Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File: k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier: viGv7HX9ByB5XXY7TmG1lH4apWTKXcPu+2bbMl40TLk=
Subject key identifier: 09:80:77:1A:CB:55:BB:CB:60:20:D2:BA:E7:D4:77:5E:28:71:02:28
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial: 019652A4FD53CD916B93E39B6E423CBBD985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 10:01:06 +0000
Manifest this update: Sun 20 Apr 2025 10:01:06 +0000
Manifest next update: Mon 21 Apr 2025 10:01:06 +0000
Files and hashes: 1: GhpTpgW64tSFuaS0pbKl89opsq8.roa (hash: 2Wron93LANvS77WOvmwaTogfUqhlP0TlDWCOGE4biV0=)
2: MmWKBqfpVBVRlUqZ8qclPZY1JgE.roa (hash: 5TORTeqJiwMyc0YYZ+uZpy4vEZ3dc7NK/jSlgDV+/8Q=)
3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: JW759vzu2hbrKxIvIM/xkXDx9BlI8xLe5HPofnvpDig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:fd:53:cd:91:6b:93:e3:9b:6e:42:3c:bb:d9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Validity
Not Before: Apr 20 10:01:06 2025 GMT
Not After : Apr 21 10:01:06 2025 GMT
Subject: CN=0980771acb55bbcb6020d2bae7d4775e28710228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:03:94:34:0d:a5:67:a0:9e:62:3b:52:76:
9b:57:3a:ce:59:f2:28:e8:b0:fb:fc:a8:85:08:29:
b7:53:3d:27:39:e9:4e:90:7a:0e:c7:0b:6a:ce:d2:
88:36:af:c2:fc:a8:95:19:cb:d1:5a:71:50:5b:a9:
e2:c3:e2:b0:7d:9d:27:77:c2:72:cd:05:26:27:3d:
6a:2d:6a:af:e5:9a:99:2f:cf:fb:8f:37:02:e6:c2:
5f:d1:2b:1a:50:e3:99:9b:5c:ed:67:be:de:f5:89:
c5:4c:20:ac:d2:79:3d:03:0a:f9:7e:66:e9:23:b1:
6b:43:15:72:b7:b3:c6:a0:b6:28:3b:81:b9:be:07:
e0:48:50:9a:b8:20:0e:f0:26:7a:2d:59:ad:ed:3c:
34:bd:c1:5a:8d:7f:de:39:f0:ee:15:b5:8f:08:6d:
9e:98:53:c3:40:09:b8:8a:0d:a9:24:6e:8e:06:e6:
5d:1d:35:a3:64:a9:85:7a:8c:6d:b0:8b:7d:c1:d2:
92:13:07:63:f7:fa:66:9a:ba:de:d9:47:53:6d:23:
d4:be:31:ae:0a:93:26:39:92:21:06:61:64:ea:4d:
50:38:54:77:63:9f:da:d9:62:50:85:97:4a:0c:af:
55:a9:d2:12:c8:6a:f3:39:4f:85:21:f5:4e:7a:f1:
20:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:80:77:1A:CB:55:BB:CB:60:20:D2:BA:E7:D4:77:5E:28:71:02:28
X509v3 Authority Key Identifier:
keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1b:f0:49:f9:78:1e:c9:a1:8b:a7:d7:39:71:4b:2c:64:16:
47:88:03:0b:0a:88:6e:ab:b3:1c:a1:59:95:cd:13:6e:c7:f6:
6b:8e:a7:f9:32:3d:f2:b3:46:fd:85:fb:d2:19:a3:ad:6c:ca:
