Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
File: kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft (raw, json)
Hash identifier: EgRx8nzFkEIpkUY4z7211NQx8uR/6cOybAJIYHUO70I=
Subject key identifier: 8F:1C:C8:32:55:77:E7:43:4D:73:A1:72:3F:1A:30:5C:96:CA:20:80
Authority key identifier: 90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78
Certificate issuer: /CN=90afdcff7de3a65947631f92c67e272767194478
Certificate serial: 01974779ABC6B7B947694717BFECE56DDB5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 23:00:45 +0000
Manifest this update: Fri 06 Jun 2025 23:00:45 +0000
Manifest next update: Sat 07 Jun 2025 23:00:45 +0000
Files and hashes: 1: ejRJ31S7gTZphcMPp--rX-fthA4.roa (hash: K6orC9qH9AXgz/q6yHBYuSENvrxco32U8VdUBQRxDgA=)
2: kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl (hash: A+Q/gsqrgEhSTG6U5/bIHlmdfABCKeTNfJJact/3/Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:ab:c6:b7:b9:47:69:47:17:bf:ec:e5:6d:db:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90afdcff7de3a65947631f92c67e272767194478
Validity
Not Before: Jun 6 23:00:45 2025 GMT
Not After : Jun 7 23:00:45 2025 GMT
Subject: CN=8f1cc8325577e7434d73a1723f1a305c96ca2080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:25:8d:22:eb:a9:4b:18:d2:8f:a1:b6:19:
68:36:2f:c4:84:ba:f4:34:5a:93:24:5b:19:50:0d:
80:af:50:89:f5:c1:97:34:50:5c:81:54:08:5b:e9:
d6:b6:e0:4c:b0:b2:cf:a2:83:7e:0c:c3:6f:c3:8c:
d0:71:5c:12:6c:1a:c2:66:0c:24:21:c6:41:05:4c:
ee:e0:f0:21:dd:4f:7c:84:28:fb:cd:0a:cd:a4:fa:
1b:42:fe:db:f6:11:a9:69:43:93:65:a1:85:d4:8e:
4e:17:60:57:60:1f:01:67:8f:d5:54:ef:70:e1:c5:
c5:c1:36:77:98:f2:a1:33:54:9c:7c:22:2b:c9:ce:
4c:54:b0:9a:7e:50:af:b1:c3:2a:fa:45:b1:7b:84:
de:47:6c:71:fc:2f:f1:6d:cc:71:62:d5:bf:0d:10:
f3:9d:12:49:0f:d4:89:45:b7:93:03:63:7c:51:1c:
7d:6f:6e:b9:8c:3c:f7:27:3e:56:f1:bc:0c:9d:af:
b0:58:1b:ca:bb:25:4a:07:f6:33:b4:24:38:03:53:
d8:cd:e9:fa:0e:74:8b:77:ce:d0:71:38:c1:d6:d4:
a3:7e:13:5a:35:1e:90:88:70:6b:71:e2:ac:b2:ba:
93:c7:e1:16:51:ca:34:47:52:f7:da:84:5c:0e:da:
08:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1C:C8:32:55:77:E7:43:4D:73:A1:72:3F:1A:30:5C:96:CA:20:80
X509v3 Authority Key Identifier:
keyid:90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:13:36:b7:37:eb:51:e8:28:1e:14:cd:35:1f:0c:be:79:ad:
90:b8:9c:c4:50:5a:f7:d8:7f:e7:4c:05:a5:fd:f1:3f:d9:41:
