Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
File: KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft (raw, json)
Hash identifier: P0hPfDidTqJgyBhThvtGmVB1GkvrZyRewV4+90J60b0=
Subject key identifier: 36:ED:7A:56:AE:F2:15:79:FE:8A:6F:D1:08:76:3D:79:10:C7:80:09
Authority key identifier: 28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74
Certificate issuer: /CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74
Certificate serial: 01965538ADF8F628FC41CD1CB5D3FEB94A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
Manifest number: 077B
Signing time: Sun 20 Apr 2025 22:01:40 +0000
Manifest this update: Sun 20 Apr 2025 22:01:40 +0000
Manifest next update: Mon 21 Apr 2025 22:01:40 +0000
Files and hashes: 1: Ep5Q_paEMkoQ8JMNVQev_VtcdmY.roa (hash: Bu1EiGDnBTDp8uoDAPAoyCI9ib5FJjnia2bO4NVERCs=)
2: KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl (hash: uzRKKmOOOOPhlA3PhKHRgDCe40Orrh4mXN3v1H7L+3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:ad:f8:f6:28:fc:41:cd:1c:b5:d3:fe:b9:4a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74
Validity
Not Before: Apr 20 22:01:40 2025 GMT
Not After : Apr 21 22:01:40 2025 GMT
Subject: CN=36ed7a56aef21579fe8a6fd108763d7910c78009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ed:3d:45:02:7e:be:36:9e:f5:d3:d2:35:f7:
3d:0b:74:d5:22:41:85:54:ae:32:c9:75:0b:71:61:
6b:2b:0d:ba:3c:d3:dd:a1:ed:34:14:ba:3f:7a:fe:
b6:ea:d7:b6:ae:df:dc:44:f6:cb:44:d0:05:02:c0:
73:7b:ad:f7:58:52:c1:0e:02:ed:04:c5:b3:1f:a0:
e0:fe:63:3d:be:ca:21:97:76:52:ba:21:33:f9:3e:
30:bd:f6:6a:2f:a8:65:b8:68:40:f4:1f:6e:49:9e:
ca:01:b2:3c:05:d0:6e:e8:30:4d:2d:5d:67:b4:47:
41:e1:7f:27:31:27:c5:ca:94:3c:cf:ea:86:36:7c:
d6:55:29:2f:fa:2d:5f:d3:e7:bc:ba:97:9c:ff:c0:
f0:54:76:51:15:2b:f2:cd:3c:51:08:22:3b:46:76:
65:da:d5:6f:66:22:43:37:97:9a:14:46:75:22:88:
71:93:44:7f:26:eb:79:6c:a5:4b:0a:7a:e1:b2:21:
17:1b:c3:d6:1b:ab:e4:52:32:5d:bd:0c:78:c8:52:
b3:44:c1:b2:19:70:fd:58:bb:7b:50:2a:2a:27:35:
db:7d:db:86:cd:83:04:e7:c4:0a:ab:dc:b7:a8:a4:
b8:3e:a7:89:36:80:35:8c:fc:57:83:8f:e8:c7:cc:
c0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:ED:7A:56:AE:F2:15:79:FE:8A:6F:D1:08:76:3D:79:10:C7:80:09
X509v3 Authority Key Identifier:
keyid:28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e5:b9:91:50:84:d5:3c:cd:b7:8c:88:78:28:eb:ee:93:38:
a3:db:e2:67:fa:b8:1d:fd:12:7a:bb:ff:0b:c0:26:85:5f:48:
