Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
File: koAW21XmZLpyHhmumrQxbBDZZwg.mft (raw, json)
Hash identifier: j9azAA+lajOB/IFQldHxFy0SRxWCtrOjfhBq4TD1Xms=
Subject key identifier: 80:D0:C6:82:C4:E5:10:78:A3:15:EA:C3:32:38:4A:14:A6:53:BF:F2
Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Certificate issuer: /CN=928016db55e664ba721e19ae9ab4316c10d96708
Certificate serial: 01964DEBAF98220E1CB4B8358B481B8AC594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 12:00:13 +0000
Manifest this update: Sat 19 Apr 2025 12:00:13 +0000
Manifest next update: Sun 20 Apr 2025 12:00:13 +0000
Files and hashes: 1: koAW21XmZLpyHhmumrQxbBDZZwg.crl (hash: HahLGm5Bm6t2vNskXQGMeG0xxbbPkGS555yyOUkdIOc=)
2: wzuPiDmhnP7Nv_Dp2QI7h5h3O-g.roa (hash: 1/0ldOLBPILSR69hThfIMtpZUKnlBM4vs1kLEHBC5Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:eb:af:98:22:0e:1c:b4:b8:35:8b:48:1b:8a:c5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708
Validity
Not Before: Apr 19 12:00:13 2025 GMT
Not After : Apr 20 12:00:13 2025 GMT
Subject: CN=80d0c682c4e51078a315eac332384a14a653bff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:fa:05:9e:ca:64:6a:f4:30:e2:f1:92:7c:
97:b0:01:5d:53:bd:d8:9c:f3:16:c4:92:44:d9:31:
df:48:0d:b4:fe:9e:cd:ae:f5:15:3a:1f:4f:28:1f:
2d:f8:38:95:95:82:b1:5f:2c:b7:93:19:a2:7f:3e:
dc:90:6b:66:a9:ad:98:63:e3:fb:7a:58:57:54:3e:
84:9c:84:c8:f4:d0:63:86:79:ad:89:22:dc:f0:de:
38:59:24:dc:cd:4c:30:b1:7a:e7:66:c0:9b:f9:63:
22:39:d5:40:13:de:a9:05:72:9a:ce:63:fa:76:3b:
a6:3d:70:0a:e6:a0:35:b8:2d:26:8f:ef:c9:7d:a6:
d4:94:65:54:28:99:17:e3:ef:e5:32:b8:74:5e:1e:
5e:30:98:04:7f:e5:3a:b5:d1:b2:d6:fd:c8:00:63:
05:5a:93:78:43:23:55:a6:8e:36:b6:9e:df:c2:92:
4d:de:46:74:0d:93:ac:b9:c7:c7:59:df:31:33:f7:
6a:e6:7d:c6:9c:4a:9f:87:33:13:e5:b3:66:98:0d:
ef:6e:d6:bf:6f:5d:c9:e2:e2:60:76:ad:ec:25:2b:
3d:29:f4:39:87:53:21:5a:7f:5f:b4:78:66:e9:0d:
49:e2:e9:7a:0d:d3:df:a1:bd:51:e5:ce:08:09:3b:
90:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D0:C6:82:C4:E5:10:78:A3:15:EA:C3:32:38:4A:14:A6:53:BF:F2
X509v3 Authority Key Identifier:
keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:09:01:ed:3d:91:ee:44:d4:e1:b0:d7:93:0b:d5:2e:67:3f:
cf:8e:92:7f:14:6a:64:62:90:49:ef:49:b7:15:9e:14:16:5d:
67:27:e5:1a:b5:16:68:ff:d8:ef:6b:e6:2a:6f:0f:31:20:62:
b2:3d:13:2f:07:0a:f3:42:de:39:67:c2:9c:a0:5e:ef:d1:41:
66:ca:8f:cb:f4:5b:26:c7:4d:19:63:dc:4c:80:b0:c7:33:dc:
ef:71:f6:51:35:85:d4:39:24:de:50:db:ef:20:e7:35:22:5a:
e8:3b:db:2a:1f:3f:64:7d:1e:65:f5:da:33:bb:8a:9f:c1:c3:
0e:08:cb:14:d2:63:df:63:e6:77:2c:1b:d9:7a:58:08:ad:76:
2d:07:85:d6:99:aa:48:ad:8c:aa:29:38:56:50:7c:8a:a5:f4:
d7:94:13:f8:f7:ea:29:d2:84:6e:81:e2:45:ca:3a:0b:2f:3a:
ae:06:4b:d9:9b:c7:10:e7:21:63:2a:74:80:9d:e2:65:1d:97:
63:57:17:a5:6d:86:98:e2:cc:d9:85:d1:a0:e4:48:39:0c:ca:
b2:d2:11:b8:f8:a1:ab:3e:d6:56:10:6a:7c:ac:92:4f:57:77:
c8:43:12:ce:79:4e:e1:ca:e7:49:07:b5:48:b2:63:56:af:42:
3d:0b:7d:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZN66+YIg4ctLg1i0gbisWUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyODAxNmRiNTVlNjY0YmE3MjFlMTlhZTlhYjQzMTZjMTBk
OTY3MDgwHhcNMjUwNDE5MTIwMDEzWhcNMjUwNDIwMTIwMDEzWjAzMTEwLwYDVQQD
Eyg4MGQwYzY4MmM0ZTUxMDc4YTMxNWVhYzMzMjM4NGExNGE2NTNiZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYP6BZ7KZGr0MOLxknyXsAFdU73Y
nPMWxJJE2THfSA20/p7NrvUVOh9PKB8t+DiVlYKxXyy3kxmifz7ckGtmqa2YY+P7
elhXVD6EnITI9NBjhnmtiSLc8N44WSTczUwwsXrnZsCb+WMiOdVAE96pBXKazmP6
djumPXAK5qA1uC0mj+/JfabUlGVUKJkX4+/lMrh0Xh5eMJgEf+U6tdGy1v3IAGMF
WpN4QyNVpo42tp7fwpJN3kZ0DZOsucfHWd8xM/dq5n3GnEqfhzMT5bNmmA3vbta/
b13J4uJgdq3sJSs9KfQ5h1MhWn9ftHhm6Q1J4ul6DdPfob1R5c4ICTuQJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDQxoLE5RB4oxXqwzI4ShSmU7/yMB8GA1UdIwQY
MBaAFJKAFttV5mS6ch4Zrpq0MWwQ2WcIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva29BVzIxWG1aTHB5SGhtdW1yUXhiQkRaWndnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83MjFhMWMtY2YzOS00NDQ4LTg4M2It
ZTg5Y2RhYjgyZTFjLzEva29BVzIxWG1aTHB5SGhtdW1yUXhiQkRaWndnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83MjFhMWMtY2YzOS00NDQ4LTg4M2ItZTg5Y2RhYjgyZTFj
LzEva29BVzIxWG1aTHB5SGhtdW1yUXhiQkRaWndnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgkB7T2R
7kTU4bDXkwvVLmc/z46SfxRqZGKQSe9JtxWeFBZdZyflGrUWaP/Y72vmKm8PMSBi
sj0TLwcK80LeOWfCnKBe79FBZsqPy/RbJsdNGWPcTICwxzPc73H2UTWF1Dkk3lDb
7yDnNSJa6DvbKh8/ZH0eZfXaM7uKn8HDDgjLFNJj32Pmdywb2XpYCK12LQeF1pmq
SK2Mqik4VlB8iqX015QT+PfqKdKEboHiRco6Cy86rgZL2ZvHEOchYyp0gJ3iZR2X
Y1cXpW2GmOLM2YXRoORIOQzKstIRuPihqz7WVhBqfKyST1d3yEMSznlO4crnSQe1
SLJjVq9CPQt9Yw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:02:20 2025 by rpki-client