K5wJGfmWKJ3s069rZwn
1PmMX5exLOAZcd5fZNjWGHb9qhsoaYMF3YKdvPWMLf2ZYGJZgxd56wvy6GlY7U+a
jdwUC0saNVir/IGa1O/hXF9SEB4FPeLjaDus/H5BAY2STKsiXLjwdEJ3zsHT7Z+v
V75uJP/T12TlG2jZKyHjIbzX6VXWQ1niZIVdjRAsg89xmP8rgLEbdptv2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2gE6Wn99wkTQerisoUmwwI9ma5MB8GA1UdIwQY
MBaAFJBks56AyhzeTK3AvI6itB6m0nx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0dTem5vREtITjVNcmNDOGpxSzBIcWJTZkhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9lNzcyM2QtZmU5Yi00Mjk0LWJmY2Et
M2RkYTIzY2JkZTU5LzEva0dTem5vREtITjVNcmNDOGpxSzBIcWJTZkhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9lNzcyM2QtZmU5Yi00Mjk0LWJmY2EtM2RkYTIzY2JkZTU5
LzEva0dTem5vREtITjVNcmNDOGpxSzBIcWJTZkhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCdUxxcX
gqlGz0MPjbCCfzw7ALoR6cZjETeYiDcugFfwgXhf5H+cWEddfCuX1Og6f6YdIwOy
CucS2SvFGCHuLhYjpIpqy3Zk1W2PLTCSa0/wENx4MMCAzJ2TMJCS+S8V3MN0/7m/
0XGIL8cDh1zoWIV7XzT+NkhREj3FCp951GBd0VdC9lw704NXcn80uv1gZOMA0Wl4
qZWiBBC+36E+0L9yypItb2F42Hd0fF12d1JKMRJHN25CbYICtz5mJhTfcyzOYINT
FCj6VmjhL+MPytKlKD6Jz2uLdbWLny+zXrRZZqEbaeSwA61Flf0ZB1TlBY3wgxVz
bFJ6Vj//yT0QBw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:11:57 2025 by rpki-client