Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
File: KPVnVJmD9DrdmYw26PeL0V9Fosw.mft (raw, json)
Hash identifier: bFR0nZ1v7Cyk9pR3S+YFKm855X3QCI7LJ4woArjYaJE=
Subject key identifier: F1:93:7A:BB:72:E0:86:1E:59:42:AC:18:71:3C:05:C7:B3:37:D8:7A
Authority key identifier: 28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
Certificate issuer: /CN=28f567549983f43add998c36e8f78bd15f45a2cc
Certificate serial: 0196556ED9BE85A84FBA67B45E0D7A20EC0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
Manifest number: 0B03
Signing time: Sun 20 Apr 2025 23:00:50 +0000
Manifest this update: Sun 20 Apr 2025 23:00:50 +0000
Manifest next update: Mon 21 Apr 2025 23:00:50 +0000
Files and hashes: 1: JQ4W3G2wBUo6PRPPv0dVzYu4y4w.roa (hash: JHM9O5mRc/9ugG6o1WcR1yYfnaT1Q2KD2tNJG5Hqsco=)
2: KPVnVJmD9DrdmYw26PeL0V9Fosw.crl (hash: ZQdtpqapyBo8Le+nYLRjdXLHSxR7GBdWsRAoIyIcB6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:d9:be:85:a8:4f:ba:67:b4:5e:0d:7a:20:ec:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f567549983f43add998c36e8f78bd15f45a2cc
Validity
Not Before: Apr 20 23:00:50 2025 GMT
Not After : Apr 21 23:00:50 2025 GMT
Subject: CN=f1937abb72e0861e5942ac18713c05c7b337d87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:09:79:b4:f8:e5:fd:7d:3d:2b:a5:eb:37:c9:
37:99:49:77:41:6c:41:3e:e9:f9:8e:d8:48:20:06:
02:8a:d0:e0:ed:0e:75:27:cc:e4:5c:e6:fa:1e:fd:
2a:3e:ea:70:be:d0:be:e7:ab:01:9b:02:1d:0c:54:
7d:e9:c4:9a:84:6d:72:e3:5b:e3:0b:8f:6b:40:7c:
e7:89:cc:44:79:f5:40:65:8f:5d:67:65:c0:f0:1a:
e0:d2:ac:ba:35:67:f6:6d:f7:b3:16:c9:af:56:a9:
6d:8f:6e:0a:9d:f6:10:39:16:9d:d5:93:39:af:94:
d7:b2:d9:ea:f5:81:ea:c2:f3:29:60:5b:1a:0d:57:
1b:24:fe:c9:5d:e6:65:b3:e1:ee:f0:e9:f4:1b:ce:
5e:30:eb:d3:5e:d8:8d:80:79:df:36:36:41:f4:30:
5c:df:71:65:ee:6c:f9:5a:0d:c8:f2:d6:40:af:81:
99:68:4d:77:b9:81:d3:40:fb:2c:59:e5:7f:16:53:
2e:da:22:e9:04:d1:b4:ec:cf:4b:9e:d2:87:c1:fb:
a6:8d:c2:14:c4:d1:2a:3b:e9:e8:e6:26:c6:68:39:
e7:93:64:b1:d3:94:f6:f1:4c:f6:9d:c0:cf:7e:65:
3c:53:1c:4d:9e:24:2b:14:39:6d:86:7e:53:8b:17:
1d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:93:7A:BB:72:E0:86:1E:59:42:AC:18:71:3C:05:C7:B3:37:D8:7A
X509v3 Authority Key Identifier:
keyid:28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:97:79:73:22:28:f4:85:2a:51:3e:a8:5a:59:b6:66:56:bf:
66:be:f8:6a:49:ed:98:d4:a9:52:0b:50:d7:22:7a:09:50:58:
8b:32:cd:40:13:93:21:cb:d2:ae:64:36:09:81:99:53:06:b3:
7d:d9:b8:01:f9:f0:35:ec:c5:9d:fc:ed:f3:3d:3d:67:63:2c:
88:38:9a:e7:64:2d:b5:a8:f6:b2:64:f1:b6:49:1b:94:70:49:
48:0d:15:5c:f4:b7:fa:0d:06:ab:07:13:ad:d2:c2:7e:7c:e6:
3b:96:f1:d4:31:cc:cc:00:1b:b9:d8:75:ec:2e:a9:a9:71:2f:
b7:aa:a2:8f:e3:ba:fd:b5:ec:65:13:cd:fc:19:e1:41:5d:68:
96:3f:27:f4:9e:6b:52:5f:e8:eb:c4:35:54:69:7e:97:01:f2:
4c:a7:05:49:12:82:39:ca:ef:a5:2b:2d:7d:34:4b:12:3c:de:
c1:50:00:a8:bb:fa:e7:91:f7:ba:23:41:fb:e8:f8:df:05:6b:
37:2b:80:5d:b7:7f:86:40:66:c0:ad:aa:bc:9c:1b:b0:b8:ee:
f7:cf:9f:7e:de:1b:90:dc:67:e3:5a:b6:d8:33:7c:11:b0:2b:
0c:1d:b5:87:cf:37:64:f0:3c:37:33:94:f3:8c:52:1c:d2:0f:
6f:85:51:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVbtm+hahPume0Xg16IOwMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZjU2NzU0OTk4M2Y0M2FkZDk5OGMzNmU4Zjc4YmQxNWY0
NWEyY2MwHhcNMjUwNDIwMjMwMDUwWhcNMjUwNDIxMjMwMDUwWjAzMTEwLwYDVQQD
EyhmMTkzN2FiYjcyZTA4NjFlNTk0MmFjMTg3MTNjMDVjN2IzMzdkODdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ql5tPjl/X09K6XrN8k3mUl3QWxB
Pun5jthIIAYCitDg7Q51J8zkXOb6Hv0qPupwvtC+56sBmwIdDFR96cSahG1y41vj
C49rQHznicxEefVAZY9dZ2XA8Brg0qy6NWf2bfezFsmvVqltj24KnfYQORad1ZM5
r5TXstnq9YHqwvMpYFsaDVcbJP7JXeZls+Hu8On0G85eMOvTXtiNgHnfNjZB9DBc
33Fl7mz5Wg3I8tZAr4GZaE13uYHTQPssWeV/FlMu2iLpBNG07M9LntKHwfumjcIU
xNEqO+no5ibGaDnnk2Sx05T28Uz2ncDPfmU8UxxNniQrFDlthn5TixcdsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGTerty4IYeWUKsGHE8BcezN9h6MB8GA1UdIwQY
MBaAFCj1Z1SZg/Q63ZmMNuj3i9FfRaLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1BWblZKbUQ5RHJkbVl3MjZQZUwwVjlGb3N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85Y2ZkOGUtMjNjZC00NDdhLTlkMmMt
ZDBiMTExYmE0MTQ4LzEvS1BWblZKbUQ5RHJkbVl3MjZQZUwwVjlGb3N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni85Y2ZkOGUtMjNjZC00NDdhLTlkMmMtZDBiMTExYmE0MTQ4
LzEvS1BWblZKbUQ5RHJkbVl3MjZQZUwwVjlGb3N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZd5cyIo
9IUqUT6oWlm2Zla/Zr74akntmNSpUgtQ1yJ6CVBYizLNQBOTIcvSrmQ2CYGZUwaz
fdm4AfnwNezFnfzt8z09Z2MsiDia52Qttaj2smTxtkkblHBJSA0VXPS3+g0GqwcT
rdLCfnzmO5bx1DHMzAAbudh17C6pqXEvt6qij+O6/bXsZRPN/BnhQV1olj8n9J5r
Ul/o68Q1VGl+lwHyTKcFSRKCOcrvpSstfTRLEjzewVAAqLv655H3uiNB++j43wVr
NyuAXbd/hkBmwK2qvJwbsLju98+fft4bkNxn41q22DN8EbArDB21h883ZPA8NzOU
84xSHNIPb4VRDg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:18 2025 by rpki-client