Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
File: K2ePFPiyKI1JVXym-xvfR5OSfc4.mft (raw, json)
Hash identifier: PRwpZypZmJxytO3FcyI2yVbrcCAoV3mk/g4tvazIdtc=
Subject key identifier: C9:66:F8:89:5C:73:B4:87:27:68:06:31:A0:83:3C:17:7F:48:C2:3C
Authority key identifier: 2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
Certificate issuer: /CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Certificate serial: 01967F0F8CE4FE5D10F288A29723680B2D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
Manifest number: 0CE0
Signing time: Tue 29 Apr 2025 01:00:47 +0000
Manifest this update: Tue 29 Apr 2025 01:00:47 +0000
Manifest next update: Wed 30 Apr 2025 01:00:47 +0000
Files and hashes: 1: F4GHMtEvNm46dM5TWDxthbQ6BA4.roa (hash: KVVBBRsYRigOW/uzk41RjMrk4PM1I4rBXcib4AOOQeA=)
2: K2ePFPiyKI1JVXym-xvfR5OSfc4.crl (hash: 87BNXMmbh1QT5EhWqPVpJ8VHkKceUmFKIxF911bHf8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:8c:e4:fe:5d:10:f2:88:a2:97:23:68:0b:2d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Validity
Not Before: Apr 29 01:00:47 2025 GMT
Not After : Apr 30 01:00:47 2025 GMT
Subject: CN=c966f8895c73b48727680631a0833c177f48c23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b0:bc:f0:2b:07:ea:74:e6:70:bb:f2:f1:4c:
ce:77:c2:5f:bf:48:e6:51:ed:f0:6e:48:a6:04:ca:
7f:c2:0c:48:bd:6d:14:0a:b4:af:93:6c:15:e6:32:
ad:f7:25:db:a9:52:2a:74:4f:b5:de:37:83:6f:3c:
f9:f0:a7:9f:c4:48:c2:55:9a:7c:ed:35:8b:37:96:
5d:5a:b2:c3:66:39:36:fa:ed:bc:06:d9:8b:21:c9:
5a:90:5b:78:5e:bc:9a:2f:5a:be:a3:76:17:c4:08:
b3:fc:cb:64:76:37:31:b4:28:f5:6d:2b:51:c1:ce:
98:87:78:a5:e1:ef:36:70:39:82:87:b2:fe:bd:43:
02:42:85:8e:59:84:c2:bb:2c:e3:55:01:2a:f9:3a:
c1:e0:9e:1a:21:4b:bd:a9:1b:44:00:f8:09:b2:e9:
1d:d5:61:05:7c:bd:ec:a0:f7:d6:66:36:10:1a:23:
6e:0a:35:af:d4:81:1e:8b:0a:90:02:45:ec:35:22:
6c:3c:bc:30:fc:8d:53:69:2d:fe:0d:0d:07:b7:61:
af:66:3c:1e:0a:73:07:5f:4f:29:57:07:f8:3c:e1:
1d:d5:69:72:e4:0f:27:83:df:f5:3a:36:ad:1e:59:
5a:24:cb:21:31:fe:c1:b8:ed:ce:b4:6f:dc:78:2a:
ed:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:66:F8:89:5C:73:B4:87:27:68:06:31:A0:83:3C:17:7F:48:C2:3C
X509v3 Authority Key Identifier:
keyid:2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:88:80:e0:84:d4:91:3f:fe:f6:c1:fe:6f:7f:16:73:65:94:
93:3c:a7:bb:cf:66:48:d6:a0:3e:cc:ac:1d:a2:51:61:76:bd:
