Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
File: K03fo7vxW8Hbhdg3maAbmGmtXOc.mft (raw, json)
Hash identifier: JrDMOalMh7qysSy8urltavYSIoDOSe62CQHLPRp2/60=
Subject key identifier: FB:69:49:85:D5:EE:28:EA:6C:BF:2D:3C:AC:98:1C:60:70:14:F3:90
Authority key identifier: 2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
Certificate issuer: /CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Certificate serial: 01967D8EFCBA8F7E72E5E8383D9EF63AF012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
Manifest number: 0407
Signing time: Mon 28 Apr 2025 18:00:44 +0000
Manifest this update: Mon 28 Apr 2025 18:00:44 +0000
Manifest next update: Tue 29 Apr 2025 18:00:44 +0000
Files and hashes: 1: IlzfTHCX--ryHCCh1ym927r2NiI.roa (hash: FciYooHb2klECPV8l+c1FyHw/6m8DpTuCRKy7yclUjA=)
2: K03fo7vxW8Hbhdg3maAbmGmtXOc.crl (hash: VPS4ak/fxjVeHuYdmFLyYzmRsgYb5PB0fplRux8/iy4=)
3: LA9bx3k0C7Na4-u8OH3eVdW5a1M.roa (hash: kQiZYiCrBnh88ITE24ugea51DvkHaqRGnV+SPvNj+zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:fc:ba:8f:7e:72:e5:e8:38:3d:9e:f6:3a:f0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Validity
Not Before: Apr 28 18:00:44 2025 GMT
Not After : Apr 29 18:00:44 2025 GMT
Subject: CN=fb694985d5ee28ea6cbf2d3cac981c607014f390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:d6:fb:b6:51:70:8e:45:ab:78:63:00:91:
5c:f1:8d:33:07:04:8b:31:4f:fe:02:4b:15:64:d0:
63:f0:ca:a4:67:65:55:ad:c7:92:e7:59:2d:07:9c:
5d:a8:98:40:2a:04:9d:a4:4e:4e:07:5f:c9:e6:b9:
bb:57:ce:14:6d:c0:91:ae:d3:b0:07:d2:06:3a:24:
24:9b:e6:86:d7:7e:ba:87:41:6d:b2:af:12:96:46:
a2:24:f3:ce:99:ce:2b:5b:f1:ed:2f:31:fb:23:6c:
3a:53:63:b4:7c:a0:24:f5:99:76:24:eb:d5:e2:f2:
a9:39:07:de:59:d6:4f:7e:45:58:76:a6:92:cc:1e:
5f:8c:ec:50:a1:c4:23:e2:50:a2:7f:9b:94:55:25:
20:a3:78:60:bd:8e:b0:10:76:6f:8a:d5:dd:77:05:
d1:89:70:e3:16:b0:20:02:67:61:19:70:a1:f3:13:
24:a2:1c:ae:81:34:6c:4c:c8:dd:b3:5c:7e:3a:f2:
ae:e8:bf:e8:d1:84:bf:43:07:49:03:8a:ef:6a:7c:
7e:89:13:e5:9b:3c:19:34:c0:a6:24:d2:31:44:e5:
e2:e2:d9:1c:b9:15:b9:e9:8e:42:42:cb:70:61:1d:
99:10:d9:1b:89:2c:d2:ab:c6:a3:6d:41:90:43:39:
c3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:69:49:85:D5:EE:28:EA:6C:BF:2D:3C:AC:98:1C:60:70:14:F3:90
X509v3 Authority Key Identifier:
keyid:2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:84:f3:3b:6f:96:e0:fc:68:7c:75:5f:5e:ca:19:31:69:e9:
c1:24:57:2f:c5:ae:65:eb:24:86:4f:f1:03:99:08:56:29:38:
e2:e8:75:ac:79:18:ba:d2:f3:80:34:42:fa:27:e6:38:56:e9:
58:26:28:d5:0b:e8:32:e6:ea:0c:18:89:a3:d1:bc:92:1b:41:
56:e3:f2:5f:7d:90:70:41:32:88:4a:df:5a:8d:0b:48:91:22:
42:6e:8a:9e:81:c2:20:03:bf:1e:b3:f0:c9:e1:33:b1:76:03:
ea:10:fb:eb:c6:83:78:8f:23:97:db:fb:d9:30:e8:32:3f:a0:
9b:6e:7c:17:6d:53:e8:2f:21:9d:a3:f5:32:a4:a6:f5:0c:3f:
3e:d3:73:20:ae:13:67:45:73:c9:5d:57:c9:1a:49:12:29:88:
48:76:e4:ff:9e:c8:28:9a:d0:22:e8:71:69:78:7f:b0:c1:9a:
e7:5e:c2:f6:f0:11:9b:dc:0d:13:dc:68:11:58:4b:33:0f:c0:
7e:86:45:25:b1:0e:b3:18:c6:0f:53:33:53:86:58:7f:be:75:
cd:45:45:8e:d7:36:fc:25:8b:68:19:5a:87:fd:79:ba:f6:72:
dc:ab:bd:01:3b:95:e0:cc:8e:64:a9:51:b9:bb:7b:a9:89:7e:
28:50:67:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9jvy6j35y5eg4PZ72OvASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNGRkZmEzYmJmMTViYzFkYjg1ZDgzNzk5YTAxYjk4Njlh
ZDVjZTcwHhcNMjUwNDI4MTgwMDQ0WhcNMjUwNDI5MTgwMDQ0WjAzMTEwLwYDVQQD
EyhmYjY5NDk4NWQ1ZWUyOGVhNmNiZjJkM2NhYzk4MWM2MDcwMTRmMzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNTW+7ZRcI5Fq3hjAJFc8Y0zBwSL
MU/+AksVZNBj8MqkZ2VVrceS51ktB5xdqJhAKgSdpE5OB1/J5rm7V84UbcCRrtOw
B9IGOiQkm+aG1366h0Ftsq8SlkaiJPPOmc4rW/HtLzH7I2w6U2O0fKAk9Zl2JOvV
4vKpOQfeWdZPfkVYdqaSzB5fjOxQocQj4lCif5uUVSUgo3hgvY6wEHZvitXddwXR
iXDjFrAgAmdhGXCh8xMkohyugTRsTMjds1x+OvKu6L/o0YS/QwdJA4rvanx+iRPl
mzwZNMCmJNIxROXi4tkcuRW56Y5CQstwYR2ZENkbiSzSq8ajbUGQQznDWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtpSYXV7ijqbL8tPKyYHGBwFPOQMB8GA1UdIwQY
MBaAFCtN36O78VvB24XYN5mgG5hprVznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hMTIxMTYtMjIzYy00MzExLTgyMWUt
ZmU4YWVhNWQ0MGE3LzEvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hMTIxMTYtMjIzYy00MzExLTgyMWUtZmU4YWVhNWQ0MGE3
LzEvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo4TzO2+W
4PxofHVfXsoZMWnpwSRXL8WuZeskhk/xA5kIVik44uh1rHkYutLzgDRC+ifmOFbp
WCYo1QvoMubqDBiJo9G8khtBVuPyX32QcEEyiErfWo0LSJEiQm6KnoHCIAO/HrPw
yeEzsXYD6hD768aDeI8jl9v72TDoMj+gm258F21T6C8hnaP1MqSm9Qw/PtNzIK4T
Z0VzyV1XyRpJEimISHbk/57IKJrQIuhxaXh/sMGa517C9vARm9wNE9xoEVhLMw/A
foZFJbEOsxjGD1MzU4ZYf751zUVFjtc2/CWLaBlah/15uvZy3Ku9ATuV4MyOZKlR
ubt7qYl+KFBneg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:55:57 2025 by rpki-client