5c:c8:98:13:ae:bf:5d:25:6d:0a:e9:01:c0:0e:d3:f8:49:96:
68:95:06:e3:52:32:89:8c:65:c8:a1:1c:83:cf:d8:1f:a5:ae:
7d:11:68:ea:c6:40:63:18:a3:19:c5:84:8d:c2:d4:28:39:61:
50:b4:1b:cc:10:1f:80:b8:1c:b4:e1:e3:1d:c7:85:17:d7:3b:
30:ff:b9:ad:98:6f:5e:e4:37:71:35:d8:d6:83:c1:2e:57:ae:
74:d6:a8:92:18:bc:f6:ae:5d:e2:ee:6b:27:a3:c7:42:79:ae:
f2:ed:7b:ce:2c:2d:59:28:10:50:99:db:a9:af:59:12:29:e8:
37:a2:84:b5:fb:2d:32:8a:a6:39:d4:2c:9d:5f:4e:bb:b7:3b:
73:64:a1:60:4a:d9:a3:3c:03:1e:42:e7:a8:52:44:d6:56:2d:
68:c0:5f:7e:c9:3a:95:6f:ef:b2:3a:c8:a5:99:71:49:ab:c9:
2a:ad:17:09:19:f2:a4:a5:6e:ee:dd:18:91:46:17:a0:19:0e:
5a:27:65:e3:06:b7:2b:41:e8:07:12:57:22:95:49:59:47:26:
68:23:f3:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHeavGt7lHaUcXv+zlbdteMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYWZkY2ZmN2RlM2E2NTk0NzYzMWY5MmM2N2UyNzI3Njcx
OTQ0NzgwHhcNMjUwNjA2MjMwMDQ1WhcNMjUwNjA3MjMwMDQ1WjAzMTEwLwYDVQQD
Eyg4ZjFjYzgzMjU1NzdlNzQzNGQ3M2ExNzIzZjFhMzA1Yzk2Y2EyMDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7EljSLrqUsY0o+hthloNi/EhLr0
NFqTJFsZUA2Ar1CJ9cGXNFBcgVQIW+nWtuBMsLLPooN+DMNvw4zQcVwSbBrCZgwk
IcZBBUzu4PAh3U98hCj7zQrNpPobQv7b9hGpaUOTZaGF1I5OF2BXYB8BZ4/VVO9w
4cXFwTZ3mPKhM1ScfCIryc5MVLCaflCvscMq+kWxe4TeR2xx/C/xbcxxYtW/DRDz
nRJJD9SJRbeTA2N8URx9b265jDz3Jz5W8bwMna+wWBvKuyVKB/YztCQ4A1PYzen6
DnSLd87QcTjB1tSjfhNaNR6QiHBrceKssrqTx+EWUco0R1L32oRcDtoIMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8cyDJVd+dDTXOhcj8aMFyWyiCAMB8GA1UdIwQY
MBaAFJCv3P9946ZZR2MfksZ+JydnGUR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0tfY18zM2pwbGxIWXgtU3huNG5KMmNaUkhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lMDBkMWUtNGExOC00OTU2LTgyYTQt
MTkwYTVjOGQ5ZDk1LzEva0tfY18zM2pwbGxIWXgtU3huNG5KMmNaUkhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9lMDBkMWUtNGExOC00OTU2LTgyYTQtMTkwYTVjOGQ5ZDk1
LzEva0tfY18zM2pwbGxIWXgtU3huNG5KMmNaUkhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghM2tzfr
UegoHhTNNR8MvnmtkLicxFBa99h/50wFpf3xP9lBXMiYE66/XSVtCukBwA7T+EmW
aJUG41IyiYxlyKEcg8/YH6WufRFo6sZAYxijGcWEjcLUKDlhULQbzBAfgLgctOHj
HceFF9c7MP+5rZhvXuQ3cTXY1oPBLleudNaokhi89q5d4u5rJ6PHQnmu8u17ziwt
WSgQUJnbqa9ZEinoN6KEtfstMoqmOdQsnV9Ou7c7c2ShYErZozwDHkLnqFJE1lYt
aMBffsk6lW/vsjrIpZlxSavJKq0XCRnypKVu7t0YkUYXoBkOWidl4wa3K0HoBxJX
IpVJWUcmaCPzrA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:01:29 2025 by rpki-client