44:5a:31:35:46:24:8c:57:f3:10:07:2a:35:79:75:22:4b:35:
59:13:b6:22:8f:b6:0c:3f:78:64:88:67:83:8e:79:b2:be:6a:
b5:bd:6b:05:46:80:22:76:77:85:8c:ab:d3:32:19:da:34:b8:
4d:16:f9:8b:6d:d8:b3:1d:a3:0e:12:79:4e:7b:94:cb:78:83:
fd:0a:63:87:51:9c:41:97:f4:4a:91:99:6a:3c:79:05:a6:37:
2c:b7:d8:04:66:26:04:45:3c:1c:30:28:7a:52:53:d1:24:28:
dc:e3:b9:7f:7f:9f:21:04:d0:b8:f8:16:e3:d0:ea:b5:b3:81:
c5:be:d5:5e:92:ce:0a:e9:e4:7d:4f:55:94:87:c9:2a:fd:32:
e6:cd:c0:a8:ee:bf:e8:b8:24:a0:99:53:6f:c2:61:28:5f:1c:
0c:7b:c4:43:4a:32:da:f9:a5:82:11:47:a4:bc:1d:e6:cd:b5:
5a:57:a0:de:21:0e:34:b8:46:1a:0e:7f:cd:13:f0:d8:d5:e7:
9f:ff:c1:1c:36:27:fb:00:6b:c7:15:6e:9b:01:29:6b:5e:f7:
95:41:25:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/D4zk/l0Q8oiilyNoCy0rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNjc4ZjE0ZjhiMjI4OGQ0OTU1N2NhNmZiMWJkZjQ3OTM5
MjdkY2UwHhcNMjUwNDI5MDEwMDQ3WhcNMjUwNDMwMDEwMDQ3WjAzMTEwLwYDVQQD
EyhjOTY2Zjg4OTVjNzNiNDg3Mjc2ODA2MzFhMDgzM2MxNzdmNDhjMjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bC88CsH6nTmcLvy8UzOd8Jfv0jm
Ue3wbkimBMp/wgxIvW0UCrSvk2wV5jKt9yXbqVIqdE+13jeDbzz58KefxEjCVZp8
7TWLN5ZdWrLDZjk2+u28BtmLIclakFt4XryaL1q+o3YXxAiz/MtkdjcxtCj1bStR
wc6Yh3il4e82cDmCh7L+vUMCQoWOWYTCuyzjVQEq+TrB4J4aIUu9qRtEAPgJsukd
1WEFfL3soPfWZjYQGiNuCjWv1IEeiwqQAkXsNSJsPLww/I1TaS3+DQ0Ht2GvZjwe
CnMHX08pVwf4POEd1Wly5A8ng9/1OjatHllaJMshMf7BuO3OtG/ceCrtKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlm+Ilcc7SHJ2gGMaCDPBd/SMI8MB8GA1UdIwQY
MBaAFCtnjxT4siiNSVV8pvsb30eTkn3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzJlUEZQaXlLSTFKVlh5bS14dmZSNU9TZmM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iYmE5ZWQtZGEyMS00OTE5LWE4MzEt
ZjFjYzg3M2MyZTI3LzEvSzJlUEZQaXlLSTFKVlh5bS14dmZSNU9TZmM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iYmE5ZWQtZGEyMS00OTE5LWE4MzEtZjFjYzg3M2MyZTI3
LzEvSzJlUEZQaXlLSTFKVlh5bS14dmZSNU9TZmM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYiA4ITU
kT/+9sH+b38Wc2WUkzynu89mSNagPsysHaJRYXa9RFoxNUYkjFfzEAcqNXl1Iks1
WRO2Io+2DD94ZIhng455sr5qtb1rBUaAInZ3hYyr0zIZ2jS4TRb5i23Ysx2jDhJ5
TnuUy3iD/Qpjh1GcQZf0SpGZajx5BaY3LLfYBGYmBEU8HDAoelJT0SQo3OO5f3+f
IQTQuPgW49DqtbOBxb7VXpLOCunkfU9VlIfJKv0y5s3AqO6/6LgkoJlTb8JhKF8c
DHvEQ0oy2vmlghFHpLwd5s21Wleg3iEONLhGGg5/zRPw2NXnn//BHDYn+wBrxxVu
mwEpa173lUElsQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:01:37 2025 by rpki-client