Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
File: kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json)
Hash identifier: kpb3j0S9j7hufHm0SnGzB9QJmxwTjP/52GQDun3+dIs=
Subject key identifier: 51:2F:DC:B2:21:28:0E:48:E3:61:B8:2F:51:30:EE:1F:45:3F:C6:1C
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 01960F4459E0DDE0818FBDB93AD38CA55F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
Manifest number: 14EA
Signing time: Mon 07 Apr 2025 08:00:59 +0000
Manifest this update: Mon 07 Apr 2025 08:00:59 +0000
Manifest next update: Tue 08 Apr 2025 08:00:59 +0000
Files and hashes: 1: 9_JGTVW5qMW7yCkdP0E_-NpXB0s.roa (hash: WnTsDGxoDG2mHWxyzgJxMMHknGyiRAiwLMWZ5xXwktI=)
2: GEAFSRO55yyL2hanen4IQZHuURY.roa (hash: 2FshQLANrdy2nUZzMPBP36DvAVDN+Uv1owhoY0rOS8I=)
3: H8DQXyH0KVxtyAs-rlTWAJw5n0M.roa (hash: dDFoBjvjKcHyX8s6IHYrzZBS6btcUzoDxFIxBvgUAfs=)
4: SllXdUUCPVChZ4jvhpor-ghAAj4.roa (hash: gzrQw/PD5uiW072kDXHdmBevESe9Vs8UwVovlju078g=)
5: UlaIUZkK3B529LjdTkdHqn2YBxQ.roa (hash: PIB38ClEzEekziyvI7kD6lwcN8Tv1wlGPtaK62LmSRI=)
6: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: RjnGdPXZ4wLnoV0j7AFQBpqFN5Eyq9RUPBfys5JQ+zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:44:59:e0:dd:e0:81:8f:bd:b9:3a:d3:8c:a5:5f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Apr 7 08:00:59 2025 GMT
Not After : Apr 8 08:00:59 2025 GMT
Subject: CN=512fdcb221280e48e361b82f5130ee1f453fc61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:09:0e:b6:6c:9b:b8:14:7b:7f:e6:4a:4d:
7f:75:12:6b:ce:87:eb:e4:3d:e8:18:c5:75:6e:a0:
55:96:bd:e5:25:0f:b0:82:7b:e4:06:fc:95:a8:f2:
7b:c7:48:f8:60:ec:89:49:ee:db:dd:19:7b:64:81:
45:8f:82:07:c5:11:60:0e:fd:48:f5:b1:d4:42:55:
9a:f9:b3:b8:f5:22:3f:14:d2:32:2b:ad:ec:e5:d7:
a4:e4:97:9d:f6:dd:b6:f5:3b:7b:b5:1d:75:f7:14:
dc:d7:e3:b7:c6:46:62:5a:3e:80:30:77:bf:38:f0:
fe:27:9e:9d:04:50:d7:52:e9:d3:1f:4e:e7:ac:a9:
1b:50:1e:b2:d3:54:c1:b1:35:24:fd:d8:01:87:5a:
e6:52:20:24:95:ea:9d:6b:4a:e1:16:ea:72:3e:52:
ce:73:61:ab:8e:38:6b:fa:ec:2f:45:ee:f0:ca:79:
94:7c:bd:af:46:d1:b4:f2:03:45:57:71:41:46:1e:
c9:13:e0:72:b5:a6:af:31:b3:81:d7:aa:72:57:f0:
0d:96:ba:0f:21:f6:5b:d6:71:56:92:ec:34:c4:d2:
21:98:80:11:69:e4:ea:87:79:7d:b8:05:d9:c0:42:
f0:00:26:e3:7d:e8:94:75:f2:b1:e1:dd:31:f3:75:
53:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2F:DC:B2:21:28:0E:48:E3:61:B8:2F:51:30:EE:1F:45:3F:C6:1C
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f0:bb:34:cb:82:61:e3:b7:91:b8:e1:6f:73:c7:9a:4c:9a:
ba:75:05:3f:75:76:be:7c:97:83:d2:74:35:46:38:78:1e:4d:
a7:b5:44:43:e1:95:7f:49:12:e1:8c:95:ec:50:33:6d:0f:da:
90:ea:41:64:fb:c0:f0:8a:8f:ce:a3:b6:03:1d:4f:a3:e4:19:
95:43:82:57:36:6f:02:b8:41:bf:33:27:1d:41:a7:44:13:e1:
89:97:07:08:a8:44:4d:84:0f:14:fa:6f:4b:f2:8a:57:1d:2b:
d1:46:d7:23:f5:21:5e:1f:99:e9:34:ce:f9:0b:eb:38:fe:68:
e3:7b:41:f7:1f:5b:21:e3:f6:86:a4:cb:26:ca:30:a7:81:22:
36:15:bc:24:60:d6:05:f3:42:b6:3c:e8:58:c8:b6:5f:af:3a:
50:5f:f8:d8:37:e1:88:36:e5:8a:3c:23:31:84:cb:92:6f:28:
1e:a6:37:1c:ef:16:8e:3e:fa:92:3e:f8:a4:56:f5:b3:25:fe:
ca:6e:ce:65:73:46:80:4a:39:78:54:ac:20:e1:04:92:97:14:
ab:90:06:87:02:0d:e8:f9:c8:de:f9:1c:50:4a:f2:e1:c9:b2:
86:f7:bf:56:23:ee:c6:d2:14:b6:a6:30:fb:69:9d:1b:77:69:
ab:c7:4d:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYPRFng3eCBj725OtOMpV9+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2
NDM3MDEwHhcNMjUwNDA3MDgwMDU5WhcNMjUwNDA4MDgwMDU5WjAzMTEwLwYDVQQD
Eyg1MTJmZGNiMjIxMjgwZTQ4ZTM2MWI4MmY1MTMwZWUxZjQ1M2ZjNjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1EJDrZsm7gUe3/mSk1/dRJrzofr
5D3oGMV1bqBVlr3lJQ+wgnvkBvyVqPJ7x0j4YOyJSe7b3Rl7ZIFFj4IHxRFgDv1I
9bHUQlWa+bO49SI/FNIyK63s5dek5Jed9t229Tt7tR119xTc1+O3xkZiWj6AMHe/
OPD+J56dBFDXUunTH07nrKkbUB6y01TBsTUk/dgBh1rmUiAkleqda0rhFupyPlLO
c2Grjjhr+uwvRe7wynmUfL2vRtG08gNFV3FBRh7JE+BytaavMbOB16pyV/ANlroP
IfZb1nFWkuw0xNIhmIARaeTqh3l9uAXZwELwACbjfeiUdfKx4d0x83VTBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEv3LIhKA5I42G4L1Ew7h9FP8YcMB8GA1UdIwQY
MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt
M2IwYjRiOGEyOTgzLzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz
LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvC7NMuC
YeO3kbjhb3PHmkyaunUFP3V2vnyXg9J0NUY4eB5Np7VEQ+GVf0kS4YyV7FAzbQ/a
kOpBZPvA8IqPzqO2Ax1Po+QZlUOCVzZvArhBvzMnHUGnRBPhiZcHCKhETYQPFPpv
S/KKVx0r0UbXI/UhXh+Z6TTO+QvrOP5o43tB9x9bIeP2hqTLJsowp4EiNhW8JGDW
BfNCtjzoWMi2X686UF/42DfhiDblijwjMYTLkm8oHqY3HO8Wjj76kj74pFb1syX+
ym7OZXNGgEo5eFSsIOEEkpcUq5AGhwIN6PnI3vkcUEry4cmyhve/ViPuxtIUtqYw
+2mdG3dpq8dNXw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:16:04 2025 by rpki-client