Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
File: KJVkfZ_RahaU-AJuvod2DLUx6w4.mft (raw, json)
Hash identifier: sy+cIkb9h2ozb7eXdXorPWvuEmhW3CcdvgQTSBLy7YQ=
Subject key identifier: 3C:8E:8F:9C:04:01:B4:3C:76:4B:D0:61:56:A6:E5:33:82:F5:EB:7B
Authority key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
Certificate issuer: /CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Certificate serial: 01974BC4342D14A734AAFFFA5D2B90B1F68A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 19:00:38 +0000
Manifest this update: Sat 07 Jun 2025 19:00:38 +0000
Manifest next update: Sun 08 Jun 2025 19:00:38 +0000
Files and hashes: 1: 0HbGWRHIhLcfmf6kLXAQdepQymA.roa (hash: RFLCzQy5MXPE72eUiDWdR8f6HUuF1oAdf92PY+ZrIEU=)
2: KJVkfZ_RahaU-AJuvod2DLUx6w4.crl (hash: Itz4l+j2iSp2NheFMqxxfw9Ot1UGbyLY7ls8CPVBRQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:34:2d:14:a7:34:aa:ff:fa:5d:2b:90:b1:f6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Validity
Not Before: Jun 7 19:00:38 2025 GMT
Not After : Jun 8 19:00:38 2025 GMT
Subject: CN=3c8e8f9c0401b43c764bd06156a6e53382f5eb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:63:38:e1:fe:43:b2:9d:f9:e0:cc:91:9f:03:
40:d0:fc:3e:d5:6e:07:2b:48:10:42:36:6e:5a:1c:
70:73:df:4c:3a:ac:12:99:70:41:a1:70:7d:79:cb:
4d:ac:b9:0d:bb:14:e5:ad:74:4f:01:cc:08:bc:14:
b0:9d:eb:4b:ee:e2:6a:20:ce:f4:95:f0:39:32:60:
df:e5:fd:b7:e1:5c:3c:b7:0f:4c:79:fe:da:51:a3:
3e:e7:ff:c6:74:b5:67:c3:4c:f3:45:50:57:a1:ca:
ec:2d:08:e1:ec:51:09:54:dc:2b:1a:85:cb:94:c1:
49:0f:ef:58:8a:f3:ea:b1:a1:a7:d4:72:87:33:7c:
fb:53:55:d2:3e:80:38:45:7d:00:47:0f:ce:a4:04:
a9:be:49:69:82:96:9c:f1:d3:4a:06:9f:56:aa:e6:
19:5d:4b:45:15:de:b6:54:dc:06:b1:a7:0f:df:f5:
27:6a:67:01:72:aa:76:38:b7:34:cb:11:e4:42:dc:
09:37:90:ff:0f:f2:35:96:02:50:b6:19:1f:9b:02:
bc:af:9f:fc:36:0c:3f:bd:4d:49:5d:a6:74:35:c6:
b5:07:ae:c6:22:8c:bf:91:81:14:d0:62:2a:a4:b0:
34:80:cf:99:fa:98:bf:99:56:fe:d8:dd:14:c6:0d:
8d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8E:8F:9C:04:01:B4:3C:76:4B:D0:61:56:A6:E5:33:82:F5:EB:7B
X509v3 Authority Key Identifier:
keyid:28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:47:72:4a:de:69:f2:6a:9f:03:33:08:f1:f1:59:7a:65:3a:
70:0d:12:09:14:d5:54:58:26:20:64:7a:d8:c4:2e:2b:8c:27:
c0:05:37:fa:28:e8:99:02:76:e7:f5:f4:20:49:14:8e:df:3f:
a4:16:06:39:19:cd:89:e7:ca:bb:45:a0:8a:bd:55:eb:7b:15:
90:44:e4:05:c4:95:dc:6a:57:7e:bd:52:b5:61:76:62:4f:e5:
fa:02:f1:93:08:6a:c4:71:c3:82:8b:67:d0:68:88:c2:47:0e:
34:5d:4b:c6:64:3e:bd:4b:d1:08:c8:07:4a:3c:e1:e5:19:8a:
35:00:8d:e1:51:4a:35:0a:af:7e:ad:2a:64:7f:d1:a6:83:0e:
3e:97:ab:5d:74:3f:1e:a7:54:f9:13:35:d1:d0:e7:cd:14:ba:
a0:80:9b:b2:98:cd:77:aa:d2:65:bb:a5:f2:e1:ac:52:77:3f:
b9:e5:07:c7:31:a2:ba:1f:a0:29:96:f5:5a:da:80:4d:f3:d9:
a7:63:ee:cd:2a:47:44:b0:d0:32:0d:8f:a3:ea:66:aa:c0:5b:
70:49:62:95:64:9b:52:18:1f:3c:65:cf:10:e3:1f:6d:dc:1e:
69:46:84:6a:2b:4d:a4:47:f2:43:a0:79:e1:10:17:92:e3:40:
07:b7:bf:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLxDQtFKc0qv/6XSuQsfaKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTU2NDdkOWZkMTZhMTY5NGY4MDI2ZWJlODc3NjBjYjUz
MWViMGUwHhcNMjUwNjA3MTkwMDM4WhcNMjUwNjA4MTkwMDM4WjAzMTEwLwYDVQQD
EygzYzhlOGY5YzA0MDFiNDNjNzY0YmQwNjE1NmE2ZTUzMzgyZjVlYjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWM44f5Dsp354MyRnwNA0Pw+1W4H
K0gQQjZuWhxwc99MOqwSmXBBoXB9ectNrLkNuxTlrXRPAcwIvBSwnetL7uJqIM70
lfA5MmDf5f234Vw8tw9Mef7aUaM+5//GdLVnw0zzRVBXocrsLQjh7FEJVNwrGoXL
lMFJD+9YivPqsaGn1HKHM3z7U1XSPoA4RX0ARw/OpASpvklpgpac8dNKBp9WquYZ
XUtFFd62VNwGsacP3/UnamcBcqp2OLc0yxHkQtwJN5D/D/I1lgJQthkfmwK8r5/8
Ngw/vU1JXaZ0Nca1B67GIoy/kYEU0GIqpLA0gM+Z+pi/mVb+2N0Uxg2NwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyOj5wEAbQ8dkvQYVam5TOC9et7MB8GA1UdIwQY
MBaAFCiVZH2f0WoWlPgCbr6Hdgy1MesOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80ODk1NzYtNGRmYi00YTAzLWIwYTMt
ZWNjZGMwY2U3ZDE0LzEvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80ODk1NzYtNGRmYi00YTAzLWIwYTMtZWNjZGMwY2U3ZDE0
LzEvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtEdySt5p
8mqfAzMI8fFZemU6cA0SCRTVVFgmIGR62MQuK4wnwAU3+ijomQJ25/X0IEkUjt8/
pBYGORnNiefKu0Wgir1V63sVkETkBcSV3GpXfr1StWF2Yk/l+gLxkwhqxHHDgotn
0GiIwkcONF1LxmQ+vUvRCMgHSjzh5RmKNQCN4VFKNQqvfq0qZH/RpoMOPperXXQ/
HqdU+RM10dDnzRS6oICbspjNd6rSZbul8uGsUnc/ueUHxzGiuh+gKZb1WtqATfPZ
p2PuzSpHRLDQMg2Po+pmqsBbcElilWSbUhgfPGXPEOMfbdweaUaEaitNpEfyQ6B5
4RAXkuNAB7e/MA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:59 2025 by rpki-client