Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
File: kP2KrhtuFZovqPA9ejGIoeGAcqA.mft (raw, json)
Hash identifier: 70iesQ0p7iqfRC+Xy/KdM5154Y2COR5sPQVTHCthYdE=
Subject key identifier: 63:FB:A9:0C:D4:E2:2D:43:C3:72:21:46:DE:B9:1A:76:B7:4D:F4:9D
Authority key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
Certificate issuer: /CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Certificate serial: 01974A7A5FCF564CFBEDA80BF2C12335424C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
Manifest number: 11EA
Signing time: Sat 07 Jun 2025 13:00:23 +0000
Manifest this update: Sat 07 Jun 2025 13:00:23 +0000
Manifest next update: Sun 08 Jun 2025 13:00:23 +0000
Files and hashes: 1: M-Lz3FCjDhBtf8lJAjoTZlL7SGA.roa (hash: zkL8K0BACxY6H8HDpNVgGyq7SYLZMemlKE7UDQfTAuo=)
2: kP2KrhtuFZovqPA9ejGIoeGAcqA.crl (hash: JdEBE3YnfeAGpStIu2GyX0ZaFDjmcTW1/84PuRBDQPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:5f:cf:56:4c:fb:ed:a8:0b:f2:c1:23:35:42:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Validity
Not Before: Jun 7 13:00:23 2025 GMT
Not After : Jun 8 13:00:23 2025 GMT
Subject: CN=63fba90cd4e22d43c3722146deb91a76b74df49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:9d:11:05:14:e5:db:6c:c1:ff:17:69:9f:
4d:93:b3:b8:fc:e8:5e:ea:13:39:b4:a2:36:b9:fa:
62:3c:99:71:f2:5f:b5:d9:ac:d7:f1:36:5e:db:e6:
86:c1:cd:46:4b:69:c0:2c:6e:96:cc:83:76:20:87:
ce:da:ab:6a:35:c1:11:5d:0d:c3:17:f9:45:75:21:
e1:aa:e5:cd:9f:2d:3b:84:61:ec:1f:ac:06:7b:6a:
d7:3c:dd:6e:5f:50:d9:81:36:59:ec:c3:8f:04:9a:
af:3a:b9:be:b9:19:6a:2c:f3:55:19:cc:2a:96:e7:
9b:75:fc:33:c6:71:bb:46:95:63:a8:c0:a3:9f:cd:
2b:ed:ec:a5:17:d2:46:dd:26:67:42:36:6b:ac:5b:
32:07:8c:26:04:70:3e:60:83:ce:39:98:b3:31:16:
d6:4c:17:e1:61:2b:83:6b:46:e2:97:5b:51:33:4e:
45:2e:c0:2f:ff:50:41:2d:dc:67:5c:53:9c:e4:af:
88:33:33:8c:81:ad:20:6c:4a:a6:98:d6:cd:6d:f6:
29:28:15:23:29:05:b4:8b:a6:1a:1f:7a:e4:0e:75:
bc:c4:d9:11:46:fa:2c:c7:ef:a8:98:7b:c2:87:e2:
e5:14:03:b7:4b:83:2c:04:0f:9a:23:ef:7b:32:e6:
db:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FB:A9:0C:D4:E2:2D:43:C3:72:21:46:DE:B9:1A:76:B7:4D:F4:9D
X509v3 Authority Key Identifier:
keyid:90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:70:df:58:76:25:4a:fd:5c:44:87:c7:f4:da:1f:6c:a4:d1:
82:18:97:24:a2:66:27:6a:46:a3:cf:b3:86:06:6f:7b:d1:18:
8e:1d:63:67:e3:a1:ea:ff:91:41:e8:8c:9f:ae:89:bf:56:7f:
3c:6a:be:6e:5c:be:be:7f:3b:d4:bb:43:b7:d9:5f:2f:0e:3b:
31:ba:71:ce:c9:28:97:04:c2:2f:df:75:ac:a1:87:c7:0a:95:
fd:8d:8d:73:53:ef:7b:70:4f:20:e3:89:ac:04:a0:81:61:9b:
49:0e:90:4c:cd:35:08:74:f2:4c:c9:2d:aa:5f:be:35:8d:94:
13:c0:ba:f9:05:81:89:12:26:f2:42:91:82:6f:3a:54:5b:95:
9e:41:35:4b:18:cd:1d:03:aa:ec:bb:43:dd:16:84:12:26:52:
14:83:28:bc:b2:2e:b7:0b:2a:54:5c:a2:46:e4:48:cb:64:3c:
8b:cc:c4:15:a7:fc:59:e2:d6:91:c3:de:8e:40:39:42:11:39:
a9:f1:dc:85:5a:ba:ad:fa:37:1d:e6:5c:96:90:1c:1c:69:16:
71:56:bc:b2:b5:2d:b0:01:02:ab:51:a3:e1:59:6b:a3:e2:76:
73:56:9e:a6:ac:0b:4e:47:4d:8d:df:a6:18:0f:54:df:dd:30:
ad:f0:57:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKel/PVkz77agL8sEjNUJMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZmQ4YWFlMWI2ZTE1OWEyZmE4ZjAzZDdhMzE4OGExZTE4
MDcyYTAwHhcNMjUwNjA3MTMwMDIzWhcNMjUwNjA4MTMwMDIzWjAzMTEwLwYDVQQD
Eyg2M2ZiYTkwY2Q0ZTIyZDQzYzM3MjIxNDZkZWI5MWE3NmI3NGRmNDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDWdEQUU5dtswf8XaZ9Nk7O4/Ohe
6hM5tKI2ufpiPJlx8l+12azX8TZe2+aGwc1GS2nALG6WzIN2IIfO2qtqNcERXQ3D
F/lFdSHhquXNny07hGHsH6wGe2rXPN1uX1DZgTZZ7MOPBJqvOrm+uRlqLPNVGcwq
luebdfwzxnG7RpVjqMCjn80r7eylF9JG3SZnQjZrrFsyB4wmBHA+YIPOOZizMRbW
TBfhYSuDa0bil1tRM05FLsAv/1BBLdxnXFOc5K+IMzOMga0gbEqmmNbNbfYpKBUj
KQW0i6YaH3rkDnW8xNkRRvosx++omHvCh+LlFAO3S4MsBA+aI+97MubbKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGP7qQzU4i1Dw3IhRt65Gna3TfSdMB8GA1UdIwQY
MBaAFJD9iq4bbhWaL6jwPXoxiKHhgHKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1AyS3JodHVGWm92cVBBOWVqR0lvZUdBY3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi81ZGZjNzYtZTdlYi00ZDM1LThhZDct
Nzk5MzU5MTExM2U0LzEva1AyS3JodHVGWm92cVBBOWVqR0lvZUdBY3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi81ZGZjNzYtZTdlYi00ZDM1LThhZDctNzk5MzU5MTExM2U0
LzEva1AyS3JodHVGWm92cVBBOWVqR0lvZUdBY3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3DfWHYl
Sv1cRIfH9NofbKTRghiXJKJmJ2pGo8+zhgZve9EYjh1jZ+Oh6v+RQeiMn66Jv1Z/
PGq+bly+vn871LtDt9lfLw47MbpxzskolwTCL991rKGHxwqV/Y2Nc1Pve3BPIOOJ
rASggWGbSQ6QTM01CHTyTMktql++NY2UE8C6+QWBiRIm8kKRgm86VFuVnkE1SxjN
HQOq7LtD3RaEEiZSFIMovLIutwsqVFyiRuRIy2Q8i8zEFaf8WeLWkcPejkA5QhE5
qfHchVq6rfo3HeZclpAcHGkWcVa8srUtsAECq1Gj4Vlro+J2c1aepqwLTkdNjd+m
GA9U390wrfBXTA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:11:04 2025 by rpki-client