Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
File: KvD7S5rcsuyisQbeCok5YVlszRg.mft (raw, json)
Hash identifier: mreH+a7XIay9Ugp+WFQ1MHaIi4Jg6wiB9snQIFeOcc4=
Subject key identifier: BC:8F:62:C2:E5:D1:A5:B3:AD:03:A8:3A:15:E1:F3:D5:20:B3:9B:E7
Authority key identifier: 2A:F0:FB:4B:9A:DC:B2:EC:A2:B1:06:DE:0A:89:39:61:59:6C:CD:18
Certificate issuer: /CN=2af0fb4b9adcb2eca2b106de0a893961596ccd18
Certificate serial: 0196B06A150C3CE6BCEAE39BA07F613F4387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
Manifest number: 0BAF
Signing time: Thu 08 May 2025 15:01:04 +0000
Manifest this update: Thu 08 May 2025 15:01:04 +0000
Manifest next update: Fri 09 May 2025 15:01:04 +0000
Files and hashes: 1: KvD7S5rcsuyisQbeCok5YVlszRg.crl (hash: 8A71KdoezqWS0aF6Z/oQHWTB9ayRX/i1YCcaO7ZMQ4E=)
2: zXRn6qUdykmyNBlVs8F5lijyofI.roa (hash: ocGQIF9V1x5fsDLwah9aysnQL0wM33g0zDeGg9Z68IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:6a:15:0c:3c:e6:bc:ea:e3:9b:a0:7f:61:3f:43:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af0fb4b9adcb2eca2b106de0a893961596ccd18
Validity
Not Before: May 8 15:01:04 2025 GMT
Not After : May 9 15:01:04 2025 GMT
Subject: CN=bc8f62c2e5d1a5b3ad03a83a15e1f3d520b39be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:ec:dc:57:c6:fe:fd:43:75:ce:35:1a:84:
1b:d5:42:a6:d3:bc:66:34:42:0e:29:41:2a:26:58:
84:11:84:22:d8:c8:c0:59:aa:59:e3:d6:94:80:17:
88:82:72:07:e0:a7:1c:8f:13:7d:68:19:69:63:e5:
54:a5:10:6c:b0:52:cf:f2:a2:96:b4:9b:6d:19:1b:
83:5f:8b:18:29:f5:95:bd:5c:a3:e0:88:ac:6f:47:
16:a4:65:62:7b:48:6a:44:f8:52:33:7c:56:52:4f:
7d:b3:49:2d:3c:83:17:ed:c3:47:05:5a:d5:0a:53:
59:da:a5:d1:0b:95:95:83:09:92:92:83:b4:e6:27:
63:ae:74:3c:26:a4:27:ae:c6:30:c0:d5:f3:d2:9f:
cf:6d:94:94:19:cc:a4:7b:04:29:01:d2:15:2a:09:
05:88:b8:40:d5:e7:78:3a:ab:02:ac:79:9d:f4:ef:
e7:69:bd:26:3e:8e:19:98:95:b0:35:03:4b:56:ac:
04:3c:8b:6f:5c:7b:b1:24:ae:4e:62:08:51:79:bd:
4a:85:f9:4a:bb:97:81:2c:90:d8:d9:7a:23:be:9a:
2e:4c:f4:f3:73:1e:bd:70:1f:f6:39:75:97:9d:98:
48:e9:2b:82:97:c7:4e:be:d5:a3:ad:58:b6:4f:0d:
40:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8F:62:C2:E5:D1:A5:B3:AD:03:A8:3A:15:E1:F3:D5:20:B3:9B:E7
X509v3 Authority Key Identifier:
keyid:2A:F0:FB:4B:9A:DC:B2:EC:A2:B1:06:DE:0A:89:39:61:59:6C:CD:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b1:eb:89:e3:c2:dd:5b:34:99:f4:4a:ce:ee:9b:95:39:84:
aa:df:6d:a2:c9:76:d5:c1:49:4f:55:86:c9:13:de:65:7a:af:
b0:fa:22:55:55:bd:6e:5d:4f:9f:bd:88:1c:36:b7:a2:fa:d1:
e3:1b:3f:c6:9b:c3:bd:5e:ef:b0:cf:62:85:b9:bc:0a:d0:e7:
94:10:bd:42:2b:49:00:1f:3a:76:da:a0:af:da:32:53:9f:6a:
b6:9a:66:a5:2e:25:77:0c:c5:53:46:6f:61:78:8e:96:ad:b1:
4f:7d:45:88:f0:e1:f0:69:ab:6d:95:a6:4c:72:7e:da:7c:7a:
20:9c:07:e0:23:6a:c7:38:d7:0e:a7:dc:34:bf:00:36:a2:bd:
91:6c:ec:18:ff:8d:56:66:54:a4:5e:1b:09:25:78:b2:cd:c2:
97:ff:88:96:56:e6:ac:c7:d6:3e:06:56:65:bd:f0:c3:5a:09:
9e:8c:d0:a8:61:25:36:fa:9d:8b:85:58:d6:bc:28:68:2f:76:
4a:ee:23:f2:86:21:ce:bf:81:56:22:b4:f8:47:be:b3:19:c3:
77:89:f3:8e:ae:05:fa:32:a3:f0:77:76:31:37:e2:ec:af:1f:
b0:33:bc:95:d5:d8:3c:2f:c6:ac:cb:67:c5:7e:14:92:af:c8:
1a:13:6d:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZawahUMPOa86uOboH9hP0OHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZjBmYjRiOWFkY2IyZWNhMmIxMDZkZTBhODkzOTYxNTk2
Y2NkMTgwHhcNMjUwNTA4MTUwMTA0WhcNMjUwNTA5MTUwMTA0WjAzMTEwLwYDVQQD
EyhiYzhmNjJjMmU1ZDFhNWIzYWQwM2E4M2ExNWUxZjNkNTIwYjM5YmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGvs3FfG/v1Ddc41GoQb1UKm07xm
NEIOKUEqJliEEYQi2MjAWapZ49aUgBeIgnIH4KccjxN9aBlpY+VUpRBssFLP8qKW
tJttGRuDX4sYKfWVvVyj4Iisb0cWpGVie0hqRPhSM3xWUk99s0ktPIMX7cNHBVrV
ClNZ2qXRC5WVgwmSkoO05idjrnQ8JqQnrsYwwNXz0p/PbZSUGcykewQpAdIVKgkF
iLhA1ed4OqsCrHmd9O/nab0mPo4ZmJWwNQNLVqwEPItvXHuxJK5OYghReb1KhflK
u5eBLJDY2XojvpouTPTzcx69cB/2OXWXnZhI6SuCl8dOvtWjrVi2Tw1A7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyPYsLl0aWzrQOoOhXh89Ugs5vnMB8GA1UdIwQY
MBaAFCrw+0ua3LLsorEG3gqJOWFZbM0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3ZEN1M1cmNzdXlpc1FiZUNvazVZVmxzelJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yZWRmNDEtNDhlMC00MGFkLThlN2Mt
NWU5NTRhZjFkODBlLzEvS3ZEN1M1cmNzdXlpc1FiZUNvazVZVmxzelJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8yZWRmNDEtNDhlMC00MGFkLThlN2MtNWU5NTRhZjFkODBl
LzEvS3ZEN1M1cmNzdXlpc1FiZUNvazVZVmxzelJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbHriePC
3Vs0mfRKzu6blTmEqt9tosl21cFJT1WGyRPeZXqvsPoiVVW9bl1Pn72IHDa3ovrR
4xs/xpvDvV7vsM9ihbm8CtDnlBC9QitJAB86dtqgr9oyU59qtppmpS4ldwzFU0Zv
YXiOlq2xT31FiPDh8GmrbZWmTHJ+2nx6IJwH4CNqxzjXDqfcNL8ANqK9kWzsGP+N
VmZUpF4bCSV4ss3Cl/+IllbmrMfWPgZWZb3ww1oJnozQqGElNvqdi4VY1rwoaC92
Su4j8oYhzr+BViK0+Ee+sxnDd4nzjq4F+jKj8Hd2MTfi7K8fsDO8ldXYPC/GrMtn
xX4Ukq/IGhNtwQ==
-----END CERTIFICATE-----
Generated at Thu May 8 23:29:07 2025 by rpki-client