Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
File: KJDadlqZn3GYdcUe7PTH1hSKG9k.mft (raw, json)
Hash identifier: 4ub3x8wrpy82qonr1ctuoUrdwylqoyZWNm3Bezyeip0=
Subject key identifier: 2F:5D:63:6C:A1:BE:38:4E:FC:65:90:84:47:8A:F5:23:9E:72:64:41
Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
Certificate issuer: /CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Certificate serial: 0196CC85BBC19E92696ACA256AF5FE5AE7D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
Manifest number: 0C64
Signing time: Wed 14 May 2025 02:00:38 +0000
Manifest this update: Wed 14 May 2025 02:00:38 +0000
Manifest next update: Thu 15 May 2025 02:00:38 +0000
Files and hashes: 1: HMBy97dklkxPQBrLpsbW-ZNRc7U.roa (hash: lqft+CvpsJy14zKD+aRqKJHCgA+Rv0wI4PijqNi8qGo=)
2: IYTFbsH2zrYimow5PfBhyISAXgE.roa (hash: 3Ol+0d4dyS1miwyxB+aBgXHbVV5ki9Vv7rh4KQYX/5Y=)
3: KJDadlqZn3GYdcUe7PTH1hSKG9k.crl (hash: QCjmr1P4aX3az7zZewVrhzkpzYU8zH40iTyiMqlvhSg=)
4: ruoDX0K9VhdXmRyoyMx7Kq-ps0U.roa (hash: zYFHs9Pc2fRsxf2yR98ieoabL4bJzJtKnSudDrvjoY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:85:bb:c1:9e:92:69:6a:ca:25:6a:f5:fe:5a:e7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Validity
Not Before: May 14 02:00:38 2025 GMT
Not After : May 15 02:00:38 2025 GMT
Subject: CN=2f5d636ca1be384efc659084478af5239e726441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6a:a2:31:ba:60:81:22:9a:21:9f:c3:03:65:
f6:12:ea:e3:9a:8e:d3:6d:9b:8f:0c:72:ff:c8:d1:
e2:29:a3:16:72:69:db:f7:bd:7e:9f:be:07:57:73:
7a:13:d8:c1:57:4d:43:89:4f:06:96:67:76:27:eb:
96:c4:d6:c7:cb:1f:b3:e2:af:11:b1:61:63:3c:3d:
ec:8a:95:e7:33:8a:7f:91:cf:52:f7:74:cf:4d:9b:
54:4f:85:e4:f0:09:2e:f7:5f:83:c0:76:62:bf:fc:
74:29:57:d8:78:ad:e5:0f:37:d6:21:2a:fb:23:b0:
73:2c:1c:26:2e:f1:e3:1c:92:01:15:a8:2d:48:bd:
b7:03:09:06:c2:b1:5e:33:8e:01:d7:c2:53:5e:f1:
36:87:5b:ff:c3:13:22:8f:7f:79:39:f7:0f:c1:4b:
99:3d:23:c9:42:ae:d0:63:08:69:fe:a5:cc:7b:3b:
67:57:53:9a:cd:8f:b8:02:a1:91:fa:d3:3b:6b:66:
ed:35:d9:95:68:44:c2:9d:a0:48:12:28:99:b8:3c:
be:4e:35:80:ad:a8:f4:c1:4a:7f:57:fc:cc:f7:10:
4a:29:73:e2:08:7a:b9:1c:c1:cc:dc:05:78:31:c8:
1a:f8:71:ec:49:cd:9f:46:1d:33:2a:2f:28:7a:f2:
cc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5D:63:6C:A1:BE:38:4E:FC:65:90:84:47:8A:F5:23:9E:72:64:41
X509v3 Authority Key Identifier:
keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ec:99:cc:ed:fa:3e:11:e0:d8:1a:d8:cd:b0:ca:fd:ba:99:
