Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
File: knEFydH7BpBVSXH0ZMoh9KRcEGo.mft (raw, json)
Hash identifier: 0CmzYytapyNdvijUV9sAiFIuGHT5iPAVtv8W4ioC4mo=
Subject key identifier: 53:BC:C0:38:57:18:BB:D7:DC:52:4B:00:5F:B5:F7:F5:AF:F8:BF:D2
Authority key identifier: 92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
Certificate issuer: /CN=927105c9d1fb0690554971f464ca21f4a45c106a
Certificate serial: 01958BBB34E535FA4CFE8F98D60B6B4206FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
Manifest number: 0B6C
Signing time: Wed 12 Mar 2025 19:00:56 +0000
Manifest this update: Wed 12 Mar 2025 19:00:56 +0000
Manifest next update: Thu 13 Mar 2025 19:00:56 +0000
Files and hashes: 1: ipQ4XqSuTpQi-re2ZW_sK3VHNnQ.roa (hash: poFgPveu8J3ZCztPp1XhAex84n6Kit4aGgJE9uzT+QM=)
2: knEFydH7BpBVSXH0ZMoh9KRcEGo.crl (hash: q749kxUEYDBeCz8LzXbKawTCWz+RVvYPObDvJYKwmgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:34:e5:35:fa:4c:fe:8f:98:d6:0b:6b:42:06:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927105c9d1fb0690554971f464ca21f4a45c106a
Validity
Not Before: Mar 12 19:00:56 2025 GMT
Not After : Mar 13 19:00:56 2025 GMT
Subject: CN=53bcc0385718bbd7dc524b005fb5f7f5aff8bfd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:74:d8:0d:f8:f8:c8:15:ec:82:57:61:f3:16:
05:d5:a4:79:95:55:72:6b:9a:64:22:1f:27:c5:9b:
30:c7:68:2d:d4:61:ed:60:7e:da:b7:b3:c4:9b:dd:
36:41:43:b4:59:ee:35:23:42:64:c5:da:67:d4:6c:
ce:98:99:fe:36:d2:0e:55:7d:cb:ff:4a:5a:2a:b5:
c2:5c:98:40:28:ca:64:df:8b:19:a9:75:37:a5:79:
74:3b:36:ba:4d:88:ee:43:b5:dd:c9:54:53:0b:08:
0d:83:26:9f:b8:13:b6:a8:ad:b5:1b:38:d9:06:51:
b5:9f:a5:05:ae:1f:73:01:cc:ed:3b:f1:40:6d:99:
8a:57:2d:73:20:14:91:1a:10:d4:ab:dc:2f:ee:5a:
af:34:cb:9d:4b:37:89:a2:8c:2b:6a:61:7d:80:aa:
95:92:2c:c3:16:67:1f:39:1e:5f:87:60:83:41:fe:
28:62:99:f0:16:1a:e5:1e:46:76:c5:81:74:4d:6f:
a4:83:6c:ab:64:16:89:2e:6e:ff:f4:94:72:aa:57:
cc:17:f1:01:61:88:f6:87:90:c1:96:b0:16:3b:e5:
d7:ec:aa:6d:36:57:5a:83:de:23:8c:8a:d3:54:3d:
63:9e:c0:3c:07:5a:c4:29:cc:37:02:a4:6a:42:60:
6f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BC:C0:38:57:18:BB:D7:DC:52:4B:00:5F:B5:F7:F5:AF:F8:BF:D2
X509v3 Authority Key Identifier:
keyid:92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:82:16:a9:e2:5a:9b:dc:dc:5e:a5:24:1a:bb:cf:99:c7:f6:
16:0b:0b:ff:95:88:6e:0e:9e:71:ee:1a:bd:3f:1e:60:0d:91:
e3:09:7c:a6:87:52:c7:9e:1b:68:98:94:d9:d1:bc:65:5d:49:
7d:5e:9f:6e:95:ee:d4:88:85:b0:5f:69:f0:12:3f:35:b6:8f:
c4:5b:d1:50:ce:54:c9:f4:25:75:1f:cb:d6:29:e7:05:81:78:
29:98:b0:79:df:bb:eb:75:4b:30:47:45:f7:a2:27:d6:74:cb:
69:01:51:fc:fa:c7:e3:bf:99:b5:27:a3:99:a3:e7:b9:d6:e9:
fe:5d:0e:53:a1:ba:13:48:6d:f2:6c:2b:a3:15:59:98:70:06:
c6:98:5a:0e:7d:2a:d8:b3:45:10:a2:8e:cc:85:a3:21:87:0c:
36:08:62:b0:ec:3b:6b:4c:fe:a5:d8:a7:b6:32:6f:d4:9b:f2:
6f:92:0d:5f:95:b2:c9:58:68:72:7f:38:98:fe:2c:2a:41:8b:
79:5f:0e:4d:c3:6c:78:e4:c0:59:17:52:3d:f6:67:72:37:cf:
ef:1e:78:2b:f3:85:10:77:68:0b:0e:14:2b:77:e1:ed:13:3b:
c7:57:41:f1:9b:01:9c:99:c7:df:f0:fd:a0:f0:3d:5f:d9:a1:
a7:0d:96:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLuzTlNfpM/o+Y1gtrQgb/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNzEwNWM5ZDFmYjA2OTA1NTQ5NzFmNDY0Y2EyMWY0YTQ1
YzEwNmEwHhcNMjUwMzEyMTkwMDU2WhcNMjUwMzEzMTkwMDU2WjAzMTEwLwYDVQQD
Eyg1M2JjYzAzODU3MThiYmQ3ZGM1MjRiMDA1ZmI1ZjdmNWFmZjhiZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nTYDfj4yBXsgldh8xYF1aR5lVVy
a5pkIh8nxZswx2gt1GHtYH7at7PEm902QUO0We41I0Jkxdpn1GzOmJn+NtIOVX3L
/0paKrXCXJhAKMpk34sZqXU3pXl0Oza6TYjuQ7XdyVRTCwgNgyafuBO2qK21GzjZ
BlG1n6UFrh9zAcztO/FAbZmKVy1zIBSRGhDUq9wv7lqvNMudSzeJoowramF9gKqV
kizDFmcfOR5fh2CDQf4oYpnwFhrlHkZ2xYF0TW+kg2yrZBaJLm7/9JRyqlfMF/EB
YYj2h5DBlrAWO+XX7KptNldag94jjIrTVD1jnsA8B1rEKcw3AqRqQmBvtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFO8wDhXGLvX3FJLAF+19/Wv+L/SMB8GA1UdIwQY
MBaAFJJxBcnR+waQVUlx9GTKIfSkXBBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25FRnlkSDdCcEJWU1hIMFpNb2g5S1JjRUdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wYzlkODAtNDNhNS00NTNhLWFkMjUt
NGVlOTJlZTFlMGNkLzEva25FRnlkSDdCcEJWU1hIMFpNb2g5S1JjRUdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8wYzlkODAtNDNhNS00NTNhLWFkMjUtNGVlOTJlZTFlMGNk
LzEva25FRnlkSDdCcEJWU1hIMFpNb2g5S1JjRUdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4IWqeJa
m9zcXqUkGrvPmcf2FgsL/5WIbg6ece4avT8eYA2R4wl8podSx54baJiU2dG8ZV1J
fV6fbpXu1IiFsF9p8BI/NbaPxFvRUM5UyfQldR/L1innBYF4KZiwed+763VLMEdF
96In1nTLaQFR/PrH47+ZtSejmaPnudbp/l0OU6G6E0ht8mwroxVZmHAGxphaDn0q
2LNFEKKOzIWjIYcMNghisOw7a0z+pdintjJv1Jvyb5INX5WyyVhocn84mP4sKkGL
eV8OTcNseOTAWRdSPfZncjfP7x54K/OFEHdoCw4UK3fh7RM7x1dB8ZsBnJnH3/D9
oPA9X9mhpw2WMw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:20:39 2025 by rpki-client