Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
File: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft (raw, json)
Hash identifier: hpjzne2iwxaHP7/QRrWuOkEdjFiEfOHJVmEnn/7PqyM=
Subject key identifier: 3F:59:AB:1D:92:58:26:96:C9:F7:68:4A:73:98:EE:47:68:DB:69:79
Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
Certificate issuer: /CN=91c2c2912e10581587052a5ca770910b26174f14
Certificate serial: 01960F7BAE738B9E862F5361195FF71D815F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
Manifest number: 14DC
Signing time: Mon 07 Apr 2025 09:01:25 +0000
Manifest this update: Mon 07 Apr 2025 09:01:25 +0000
Manifest next update: Tue 08 Apr 2025 09:01:25 +0000
Files and hashes: 1: eIT32ZmD_Fr9lQPFnUP-_HGQsmc.roa (hash: IgyAOYuvEIPEY/4VEwvCRv4xZp0QVNPeSnZmgWxYe1k=)
2: hSwwAZmeTaolcY9O9J-gjnCspyc.roa (hash: GT5DIH9LX8Y0Myj2ZdVG14Q8npex7JbrhTK4BHXYqYY=)
3: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl (hash: HpyfFLjMY+ewO+iIZTPKyprmmwdMXPtqmwQ4RH7x1yE=)
4: rPhc70wdg_DNFy8p_DFC0TNrzZE.roa (hash: izXtXZXXy5nvEOdPnUDtBt7NCMNBYID7xzPo2/E3HvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:7b:ae:73:8b:9e:86:2f:53:61:19:5f:f7:1d:81:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14
Validity
Not Before: Apr 7 09:01:25 2025 GMT
Not After : Apr 8 09:01:25 2025 GMT
Subject: CN=3f59ab1d92582696c9f7684a7398ee4768db6979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:77:e1:e0:54:b9:00:e6:64:7c:45:36:a5:e4:
85:e6:78:42:cf:dc:2b:a4:a8:21:3c:10:c9:6d:27:
64:47:e0:61:0c:55:65:73:78:ac:40:37:5d:8e:f4:
62:0a:1f:cb:b7:af:20:3b:66:92:99:f5:f3:3f:91:
5f:ad:8d:bc:ad:1d:16:65:fb:b8:78:dd:51:1d:fa:
9b:10:6f:5b:c9:67:85:a8:63:84:25:47:ce:0d:70:
ce:53:04:40:ff:54:c4:d5:e2:06:ee:ef:86:c0:b1:
db:70:ab:cb:ad:20:44:3a:ab:ad:db:61:c3:2f:e6:
6d:a4:cc:3c:ae:17:f5:2a:da:0c:45:eb:f7:8f:f2:
77:5e:c2:f7:2e:b0:6b:b5:c8:f3:a4:22:ae:2e:01:
4e:90:37:68:6e:fb:92:bd:5a:f3:eb:f6:c8:6d:2a:
00:dd:32:bc:0e:be:5c:15:70:78:51:d8:6c:02:46:
5b:3a:2f:c4:1f:87:64:9f:b3:fb:98:cb:c3:fd:e3:
17:82:66:08:63:86:0a:e0:37:58:4e:72:8a:aa:4d:
d7:fe:45:24:76:a7:dc:09:69:fb:0a:3e:45:9d:36:
70:b0:cf:72:ac:21:31:f0:dc:a8:e0:10:61:f4:00:
69:e2:40:ba:40:54:9b:20:22:86:d9:d8:79:9b:db:
d1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:59:AB:1D:92:58:26:96:C9:F7:68:4A:73:98:EE:47:68:DB:69:79
X509v3 Authority Key Identifier:
keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c7:96:05:7a:81:e4:f4:d9:b3:fe:f3:8f:bf:a3:2d:c7:0c:
f3:e1:9e:26:f1:3a:04:df:2c:8b:b5:bc:f5:0f:f1:39:3f:2f:
ee:40:1c:93:19:9e:c5:06:b9:0b:c8:6c:7a:80:e5:36:fb:50:
b4:31:78:ff:35:f0:d0:47:c2:df:19:8b:78:03:bb:d7:b0:5d:
f2:f1:1a:35:24:32:18:0d:16:bd:46:4e:93:4f:fd:31:22:f6:
a1:33:95:07:9b:f5:64:bf:3b:0c:1c:37:3b:20:61:7c:ab:77:
f1:8d:b4:eb:82:27:b8:e0:f4:29:db:5f:7f:89:a4:d6:ed:0e:
33:71:c4:42:0b:18:de:c7:53:7a:b6:f3:3f:03:86:85:8a:25:
6e:cd:e5:4f:c2:b5:99:65:3d:67:3e:65:29:47:c0:1f:92:b3:
bc:12:d8:f6:42:12:90:22:ab:32:7a:f5:fa:a3:8f:17:ed:39:
f5:67:15:0b:38:86:ad:8a:37:e4:89:af:f8:4a:7c:1b:4f:59:
ba:18:5b:0b:17:f2:38:05:09:8a:a9:ab:a5:f4:93:b6:52:e6:
34:a5:63:e9:58:0c:29:7a:4b:c4:af:cb:68:dc:06:50:7b:11:
52:d3:00:58:aa:07:ce:91:8c:a0:61:b4:a8:4a:e2:4d:e3:6a:
3a:5c:58:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYPe65zi56GL1NhGV/3HYFfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYzJjMjkxMmUxMDU4MTU4NzA1MmE1Y2E3NzA5MTBiMjYx
NzRmMTQwHhcNMjUwNDA3MDkwMTI1WhcNMjUwNDA4MDkwMTI1WjAzMTEwLwYDVQQD
EygzZjU5YWIxZDkyNTgyNjk2YzlmNzY4NGE3Mzk4ZWU0NzY4ZGI2OTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3fh4FS5AOZkfEU2peSF5nhCz9wr
pKghPBDJbSdkR+BhDFVlc3isQDddjvRiCh/Lt68gO2aSmfXzP5FfrY28rR0WZfu4
eN1RHfqbEG9byWeFqGOEJUfODXDOUwRA/1TE1eIG7u+GwLHbcKvLrSBEOqut22HD
L+ZtpMw8rhf1KtoMRev3j/J3XsL3LrBrtcjzpCKuLgFOkDdobvuSvVrz6/bIbSoA
3TK8Dr5cFXB4UdhsAkZbOi/EH4dkn7P7mMvD/eMXgmYIY4YK4DdYTnKKqk3X/kUk
dqfcCWn7Cj5FnTZwsM9yrCEx8Nyo4BBh9ABp4kC6QFSbICKG2dh5m9vR7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9Zqx2SWCaWyfdoSnOY7kdo22l5MB8GA1UdIwQY
MBaAFJHCwpEuEFgVhwUqXKdwkQsmF08UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iMzBiNTctZTdlOS00YjJmLTk5YjYt
OTBmOTdmNzQ2Njc2LzEva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9iMzBiNTctZTdlOS00YjJmLTk5YjYtOTBmOTdmNzQ2Njc2
LzEva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr8eWBXqB
5PTZs/7zj7+jLccM8+GeJvE6BN8si7W89Q/xOT8v7kAckxmexQa5C8hseoDlNvtQ
tDF4/zXw0EfC3xmLeAO717Bd8vEaNSQyGA0WvUZOk0/9MSL2oTOVB5v1ZL87DBw3
OyBhfKt38Y2064InuOD0Kdtff4mk1u0OM3HEQgsY3sdTerbzPwOGhYolbs3lT8K1
mWU9Zz5lKUfAH5KzvBLY9kISkCKrMnr1+qOPF+059WcVCziGrYo35Imv+Ep8G09Z
uhhbCxfyOAUJiqmrpfSTtlLmNKVj6VgMKXpLxK/LaNwGUHsRUtMAWKoHzpGMoGG0
qEriTeNqOlxYag==
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:13:44 2025 by rpki-client