Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: gRKj+yUp9y5dOVzWfkglwWTHcino5R+y4oisWtTtwp0=
Subject key identifier: 20:A1:4E:21:25:16:D9:BE:BC:DF:14:AE:96:C0:CF:18:22:B1:14:CB
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 019658A678DD34B889D46979B4C67513B689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 14:00:26 +0000
Manifest this update: Mon 21 Apr 2025 14:00:26 +0000
Manifest next update: Tue 22 Apr 2025 14:00:26 +0000
Files and hashes: 1: FlduQKMxPetRFEf3K99xaEoZ7QU.roa (hash: 2r4TM6IwMUnx2aicUZFPb2Iq+BV2xdiFUdzdromgaYg=)
2: aX_b4UaRWSPBF6_UJgMjS5N9O-c.roa (hash: YV9fhTwKDLCkfBPeMSZl5AvTP7h0hbaT54bWMdXdAUo=)
3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: HoTOH99WMXL5RpKlqfOun8EuvN8iVc3+C+kSMvoIWoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:78:dd:34:b8:89:d4:69:79:b4:c6:75:13:b6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Apr 21 14:00:26 2025 GMT
Not After : Apr 22 14:00:26 2025 GMT
Subject: CN=20a14e212516d9bebcdf14ae96c0cf1822b114cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:82:fa:68:1c:c9:83:5d:4a:7e:c2:73:31:
b0:d4:fd:0f:e0:37:4b:08:50:46:95:22:78:d8:9d:
90:39:7f:b7:9d:23:1e:ad:0e:f1:cb:8b:a6:ad:33:
0c:b0:d6:86:7b:5b:aa:06:ca:b6:54:36:58:93:b0:
9c:e5:8b:ce:bf:74:84:df:25:25:c9:f3:96:e1:c2:
5b:e7:ea:35:45:53:f0:e4:aa:f1:e9:72:9d:18:a2:
2e:f3:95:d8:44:21:33:be:60:69:5a:b8:47:99:bd:
e7:a8:5e:1d:a0:ea:a5:56:14:98:6a:bb:73:50:91:
11:cc:90:b6:ba:7a:26:af:b3:ee:34:ad:f8:54:e8:
ff:01:34:d4:2a:e6:10:50:ea:a7:9d:2d:99:d8:57:
6d:86:1e:3a:98:d6:36:f1:0e:da:55:09:91:8f:b3:
7b:e9:e6:f6:57:fc:f5:23:b6:0b:55:e9:10:b3:78:
4c:80:c9:71:e1:30:37:d5:ba:90:94:15:2c:cf:8f:
97:ca:45:2e:b8:f4:22:7e:12:c4:45:cd:66:6e:6d:
69:c2:6a:4d:22:20:7b:d1:da:9c:12:0c:72:1c:d7:
38:dc:9e:e6:fe:9d:7c:e3:3f:2b:c2:18:a5:e8:2c:
37:38:6a:af:89:b6:ed:cd:88:3e:aa:23:c8:a5:23:
03:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A1:4E:21:25:16:D9:BE:BC:DF:14:AE:96:C0:CF:18:22:B1:14:CB
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:5e:53:c9:73:f0:92:a8:2f:9c:08:a0:77:2e:39:ae:90:9e:
35:3e:58:1f:71:01:cd:f5:3f:e6:d4:49:09:0f:8a:1e:05:2b:
64:dc:22:f3:4e:a4:07:2c:61:5a:f8:92:e2:af:a5:ee:c4:f6:
9b:fd:67:e7:61:c6:af:49:05:5e:96:1f:16:33:33:3a:78:53:
ba:5f:4e:19:a5:98:3d:03:ef:d1:93:3a:b4:cc:c2:0f:f2:37:
08:51:6a:0b:8b:4a:39:9d:de:d6:4d:76:b3:61:b0:d3:5a:72:
91:ae:6c:02:28:d5:64:f0:d3:b9:ed:f9:7b:7f:48:19:fd:9c:
0c:44:68:ac:90:a9:b6:de:b5:12:dc:6d:7d:3f:70:30:26:34:
17:59:53:d2:83:95:d5:70:fb:37:bf:47:38:67:8c:21:72:b5:
76:8e:3c:5f:e2:47:9d:d5:84:24:6a:b6:b3:3e:d7:04:df:de:
1d:db:a8:f6:d9:28:f7:03:28:53:3f:c9:62:ca:ff:80:f8:67:
f5:39:5b:c4:17:2a:1f:54:a7:2c:8f:ab:df:c8:b2:0e:a4:4e:
27:3c:c8:4f:56:96:48:69:65:d6:06:5d:c6:34:e6:22:dd:43:
21:c7:44:57:a6:2a:47:6f:64:dc:f5:04:dd:56:f1:28:7c:19:
b0:b6:6f:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYpnjdNLiJ1Gl5tMZ1E7aJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyODBmZGM5ZTdhODY0MzBjOGUyOGY1ZTM0OWUzMTdmYmI4
YTFjYTkwHhcNMjUwNDIxMTQwMDI2WhcNMjUwNDIyMTQwMDI2WjAzMTEwLwYDVQQD
EygyMGExNGUyMTI1MTZkOWJlYmNkZjE0YWU5NmMwY2YxODIyYjExNGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiKC+mgcyYNdSn7CczGw1P0P4DdL
CFBGlSJ42J2QOX+3nSMerQ7xy4umrTMMsNaGe1uqBsq2VDZYk7Cc5YvOv3SE3yUl
yfOW4cJb5+o1RVPw5Krx6XKdGKIu85XYRCEzvmBpWrhHmb3nqF4doOqlVhSYartz
UJERzJC2unomr7PuNK34VOj/ATTUKuYQUOqnnS2Z2Fdthh46mNY28Q7aVQmRj7N7
6eb2V/z1I7YLVekQs3hMgMlx4TA31bqQlBUsz4+XykUuuPQifhLERc1mbm1pwmpN
IiB70dqcEgxyHNc43J7m/p184z8rwhil6Cw3OGqvibbtzYg+qiPIpSMDKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCChTiElFtm+vN8UrpbAzxgisRTLMB8GA1UdIwQY
MBaAFJKA/cnnqGQwyOKPXjSeMX+7ihypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jZjQ5NDYtZjVjMi00NWFhLTlhNDEt
ZjQ0Mjk5ODY1YTI4LzEva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9jZjQ5NDYtZjVjMi00NWFhLTlhNDEtZjQ0Mjk5ODY1YTI4
LzEva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwl5TyXPw
kqgvnAigdy45rpCeNT5YH3EBzfU/5tRJCQ+KHgUrZNwi806kByxhWviS4q+l7sT2
m/1n52HGr0kFXpYfFjMzOnhTul9OGaWYPQPv0ZM6tMzCD/I3CFFqC4tKOZ3e1k12
s2Gw01pyka5sAijVZPDTue35e39IGf2cDERorJCptt61EtxtfT9wMCY0F1lT0oOV
1XD7N79HOGeMIXK1do48X+JHndWEJGq2sz7XBN/eHduo9tko9wMoUz/JYsr/gPhn
9TlbxBcqH1SnLI+r38iyDqROJzzIT1aWSGll1gZdxjTmIt1DIcdEV6YqR29k3PUE
3VbxKHwZsLZvYA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:03:31 2025 by rpki-client