Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
File: KXnMQ8JGn_pc-LesY5sB86dorFU.mft (raw, json)
Hash identifier: H+kl23iRYI3u8bB84Siog7AD2pFbo0m044EKXXfxaLo=
Subject key identifier: BD:17:C4:75:C5:42:0E:B2:F2:0E:29:1D:98:D5:DD:F1:B5:AC:2A:5C
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 01962F3DBB3FB14422F358278552BC9DBA44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
Manifest number: 068A
Signing time: Sun 13 Apr 2025 13:01:36 +0000
Manifest this update: Sun 13 Apr 2025 13:01:36 +0000
Manifest next update: Mon 14 Apr 2025 13:01:36 +0000
Files and hashes: 1: EI7dYlJh6LhMXB8o9nb3T4Z5aSU.roa (hash: MmSw3Gp5lTTxkK0eiPx+eF3FQfljG+ipyig54PF6DUw=)
2: KXnMQ8JGn_pc-LesY5sB86dorFU.crl (hash: i+eu2sUiHaEZV0V54TkSNEtrvge38P+3AGl1Ckz6sMc=)
3: RnDsNDAUOmfocBcXgLTcHPDDhKQ.roa (hash: yyfreslJl3l+RdMxXIwzsT6k7E7HMN8jhFZGTbEdlJI=)
4: Y8zzieez_mdBu3g9ytJW3F1qtcM.roa (hash: IBQYnJmIJpRbjM/GjJNvEs/gT4e0NBRUv4AwTGSAB8I=)
5: _eEka1D2F9svheD7_1S50A6jg0c.roa (hash: FY3lzS47CrifHw8hxi2Yq9gCSugm8bX/KQaXGUUplkU=)
6: jTf4hu8p-YdeMkBcAMreST3RURY.roa (hash: IZtRwQReOQuA1Z4S5nLNVFRKIJVo5gpQ/QND37UUm9g=)
7: qV0bi1f4xUUogQC2jTvfOlCFNsY.roa (hash: JeZIDT/pHiJyZCYpNCof5wbSJ0INX3sJ+QZbs083uM0=)
8: tW9K0gmr3gNJNZi6H4Oj8e3Jn10.roa (hash: bWzKXJxMql9A44/Gmu3Ld5HFcp9B6Ivj+R3Ym/3BJEA=)
9: ueIl5HLpFqn43HBQc7-Q4ZVn06k.roa (hash: fzhg7jHCYT5oIQ824HH1vwjcqcxosVhT8YpZmbw8K50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:3d:bb:3f:b1:44:22:f3:58:27:85:52:bc:9d:ba:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Apr 13 13:01:36 2025 GMT
Not After : Apr 14 13:01:36 2025 GMT
Subject: CN=bd17c475c5420eb2f20e291d98d5ddf1b5ac2a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:20:74:81:1c:e3:c8:30:66:72:3c:31:f4:85:
f8:e9:a4:69:c8:a9:14:2e:ff:3b:29:55:d0:3c:3f:
eb:6a:4b:0b:80:fc:61:38:65:7d:04:41:4a:15:ee:
23:65:d3:fa:fa:d5:30:4d:e7:bd:f3:7c:a3:f4:80:
a5:88:7a:9b:d8:6f:a3:bd:84:e9:e3:34:b3:72:68:
59:12:5a:29:17:c6:0f:c1:d1:bc:8e:97:4e:3b:2b:
8e:33:ee:3b:7a:44:0d:77:fb:96:1a:10:36:c4:52:
99:6f:7d:48:18:5d:8a:7b:af:c0:5f:2a:08:5e:56:
0b:86:8c:39:a2:c8:d9:ff:9b:f8:6c:5a:e0:0e:9f:
c7:56:74:66:b6:6b:d5:94:0b:a7:80:58:62:96:61:
c1:1d:8b:f4:bf:71:da:c1:df:13:4d:9a:6e:45:13:
3d:eb:4e:38:d4:59:76:e9:88:57:9f:c1:9b:35:58:
f0:38:8b:7e:d0:27:05:2c:4e:4a:90:8a:5e:1e:f6:
b0:1d:ac:90:b1:fe:4e:77:84:e8:6f:ba:1f:22:69:
38:4c:bf:ef:95:d3:5d:ba:ca:08:17:0e:62:dc:ea:
4c:9d:9f:ba:ad:3b:4d:eb:12:cb:6a:4e:5a:eb:fa:
