Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
File: 0KpKGno60j-q4q6un6YZTwISgSk.mft (raw, json)
Hash identifier: RtZlwNhpSyZBXdJTmp3kYxw6UNbq17jk/Kjyp1lR05s=
Subject key identifier: 7C:49:80:31:AF:CD:4E:6C:3B:3E:FA:B3:4A:B7:15:F6:02:6C:31:B6
Authority key identifier: D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
Certificate issuer: /CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Certificate serial: 01965C8339D1ECC0FA6C407FAB6D391647AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
Manifest number: 011D
Signing time: Tue 22 Apr 2025 08:00:25 +0000
Manifest this update: Tue 22 Apr 2025 08:00:25 +0000
Manifest next update: Wed 23 Apr 2025 08:00:25 +0000
Files and hashes: 1: 0KpKGno60j-q4q6un6YZTwISgSk.crl (hash: su4j6BuEP9tj4bqRxX3KgXfDTC0jJt32kkl8+hFaKT0=)
2: BPcKYotNA4ZeZvm82W73v75zPQs.roa (hash: oHpWOGTj/PoKbHsHCYFs8uXPSnbHGEoV8KY7k9zJBk4=)
3: GkxGrjdz0A7AWmifnWDimQZWI38.roa (hash: tHXJR2KGAG4wHE8bdFOYoF9Jdtd+4jQD2aXhMHJzWK8=)
4: OFO40pbXY33B4_R6m0vxzmJtlaE.roa (hash: OKgJmR90SzKnzfJWjgu0f1y4g1wd7HW3UjBatZfs5A8=)
5: ief4j2bb-cAvwzzS1T0xB8OgxGk.roa (hash: cv2vWMrY2M65pVapU15+XFEE8tVsd4Na8PnjBxEQRuA=)
6: wkwsgzJc2eo9ng8QQ8kvMc3qjbc.roa (hash: +iuoTytPo6r5GmeijHeI4hmWR8iJmhnqPLAkE9k79sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:83:39:d1:ec:c0:fa:6c:40:7f:ab:6d:39:16:47:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Validity
Not Before: Apr 22 08:00:25 2025 GMT
Not After : Apr 23 08:00:25 2025 GMT
Subject: CN=7c498031afcd4e6c3b3efab34ab715f6026c31b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:8a:21:b0:38:31:3a:17:c7:22:65:ca:b1:
b4:fa:13:a9:6e:f3:54:d5:d0:34:ee:5f:f9:26:8c:
69:f2:8b:84:6c:3f:9b:77:0a:68:ff:45:bd:9f:10:
0b:d1:53:51:10:01:2f:ff:cb:52:ec:26:fe:f2:1c:
54:c4:0d:2b:68:06:97:bc:e9:66:b6:6d:de:c1:88:
59:6c:2b:f5:33:13:1a:0b:33:fb:8c:19:5e:88:60:
be:e6:3c:c2:16:5d:83:d9:3c:77:aa:29:35:05:39:
68:ef:88:c0:da:01:10:e7:46:16:59:10:52:df:92:
fd:f9:fb:78:f6:b9:d7:e9:06:c0:08:30:cf:ff:94:
3b:0c:2e:c4:03:85:18:ee:29:52:ac:87:45:0c:b4:
38:40:be:c1:0d:e5:62:2b:e6:03:32:3b:18:58:e8:
ea:40:43:c1:ed:9e:69:14:b5:72:0e:3d:ce:38:bf:
61:b3:48:0c:39:f7:4b:3e:e0:2e:23:0f:a1:52:73:
ed:4a:36:42:63:a9:68:c6:b2:3e:ef:a4:f3:64:79:
f3:f0:7e:1c:bd:0d:a9:c0:ef:9b:c9:db:a4:3c:6d:
08:90:9d:d1:39:2e:78:17:a7:60:c2:b0:f8:06:85:
65:e0:f7:2a:ad:08:cc:36:ad:9b:27:27:49:ea:8e:
8a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:49:80:31:AF:CD:4E:6C:3B:3E:FA:B3:4A:B7:15:F6:02:6C:31:B6
X509v3 Authority Key Identifier:
keyid:D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7b:a5:a6:65:4c:65:07:99:f2:2a:13:f6:42:fd:a5:46:26:
ee:32:57:fb:8a:98:1f:31:72:96:a9:78:0d:f1:9d:c7:7b:45:
bf:0d:c8:5e:00:a9:8c:d6:59:cf:a4:31:58:09:ea:82:de:10:
19:43:01:65:02:f9:d9:f4:89:2f:ac:0e:58:96:db:24:08:9f:
0e:02:aa:4f:82:df:4f:86:b1:63:34:4b:07:87:24:9f:3f:3b:
96:06:a7:60:84:91:b2:f2:c7:6d:43:43:5f:6b:c5:22:98:9f:
a0:a9:46:42:da:0e:93:b1:2f:12:01:34:1d:5b:9b:28:e1:32:
42:dc:db:a8:37:4f:34:33:cc:5b:62:3a:29:f3:15:42:a7:23:
8e:9e:6e:6f:23:05:fd:d2:9d:fe:8f:b8:44:f3:af:02:9d:64:
87:d2:e8:00:ed:15:da:83:a2:04:71:ea:ae:7f:a5:2e:60:60:
5d:26:5b:af:8b:0c:70:c2:73:1d:26:a0:18:4f:b2:b9:3a:e0:
2c:55:5d:9c:e3:78:0e:11:fd:2e:ae:53:e1:68:ac:54:90:5d:
4c:7b:5c:47:dc:8a:8d:37:48:3b:da:21:90:fd:db:22:27:dd:
14:38:a0:17:da:fb:09:58:29:31:6a:ee:91:3d:cb:fd:87:75:
61:0f:8a:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZcgznR7MD6bEB/q205FkeqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYWE0YTFhN2EzYWQyM2ZhYWUyYWVhZTlmYTYxOTRmMDIx
MjgxMjkwHhcNMjUwNDIyMDgwMDI1WhcNMjUwNDIzMDgwMDI1WjAzMTEwLwYDVQQD
Eyg3YzQ5ODAzMWFmY2Q0ZTZjM2IzZWZhYjM0YWI3MTVmNjAyNmMzMWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuuKIbA4MToXxyJlyrG0+hOpbvNU
1dA07l/5Joxp8ouEbD+bdwpo/0W9nxAL0VNREAEv/8tS7Cb+8hxUxA0raAaXvOlm
tm3ewYhZbCv1MxMaCzP7jBleiGC+5jzCFl2D2Tx3qik1BTlo74jA2gEQ50YWWRBS
35L9+ft49rnX6QbACDDP/5Q7DC7EA4UY7ilSrIdFDLQ4QL7BDeViK+YDMjsYWOjq
QEPB7Z5pFLVyDj3OOL9hs0gMOfdLPuAuIw+hUnPtSjZCY6loxrI+76TzZHnz8H4c
vQ2pwO+bydukPG0IkJ3ROS54F6dgwrD4BoVl4PcqrQjMNq2bJydJ6o6KbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxJgDGvzU5sOz76s0q3FfYCbDG2MB8GA1UdIwQY
MBaAFNCqShp6OtI/quKurp+mGU8CEoEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEtwS0dubzYwai1xNHE2dW42WVpUd0lTZ1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83NjU1NmUtYTFkOC00ZTBhLTg0Njgt
MjIxNGYxOGViMzI5LzEvMEtwS0dubzYwai1xNHE2dW42WVpUd0lTZ1NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS83NjU1NmUtYTFkOC00ZTBhLTg0NjgtMjIxNGYxOGViMzI5
LzEvMEtwS0dubzYwai1xNHE2dW42WVpUd0lTZ1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmHulpmVM
ZQeZ8ioT9kL9pUYm7jJX+4qYHzFylql4DfGdx3tFvw3IXgCpjNZZz6QxWAnqgt4Q
GUMBZQL52fSJL6wOWJbbJAifDgKqT4LfT4axYzRLB4cknz87lganYISRsvLHbUND
X2vFIpifoKlGQtoOk7EvEgE0HVubKOEyQtzbqDdPNDPMW2I6KfMVQqcjjp5ubyMF
/dKd/o+4RPOvAp1kh9LoAO0V2oOiBHHqrn+lLmBgXSZbr4sMcMJzHSagGE+yuTrg
LFVdnON4DhH9Lq5T4WisVJBdTHtcR9yKjTdIO9ohkP3bIifdFDigF9r7CVgpMWru
kT3L/Yd1YQ+K4A==
-----END CERTIFICATE-----
Generated at Tue Apr 22 11:27:03 2025 by rpki-client