Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
File: k4KIfhkEky8RhsLDHGqS_17GQ4c.mft (raw, json)
Hash identifier: DB6i+/SzLg4ldkm/eULxWaY3l5htJGwo75DkTbEVXG8=
Subject key identifier: 04:55:AC:0B:B9:95:E3:99:E8:B2:E2:37:AC:48:62:97:3E:27:98:BF
Authority key identifier: 93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87
Certificate issuer: /CN=9382887e1904932f1186c2c31c6a92ff5ec64387
Certificate serial: 01968359BCB49B175030619D1C6C30DDFA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
Manifest number: 0245
Signing time: Tue 29 Apr 2025 21:00:18 +0000
Manifest this update: Tue 29 Apr 2025 21:00:18 +0000
Manifest next update: Wed 30 Apr 2025 21:00:18 +0000
Files and hashes: 1: k4KIfhkEky8RhsLDHGqS_17GQ4c.crl (hash: onHqMpIR02NFo5gx6Mdkfwq4+M6O/jZZdyS+s0FbXl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:59:bc:b4:9b:17:50:30:61:9d:1c:6c:30:dd:fa:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9382887e1904932f1186c2c31c6a92ff5ec64387
Validity
Not Before: Apr 29 21:00:18 2025 GMT
Not After : Apr 30 21:00:18 2025 GMT
Subject: CN=0455ac0bb995e399e8b2e237ac4862973e2798bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:da:26:d3:12:93:3b:fc:a1:a2:97:a1:22:b0:
5f:68:93:5d:54:99:5b:a3:5c:8a:69:0c:6c:63:8e:
50:6d:c8:f6:7f:d4:31:23:5c:40:36:d7:f9:dd:bd:
bf:07:5b:82:ed:47:63:f6:21:98:9b:7a:b0:0c:4c:
e7:4b:a3:ee:54:b6:3a:a5:d0:5d:bc:44:c2:53:14:
fc:8c:f6:b0:bb:b6:ee:1f:7e:1b:71:aa:a4:fc:7c:
76:90:a5:58:95:85:81:92:b2:a4:b4:f2:40:e3:f7:
05:fb:6e:24:71:a6:04:33:59:24:53:59:1f:cc:b3:
35:c9:45:86:ad:32:4c:aa:34:8d:ce:eb:17:fa:ca:
66:d8:ac:49:bb:fa:a0:0a:d5:61:e5:9f:73:2e:d3:
42:17:45:1c:5d:6d:36:44:65:d4:0a:59:4c:60:ba:
78:ed:c1:24:70:6d:d3:5b:0f:b9:93:02:c4:11:2a:
55:6c:90:00:b5:6a:38:42:b1:74:da:c7:42:6d:f3:
8c:56:46:ae:f3:22:2b:e2:9b:8e:22:dc:8e:ca:4d:
79:70:26:50:01:e6:7e:03:77:c2:84:79:28:9e:d7:
7b:5d:4e:e0:d2:fa:91:05:7b:cc:ee:9b:76:f7:d0:
39:f1:be:61:f4:b8:9b:eb:ff:2e:52:53:68:03:3d:
4e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:55:AC:0B:B9:95:E3:99:E8:B2:E2:37:AC:48:62:97:3E:27:98:BF
X509v3 Authority Key Identifier:
keyid:93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7e:f9:73:d8:1f:de:8a:8e:ac:12:4b:b7:c8:18:3d:1c:c5:
c3:5a:53:a8:4d:cf:5b:4b:53:0b:9c:85:a7:29:1a:86:4e:30:
1c:67:50:a1:97:04:d0:9d:2e:9f:09:b5:6c:ec:64:b5:72:81:
66:51:8a:fe:67:6b:7c:51:75:e0:33:ac:0f:e4:b4:8a:21:45:
1c:34:00:23:79:52:31:fb:89:1a:78:28:27:42:9e:00:11:5b:
19:d6:cc:23:c5:e5:62:60:53:dc:79:2f:1e:ee:3f:6d:8c:23:
38:3a:eb:69:25:05:27:71:eb:1f:9d:87:f8:98:c9:93:93:59:
2e:aa:cb:76:88:63:21:1f:fc:01:89:e3:27:df:13:50:95:b9:
f6:be:d9:29:20:37:87:11:24:f4:81:34:82:0a:4b:7e:a6:cd:
33:81:96:a1:4c:64:79:8b:8b:85:90:51:1b:3a:45:28:a8:24:
fa:80:86:f8:af:69:c5:e0:1a:ad:fe:f0:9a:7a:41:f7:12:04:
4d:43:31:21:74:0a:a2:b5:63:28:30:80:da:0d:cf:99:31:d6:
35:01:2f:d9:64:74:a5:14:b3:95:6f:b3:1e:8f:70:1c:d3:ea:
7b:64:f2:f6:e7:63:37:a4:62:ea:5f:c1:f1:7d:a0:b3:ba:8d:
eb:87:af:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDWby0mxdQMGGdHGww3fp9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzODI4ODdlMTkwNDkzMmYxMTg2YzJjMzFjNmE5MmZmNWVj
NjQzODcwHhcNMjUwNDI5MjEwMDE4WhcNMjUwNDMwMjEwMDE4WjAzMTEwLwYDVQQD
EygwNDU1YWMwYmI5OTVlMzk5ZThiMmUyMzdhYzQ4NjI5NzNlMjc5OGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9om0xKTO/yhopehIrBfaJNdVJlb
o1yKaQxsY45Qbcj2f9QxI1xANtf53b2/B1uC7Udj9iGYm3qwDEznS6PuVLY6pdBd
vETCUxT8jPawu7buH34bcaqk/Hx2kKVYlYWBkrKktPJA4/cF+24kcaYEM1kkU1kf
zLM1yUWGrTJMqjSNzusX+spm2KxJu/qgCtVh5Z9zLtNCF0UcXW02RGXUCllMYLp4
7cEkcG3TWw+5kwLEESpVbJAAtWo4QrF02sdCbfOMVkau8yIr4puOItyOyk15cCZQ
AeZ+A3fChHkontd7XU7g0vqRBXvM7pt299A58b5h9Lib6/8uUlNoAz1OdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARVrAu5leOZ6LLiN6xIYpc+J5i/MB8GA1UdIwQY
MBaAFJOCiH4ZBJMvEYbCwxxqkv9exkOHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazRLSWZoa0VreThSaHNMREhHcVNfMTdHUTRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZjkwZWItMTVjOC00MGQ4LWEyMjAt
NWM5NDU0NjhjNDc1LzEvazRLSWZoa0VreThSaHNMREhHcVNfMTdHUTRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iZjkwZWItMTVjOC00MGQ4LWEyMjAtNWM5NDU0NjhjNDc1
LzEvazRLSWZoa0VreThSaHNMREhHcVNfMTdHUTRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWH75c9gf
3oqOrBJLt8gYPRzFw1pTqE3PW0tTC5yFpykahk4wHGdQoZcE0J0unwm1bOxktXKB
ZlGK/mdrfFF14DOsD+S0iiFFHDQAI3lSMfuJGngoJ0KeABFbGdbMI8XlYmBT3Hkv
Hu4/bYwjODrraSUFJ3HrH52H+JjJk5NZLqrLdohjIR/8AYnjJ98TUJW59r7ZKSA3
hxEk9IE0ggpLfqbNM4GWoUxkeYuLhZBRGzpFKKgk+oCG+K9pxeAarf7wmnpB9xIE
TUMxIXQKorVjKDCA2g3PmTHWNQEv2WR0pRSzlW+zHo9wHNPqe2Ty9udjN6Ri6l/B
8X2gs7qN64ev2A==
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:49:15 2025 by rpki-client