8b:24:f6:92:2c:1a:98:c0:58:85:6f:51:75:7d:b8:e8:ae:9f:
40:c3:1e:e2:20:18:3d:7e:61:fe:b4:98:a5:0b:b9:90:6f:56:
cb:ca:2f:ec:0d:8d:32:bb:ff:91:2c:4a:63:9b:08:06:a1:99:
73:c8:11:b1:1d:2a:40:02:b2:7a:48:84:75:8c:07:6a:a9:28:
b5:9b:1a:50:33:09:3f:66:87:d8:a4:63:bf:28:34:e9:ef:84:
1e:b7:c5:1d:25:7c:68:b2:f9:31:bd:a4:41:a3:c5:fc:85:f8:
7e:c0:32:af:29:ce:0b:27:3f:a3:c9:66:be:a1:c7:22:8d:65:
75:28:f2:ac:f1:60:d7:e2:25:59:9b:d9:a8:94:be:5b:2e:67:
1b:29:b2:70:e2:92:ee:98:78:11:8c:bf:aa:3b:a0:b5:dd:f2:
4c:c2:0d:68:67:9a:f4:d4:ab:2f:f1:1c:39:52:c8:d2:e9:fb:
d9:38:89:dc:7a:27:ab:67:7f:f2:fb:51:1f:4b:3f:f0:43:f8:
3c:f4:73:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSpP1TzZFrk+ObbkI8u9mFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYjI5ODE5Nzg4ODU2OTZjZTFjMmJiZjRhZjk5ZGFkYzJj
NjE4ZWIwHhcNMjUwNDIwMTAwMTA2WhcNMjUwNDIxMTAwMTA2WjAzMTEwLwYDVQQD
EygwOTgwNzcxYWNiNTViYmNiNjAyMGQyYmFlN2Q0Nzc1ZTI4NzEwMjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7gDlDQNpWegnmI7UnabVzrOWfIo
6LD7/KiFCCm3Uz0nOelOkHoOxwtqztKINq/C/KiVGcvRWnFQW6niw+KwfZ0nd8Jy
zQUmJz1qLWqv5ZqZL8/7jzcC5sJf0SsaUOOZm1ztZ77e9YnFTCCs0nk9Awr5fmbp
I7FrQxVyt7PGoLYoO4G5vgfgSFCauCAO8CZ6LVmt7Tw0vcFajX/eOfDuFbWPCG2e
mFPDQAm4ig2pJG6OBuZdHTWjZKmFeoxtsIt9wdKSEwdj9/pmmrre2UdTbSPUvjGu
CpMmOZIhBmFk6k1QOFR3Y5/a2WJQhZdKDK9VqdISyGrzOU+FIfVOevEgFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmAdxrLVbvLYCDSuufUd14ocQIoMB8GA1UdIwQY
MBaAFJOymBl4iFaWzhwrv0r5na3CxhjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazdLWUdYaUlWcGJPSEN1X1N2bWRyY0xHR09zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83OTg2YTktNGU0Ni00YzMzLTkyYzkt
MzFjOTVlMmExZDZmLzEvazdLWUdYaUlWcGJPSEN1X1N2bWRyY0xHR09zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83OTg2YTktNGU0Ni00YzMzLTkyYzktMzFjOTVlMmExZDZm
LzEvazdLWUdYaUlWcGJPSEN1X1N2bWRyY0xHR09zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRvwSfl4
Hsmhi6fXOXFLLGQWR4gDCwqIbquzHKFZlc0Tbsf2a46n+TI98rNG/YX70hmjrWzK
iyT2kiwamMBYhW9RdX246K6fQMMe4iAYPX5h/rSYpQu5kG9Wy8ov7A2NMrv/kSxK
Y5sIBqGZc8gRsR0qQAKyekiEdYwHaqkotZsaUDMJP2aH2KRjvyg06e+EHrfFHSV8
aLL5Mb2kQaPF/IX4fsAyrynOCyc/o8lmvqHHIo1ldSjyrPFg1+IlWZvZqJS+Wy5n
GymycOKS7ph4EYy/qjugtd3yTMINaGea9NSrL/EcOVLI0un72TiJ3Honq2d/8vtR
H0s/8EP4PPRzHQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 17:36:45 2025 by rpki-client