Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
File: K_CgGXhoxtjDTdFrP0TezF5CNvU.mft (raw, json)
Hash identifier: 0RKLpvN/TGd3rZJ0WpzSt5ZTqe5DgF3FdaR8b1rmsDk=
Subject key identifier: 2C:49:82:50:94:2A:32:D6:02:1C:7C:AC:46:62:0F:FE:DE:AC:FE:CF
Authority key identifier: 2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
Certificate issuer: /CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Certificate serial: 01965500EE9C1EA35581E98A392865C723DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
Manifest number: 0CB6
Signing time: Sun 20 Apr 2025 21:00:46 +0000
Manifest this update: Sun 20 Apr 2025 21:00:46 +0000
Manifest next update: Mon 21 Apr 2025 21:00:46 +0000
Files and hashes: 1: K_CgGXhoxtjDTdFrP0TezF5CNvU.crl (hash: BDSHWlBq24LVxLlXfh2XxVir98iAFah41RAruwLBoas=)
2: cwewYqqUz_DTY7N101NBNvby5-A.roa (hash: 12Ilbr32JYBfPHCal30nzRY5XUe8GWiDmB7OIucWhgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:ee:9c:1e:a3:55:81:e9:8a:39:28:65:c7:23:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Validity
Not Before: Apr 20 21:00:46 2025 GMT
Not After : Apr 21 21:00:46 2025 GMT
Subject: CN=2c498250942a32d6021c7cac46620ffedeacfecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b2:06:4b:7f:64:d1:f1:fe:e0:02:6b:25:a3:
66:76:16:32:bb:0e:dc:0b:3b:74:98:ba:3d:64:75:
6e:4b:d5:5f:ab:63:a2:7b:7a:8c:4b:20:44:c2:c8:
2a:c4:16:73:f1:41:cc:6e:8f:a4:ac:57:0e:be:18:
80:fd:ba:a6:70:1f:6c:69:f9:e5:50:76:11:02:27:
52:03:e4:2b:9b:9a:27:cb:3d:b0:cf:d0:63:86:c7:
ca:37:fd:d7:82:60:32:d4:7e:66:1b:6d:2b:78:90:
9b:6b:58:b5:cb:1a:26:66:97:ff:b9:ca:01:5c:e3:
7b:d4:b3:6d:e7:b1:ed:8b:79:08:af:58:5e:98:56:
8d:ca:93:2a:86:e7:6b:86:b8:45:18:85:35:7d:5f:
82:1b:bc:ed:85:9c:2a:f7:fa:9f:24:00:b1:19:07:
19:8e:42:dd:75:af:5a:ef:b2:f3:dc:f9:04:24:28:
42:d5:c5:7c:a7:f7:c3:a0:9e:28:04:9d:bb:15:34:
a4:bf:0e:3a:72:0f:63:cc:3c:c1:fd:f7:54:7d:3d:
19:cb:26:62:e9:74:c9:f6:e4:6e:17:96:b5:74:cc:
f1:01:2b:74:cf:c5:35:e2:39:e5:f4:97:78:68:1a:
43:49:fe:73:ab:96:04:0c:77:c6:02:c5:3d:df:d9:
b1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:49:82:50:94:2A:32:D6:02:1C:7C:AC:46:62:0F:FE:DE:AC:FE:CF
X509v3 Authority Key Identifier:
keyid:2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:74:ff:af:bb:40:35:d0:f2:0b:84:37:83:ab:b3:90:9a:8b:
cb:82:94:1f:3d:a5:c0:e7:01:3c:1f:fb:7a:d1:2f:e7:30:41:
cd:f4:52:9f:3b:83:03:00:44:ed:4f:c4:52:1b:33:ae:be:67:
6f:6a:cd:52:eb:b3:c0:b4:ae:76:91:75:ba:72:d9:54:f7:6e:
74:17:e5:42:d4:37:e6:b5:3e:1a:ed:04:6c:3b:1b:26:88:3f:
2a:72:62:5c:2d:44:fd:cd:ec:b4:c2:57:ca:ee:38:bd:94:3b:
2a:b7:04:07:60:46:0a:7e:31:40:90:48:d8:ec:67:6b:90:e5:
af:09:9d:38:0a:33:f3:03:d4:7a:a6:4e:a6:05:97:89:d7:83:
5b:00:96:3f:11:c6:70:d8:be:63:56:25:cc:47:4c:13:01:0e:
e7:5f:82:08:d7:5c:4b:fc:ad:88:17:07:68:ac:36:3f:45:8e:
9a:21:9a:1f:24:6d:fc:2f:b1:b8:fb:e2:ca:c9:d6:11:0b:2a:
f5:b3:4b:46:92:b3:ec:8c:b1:02:cb:7c:a2:c3:df:4b:b5:45:
c2:be:89:12:6f:e5:44:9a:1b:d2:89:d0:61:c3:a8:de:d4:d2:
b8:43:03:e5:dc:95:d9:1a:e0:fa:84:73:95:19:39:b5:d7:07:
5f:e1:c3:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVAO6cHqNVgemKOShlxyPfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZjBhMDE5Nzg2OGM2ZDhjMzRkZDE2YjNmNDRkZWNjNWU0
MjM2ZjUwHhcNMjUwNDIwMjEwMDQ2WhcNMjUwNDIxMjEwMDQ2WjAzMTEwLwYDVQQD
EygyYzQ5ODI1MDk0MmEzMmQ2MDIxYzdjYWM0NjYyMGZmZWRlYWNmZWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLIGS39k0fH+4AJrJaNmdhYyuw7c
Czt0mLo9ZHVuS9Vfq2Oie3qMSyBEwsgqxBZz8UHMbo+krFcOvhiA/bqmcB9safnl
UHYRAidSA+Qrm5onyz2wz9BjhsfKN/3XgmAy1H5mG20reJCba1i1yxomZpf/ucoB
XON71LNt57Hti3kIr1hemFaNypMqhudrhrhFGIU1fV+CG7zthZwq9/qfJACxGQcZ
jkLdda9a77Lz3PkEJChC1cV8p/fDoJ4oBJ27FTSkvw46cg9jzDzB/fdUfT0ZyyZi
6XTJ9uRuF5a1dMzxASt0z8U14jnl9Jd4aBpDSf5zq5YEDHfGAsU939mxTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxJglCUKjLWAhx8rEZiD/7erP7PMB8GA1UdIwQY
MBaAFCvwoBl4aMbYw03Raz9E3sxeQjb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS19DZ0dYaG94dGpEVGRGclAwVGV6RjVDTnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80MGQyMjAtNjIxZC00NmZiLWFjOWMt
NDhiODM2NmZmMjNlLzEvS19DZ0dYaG94dGpEVGRGclAwVGV6RjVDTnZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80MGQyMjAtNjIxZC00NmZiLWFjOWMtNDhiODM2NmZmMjNl
LzEvS19DZ0dYaG94dGpEVGRGclAwVGV6RjVDTnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb3T/r7tA
NdDyC4Q3g6uzkJqLy4KUHz2lwOcBPB/7etEv5zBBzfRSnzuDAwBE7U/EUhszrr5n
b2rNUuuzwLSudpF1unLZVPdudBflQtQ35rU+Gu0EbDsbJog/KnJiXC1E/c3stMJX
yu44vZQ7KrcEB2BGCn4xQJBI2Oxna5DlrwmdOAoz8wPUeqZOpgWXideDWwCWPxHG
cNi+Y1YlzEdMEwEO51+CCNdcS/ytiBcHaKw2P0WOmiGaHyRt/C+xuPviysnWEQsq
9bNLRpKz7IyxAst8osPfS7VFwr6JEm/lRJob0onQYcOo3tTSuEMD5dyV2Rrg+oRz
lRk5tdcHX+HDlQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:43 2025 by rpki-client