Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier: dmRRiy3UQRKTxPtms4VlkkB1tuU+0GGMcGtV1/4hrS4=
Subject key identifier: C9:F7:D8:10:7D:9E:63:A3:1D:4F:FD:14:E9:6B:CF:83:9B:36:BA:39
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 019746D50B3E78107AECB8100EA6ED9E4C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 20:00:56 +0000
Manifest this update: Fri 06 Jun 2025 20:00:56 +0000
Manifest next update: Sat 07 Jun 2025 20:00:56 +0000
Files and hashes: 1: CbRY4qO4S-WijK05eY2wCnYoQJU.roa (hash: +mTf7r6+zK/TdKHsfZ88i/cXxb9cvH9lfgC3dCfABuE=)
2: fJrFHPzcXBxu52oPqkGqKY4yJAk.roa (hash: 3hc352skG2gtrO+VgjnqkDCcrrWK6vetRgA/AknDSz8=)
3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: PGwfPOTIihIfl86wzarCQ9j+pwmSmmlKjqMBmuGMif8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d5:0b:3e:78:10:7a:ec:b8:10:0e:a6:ed:9e:4c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Jun 6 20:00:56 2025 GMT
Not After : Jun 7 20:00:56 2025 GMT
Subject: CN=c9f7d8107d9e63a31d4ffd14e96bcf839b36ba39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:f8:26:88:bf:21:b8:42:1d:f4:77:dd:09:
d9:d8:84:ca:e4:fb:29:ec:95:ac:e5:0c:e3:59:8a:
1a:9c:6f:f5:14:df:da:85:74:1e:73:c9:aa:4b:9a:
80:82:f8:f4:17:a1:56:17:0e:a5:af:b2:25:76:1a:
99:1f:dc:f6:a0:3e:5c:3f:0a:f2:8d:be:4c:1a:ca:
d0:b6:6a:c6:01:f4:47:be:11:98:2c:1f:9a:2a:4f:
d0:e2:81:e7:49:6e:ec:df:76:d0:36:be:d4:bc:ff:
d0:af:10:75:47:10:54:ef:85:44:87:23:62:a9:84:
0b:65:dd:9e:d3:81:ca:34:b9:56:ac:06:6f:06:bf:
33:81:a9:38:fb:70:16:a8:fd:a5:a9:35:0a:80:e6:
1a:d0:0f:cb:a3:a0:fb:97:c6:01:a4:e2:19:b1:45:
00:2e:4a:e6:71:c9:30:39:17:0c:88:d2:da:2d:20:
42:da:b4:27:18:15:3d:bc:85:8e:e4:35:27:85:b9:
5b:8e:33:a5:f3:26:c5:91:1b:db:94:2b:53:45:09:
ac:5a:91:43:90:81:de:35:b7:88:0f:a4:c0:c2:9a:
2f:46:5a:ed:62:e4:c7:fd:da:86:d1:ed:1a:83:1e:
a3:b4:55:2e:83:01:49:d2:a1:00:43:f4:2b:82:7a:
4b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F7:D8:10:7D:9E:63:A3:1D:4F:FD:14:E9:6B:CF:83:9B:36:BA:39
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:01:4c:34:f0:75:15:91:e4:b1:90:04:ab:77:e8:79:ee:f6:
10:f0:91:0b:4e:81:be:59:c2:36:47:48:84:60:89:27:db:8b:
7f:a4:95:79:1d:af:04:b4:99:23:04:db:9f:85:0f:6e:0e:cc:
07:4c:c8:da:29:9e:b0:e9:7c:a1:ce:ad:1b:f3:7d:2b:ae:e2:
60:b5:e9:9b:c5:c7:f1:ef:6c:c3:85:24:37:03:80:56:24:04:
46:10:a7:4d:1d:0e:1a:4c:60:6a:5f:71:35:a8:51:32:8b:0c:
f2:7e:9c:2e:61:7e:75:3d:88:2d:a9:95:df:18:1a:dc:f8:45:
02:8c:76:c3:a5:aa:cc:4c:b2:e6:78:d3:01:93:aa:cf:1f:39:
71:29:2f:7c:28:85:39:a5:c8:ee:68:24:ea:96:1f:1a:11:28:
91:c9:23:06:81:15:b3:f9:76:38:89:68:c4:ce:f5:5c:c8:96:
ab:47:b8:4e:b1:ff:fc:99:07:67:e7:8f:e8:69:17:49:ad:96:
8e:76:f0:48:aa:f9:04:43:77:59:c1:03:72:68:75:67:bd:d9:
e2:fc:e3:5d:9a:81:f1:56:9c:e4:27:a4:5a:1a:f3:2f:29:4c:
f7:2b:8e:6b:7e:0e:52:c9:ef:ce:13:59:45:82:68:e9:b6:ab:
d7:45:26:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdG1Qs+eBB67LgQDqbtnkyWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMWUzYzhkZTBhZGQ5ZGE5NWNmNDRkODlmNTBiZmRlN2Fl
MTlhNTcwHhcNMjUwNjA2MjAwMDU2WhcNMjUwNjA3MjAwMDU2WjAzMTEwLwYDVQQD
EyhjOWY3ZDgxMDdkOWU2M2EzMWQ0ZmZkMTRlOTZiY2Y4MzliMzZiYTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFj4Joi/IbhCHfR33QnZ2ITK5Psp
7JWs5QzjWYoanG/1FN/ahXQec8mqS5qAgvj0F6FWFw6lr7IldhqZH9z2oD5cPwry
jb5MGsrQtmrGAfRHvhGYLB+aKk/Q4oHnSW7s33bQNr7UvP/QrxB1RxBU74VEhyNi
qYQLZd2e04HKNLlWrAZvBr8zgak4+3AWqP2lqTUKgOYa0A/Lo6D7l8YBpOIZsUUA
LkrmcckwORcMiNLaLSBC2rQnGBU9vIWO5DUnhblbjjOl8ybFkRvblCtTRQmsWpFD
kIHeNbeID6TAwpovRlrtYuTH/dqG0e0agx6jtFUugwFJ0qEAQ/QrgnpL3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMn32BB9nmOjHU/9FOlrz4ObNro5MB8GA1UdIwQY
MBaAFJMePI3grdnalc9E2J9Qv9564ZpXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84NTJjZmQtZDU5Mi00YzJkLTk0Y2Yt
YjljYTc1NTVjMmM1LzEva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi84NTJjZmQtZDU5Mi00YzJkLTk0Y2YtYjljYTc1NTVjMmM1
LzEva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwFMNPB1
FZHksZAEq3foee72EPCRC06BvlnCNkdIhGCJJ9uLf6SVeR2vBLSZIwTbn4UPbg7M
B0zI2imesOl8oc6tG/N9K67iYLXpm8XH8e9sw4UkNwOAViQERhCnTR0OGkxgal9x
NahRMosM8n6cLmF+dT2ILamV3xga3PhFAox2w6WqzEyy5njTAZOqzx85cSkvfCiF
OaXI7mgk6pYfGhEokckjBoEVs/l2OIloxM71XMiWq0e4TrH//JkHZ+eP6GkXSa2W
jnbwSKr5BEN3WcEDcmh1Z73Z4vzjXZqB8Vac5CekWhrzLylM9yuOa34OUsnvzhNZ
RYJo6bar10UmVw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:30 2025 by rpki-client