Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
File: kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft (raw, json)
Hash identifier: dDGaRM5sEKb/xml1yRt/qyMo6NpmuTA8Wy/0RG6RzFc=
Subject key identifier: 74:61:0B:A2:AD:45:C7:03:20:81:98:19:DE:C1:88:C9:70:A9:8F:AC
Authority key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
Certificate issuer: /CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Certificate serial: 01974D7C3257C1CB782137635559E8ECC6BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 03:01:14 +0000
Manifest this update: Sun 08 Jun 2025 03:01:14 +0000
Manifest next update: Mon 09 Jun 2025 03:01:14 +0000
Files and hashes: 1: SuMbqKGSv1qKom1gMOOpsF5R60A.roa (hash: HQDAgM/9d4KyNdepm39greMFmuo/Jazn0GZwtBbpXbw=)
2: _Rwv4lbUJs8Qf1QGuOxJ2FBF-c4.roa (hash: 3ZyAz71Zk7+/HMhaF+5MnrlGpcuPtXopbpfn+/PpDpY=)
3: kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl (hash: bFbAOR5MFsYtfCfZqkOWcag5ONhM340dl1svwBz1WPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:32:57:c1:cb:78:21:37:63:55:59:e8:ec:c6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Validity
Not Before: Jun 8 03:01:14 2025 GMT
Not After : Jun 9 03:01:14 2025 GMT
Subject: CN=74610ba2ad45c70320819819dec188c970a98fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:a4:b7:f8:7e:57:25:ef:fc:92:93:b3:1d:
07:9f:5a:74:b8:42:4d:75:b6:bd:be:fc:55:31:6d:
1b:79:6e:cd:86:96:81:94:e3:d9:df:cb:c2:de:56:
19:ad:c6:2d:b9:cf:ed:2e:7e:c4:40:33:f0:cf:90:
a0:25:df:30:3e:7c:3a:85:02:fd:ac:ec:e3:2d:04:
2b:16:c6:2c:e1:5d:05:bd:7a:90:5f:70:02:09:00:
d4:5f:86:8f:ee:cd:f4:8c:25:36:86:f7:6e:3c:e9:
bf:f2:32:d9:c8:0f:f6:80:be:0c:b0:f7:ae:2d:d6:
b0:a2:13:51:b9:a3:99:27:99:4a:4e:ff:2b:ec:f4:
9f:95:e3:f2:df:23:71:c5:57:db:ec:5a:d6:d2:c3:
4a:51:d4:d1:2c:84:7e:2e:0e:01:6c:89:84:ae:77:
b8:75:90:38:55:93:6e:4c:35:05:95:90:0f:7b:17:
58:68:0e:37:57:e0:ca:25:f2:74:ee:29:f6:4b:a0:
2f:f8:95:11:8f:bf:b1:7d:47:76:72:36:c8:5a:54:
09:36:13:0e:e2:df:14:ed:29:dc:03:56:aa:c8:91:
bb:ed:c6:d8:e8:55:d3:8b:ab:e3:a2:ce:fc:f0:6b:
e7:6c:69:56:18:33:6f:a3:5c:58:76:1f:72:1d:a4:
a9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:61:0B:A2:AD:45:C7:03:20:81:98:19:DE:C1:88:C9:70:A9:8F:AC
X509v3 Authority Key Identifier:
keyid:90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e8:5c:2c:a5:f2:4f:e3:d0:4c:c5:05:d4:06:44:e3:b0:23:
0f:d0:78:f2:1d:ed:b6:05:b3:28:18:3c:01:4d:5e:6f:40:87:
ce:40:57:63:00:e8:0a:23:9a:22:ed:c8:82:18:6f:b2:bf:38:
de:f7:ab:48:f3:29:8a:a5:8b:27:f4:95:fc:72:e4:69:cf:4e:
5e:4c:44:e6:3d:34:34:9d:ed:31:27:f6:c2:ea:91:65:f9:f9:
51:4c:03:fd:3a:0a:b1:16:48:ae:71:9b:40:cc:f8:7d:53:cf:
18:c2:52:a9:68:0c:69:dc:af:c0:f6:7b:eb:27:56:77:26:3a:
6e:84:1e:97:ff:23:f8:a3:24:c1:6e:6b:00:fc:f4:bb:ce:27:
2c:8b:a8:59:36:70:87:42:f5:a1:b3:f0:19:15:d5:78:5b:92:
51:c8:3d:a4:d7:5a:6c:af:b9:71:a0:38:66:83:1f:df:80:af:
d7:3b:12:f6:42:1b:8a:bf:56:55:45:aa:b3:f5:92:88:f3:0e:
c9:48:dc:03:f2:39:f0:e7:70:25:7e:0b:af:fd:6c:d4:86:ba:
a5:66:ef:2e:39:10:2e:48:7b:0c:d0:cb:75:56:47:f1:e7:80:
ff:d1:48:8d:61:aa:a3:bb:04:75:0a:ca:1f:9e:72:25:39:28:
8f:54:c3:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNfDJXwct4ITdjVVno7Ma8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwM2VjNGM1MDJhNDJjNWJiZmRiNzBlYTlmNDQwY2ExNTAw
YWNjNTAwHhcNMjUwNjA4MDMwMTE0WhcNMjUwNjA5MDMwMTE0WjAzMTEwLwYDVQQD
Eyg3NDYxMGJhMmFkNDVjNzAzMjA4MTk4MTlkZWMxODhjOTcwYTk4ZmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu+kt/h+VyXv/JKTsx0Hn1p0uEJN
dba9vvxVMW0beW7NhpaBlOPZ38vC3lYZrcYtuc/tLn7EQDPwz5CgJd8wPnw6hQL9
rOzjLQQrFsYs4V0FvXqQX3ACCQDUX4aP7s30jCU2hvduPOm/8jLZyA/2gL4MsPeu
LdawohNRuaOZJ5lKTv8r7PSflePy3yNxxVfb7FrW0sNKUdTRLIR+Lg4BbImErne4
dZA4VZNuTDUFlZAPexdYaA43V+DKJfJ07in2S6Av+JURj7+xfUd2cjbIWlQJNhMO
4t8U7SncA1aqyJG77cbY6FXTi6vjos788GvnbGlWGDNvo1xYdh9yHaSp/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRhC6KtRccDIIGYGd7BiMlwqY+sMB8GA1UdIwQY
MBaAFJA+xMUCpCxbv9tw6p9EDKFQCsxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0Q3RXhRS2tMRnVfMjNEcW4wUU1vVkFLekZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MGM1NDgtNWNjNi00N2MzLTllOGYt
YmRkYjI5Zjg1ZmI4LzEva0Q3RXhRS2tMRnVfMjNEcW4wUU1vVkFLekZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MGM1NDgtNWNjNi00N2MzLTllOGYtYmRkYjI5Zjg1ZmI4
LzEva0Q3RXhRS2tMRnVfMjNEcW4wUU1vVkFLekZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIuhcLKXy
T+PQTMUF1AZE47AjD9B48h3ttgWzKBg8AU1eb0CHzkBXYwDoCiOaIu3Ighhvsr84
3verSPMpiqWLJ/SV/HLkac9OXkxE5j00NJ3tMSf2wuqRZfn5UUwD/ToKsRZIrnGb
QMz4fVPPGMJSqWgMadyvwPZ76ydWdyY6boQel/8j+KMkwW5rAPz0u84nLIuoWTZw
h0L1obPwGRXVeFuSUcg9pNdabK+5caA4ZoMf34Cv1zsS9kIbir9WVUWqs/WSiPMO
yUjcA/I58OdwJX4Lr/1s1Ia6pWbvLjkQLkh7DNDLdVZH8eeA/9FIjWGqo7sEdQrK
H55yJTkoj1TD3g==
-----END CERTIFICATE-----
Generated at Sun Jun 8 08:37:01 2025 by rpki-client