Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
File: KPVnVJmD9DrdmYw26PeL0V9Fosw.mft (raw, json)
Hash identifier: Q3ZWHugQapHMEC3V6cy+Wc1QKpVt0JCiRB+0oeMk30c=
Subject key identifier: 4A:8F:5B:29:2E:A1:E8:0F:FE:23:1B:E2:06:4D:9A:F2:EE:BD:42:A4
Authority key identifier: 28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
Certificate issuer: /CN=28f567549983f43add998c36e8f78bd15f45a2cc
Certificate serial: 01969ED1106314D59F602CF1F8B53564691C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
Manifest number: 0B29
Signing time: Mon 05 May 2025 05:00:23 +0000
Manifest this update: Mon 05 May 2025 05:00:23 +0000
Manifest next update: Tue 06 May 2025 05:00:23 +0000
Files and hashes: 1: JQ4W3G2wBUo6PRPPv0dVzYu4y4w.roa (hash: JHM9O5mRc/9ugG6o1WcR1yYfnaT1Q2KD2tNJG5Hqsco=)
2: KPVnVJmD9DrdmYw26PeL0V9Fosw.crl (hash: dLbWeE+fJ42Z5aew7GC4HvnSCZTVREe4fYpl0uSQkHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:10:63:14:d5:9f:60:2c:f1:f8:b5:35:64:69:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f567549983f43add998c36e8f78bd15f45a2cc
Validity
Not Before: May 5 05:00:23 2025 GMT
Not After : May 6 05:00:23 2025 GMT
Subject: CN=4a8f5b292ea1e80ffe231be2064d9af2eebd42a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3e:04:f6:fe:8b:29:c8:14:b2:9a:5f:7c:ed:
4d:fa:23:63:4b:03:78:2e:4b:54:1d:e0:ac:b1:fd:
d3:41:e9:78:7c:43:51:75:ad:65:02:84:2a:53:77:
d7:c2:08:29:69:e6:14:3b:49:6b:98:43:5a:5a:96:
0e:d6:92:de:72:2c:b9:68:30:cc:14:42:1a:57:65:
af:23:6f:95:8a:ba:9f:f0:5e:bf:cf:ff:e4:29:c1:
0a:1e:bf:c4:16:bf:09:28:9e:0d:f1:81:6f:93:2f:
7b:c6:8b:e3:27:9d:8e:28:6a:8f:5a:b5:be:97:4a:
f8:ed:6d:0c:0e:f9:4f:1d:04:1e:89:29:47:fe:23:
3b:b1:81:e3:00:b1:79:75:54:5d:6b:58:30:6e:46:
49:0d:57:2a:65:49:bb:79:20:f4:9c:1f:14:9c:2c:
4a:2e:70:01:bf:c6:d3:d9:68:0f:1d:f4:6a:c0:5d:
41:68:b4:33:59:63:9e:e2:35:53:d3:a1:1a:6a:d2:
06:57:36:29:94:aa:cf:64:04:a7:93:6c:c1:a5:57:
d3:da:99:22:ee:06:ae:7c:ef:03:93:d2:92:9d:d5:
d5:52:01:84:e7:da:fb:98:89:76:7d:d0:31:b2:0a:
0b:7f:96:de:d9:1d:a9:cf:47:bd:a5:f8:e0:6c:df:
69:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8F:5B:29:2E:A1:E8:0F:FE:23:1B:E2:06:4D:9A:F2:EE:BD:42:A4
X509v3 Authority Key Identifier:
keyid:28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:67:2b:43:63:a3:b2:76:cc:ce:e6:09:66:06:3d:16:18:be:
1c:8f:1c:b3:2d:59:62:8b:b3:ff:e0:e5:fc:38:a2:1c:f6:5e:
