Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
File: kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft (raw, json)
Hash identifier: KHErus5yD7Kg4DVZbebKa7v4V7QwdpA+oedmwwne7CA=
Subject key identifier: 72:D6:C5:17:DA:85:5E:F7:E2:71:1E:25:AA:7D:79:73:3E:4E:30:3C
Authority key identifier: 90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
Certificate issuer: /CN=901f648dce927fe41833f86d575160b0bc5130a2
Certificate serial: 01964AEB2084387E12235B656551B173D6E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
Manifest number: 018C
Signing time: Fri 18 Apr 2025 22:00:45 +0000
Manifest this update: Fri 18 Apr 2025 22:00:45 +0000
Manifest next update: Sat 19 Apr 2025 22:00:45 +0000
Files and hashes: 1: kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl (hash: t++DV9+XtRCOhYEklrP2rlNkYLgprNVBjokDBc90Vn4=)
2: zfxMRbf5mdjUMmv1wfh1AaOn2cM.roa (hash: jcUlXj90sAjd3pxsJhlKVr5rFOgIRX3LrqrBra0uGW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:eb:20:84:38:7e:12:23:5b:65:65:51:b1:73:d6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901f648dce927fe41833f86d575160b0bc5130a2
Validity
Not Before: Apr 18 22:00:45 2025 GMT
Not After : Apr 19 22:00:45 2025 GMT
Subject: CN=72d6c517da855ef7e2711e25aa7d79733e4e303c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:99:2a:c9:6d:5c:0d:c1:64:ea:05:5d:56:
d3:40:8f:d8:fd:ed:9a:5e:e9:0b:2c:d1:6f:2b:f4:
9d:d8:4a:5f:e4:2b:a4:81:70:03:bd:01:f5:5f:58:
e1:36:bc:a7:8d:4b:3f:b5:3e:26:21:c4:ec:c2:4b:
0d:9e:14:e6:e8:a0:f3:7a:a8:a2:7d:57:9c:27:46:
84:c5:dd:a4:4a:f6:73:91:93:59:18:b9:a5:5e:ca:
d8:ef:bf:cd:b2:27:54:13:9b:ca:2d:47:47:13:32:
59:9f:96:cf:3d:ac:66:7a:52:57:7e:1f:97:fc:8e:
05:ad:6c:e7:42:0d:30:f2:24:4a:df:04:c7:55:48:
10:73:81:1d:af:e8:16:0a:39:13:f1:85:02:79:0d:
b1:4d:5f:f8:36:86:64:05:a2:16:49:8e:6a:f4:91:
4f:e1:9d:ef:ef:6d:b6:ab:e1:de:41:5b:ad:5e:c7:
e8:77:44:aa:cc:e8:b1:e8:7e:25:65:47:09:82:10:
8d:14:e8:db:7b:6f:83:28:b8:7b:52:2c:06:56:23:
85:6a:f0:32:25:ca:cd:d7:64:64:e6:9d:e8:90:21:
b3:19:31:27:09:f8:9f:be:36:12:5f:db:65:cd:4f:
95:28:78:be:2e:87:62:bf:2d:2f:9a:5c:24:a0:a7:
08:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D6:C5:17:DA:85:5E:F7:E2:71:1E:25:AA:7D:79:73:3E:4E:30:3C
X509v3 Authority Key Identifier:
keyid:90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:5a:75:85:d5:f1:b9:b6:8b:a1:ea:ff:74:2c:d9:95:f6:bd:
0a:9c:58:62:ae:c0:e2:a2:8c:aa:19:db:5d:25:a2:6c:a7:0f:
bc:12:2d:a1:e3:c3:88:b5:66:04:a5:46:42:0a:7d:5b:c4:e8:
40:ac:82:0e:62:71:5a:5d:11:8c:3c:83:d5:ff:73:31:01:c8:
e5:92:4e:e2:f7:cf:8b:53:5d:52:77:d2:c7:3d:32:eb:42:0a:
7f:7c:05:70:4f:d3:35:90:ce:f4:b6:95:e8:2d:23:af:51:0c:
3a:ec:09:32:4a:bd:01:bc:65:72:1b:d0:11:87:77:ad:ad:a7:
69:a4:8d:b8:2e:f6:d0:af:90:0f:d0:58:f9:b2:94:a3:ad:3d:
69:8f:cf:95:7a:8d:44:f3:36:44:bf:e4:34:96:72:0a:2c:c0:
2a:df:bb:b7:50:68:b2:67:eb:56:f9:a0:d4:5b:45:b1:0e:d8:
6b:7d:83:8f:1d:bc:c5:d8:33:61:49:7c:a2:ad:c3:10:1e:9b:
dd:df:35:eb:d0:cc:d7:5e:f3:ad:ee:89:c7:63:00:19:9c:25:
4a:fb:63:33:d1:50:ea:84:f7:2d:78:6e:f8:ab:2d:fb:63:51:
09:ad:fb:55:b1:e4:5c:59:25:89:5e:60:e4:70:56:b9:d0:ff:
df:86:ed:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZK6yCEOH4SI1tlZVGxc9bkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwMWY2NDhkY2U5MjdmZTQxODMzZjg2ZDU3NTE2MGIwYmM1
MTMwYTIwHhcNMjUwNDE4MjIwMDQ1WhcNMjUwNDE5MjIwMDQ1WjAzMTEwLwYDVQQD
Eyg3MmQ2YzUxN2RhODU1ZWY3ZTI3MTFlMjVhYTdkNzk3MzNlNGUzMDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvSZKsltXA3BZOoFXVbTQI/Y/e2a
XukLLNFvK/Sd2Epf5CukgXADvQH1X1jhNrynjUs/tT4mIcTswksNnhTm6KDzeqii
fVecJ0aExd2kSvZzkZNZGLmlXsrY77/NsidUE5vKLUdHEzJZn5bPPaxmelJXfh+X
/I4FrWznQg0w8iRK3wTHVUgQc4Edr+gWCjkT8YUCeQ2xTV/4NoZkBaIWSY5q9JFP
4Z3v7222q+HeQVutXsfod0SqzOix6H4lZUcJghCNFOjbe2+DKLh7UiwGViOFavAy
JcrN12Rk5p3okCGzGTEnCfifvjYSX9tlzU+VKHi+Lodivy0vmlwkoKcIyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLWxRfahV734nEeJap9eXM+TjA8MB8GA1UdIwQY
MBaAFJAfZI3Okn/kGDP4bVdRYLC8UTCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0I5a2pjNlNmLVFZTV9odFYxRmdzTHhSTUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83M2MwODUtY2M0Mi00Y2MxLWExYWIt
NGMxM2M1ZTFlMWFhLzEva0I5a2pjNlNmLVFZTV9odFYxRmdzTHhSTUtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC83M2MwODUtY2M0Mi00Y2MxLWExYWItNGMxM2M1ZTFlMWFh
LzEva0I5a2pjNlNmLVFZTV9odFYxRmdzTHhSTUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFp1hdXx
ubaLoer/dCzZlfa9CpxYYq7A4qKMqhnbXSWibKcPvBItoePDiLVmBKVGQgp9W8To
QKyCDmJxWl0RjDyD1f9zMQHI5ZJO4vfPi1NdUnfSxz0y60IKf3wFcE/TNZDO9LaV
6C0jr1EMOuwJMkq9AbxlchvQEYd3ra2naaSNuC720K+QD9BY+bKUo609aY/PlXqN
RPM2RL/kNJZyCizAKt+7t1BosmfrVvmg1FtFsQ7Ya32Djx28xdgzYUl8oq3DEB6b
3d8169DM117zre6Jx2MAGZwlSvtjM9FQ6oT3LXhu+Kst+2NRCa37VbHkXFkliV5g
5HBWudD/34btmw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:23:21 2025 by rpki-client