73:87:9c:78:70:90:0c:61:d1:b1:62:b1:57:bb:3f:
47:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:17:C4:75:C5:42:0E:B2:F2:0E:29:1D:98:D5:DD:F1:B5:AC:2A:5C
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:d9:a6:58:60:7c:88:6e:17:c3:1c:67:6d:c5:34:e3:0d:1d:
b3:34:b9:86:7a:d9:a3:c1:cf:60:7c:94:5a:38:87:b4:ba:03:
99:fb:81:e7:fa:94:a5:cf:cc:8d:99:5e:0d:c2:d1:2b:b1:e4:
29:31:39:1c:af:3b:08:b9:c8:66:59:9d:23:15:f6:26:6c:d6:
1f:89:91:4d:57:10:8c:d5:57:c6:a1:cf:40:5a:46:74:02:06:
48:5d:ad:32:7c:a0:06:47:31:8a:d3:60:c1:e0:b0:8d:cf:02:
17:c0:a7:52:5a:13:49:a4:cc:2f:02:26:57:7c:ec:27:47:80:
8a:ba:34:05:3c:18:83:84:f3:b3:67:17:8d:77:41:72:72:5b:
cf:00:f0:b9:6e:2c:ec:8f:dd:06:1a:e8:a1:20:ed:1d:9a:8e:
bc:4e:45:75:6d:13:d1:d3:df:e4:c1:f5:25:4b:ab:c8:24:83:
9a:f6:7f:26:e7:96:2b:d0:69:4a:d3:8b:b3:70:58:f0:78:87:
d7:79:b9:bf:c6:52:7d:58:97:fc:c9:2d:5e:b3:aa:83:8f:2f:
f9:72:80:fa:57:4d:ae:0d:9f:f0:31:a0:2d:24:8d:aa:25:eb:
ce:0f:ac:67:ba:2a:8a:84:a3:e1:38:38:eb:fa:6f:d8:21:a7:
8f:71:9b:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPbs/sUQi81gnhVK8nbpEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NzljYzQzYzI0NjlmZmE1Y2Y4YjdhYzYzOWIwMWYzYTc2
OGFjNTUwHhcNMjUwNDEzMTMwMTM2WhcNMjUwNDE0MTMwMTM2WjAzMTEwLwYDVQQD
EyhiZDE3YzQ3NWM1NDIwZWIyZjIwZTI5MWQ5OGQ1ZGRmMWI1YWMyYTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SB0gRzjyDBmcjwx9IX46aRpyKkU
Lv87KVXQPD/raksLgPxhOGV9BEFKFe4jZdP6+tUwTee983yj9ICliHqb2G+jvYTp
4zSzcmhZElopF8YPwdG8jpdOOyuOM+47ekQNd/uWGhA2xFKZb31IGF2Ke6/AXyoI
XlYLhow5osjZ/5v4bFrgDp/HVnRmtmvVlAungFhilmHBHYv0v3Hawd8TTZpuRRM9
60441Fl26YhXn8GbNVjwOIt+0CcFLE5KkIpeHvawHayQsf5Od4Tob7ofImk4TL/v
ldNdusoIFw5i3OpMnZ+6rTtN6xLLak5a6/pzh5x4cJAMYdGxYrFXuz9HUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0XxHXFQg6y8g4pHZjV3fG1rCpcMB8GA1UdIwQY
MBaAFCl5zEPCRp/6XPi3rGObAfOnaKxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQt
NDBlYWViYzFjNDdlLzEvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQtNDBlYWViYzFjNDdl
LzEvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0tmmWGB8
iG4XwxxnbcU04w0dszS5hnrZo8HPYHyUWjiHtLoDmfuB5/qUpc/MjZleDcLRK7Hk
KTE5HK87CLnIZlmdIxX2JmzWH4mRTVcQjNVXxqHPQFpGdAIGSF2tMnygBkcxitNg
weCwjc8CF8CnUloTSaTMLwImV3zsJ0eAiro0BTwYg4Tzs2cXjXdBcnJbzwDwuW4s
7I/dBhrooSDtHZqOvE5FdW0T0dPf5MH1JUuryCSDmvZ/JueWK9BpStOLs3BY8HiH
13m5v8ZSfViX/MktXrOqg48v+XKA+ldNrg2f8DGgLSSNqiXrzg+sZ7oqioSj4Tg4
6/pv2CGnj3Gb2Q==
-----END CERTIFICATE-----
Generated at Sun Apr 13 22:43:59 2025 by rpki-client