Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
File: K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft (raw, json)
Hash identifier: z+9nLZMZeIctI5fLWckilWqQ6tHf2Eis3YAlFhSZmyc=
Subject key identifier: D9:33:60:2E:62:E9:36:8C:02:8D:1D:43:EE:52:3E:BE:DE:89:7B:AF
Authority key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
Certificate issuer: /CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Certificate serial: 0196575CEC6DB6C95D79B56A346EC7FBF88E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
Manifest number: 0170
Signing time: Mon 21 Apr 2025 08:00:29 +0000
Manifest this update: Mon 21 Apr 2025 08:00:29 +0000
Manifest next update: Tue 22 Apr 2025 08:00:29 +0000
Files and hashes: 1: K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl (hash: GXB7XgWXoz/hlIXPxxrkjrH1jYo9xO8gnlQuMCFl3gQ=)
2: cRNU9mqjTuLyrs64AbQG-Q8lS_M.roa (hash: gATqx8bTowXwaPkDc2Os+EOXUJAixbB51eSVdjtnNog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:ec:6d:b6:c9:5d:79:b5:6a:34:6e:c7:fb:f8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Validity
Not Before: Apr 21 08:00:29 2025 GMT
Not After : Apr 22 08:00:29 2025 GMT
Subject: CN=d933602e62e9368c028d1d43ee523ebede897baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b2:94:5d:77:58:42:a4:55:e4:2a:2e:d2:b7:
bf:46:62:fa:34:00:72:0a:e5:0f:58:fb:7b:7d:ca:
dc:f4:99:4b:7a:8d:96:bc:e2:96:49:00:ac:0c:83:
1b:0a:25:b1:86:84:6c:dd:70:70:29:fb:c8:48:fb:
7e:a3:fd:7c:68:cf:d2:21:55:95:5f:d0:fb:80:c1:
ab:57:de:df:cd:88:5e:77:e4:7c:de:b6:96:67:ea:
df:38:6b:7c:59:32:ec:a5:54:d6:b8:6b:76:29:7d:
44:9f:d0:1c:1a:be:10:26:3b:07:8d:f5:31:fe:b4:
74:11:7e:22:ee:29:7e:a0:a1:81:cf:d6:6d:8b:ef:
3f:8a:df:ce:3e:e2:16:5b:c2:e2:e8:4e:ce:fb:87:
72:1b:64:3d:d1:a5:2f:1f:ba:94:4b:5e:c6:9e:c2:
da:de:75:51:66:e6:1a:21:f9:1f:49:67:03:98:0a:
3a:1a:58:a4:80:55:9e:f1:2c:1f:20:2b:29:61:29:
8a:23:ea:84:58:5b:1f:8d:ab:5f:0e:6d:29:4c:28:
b0:53:e7:24:57:dc:44:a7:71:d9:0d:63:bf:c2:33:
fc:8a:68:1e:45:49:e0:9d:f0:1a:e3:42:7f:e6:13:
87:63:d7:b4:a4:6b:c3:c1:7d:21:67:7f:0d:f4:a6:
87:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:33:60:2E:62:E9:36:8C:02:8D:1D:43:EE:52:3E:BE:DE:89:7B:AF
X509v3 Authority Key Identifier:
keyid:2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:93:8d:7c:50:5d:c9:19:2f:e5:f5:cd:bd:0f:5c:f8:af:6b:
ff:80:72:16:ff:f2:a5:a2:48:ed:82:f6:bf:be:e3:20:6c:c7:
84:66:1e:78:9a:77:67:15:43:42:6a:81:2c:26:19:75:13:72:
f2:cd:26:57:cc:58:f0:1c:39:28:65:c8:42:f0:dd:17:73:52:
86:33:0f:94:81:2a:7f:87:31:a4:95:a7:4c:b2:33:c1:57:bd:
c2:19:cd:a6:41:7e:74:2d:0a:58:18:b2:e8:47:f2:9f:dc:26:
14:14:57:28:be:2b:b3:ce:6c:7a:4c:73:df:1a:57:d1:e8:c4:
03:30:b8:26:16:fc:85:99:a0:24:ec:79:3a:65:3a:fd:1c:fd:
37:16:06:9c:61:3a:f4:33:3c:1b:6d:a6:d1:43:f4:5b:fb:89:
2f:c2:16:c7:bc:25:62:54:41:02:16:5f:11:2e:5c:c8:c7:29:
0e:55:45:fb:7f:0b:16:c2:2e:b8:5a:8b:5b:8b:8e:2e:42:a9:
d8:2c:de:84:2c:b2:f9:b1:32:42:3d:e9:95:e3:46:1a:4b:c3:
dc:21:5e:ac:9f:08:09:6f:85:17:d0:3d:59:4b:66:5e:17:ff:
c9:10:b4:87:3d:e2:1a:23:d1:4e:93:d0:03:0e:7f:20:8c:19:
52:17:ff:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXXOxttsldebVqNG7H+/iOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNzhjZGNhMTYxNmMzYzZiNWYxOTFmYzMzYTkzNDc4OWIx
MmMwNjkwHhcNMjUwNDIxMDgwMDI5WhcNMjUwNDIyMDgwMDI5WjAzMTEwLwYDVQQD
EyhkOTMzNjAyZTYyZTkzNjhjMDI4ZDFkNDNlZTUyM2ViZWRlODk3YmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rKUXXdYQqRV5Cou0re/RmL6NABy
CuUPWPt7fcrc9JlLeo2WvOKWSQCsDIMbCiWxhoRs3XBwKfvISPt+o/18aM/SIVWV
X9D7gMGrV97fzYhed+R83raWZ+rfOGt8WTLspVTWuGt2KX1En9AcGr4QJjsHjfUx
/rR0EX4i7il+oKGBz9Zti+8/it/OPuIWW8Li6E7O+4dyG2Q90aUvH7qUS17GnsLa
3nVRZuYaIfkfSWcDmAo6GlikgFWe8SwfICspYSmKI+qEWFsfjatfDm0pTCiwU+ck
V9xEp3HZDWO/wjP8imgeRUngnfAa40J/5hOHY9e0pGvDwX0hZ38N9KaH3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkzYC5i6TaMAo0dQ+5SPr7eiXuvMB8GA1UdIwQY
MBaAFCt4zcoWFsPGtfGR/DOpNHibEsBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzNqTnloWVd3OGExOFpIOE02azBlSnNTd0drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lN2M0OWMtYjZkMC00NWRlLWJmYmEt
M2VhYTAzNGE4OTc4LzEvSzNqTnloWVd3OGExOFpIOE02azBlSnNTd0drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9lN2M0OWMtYjZkMC00NWRlLWJmYmEtM2VhYTAzNGE4OTc4
LzEvSzNqTnloWVd3OGExOFpIOE02azBlSnNTd0drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpONfFBd
yRkv5fXNvQ9c+K9r/4ByFv/ypaJI7YL2v77jIGzHhGYeeJp3ZxVDQmqBLCYZdRNy
8s0mV8xY8Bw5KGXIQvDdF3NShjMPlIEqf4cxpJWnTLIzwVe9whnNpkF+dC0KWBiy
6Efyn9wmFBRXKL4rs85sekxz3xpX0ejEAzC4Jhb8hZmgJOx5OmU6/Rz9NxYGnGE6
9DM8G22m0UP0W/uJL8IWx7wlYlRBAhZfES5cyMcpDlVF+38LFsIuuFqLW4uOLkKp
2CzehCyy+bEyQj3pleNGGkvD3CFerJ8ICW+FF9A9WUtmXhf/yRC0hz3iGiPRTpPQ
Aw5/IIwZUhf/Cw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:54 2025 by rpki-client