Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
File: KNyB6jid1qrE77w01S13jrp6f8Q.mft (raw, json)
Hash identifier: pTquB2sPhJyHETWZt5ouypeQo1a1BDng08mrt8XFpTE=
Subject key identifier: 42:9B:43:7F:85:4C:17:18:2F:A9:F8:14:A0:FA:12:E3:88:0B:86:A4
Authority key identifier: 28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
Certificate issuer: /CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Certificate serial: 0196C5A821885E041E1A198D2D6CC4ED072C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
Manifest number: 14BB
Signing time: Mon 12 May 2025 18:00:52 +0000
Manifest this update: Mon 12 May 2025 18:00:52 +0000
Manifest next update: Tue 13 May 2025 18:00:52 +0000
Files and hashes: 1: KNyB6jid1qrE77w01S13jrp6f8Q.crl (hash: HyCCel2yDZWiFW28w6tFXkrtCqJMDORDlpFZlZcSMHw=)
2: jzeNLpSr6ZsmMJ4zfkQyfVqA2rE.roa (hash: DE+RSjvcm7xMKntvmhh9CpWW/88iCje6f36L/NDszxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:21:88:5e:04:1e:1a:19:8d:2d:6c:c4:ed:07:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Validity
Not Before: May 12 18:00:52 2025 GMT
Not After : May 13 18:00:52 2025 GMT
Subject: CN=429b437f854c17182fa9f814a0fa12e3880b86a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:62:69:77:55:d3:01:4a:ad:54:e7:32:b0:
b1:e8:23:b2:e5:b5:d7:01:e6:98:57:e1:61:ac:0c:
c8:2f:99:45:cf:8d:10:a0:cf:c9:c2:d2:48:79:f3:
1d:d5:d6:8f:df:19:e4:66:61:0b:63:28:bf:54:6b:
5f:c4:f0:48:e4:83:22:67:52:d4:17:5f:07:04:32:
88:03:2f:2c:6b:62:09:42:27:17:17:6d:c3:eb:ca:
87:64:cb:1c:12:2a:46:1c:cd:ad:a2:23:d1:bd:95:
81:74:ea:b2:34:5b:f6:87:9b:53:11:e3:b8:d9:84:
c1:14:c1:60:0e:eb:86:1b:6e:ca:50:d6:7a:7d:05:
0e:93:43:3b:ed:70:c2:2d:ee:b6:67:69:5f:47:10:
55:ac:40:a2:b6:91:c5:09:d2:55:26:27:da:e2:21:
32:1c:1a:ff:20:97:29:b8:48:d7:be:cc:ae:dc:42:
e4:eb:4c:8d:28:fe:33:53:c1:cb:66:38:86:2f:5e:
1c:fb:69:d8:62:a4:60:c5:17:0d:fc:24:7b:80:3a:
21:1e:6b:9d:68:b4:79:94:0d:e6:1a:f8:7a:d9:b2:
7d:25:71:db:6e:a2:d0:1a:e5:4a:1c:04:b2:c5:3a:
11:52:00:e7:08:d0:c4:7a:eb:90:9f:83:ec:12:1f:
33:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9B:43:7F:85:4C:17:18:2F:A9:F8:14:A0:FA:12:E3:88:0B:86:A4
X509v3 Authority Key Identifier:
keyid:28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a4:b3:e0:fc:e5:d5:55:4a:8f:4c:64:93:4c:bf:f4:5e:36:
f3:77:8d:39:fb:8e:16:f5:4b:3b:24:92:8d:f8:66:3b:44:56:
54:70:12:1c:7b:7e:03:ff:29:b2:b6:52:bf:05:f7:1b:79:28:
f0:39:77:e2:85:50:37:c8:40:53:57:8e:fa:1a:a7:55:e2:6e:
39:8d:4c:f3:d8:ad:b8:9b:19:aa:d0:3a:7f:ca:2a:9c:06:4c:
6b:e1:98:7d:0e:18:65:58:1b:c6:27:96:a7:01:78:9c:31:74:
4f:37:84:a0:57:52:db:9d:7d:6d:d7:64:f5:f2:0a:95:c6:e2:
50:2e:67:2f:c0:05:06:94:18:97:26:dc:a9:73:09:f8:5b:ee:
e3:6d:ee:55:5f:c4:31:62:cb:ae:09:3e:c5:b0:af:d0:9b:cb:
3e:42:f1:6c:dc:a5:75:22:e6:e4:42:9a:d0:86:66:2b:ac:c8:
39:2a:97:d6:24:44:9c:13:70:92:49:9e:b2:01:e3:bb:a8:2f:
33:61:b9:98:9f:ea:07:52:3d:0b:0a:52:38:85:c7:52:eb:2e:
52:e2:27:50:00:1f:1b:3e:67:44:a4:18:55:f6:27:6c:f5:72:
68:63:4a:57:dd:cb:cd:33:54:9d:86:63:af:cd:3a:73:41:a0:
9f:01:1c:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFqCGIXgQeGhmNLWzE7QcsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZGM4MWVhMzg5ZGQ2YWFjNGVmYmMzNGQ1MmQ3NzhlYmE3
YTdmYzQwHhcNMjUwNTEyMTgwMDUyWhcNMjUwNTEzMTgwMDUyWjAzMTEwLwYDVQQD
Eyg0MjliNDM3Zjg1NGMxNzE4MmZhOWY4MTRhMGZhMTJlMzg4MGI4NmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcJiaXdV0wFKrVTnMrCx6COy5bXX
AeaYV+FhrAzIL5lFz40QoM/JwtJIefMd1daP3xnkZmELYyi/VGtfxPBI5IMiZ1LU
F18HBDKIAy8sa2IJQicXF23D68qHZMscEipGHM2toiPRvZWBdOqyNFv2h5tTEeO4
2YTBFMFgDuuGG27KUNZ6fQUOk0M77XDCLe62Z2lfRxBVrECitpHFCdJVJifa4iEy
HBr/IJcpuEjXvsyu3ELk60yNKP4zU8HLZjiGL14c+2nYYqRgxRcN/CR7gDohHmud
aLR5lA3mGvh62bJ9JXHbbqLQGuVKHASyxToRUgDnCNDEeuuQn4PsEh8zNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKbQ3+FTBcYL6n4FKD6EuOIC4akMB8GA1UdIwQY
MBaAFCjcgeo4ndaqxO+8NNUtd466en/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9iNjljNmEtYjc4OC00YTFmLTljNWQt
YzA3ZmZmNzQ2OTM4LzEvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9iNjljNmEtYjc4OC00YTFmLTljNWQtYzA3ZmZmNzQ2OTM4
LzEvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKSz4Pzl
1VVKj0xkk0y/9F4283eNOfuOFvVLOySSjfhmO0RWVHASHHt+A/8psrZSvwX3G3ko
8Dl34oVQN8hAU1eO+hqnVeJuOY1M89ituJsZqtA6f8oqnAZMa+GYfQ4YZVgbxieW
pwF4nDF0TzeEoFdS2519bddk9fIKlcbiUC5nL8AFBpQYlybcqXMJ+Fvu423uVV/E
MWLLrgk+xbCv0JvLPkLxbNyldSLm5EKa0IZmK6zIOSqX1iREnBNwkkmesgHju6gv
M2G5mJ/qB1I9CwpSOIXHUusuUuInUAAfGz5nRKQYVfYnbPVyaGNKV93LzTNUnYZj
r806c0GgnwEcFg==
-----END CERTIFICATE-----
Generated at Mon May 12 19:59:34 2025 by rpki-client