Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
File: KflnDuKjDqyMCjncR_96jNJHOwA.mft (raw, json)
Hash identifier: 4VlrUZG3/8JJmw8PcAOFCQlL8VM6avw/2RnmfARwgRU=
Subject key identifier: F8:52:69:C3:6E:86:C0:F4:34:69:D7:F4:9D:81:B3:D9:4E:34:83:B4
Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
Certificate issuer: /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Certificate serial: 0196C9171708D733B80C94D8F6A5879E2A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
Manifest number: 0D06
Signing time: Tue 13 May 2025 10:00:55 +0000
Manifest this update: Tue 13 May 2025 10:00:55 +0000
Manifest next update: Wed 14 May 2025 10:00:55 +0000
Files and hashes: 1: KflnDuKjDqyMCjncR_96jNJHOwA.crl (hash: Ff5c7e2jjXQXv2gbt4AZwow4RMardAanGNSIySFJBJE=)
2: mL9iMZ16_8ZjCy4qonDTON3ib5Q.roa (hash: ZVZsKyrcHGv4PPqTEb+ceebYDVLTESRPFX1GG8GQzE8=)
3: mUB9Mn63gmxSfZpMf68Tr-CQjA4.roa (hash: j5sd8G9co8tEBEb8Kjzqu6zB4AaZ/F0GaTIxGbtmjPc=)
4: y2LXjfv6XAO363F71AjmXKGlqgQ.roa (hash: 4mLPhNeJT0HKJvx3+B0TdXW/+X53H3DeeKwHTkudT30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:17:08:d7:33:b8:0c:94:d8:f6:a5:87:9e:2a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Validity
Not Before: May 13 10:00:55 2025 GMT
Not After : May 14 10:00:55 2025 GMT
Subject: CN=f85269c36e86c0f43469d7f49d81b3d94e3483b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6e:22:2f:07:8d:5a:b6:8b:f1:16:85:5d:7c:
fb:b8:68:ca:af:0b:a2:47:a0:d7:e8:d9:59:1b:f0:
90:43:23:8f:b1:54:10:10:8e:a3:a7:65:49:a7:36:
a2:a2:94:f7:c0:74:44:e5:3f:3d:3c:83:b9:2c:c2:
eb:aa:4b:ac:f7:9f:62:2e:dc:c5:3b:a4:bf:37:d6:
c3:24:bf:e0:61:78:52:0e:e7:45:1f:46:38:e2:cc:
1e:50:b9:d7:b9:a0:c7:df:d4:3b:26:ac:41:5f:73:
51:b6:e5:92:bc:22:20:1e:fc:63:d4:92:67:7b:5f:
39:f8:c9:c1:d8:6e:40:8d:93:35:3c:80:1b:1f:7d:
7b:37:f8:31:de:73:9e:5c:87:b3:7b:0c:e5:f8:d2:
ab:8a:83:7c:59:a6:dc:99:d1:36:ee:5d:74:ec:21:
9d:23:2a:37:f7:64:b7:f3:56:1b:41:e1:89:9d:15:
a6:d5:5c:d7:37:4c:38:4e:65:c7:1e:8c:6e:0b:dd:
2b:bf:e1:46:f3:2e:1b:6d:ae:f5:ed:47:97:3f:3d:
3e:10:f8:8e:51:23:dc:19:7a:38:21:5b:f2:31:f3:
57:36:0e:35:db:34:25:07:3f:bf:4f:97:72:8c:8d:
00:53:de:2e:2a:7d:2f:bb:c4:76:f5:0e:cf:c5:80:
e1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:52:69:C3:6E:86:C0:F4:34:69:D7:F4:9D:81:B3:D9:4E:34:83:B4
X509v3 Authority Key Identifier:
keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c4:b1:37:f7:1c:bb:7e:23:33:90:1a:ca:07:0a:4a:6f:4c:
cf:ef:32:f4:8d:ee:6e:3d:a2:51:6c:87:8e:27:85:93:b6:f5:
a2:ad:c4:a2:b0:5a:28:35:8b:a1:b4:70:cc:1d:55:be:ba:80:
26:e0:c4:06:e9:3b:1e:1d:eb:fa:29:6f:45:00:a8:e7:1a:fd:
39:c0:e1:6f:fb:3c:87:99:c4:e0:b2:ca:1b:ab:90:46:b9:4c:
bd:da:be:c8:4f:d5:8a:06:6e:47:ad:d3:6f:48:5c:6f:35:3a:
7f:4a:9a:c1:38:54:2e:5e:e1:19:91:e4:58:ef:bb:93:39:82:
88:c8:e8:2a:d8:7e:58:08:e2:c1:45:aa:4b:29:01:2f:8f:67:
ae:c4:6c:23:1d:1d:1b:56:9a:9d:7b:d7:b2:67:22:70:94:7a:
b2:67:40:ce:ca:13:74:d8:9a:63:be:94:a9:c8:a0:13:22:c1:
4a:d4:af:5f:bc:97:5c:81:99:46:f7:91:66:b7:85:fc:3f:ca:
a7:21:ac:6e:42:e9:74:fd:aa:c7:41:ed:29:c7:48:24:18:57:
42:c9:77:85:ef:19:df:0f:d9:68:cc:24:f6:f7:2c:e0:4f:69:
49:25:ee:e6:11:9a:97:be:24:57:a9:b3:25:5b:65:88:0d:bc:
13:6f:03:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJFxcI1zO4DJTY9qWHnipSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5Zjk2NzBlZTJhMzBlYWM4YzBhMzlkYzQ3ZmY3YThjZDI0
NzNiMDAwHhcNMjUwNTEzMTAwMDU1WhcNMjUwNTE0MTAwMDU1WjAzMTEwLwYDVQQD
EyhmODUyNjljMzZlODZjMGY0MzQ2OWQ3ZjQ5ZDgxYjNkOTRlMzQ4M2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW4iLweNWraL8RaFXXz7uGjKrwui
R6DX6NlZG/CQQyOPsVQQEI6jp2VJpzaiopT3wHRE5T89PIO5LMLrqkus959iLtzF
O6S/N9bDJL/gYXhSDudFH0Y44sweULnXuaDH39Q7JqxBX3NRtuWSvCIgHvxj1JJn
e185+MnB2G5AjZM1PIAbH317N/gx3nOeXIezewzl+NKrioN8WabcmdE27l107CGd
Iyo392S381YbQeGJnRWm1VzXN0w4TmXHHoxuC90rv+FG8y4bba717UeXPz0+EPiO
USPcGXo4IVvyMfNXNg412zQlBz+/T5dyjI0AU94uKn0vu8R29Q7PxYDhVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhSacNuhsD0NGnX9J2Bs9lONIO0MB8GA1UdIwQY
MBaAFCn5Zw7iow6sjAo53Ef/eozSRzsAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2ZsbkR1S2pEcXlNQ2puY1JfOTZqTkpIT3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yZmY3NmQtZjExNi00NDMwLTg0MDct
NmUyOWVmZGZkNGUzLzEvS2ZsbkR1S2pEcXlNQ2puY1JfOTZqTkpIT3dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8yZmY3NmQtZjExNi00NDMwLTg0MDctNmUyOWVmZGZkNGUz
LzEvS2ZsbkR1S2pEcXlNQ2puY1JfOTZqTkpIT3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMSxN/cc
u34jM5AaygcKSm9Mz+8y9I3ubj2iUWyHjieFk7b1oq3EorBaKDWLobRwzB1VvrqA
JuDEBuk7Hh3r+ilvRQCo5xr9OcDhb/s8h5nE4LLKG6uQRrlMvdq+yE/VigZuR63T
b0hcbzU6f0qawThULl7hGZHkWO+7kzmCiMjoKth+WAjiwUWqSykBL49nrsRsIx0d
G1aanXvXsmcicJR6smdAzsoTdNiaY76UqcigEyLBStSvX7yXXIGZRveRZreF/D/K
pyGsbkLpdP2qx0HtKcdIJBhXQsl3he8Z3w/ZaMwk9vcs4E9pSSXu5hGal74kV6mz
JVtliA28E28Dvw==
-----END CERTIFICATE-----
Generated at Tue May 13 20:42:56 2025 by rpki-client