5b:c5:c3:f3:3e:19:86:d7:fe:b1:86:b9:a7:fc:f9:be:8b:3b:
51:1d:43:1e:78:83:15:b6:21:67:db:d8:87:58:a4:0c:5b:12:
4f:23:ab:b0:02:2f:00:a4:63:27:f9:51:3f:61:20:1a:1b:d4:
94:c2:c0:43:b1:68:0b:78:f0:52:85:2c:0f:d4:f6:61:6c:f8:
17:17:1e:a5:38:95:cf:5f:1d:b7:a7:16:ae:6b:8c:25:ad:69:
7e:67:23:28:af:50:c2:63:10:19:35:e6:b5:9b:c7:72:41:ff:
b6:38:dd:55:27:aa:88:56:0f:39:6c:f9:c5:e2:8c:bf:2d:e4:
67:f9:23:5b:a1:21:1e:25:29:26:40:45:0f:c3:b8:7b:9d:09:
22:05:ea:b6:de:ce:ae:fc:ba:aa:ba:44:98:ef:22:79:85:ce:
86:0a:52:16:0b:3c:e4:2e:c6:e3:33:61:8b:21:d5:6f:59:1d:
d3:67:7a:16:42:06:64:a2:ab:f7:bb:ad:0f:e5:17:3a:2c:88:
81:30:e2:ef:4e:5e:28:c2:da:82:5e:d5:05:0b:f7:e0:3c:a8:
cb:a1:20:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZae0RBjFNWfYCzx+LU1ZGkcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZjU2NzU0OTk4M2Y0M2FkZDk5OGMzNmU4Zjc4YmQxNWY0
NWEyY2MwHhcNMjUwNTA1MDUwMDIzWhcNMjUwNTA2MDUwMDIzWjAzMTEwLwYDVQQD
Eyg0YThmNWIyOTJlYTFlODBmZmUyMzFiZTIwNjRkOWFmMmVlYmQ0MmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD4E9v6LKcgUsppffO1N+iNjSwN4
LktUHeCssf3TQel4fENRda1lAoQqU3fXwggpaeYUO0lrmENaWpYO1pLeciy5aDDM
FEIaV2WvI2+Virqf8F6/z//kKcEKHr/EFr8JKJ4N8YFvky97xovjJ52OKGqPWrW+
l0r47W0MDvlPHQQeiSlH/iM7sYHjALF5dVRda1gwbkZJDVcqZUm7eSD0nB8UnCxK
LnABv8bT2WgPHfRqwF1BaLQzWWOe4jVT06EaatIGVzYplKrPZASnk2zBpVfT2pki
7gaufO8Dk9KSndXVUgGE59r7mIl2fdAxsgoLf5be2R2pz0e9pfjgbN9pUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqPWykuoegP/iMb4gZNmvLuvUKkMB8GA1UdIwQY
MBaAFCj1Z1SZg/Q63ZmMNuj3i9FfRaLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1BWblZKbUQ5RHJkbVl3MjZQZUwwVjlGb3N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85Y2ZkOGUtMjNjZC00NDdhLTlkMmMt
ZDBiMTExYmE0MTQ4LzEvS1BWblZKbUQ5RHJkbVl3MjZQZUwwVjlGb3N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni85Y2ZkOGUtMjNjZC00NDdhLTlkMmMtZDBiMTExYmE0MTQ4
LzEvS1BWblZKbUQ5RHJkbVl3MjZQZUwwVjlGb3N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmcrQ2Oj
snbMzuYJZgY9Fhi+HI8csy1ZYouz/+Dl/DiiHPZeW8XD8z4Zhtf+sYa5p/z5vos7
UR1DHniDFbYhZ9vYh1ikDFsSTyOrsAIvAKRjJ/lRP2EgGhvUlMLAQ7FoC3jwUoUs
D9T2YWz4FxcepTiVz18dt6cWrmuMJa1pfmcjKK9QwmMQGTXmtZvHckH/tjjdVSeq
iFYPOWz5xeKMvy3kZ/kjW6EhHiUpJkBFD8O4e50JIgXqtt7Orvy6qrpEmO8ieYXO
hgpSFgs85C7G4zNhiyHVb1kd02d6FkIGZKKr97utD+UXOiyIgTDi705eKMLagl7V
BQv34Dyoy6Egww==
-----END CERTIFICATE-----
Generated at Mon May 5 08:43:46 2025 by rpki-client