Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
File: kGSznoDKHN5MrcC8jqK0HqbSfHY.mft (raw, json)
Hash identifier: 98z5RLrsYS3ZMg7/NshRu4FwD5BUx7L9coeFhUY5IxE=
Subject key identifier: 8A:5C:D6:D8:75:78:65:C6:03:CD:33:BC:FB:38:F9:22:35:0E:76:45
Authority key identifier: 90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
Certificate issuer: /CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Certificate serial: 01964C6B87D96AD8FE5F4BF0E27246169A46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 05:00:37 +0000
Manifest this update: Sat 19 Apr 2025 05:00:37 +0000
Manifest next update: Sun 20 Apr 2025 05:00:37 +0000
Files and hashes: 1: FKW3Mb8twN-jkMzdiCWs_x2VU-o.roa (hash: zIG0SkUcjt7d+bJLn+B2ubk7D8sMo7IcD8uDUAn5toQ=)
2: kGSznoDKHN5MrcC8jqK0HqbSfHY.crl (hash: HwwAjzXvDo53UnSWjHjDtieIBPJMmJ6v4C2Tj+gSJTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:87:d9:6a:d8:fe:5f:4b:f0:e2:72:46:16:9a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Validity
Not Before: Apr 19 05:00:37 2025 GMT
Not After : Apr 20 05:00:37 2025 GMT
Subject: CN=8a5cd6d8757865c603cd33bcfb38f922350e7645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:29:7b:4e:73:27:10:44:dd:e7:aa:f3:d5:
ca:d4:d5:73:49:78:19:e0:dc:19:90:48:79:fa:66:
5e:97:1e:8f:7c:c0:75:3a:4f:10:cf:0b:0f:d0:46:
b4:10:de:ca:67:a3:50:6f:65:fb:d6:39:31:9b:29:
84:b0:98:50:41:e6:e0:fd:75:6b:97:79:c3:12:ed:
f0:51:90:bd:46:2d:4a:a2:45:f6:49:f4:53:3b:23:
32:12:fc:df:8d:88:c1:1c:6a:d9:94:19:9c:ef:83:
95:ca:64:6a:cf:ed:e6:e2:12:6c:e8:0b:66:ee:b6:
19:80:9c:29:27:50:da:25:5a:8c:cd:e5:c1:48:52:
2a:9a:35:cc:ac:fc:22:a4:19:22:78:2b:61:ec:58:
ed:eb:36:66:db:fc:4f:b4:96:cc:a4:60:b0:de:35:
da:dd:79:6f:68:ab:74:d4:6a:e7:4f:3d:0d:35:9a:
71:31:74:d5:f7:46:4c:9e:7c:01:7c:e7:1d:b0:16:
3c:8d:a6:34:5e:b2:c6:2e:f3:52:d3:ab:4e:26:67:
7d:3b:6d:ac:24:56:1b:c8:f8:63:ff:1e:ed:92:4e:
07:9d:7c:79:a9:5f:fc:dc:78:9d:e2:08:de:0c:3c:
58:72:4d:aa:03:eb:9f:9b:75:8a:12:b3:4f:38:bf:
60:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5C:D6:D8:75:78:65:C6:03:CD:33:BC:FB:38:F9:22:35:0E:76:45
X509v3 Authority Key Identifier:
keyid:90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:52:be:73:48:c3:0c:bb:42:1c:7a:df:9c:e6:38:16:39:c7:
61:8c:45:79:60:07:bb:85:58:02:58:61:c6:dd:84:56:07:d4:
11:ca:b9:c1:57:b7:25:be:d3:c6:3e:e1:eb:18:ec:1f:5e:f0:
2c:7e:14:82:dd:05:f2:22:4d:4d:73:a1:30:49:3b:3d:18:89:
1f:e9:a6:b5:b7:6d:a0:ea:37:62:d0:64:f6:8a:f6:74:02:79:
3c:f8:71:a6:f0:c5:36:b8:0c:c5:07:5a:9b:81:ca:89:b0:fc:
88:03:e4:d2:25:ca:6a:61:09:c6:55:55:b6:b5:61:1a:fc:d8:
ee:1d:b6:67:3b:b5:83:c4:77:b0:f8:5e:f3:1d:43:70:cf:de:
66:c1:63:ff:bd:08:79:3b:93:be:2d:ad:31:6e:e0:cf:cc:d0:
14:2b:a8:c1:5a:b1:4d:b5:2b:ae:18:75:0f:67:c5:62:b8:e6:
2c:6d:2b:23:d6:fb:62:7d:ed:42:20:54:4c:62:99:e4:14:78:
83:f4:ac:cc:bc:13:2b:9a:d5:5b:b9:0c:32:7d:ed:45:52:79:
86:6f:21:37:04:1c:f1:55:a4:a9:13:c2:92:22:36:4d:fe:1b:
7e:84:23:60:94:b8:bd:ec:42:1e:73:ef:3e:e1:35:37:50:b1:
97:65:ba:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMa4fZatj+X0vw4nJGFppGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNjRiMzllODBjYTFjZGU0Y2FkYzBiYzhlYTJiNDFlYTZk
MjdjNzYwHhcNMjUwNDE5MDUwMDM3WhcNMjUwNDIwMDUwMDM3WjAzMTEwLwYDVQQD
Eyg4YTVjZDZkODc1Nzg2NWM2MDNjZDMzYmNmYjM4ZjkyMjM1MGU3NjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfEpe05zJxBE3eeq89XK1NVzSXgZ
4NwZkEh5+mZelx6PfMB1Ok8QzwsP0Ea0EN7KZ6NQb2X71jkxmymEsJhQQebg/XVr
l3nDEu3wUZC9Ri1KokX2SfRTOyMyEvzfjYjBHGrZlBmc74OVymRqz+3m4hJs6Atm
7rYZgJwpJ1DaJVqMzeXBSFIqmjXMrPwipBkieCth7Fjt6zZm2/xPtJbMpGCw3jXa
3XlvaKt01GrnTz0NNZpxMXTV90ZMnnwBfOcdsBY8jaY0XrLGLvNS06tOJmd9O22s
JFYbyPhj/x7tkk4HnXx5qV/83Hid4gjeDDxYck2qA+ufm3WKErNPOL9gmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpc1th1eGXGA80zvPs4+SI1DnZFMB8GA1UdIwQY
MBaAFJBks56AyhzeTK3AvI6itB6m0nx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0dTem5vREtITjVNcmNDOGpxSzBIcWJTZkhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9lNzcyM2QtZmU5Yi00Mjk0LWJmY2Et
M2RkYTIzY2JkZTU5LzEva0dTem5vREtITjVNcmNDOGpxSzBIcWJTZkhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9lNzcyM2QtZmU5Yi00Mjk0LWJmY2EtM2RkYTIzY2JkZTU5
LzEva0dTem5vREtITjVNcmNDOGpxSzBIcWJTZkhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr1K+c0jD
DLtCHHrfnOY4FjnHYYxFeWAHu4VYAlhhxt2EVgfUEcq5wVe3Jb7Txj7h6xjsH17w
LH4Ugt0F8iJNTXOhMEk7PRiJH+mmtbdtoOo3YtBk9or2dAJ5PPhxpvDFNrgMxQda
m4HKibD8iAPk0iXKamEJxlVVtrVhGvzY7h22Zzu1g8R3sPhe8x1DcM/eZsFj/70I
eTuTvi2tMW7gz8zQFCuowVqxTbUrrhh1D2fFYrjmLG0rI9b7Yn3tQiBUTGKZ5BR4
g/SszLwTK5rVW7kMMn3tRVJ5hm8hNwQc8VWkqRPCkiI2Tf4bfoQjYJS4vexCHnPv
PuE1N1Cxl2W6gg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:30:01 2025 by rpki-client