Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
File: K03fo7vxW8Hbhdg3maAbmGmtXOc.mft (raw, json)
Hash identifier: nARFUT8re/lLreTgvuEFjlttVN5yqOANJGbfllUA7CU=
Subject key identifier: 15:86:58:5C:A7:B4:0E:6D:48:D6:2F:D5:F1:7F:6A:B8:87:B2:8E:2D
Authority key identifier: 2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
Certificate issuer: /CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Certificate serial: 01967BA0535B701955D2A1A90DDBC4FBECF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
Manifest number: 0406
Signing time: Mon 28 Apr 2025 09:00:26 +0000
Manifest this update: Mon 28 Apr 2025 09:00:26 +0000
Manifest next update: Tue 29 Apr 2025 09:00:26 +0000
Files and hashes: 1: IlzfTHCX--ryHCCh1ym927r2NiI.roa (hash: FciYooHb2klECPV8l+c1FyHw/6m8DpTuCRKy7yclUjA=)
2: K03fo7vxW8Hbhdg3maAbmGmtXOc.crl (hash: In/1aj3qidb5wfSkHpvv086WQbqE6eDUcawA6eixckQ=)
3: LA9bx3k0C7Na4-u8OH3eVdW5a1M.roa (hash: kQiZYiCrBnh88ITE24ugea51DvkHaqRGnV+SPvNj+zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:53:5b:70:19:55:d2:a1:a9:0d:db:c4:fb:ec:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Validity
Not Before: Apr 28 09:00:26 2025 GMT
Not After : Apr 29 09:00:26 2025 GMT
Subject: CN=1586585ca7b40e6d48d62fd5f17f6ab887b28e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:f7:15:fc:96:88:5f:53:d0:4c:bd:b2:36:
e9:18:3c:b4:81:1d:d6:82:7f:33:ec:13:69:26:56:
41:64:e8:b7:b3:8d:be:09:07:0f:ee:9c:3a:82:52:
94:9d:88:e1:bb:e3:ed:12:95:5f:1c:6c:72:00:2e:
5a:af:6f:fd:a1:50:30:f4:b6:4c:c7:91:84:63:6a:
6c:1a:cf:b7:c3:47:f4:18:a5:1c:19:6e:f1:95:86:
7b:9e:1a:eb:a9:8e:a0:11:5c:c9:93:a2:0c:36:3c:
e5:bc:f0:bb:ad:c9:9e:23:aa:d6:7a:49:6f:be:d5:
50:01:3c:1a:c6:17:6e:03:d8:f5:4f:0a:13:d6:48:
73:70:4c:33:19:bd:fa:d6:b6:fb:2d:84:cd:9c:a5:
68:b8:6d:38:34:e4:34:7b:03:f3:81:9e:df:b1:b4:
0b:3c:b1:96:74:1f:28:ec:7c:c3:a5:7a:f3:62:d6:
d4:90:45:f5:be:1d:06:0b:63:53:a6:a6:93:75:b2:
ac:dc:22:82:73:fc:d2:df:14:c5:38:81:9e:f4:38:
e9:23:4c:2e:e1:71:44:69:a6:2d:41:0d:20:2e:39:
11:37:ac:b8:a5:c2:c7:f3:3b:50:46:d1:77:89:88:
47:ea:34:61:70:99:d7:ac:b5:49:6d:4d:f6:a3:0d:
58:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:86:58:5C:A7:B4:0E:6D:48:D6:2F:D5:F1:7F:6A:B8:87:B2:8E:2D
X509v3 Authority Key Identifier:
keyid:2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3d:77:d1:c2:e6:fa:bd:87:38:32:74:1e:6a:ad:55:2a:55:
8d:7b:47:2e:eb:36:78:be:fc:78:09:db:8f:32:1f:1c:3f:6c:
32:d0:f2:59:79:96:28:49:ce:08:b4:40:41:f7:df:0c:57:62:
2d:88:ff:d4:1c:31:9f:0a:30:2a:5c:da:d0:64:e6:6d:6f:3e:
24:e6:e0:53:53:4b:8d:d7:28:ef:de:59:f8:bc:a4:97:7f:30:
41:c9:b0:d2:98:10:06:f3:62:76:c3:75:a3:ed:1a:ac:4f:fa:
cc:24:4a:00:cb:fe:cf:71:c5:ea:26:b2:3e:de:ab:09:f4:02:
93:ee:f8:7a:a4:11:fe:5c:c1:2e:ae:6a:49:0e:26:9c:e3:5d:
fd:13:90:f6:2a:0a:cd:39:75:b3:08:1e:b3:32:a3:69:9a:9b:
b0:93:65:c7:ee:37:34:dc:b1:18:27:9c:7b:f2:9d:bd:38:96:
c9:4d:a7:fe:fc:0b:ec:fa:e7:ae:df:9e:d4:b0:da:b4:73:28:
32:42:df:96:94:b1:31:0a:b1:1f:f1:86:a1:e5:9e:e2:24:95:
27:f1:d9:d5:33:61:5d:6a:f0:d9:1f:bf:bb:58:96:a3:88:0f:
31:23:ac:12:8b:94:55:e8:c4:cc:f7:07:7e:7f:da:29:12:25:
d7:b8:88:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7oFNbcBlV0qGpDdvE++z5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNGRkZmEzYmJmMTViYzFkYjg1ZDgzNzk5YTAxYjk4Njlh
ZDVjZTcwHhcNMjUwNDI4MDkwMDI2WhcNMjUwNDI5MDkwMDI2WjAzMTEwLwYDVQQD
EygxNTg2NTg1Y2E3YjQwZTZkNDhkNjJmZDVmMTdmNmFiODg3YjI4ZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2H3FfyWiF9T0Ey9sjbpGDy0gR3W
gn8z7BNpJlZBZOi3s42+CQcP7pw6glKUnYjhu+PtEpVfHGxyAC5ar2/9oVAw9LZM
x5GEY2psGs+3w0f0GKUcGW7xlYZ7nhrrqY6gEVzJk6IMNjzlvPC7rcmeI6rWeklv
vtVQATwaxhduA9j1TwoT1khzcEwzGb361rb7LYTNnKVouG04NOQ0ewPzgZ7fsbQL
PLGWdB8o7HzDpXrzYtbUkEX1vh0GC2NTpqaTdbKs3CKCc/zS3xTFOIGe9DjpI0wu
4XFEaaYtQQ0gLjkRN6y4pcLH8ztQRtF3iYhH6jRhcJnXrLVJbU32ow1YpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWGWFyntA5tSNYv1fF/ariHso4tMB8GA1UdIwQY
MBaAFCtN36O78VvB24XYN5mgG5hprVznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hMTIxMTYtMjIzYy00MzExLTgyMWUt
ZmU4YWVhNWQ0MGE3LzEvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hMTIxMTYtMjIzYy00MzExLTgyMWUtZmU4YWVhNWQ0MGE3
LzEvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASj130cLm
+r2HODJ0HmqtVSpVjXtHLus2eL78eAnbjzIfHD9sMtDyWXmWKEnOCLRAQfffDFdi
LYj/1BwxnwowKlza0GTmbW8+JObgU1NLjdco795Z+Lykl38wQcmw0pgQBvNidsN1
o+0arE/6zCRKAMv+z3HF6iayPt6rCfQCk+74eqQR/lzBLq5qSQ4mnONd/ROQ9ioK
zTl1swgeszKjaZqbsJNlx+43NNyxGCece/KdvTiWyU2n/vwL7Prnrt+e1LDatHMo
MkLflpSxMQqxH/GGoeWe4iSVJ/HZ1TNhXWrw2R+/u1iWo4gPMSOsEouUVejEzPcH
fn/aKRIl17iIZw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 19:32:15 2025 by rpki-client