Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
File: KboKHXhI0sGyMd0-aCRCDRh5mRM.mft (raw, json)
Hash identifier: N9Q357XA9xb7W/K4y8ma9wO1dKASrFGUUO+erSsohgE=
Subject key identifier: 56:DC:D9:33:D4:A9:86:06:5D:B4:F2:82:8C:B4:5F:32:70:F7:AF:10
Authority key identifier: 29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
Certificate issuer: /CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Certificate serial: 019674F98E58FE08828A1818E5AA8808470B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
Manifest number: 1513
Signing time: Sun 27 Apr 2025 02:00:33 +0000
Manifest this update: Sun 27 Apr 2025 02:00:33 +0000
Manifest next update: Mon 28 Apr 2025 02:00:33 +0000
Files and hashes: 1: KboKHXhI0sGyMd0-aCRCDRh5mRM.crl (hash: YEhmpDBFnpmt5qZNWG1XB+VnZl7FpGTjQvoVI/AnIh4=)
2: eZNf3C9feSNGJ4V8vhX9W1CodHo.roa (hash: jCzejzqRu1A4u7nv7yzoXy+ymx/Nx97x4lbTMxiUYlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:8e:58:fe:08:82:8a:18:18:e5:aa:88:08:47:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Validity
Not Before: Apr 27 02:00:33 2025 GMT
Not After : Apr 28 02:00:33 2025 GMT
Subject: CN=56dcd933d4a986065db4f2828cb45f3270f7af10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:d0:3e:18:4f:67:3e:f7:a4:83:cc:08:62:
b4:42:16:fc:5a:c3:c4:63:20:69:b6:eb:62:91:f5:
df:d1:b1:43:74:d4:ef:5a:9e:31:f6:57:67:4b:38:
d4:93:78:02:d9:47:f9:65:a5:53:39:5e:30:c6:0e:
57:30:cc:76:d8:a2:ea:fc:64:1e:32:30:8a:ab:3d:
d0:8e:8c:5c:97:41:f9:26:eb:a9:7c:8a:7f:8d:09:
6a:26:28:7d:c5:60:cd:ee:c1:c1:ce:2e:7c:fa:51:
93:3d:eb:85:f0:81:ab:f8:1f:66:79:48:0e:58:87:
17:05:b5:b6:75:5e:53:65:ae:d5:06:72:6c:0c:32:
af:df:66:24:91:d5:7b:6c:1c:d0:38:cb:40:7d:b2:
e6:95:6b:1e:26:e5:26:1d:07:de:8e:13:12:aa:97:
7f:d8:5c:4a:db:2f:c7:3e:07:5c:64:7c:3f:f9:c8:
b9:7e:df:47:95:f2:03:e1:b5:24:a2:c5:97:6c:6a:
4b:b1:b1:dd:37:a6:30:99:f6:06:31:59:d3:a5:b4:
2a:15:7a:52:f7:81:54:c2:ad:8c:6b:28:0a:4c:76:
53:10:78:2d:b6:e6:cc:dd:30:93:91:1d:d8:d3:43:
f3:83:82:43:a5:6b:94:3c:93:57:50:1b:67:e1:48:
20:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DC:D9:33:D4:A9:86:06:5D:B4:F2:82:8C:B4:5F:32:70:F7:AF:10
X509v3 Authority Key Identifier:
keyid:29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1a:3f:ac:94:9e:74:9f:eb:fc:81:56:07:6f:52:60:55:be:
d7:25:28:e8:03:ff:de:72:c3:7e:30:d9:1d:f4:ab:d0:df:5c:
58:de:11:95:f6:a7:bb:90:c4:3b:d7:00:a5:1b:09:f9:09:d5:
e3:8d:16:3f:4d:24:ca:6c:1d:53:35:79:24:2b:39:23:46:a2:
78:80:72:ea:db:cf:c5:b8:38:5a:e4:7b:8f:9e:97:5d:a6:45:
c8:63:47:06:bc:0e:a8:56:6e:4e:b3:26:11:a1:12:77:9c:5b:
1e:bf:45:7c:96:09:ea:2b:e4:8c:95:4f:c5:86:82:3f:32:14:
11:07:6e:83:7e:d6:66:61:e6:88:49:12:85:08:6d:9b:64:ba:
05:ef:d5:e6:68:75:ea:0a:ca:a0:21:41:79:fb:9e:bf:a7:92:
55:01:38:e7:77:46:b8:50:62:e3:2d:28:07:48:25:46:e9:ba:
0c:db:48:e8:53:45:c4:38:f4:29:a5:17:97:36:2d:c0:76:a7:
6f:89:42:4a:ed:30:87:fe:57:50:b5:3a:68:75:ad:93:ab:4f:
3d:34:b6:02:d5:88:6f:ec:73:bb:03:c9:77:c6:92:44:b9:d4:
de:6e:09:a7:ec:9f:00:a7:ab:04:1b:8c:88:28:73:07:ab:d7:
7e:d7:6b:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0+Y5Y/giCihgY5aqICEcLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YmEwYTFkNzg0OGQyYzFiMjMxZGQzZTY4MjQ0MjBkMTg3
OTk5MTMwHhcNMjUwNDI3MDIwMDMzWhcNMjUwNDI4MDIwMDMzWjAzMTEwLwYDVQQD
Eyg1NmRjZDkzM2Q0YTk4NjA2NWRiNGYyODI4Y2I0NWYzMjcwZjdhZjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7LQPhhPZz73pIPMCGK0Qhb8WsPE
YyBptutikfXf0bFDdNTvWp4x9ldnSzjUk3gC2Uf5ZaVTOV4wxg5XMMx22KLq/GQe
MjCKqz3Qjoxcl0H5JuupfIp/jQlqJih9xWDN7sHBzi58+lGTPeuF8IGr+B9meUgO
WIcXBbW2dV5TZa7VBnJsDDKv32YkkdV7bBzQOMtAfbLmlWseJuUmHQfejhMSqpd/
2FxK2y/HPgdcZHw/+ci5ft9HlfID4bUkosWXbGpLsbHdN6YwmfYGMVnTpbQqFXpS
94FUwq2MaygKTHZTEHgttubM3TCTkR3Y00Pzg4JDpWuUPJNXUBtn4Ugg7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbc2TPUqYYGXbTygoy0XzJw968QMB8GA1UdIwQY
MBaAFCm6Ch14SNLBsjHdPmgkQg0YeZkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2JvS0hYaEkwc0d5TWQwLWFDUkNEUmg1bVJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zMGMwYzAtOWVjYS00NjRmLThiOWYt
NmE1YjVmNWNhOWQzLzEvS2JvS0hYaEkwc0d5TWQwLWFDUkNEUmg1bVJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8zMGMwYzAtOWVjYS00NjRmLThiOWYtNmE1YjVmNWNhOWQz
LzEvS2JvS0hYaEkwc0d5TWQwLWFDUkNEUmg1bVJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBo/rJSe
dJ/r/IFWB29SYFW+1yUo6AP/3nLDfjDZHfSr0N9cWN4Rlfanu5DEO9cApRsJ+QnV
440WP00kymwdUzV5JCs5I0aieIBy6tvPxbg4WuR7j56XXaZFyGNHBrwOqFZuTrMm
EaESd5xbHr9FfJYJ6ivkjJVPxYaCPzIUEQdug37WZmHmiEkShQhtm2S6Be/V5mh1
6grKoCFBefuev6eSVQE453dGuFBi4y0oB0glRum6DNtI6FNFxDj0KaUXlzYtwHan
b4lCSu0wh/5XULU6aHWtk6tPPTS2AtWIb+xzuwPJd8aSRLnU3m4Jp+yfAKerBBuM
iChzB6vXftdrgg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:08 2025 by rpki-client