Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
File: K0bJzPf_e9zPg3dioOFXvcE1cOA.mft (raw, json)
Hash identifier: Ldz91pidVDadyVYSAcmYnEpWPpGjmLcmbWLFqHsKdyk=
Subject key identifier: CA:1A:A0:D5:A6:FA:01:03:E3:3C:86:F7:BB:1D:57:38:97:25:2D:6F
Authority key identifier: 2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
Certificate issuer: /CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Certificate serial: 019655A61E64F18F6084FBF36FF114E8B22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
Manifest number: 050F
Signing time: Mon 21 Apr 2025 00:01:12 +0000
Manifest this update: Mon 21 Apr 2025 00:01:12 +0000
Manifest next update: Tue 22 Apr 2025 00:01:12 +0000
Files and hashes: 1: K0bJzPf_e9zPg3dioOFXvcE1cOA.crl (hash: demy0IJUfZ9+OUOYgC1MSahUYb0zgsSdM7W6K+DVSr4=)
2: qLWefGaIQEsRkcA1tO3guUVq3OU.roa (hash: xslOk/6LQdIGFli9jwCBp6kVRfq8yxFvis0Kh4JP+fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:1e:64:f1:8f:60:84:fb:f3:6f:f1:14:e8:b2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Validity
Not Before: Apr 21 00:01:12 2025 GMT
Not After : Apr 22 00:01:12 2025 GMT
Subject: CN=ca1aa0d5a6fa0103e33c86f7bb1d573897252d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2f:f5:20:f3:ad:44:c8:56:7f:e8:af:29:06:
d7:5e:aa:7c:f5:0f:9a:6f:bc:93:a3:7e:a5:c9:8c:
3d:b7:20:fd:3f:73:01:fd:c3:b2:23:62:4a:15:59:
2a:c2:f4:f5:89:7c:f4:51:4b:10:d6:6c:18:f7:65:
b5:12:22:b0:d7:53:6c:2f:b6:13:2d:62:ce:90:49:
d5:f6:cd:de:99:93:3a:c6:f6:24:ad:c3:e6:09:df:
f3:33:82:a4:87:34:68:82:38:73:c4:10:cd:f2:68:
2d:03:2c:0d:57:ea:0d:5c:be:97:09:59:71:f0:e6:
f0:c1:ce:ae:50:12:33:8e:6f:03:a9:44:df:f4:29:
58:d1:ec:80:0f:7a:34:3a:a6:14:40:34:14:4d:0e:
98:56:93:b2:e9:f9:99:62:a5:2f:1f:b0:08:45:cb:
74:e8:31:d6:c8:03:13:77:ad:69:bc:17:ae:b0:0c:
ff:f5:7f:a1:4d:ed:64:4c:82:e7:ff:f1:d4:95:84:
53:df:67:f2:9e:2d:58:88:c1:cf:70:15:68:a1:28:
60:f0:d3:74:25:c1:98:10:b2:b7:94:90:39:8b:54:
a6:8f:37:aa:0c:55:27:4f:8c:1f:70:2a:6b:d8:b9:
95:17:4d:44:c3:fe:93:dc:55:86:99:13:c3:0e:f2:
ce:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1A:A0:D5:A6:FA:01:03:E3:3C:86:F7:BB:1D:57:38:97:25:2D:6F
X509v3 Authority Key Identifier:
keyid:2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:20:de:4e:2a:ca:21:cf:da:f9:4b:00:0f:7a:03:94:2c:45:
f5:2b:27:f8:10:ca:47:43:47:bd:e8:f3:94:f9:e0:3f:ff:6d:
f1:7b:bc:9c:50:ad:44:02:55:2d:e4:a4:8b:3e:28:ed:19:19:
8a:f2:74:2b:29:07:24:bd:9d:54:1a:f1:b8:69:4c:b0:4b:11:
50:ca:bc:da:be:f7:c1:cf:6e:35:fd:b6:f3:0b:de:ae:28:01:
7d:e3:95:62:ed:fa:60:20:cf:94:a2:37:38:3b:df:c1:0f:55:
ea:2a:b7:c4:9f:d8:0f:7c:58:0e:4e:e2:a8:fa:60:42:2d:84:
e5:8e:e0:21:39:77:58:03:0e:a3:7d:51:e2:e3:54:6a:0f:fa:
6b:45:5a:15:a6:61:5e:cf:bb:cd:83:b9:93:22:f8:15:82:68:
41:f7:3c:53:96:f4:01:eb:71:e3:17:d2:03:e8:5e:7e:e2:8b:
75:80:cf:c7:29:96:02:a8:88:32:ea:61:c5:ec:40:df:4d:79:
c8:91:20:75:6b:82:f7:c5:48:80:30:51:e1:6f:1f:b5:7d:4b:
bc:dd:b8:75:26:7f:d2:e2:3e:91:f0:33:fa:da:bb:30:33:b9:
5b:9c:20:62:e0:e3:a9:cb:1d:a3:a9:94:5f:33:24:0c:ad:a6:
15:76:41:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVph5k8Y9ghPvzb/EU6LIuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNDZjOWNjZjdmZjdiZGNjZjgzNzc2MmEwZTE1N2JkYzEz
NTcwZTAwHhcNMjUwNDIxMDAwMTEyWhcNMjUwNDIyMDAwMTEyWjAzMTEwLwYDVQQD
EyhjYTFhYTBkNWE2ZmEwMTAzZTMzYzg2ZjdiYjFkNTczODk3MjUyZDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC/1IPOtRMhWf+ivKQbXXqp89Q+a
b7yTo36lyYw9tyD9P3MB/cOyI2JKFVkqwvT1iXz0UUsQ1mwY92W1EiKw11NsL7YT
LWLOkEnV9s3emZM6xvYkrcPmCd/zM4KkhzRogjhzxBDN8mgtAywNV+oNXL6XCVlx
8Obwwc6uUBIzjm8DqUTf9ClY0eyAD3o0OqYUQDQUTQ6YVpOy6fmZYqUvH7AIRct0
6DHWyAMTd61pvBeusAz/9X+hTe1kTILn//HUlYRT32fyni1YiMHPcBVooShg8NN0
JcGYELK3lJA5i1SmjzeqDFUnT4wfcCpr2LmVF01Ew/6T3FWGmRPDDvLOwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoaoNWm+gED4zyG97sdVziXJS1vMB8GA1UdIwQY
MBaAFCtGycz3/3vcz4N3YqDhV73BNXDgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzBiSnpQZl9lOXpQZzNkaW9PRlh2Y0UxY09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zNGNjZmUtODBlNi00ZDk2LWI5Njgt
YzdhMmQ1ZjlmZDYwLzEvSzBiSnpQZl9lOXpQZzNkaW9PRlh2Y0UxY09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zNGNjZmUtODBlNi00ZDk2LWI5NjgtYzdhMmQ1ZjlmZDYw
LzEvSzBiSnpQZl9lOXpQZzNkaW9PRlh2Y0UxY09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyDeTirK
Ic/a+UsAD3oDlCxF9Ssn+BDKR0NHvejzlPngP/9t8Xu8nFCtRAJVLeSkiz4o7RkZ
ivJ0KykHJL2dVBrxuGlMsEsRUMq82r73wc9uNf228wverigBfeOVYu36YCDPlKI3
ODvfwQ9V6iq3xJ/YD3xYDk7iqPpgQi2E5Y7gITl3WAMOo31R4uNUag/6a0VaFaZh
Xs+7zYO5kyL4FYJoQfc8U5b0Aetx4xfSA+hefuKLdYDPxymWAqiIMuphxexA3015
yJEgdWuC98VIgDBR4W8ftX1LvN24dSZ/0uI+kfAz+tq7MDO5W5wgYuDjqcsdo6mU
XzMkDK2mFXZBIQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:16 2025 by rpki-client