99:0e:bc:35:0c:0c:d2:6b:52:43:2d:00:3e:6c:4c:e6:27:21:
e0:17:4c:3f:42:3e:76:b4:c4:d7:a3:e7:3b:f3:27:86:3e:1f:
9b:ec:da:53:12:6e:a8:17:d8:b2:19:68:86:09:93:75:4c:46:
ee:40:2d:e4:11:9a:ca:2e:c5:e7:ca:ad:0f:9d:d1:d6:be:83:
7d:3c:c5:08:b8:57:5e:b9:5d:b6:0f:fa:03:cf:fc:f4:e0:82:
80:8d:4c:01:3c:39:61:34:32:ae:05:a9:b5:e5:72:ce:81:3d:
d0:4b:1e:c3:c4:58:f5:69:f5:a2:7b:81:cb:04:87:2d:1f:31:
47:cf:08:f0:e4:0f:da:9e:5f:6e:4e:3b:62:89:00:0e:54:3b:
5e:a3:b8:4b:37:da:41:a2:4d:1c:b9:43:6d:dc:83:d8:db:82:
95:ee:f4:48:5d:e8:62:3a:f1:d6:23:5b:af:fe:59:64:8b:a3:
08:d6:c5:c5:76:5f:b6:c9:d3:63:52:d0:6e:01:05:13:97:08:
bd:1b:e0:1f:e1:5e:98:69:12:fd:ef:b6:f8:af:aa:a4:5d:92:
aa:74:39:fc:a3:1e:fd:88:3a:12:a9:12:a4:7f:77:52:57:29:
2e:a7:be:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbMhbvBnpJpasolavX+WufWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTBkYTc2NWE5OTlmNzE5ODc1YzUxZWVjZjRjN2Q2MTQ4
YTFiZDkwHhcNMjUwNTE0MDIwMDM4WhcNMjUwNTE1MDIwMDM4WjAzMTEwLwYDVQQD
EygyZjVkNjM2Y2ExYmUzODRlZmM2NTkwODQ0NzhhZjUyMzllNzI2NDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GqiMbpggSKaIZ/DA2X2Eurjmo7T
bZuPDHL/yNHiKaMWcmnb971+n74HV3N6E9jBV01DiU8Glmd2J+uWxNbHyx+z4q8R
sWFjPD3sipXnM4p/kc9S93TPTZtUT4Xk8Aku91+DwHZiv/x0KVfYeK3lDzfWISr7
I7BzLBwmLvHjHJIBFagtSL23AwkGwrFeM44B18JTXvE2h1v/wxMij395OfcPwUuZ
PSPJQq7QYwhp/qXMeztnV1OazY+4AqGR+tM7a2btNdmVaETCnaBIEiiZuDy+TjWA
raj0wUp/V/zM9xBKKXPiCHq5HMHM3AV4Mcga+HHsSc2fRh0zKi8oevLMkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9dY2yhvjhO/GWQhEeK9SOecmRBMB8GA1UdIwQY
MBaAFCiQ2nZamZ9xmHXFHuz0x9YUihvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0pEYWRscVpuM0dZZGNVZTdQVEgxaFNLRzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yYmJjZDQtZWRhYi00OGVlLWE0MTEt
MjhmYzcwNjNkOTUyLzEvS0pEYWRscVpuM0dZZGNVZTdQVEgxaFNLRzlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yYmJjZDQtZWRhYi00OGVlLWE0MTEtMjhmYzcwNjNkOTUy
LzEvS0pEYWRscVpuM0dZZGNVZTdQVEgxaFNLRzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+yZzO36
PhHg2BrYzbDK/bqZmQ68NQwM0mtSQy0APmxM5ich4BdMP0I+drTE16PnO/Mnhj4f
m+zaUxJuqBfYshlohgmTdUxG7kAt5BGayi7F58qtD53R1r6DfTzFCLhXXrldtg/6
A8/89OCCgI1MATw5YTQyrgWpteVyzoE90Esew8RY9Wn1onuBywSHLR8xR88I8OQP
2p5fbk47YokADlQ7XqO4SzfaQaJNHLlDbdyD2NuCle70SF3oYjrx1iNbr/5ZZIuj
CNbFxXZftsnTY1LQbgEFE5cIvRvgH+FemGkS/e+2+K+qpF2SqnQ5/KMe/Yg6EqkS
pH93UlcpLqe+Yg==
-----END CERTIFICATE-----
Generated at Wed May 14 12:03:00 2025 by rpki-client