02:a4:b7:3a:c6:79:81:6f:3a:87:4d:08:c3:6d:dd:8c:f3:64:
cf:79:38:8b:3f:4b:0a:9d:83:2a:b5:72:05:38:12:ee:4d:80:
98:2d:13:b1:8c:b2:68:fb:dc:44:ac:11:bd:4a:26:dd:dc:67:
9c:cb:84:77:25:35:b3:eb:f2:0b:05:9c:09:8f:e8:14:7b:51:
64:eb:d3:94:9d:86:03:3f:e2:d8:5d:12:c9:8d:77:58:b5:19:
ca:6e:b0:e9:aa:6d:e5:ca:d9:e4:08:5c:3d:50:79:56:84:ff:
1a:b1:4f:dc:cd:36:66:cd:32:e1:d0:01:a3:b9:5f:13:03:e5:
09:ae:66:b4:64:79:a6:9e:20:12:52:85:89:2a:64:83:1f:2f:
13:32:8b:8a:2b:d6:16:93:65:db:bd:e6:f7:31:3f:7d:3d:ff:
60:a0:a3:9e:47:7d:f2:ca:67:f0:3e:8d:2d:bc:3b:42:54:ec:
aa:e0:8b:e8:a2:b3:b3:9e:b9:30:8b:b0:b1:f8:cd:a4:d2:f4:
b6:f0:cc:eb:5a:e0:33:d5:39:43:33:74:e5:26:c9:1c:b4:40:
f0:c4:b9:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVOK349ij8Qc0ctdP+uUpjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MjAzZGVjZDA4YmQ0N2Q4YTkxNjJhNmUxNzQyZjNjNTNl
YTNjNzQwHhcNMjUwNDIwMjIwMTQwWhcNMjUwNDIxMjIwMTQwWjAzMTEwLwYDVQQD
EygzNmVkN2E1NmFlZjIxNTc5ZmU4YTZmZDEwODc2M2Q3OTEwYzc4MDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7O09RQJ+vjae9dPSNfc9C3TVIkGF
VK4yyXULcWFrKw26PNPdoe00FLo/ev626te2rt/cRPbLRNAFAsBze633WFLBDgLt
BMWzH6Dg/mM9vsohl3ZSuiEz+T4wvfZqL6hluGhA9B9uSZ7KAbI8BdBu6DBNLV1n
tEdB4X8nMSfFypQ8z+qGNnzWVSkv+i1f0+e8upec/8DwVHZRFSvyzTxRCCI7RnZl
2tVvZiJDN5eaFEZ1Iohxk0R/Jut5bKVLCnrhsiEXG8PWG6vkUjJdvQx4yFKzRMGy
GXD9WLt7UCoqJzXbfduGzYME58QKq9y3qKS4PqeJNoA1jPxXg4/ox8zAhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbtelau8hV5/opv0Qh2PXkQx4AJMB8GA1UdIwQY
MBaAFCggPezQi9R9ipFipuF0LzxT6jx0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0NBOTdOQ0wxSDJLa1dLbTRYUXZQRlBxUEhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jOTBhMzQtMGFmZC00OWI5LWJiZDYt
YTI5N2MxNDA4MDg1LzEvS0NBOTdOQ0wxSDJLa1dLbTRYUXZQRlBxUEhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jOTBhMzQtMGFmZC00OWI5LWJiZDYtYTI5N2MxNDA4MDg1
LzEvS0NBOTdOQ0wxSDJLa1dLbTRYUXZQRlBxUEhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALeW5kVCE
1TzNt4yIeCjr7pM4o9viZ/q4Hf0Serv/C8AmhV9IAqS3OsZ5gW86h00Iw23djPNk
z3k4iz9LCp2DKrVyBTgS7k2AmC0TsYyyaPvcRKwRvUom3dxnnMuEdyU1s+vyCwWc
CY/oFHtRZOvTlJ2GAz/i2F0SyY13WLUZym6w6apt5crZ5AhcPVB5VoT/GrFP3M02
Zs0y4dABo7lfEwPlCa5mtGR5pp4gElKFiSpkgx8vEzKLiivWFpNl273m9zE/fT3/
YKCjnkd98spn8D6NLbw7QlTsquCL6KKzs565MIuwsfjNpNL0tvDM61rgM9U5QzN0
5SbJHLRA8MS5vQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:09 2025 by rpki-client