Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
File: k89OeSfhBJZOTJb0QWSc40F0zjo.mft (raw, json)
Hash identifier: 43eOlyTRCNSRtsMZUg1lrM+6SQf9G3DPpjR26/H+8Us=
Subject key identifier: 85:0C:A7:DC:E8:21:E7:1C:D1:8C:DE:EF:5B:E3:42:1F:53:5A:D7:1E
Authority key identifier: 93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A
Certificate issuer: /CN=93cf4e7927e104964e4c96f441649ce34174ce3a
Certificate serial: 01974DE9FD0B07D2540FBB0054B8BF3874A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 05:01:09 +0000
Manifest this update: Sun 08 Jun 2025 05:01:09 +0000
Manifest next update: Mon 09 Jun 2025 05:01:09 +0000
Files and hashes: 1: DVEsULbgc1uy6V52nNRIcIhepiA.roa (hash: XNV6aUJyGeh2Aa9mxZ1t5TwCl8DNIg+I/K5KbgR9/Ys=)
2: k89OeSfhBJZOTJb0QWSc40F0zjo.crl (hash: lxVIajhKuGr6IWhPx0nOowTZ0Srx34xgsYPsFr255HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:fd:0b:07:d2:54:0f:bb:00:54:b8:bf:38:74:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93cf4e7927e104964e4c96f441649ce34174ce3a
Validity
Not Before: Jun 8 05:01:09 2025 GMT
Not After : Jun 9 05:01:09 2025 GMT
Subject: CN=850ca7dce821e71cd18cdeef5be3421f535ad71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1c:06:f0:40:30:4d:47:cd:13:73:77:47:03:
57:c9:03:1d:03:de:d5:9e:70:39:e7:d5:6b:f2:49:
72:f2:c1:7e:74:21:59:23:a9:7a:0a:0f:f0:62:9f:
10:6c:80:d4:86:a5:ae:d9:e6:a2:e8:1e:dc:a7:e4:
60:8a:b2:72:5d:b1:ba:fe:37:2a:75:9d:c0:08:d2:
75:d6:2d:a4:fb:92:da:41:89:50:e2:64:1f:51:5a:
4a:0d:af:95:94:c9:ba:98:0f:cf:da:b2:f6:dc:59:
4d:3d:7e:04:13:d2:ad:27:f9:14:6a:6e:61:47:7b:
e9:c1:c3:04:19:2c:13:09:7b:9c:4b:81:d5:de:2f:
f1:a5:28:5b:94:cb:4d:e4:ad:e0:3c:c8:4b:4e:40:
40:c9:f3:ea:df:74:d8:4a:d1:b4:94:89:a3:78:62:
7c:f7:ad:a8:15:c1:27:e0:84:3e:be:49:8b:17:11:
bd:2b:79:3f:b9:92:a2:7a:ca:43:9f:98:c2:8d:67:
58:e6:0d:2c:e2:f3:65:8d:0b:8b:fb:97:92:db:07:
74:bd:e1:a4:26:c4:eb:8d:d0:1e:05:f8:c7:7e:f7:
d7:02:8c:1f:bf:62:23:2e:cc:ab:97:a8:d4:8f:a3:
d0:54:78:3c:38:7b:d1:37:1a:b9:30:f6:f5:ec:93:
1a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0C:A7:DC:E8:21:E7:1C:D1:8C:DE:EF:5B:E3:42:1F:53:5A:D7:1E
X509v3 Authority Key Identifier:
keyid:93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:95:4a:87:0a:80:a1:c6:d3:a9:98:cd:ea:09:21:b7:cb:d5:
ff:5c:71:49:df:bf:55:fa:fd:8b:a5:e3:14:b8:a0:17:c8:ce:
bb:30:59:c6:b6:bc:84:67:bb:8e:66:64:3a:af:a4:f0:2c:e0:
ea:95:18:91:52:09:a3:fd:0c:1a:8f:b2:23:03:4f:02:17:73:
36:67:9f:96:91:a4:52:be:2a:46:1f:ae:79:a4:7f:e2:27:9e:
b2:f8:9f:16:6d:47:62:01:1c:dc:c6:82:08:27:2a:74:50:50:
b7:34:71:f6:26:9d:a3:23:87:89:01:a5:98:06:17:31:78:80:
29:60:06:a8:db:77:7f:f2:f3:9b:8c:31:5b:9d:26:20:4e:70:
fe:08:96:72:67:b0:82:93:3e:f3:c6:17:aa:79:83:d8:3c:bc:
41:f0:1d:99:6d:7d:42:1e:31:e5:5b:39:5a:83:1c:41:33:c9:
df:d9:e9:f1:9b:96:24:65:99:ee:d3:40:3d:f9:0c:4a:b6:48:
82:7d:d8:14:d7:d7:7c:5d:d2:f3:78:e9:58:91:e0:d3:e8:9d:
ed:5e:56:e0:78:e0:c9:63:b0:8a:bb:97:57:5a:af:06:0d:e8:
f2:72:03:84:92:c1:a9:1c:ad:dc:0c:05:7d:2e:0a:bb:e2:67:
e0:05:7a:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdN6f0LB9JUD7sAVLi/OHSiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzY2Y0ZTc5MjdlMTA0OTY0ZTRjOTZmNDQxNjQ5Y2UzNDE3
NGNlM2EwHhcNMjUwNjA4MDUwMTA5WhcNMjUwNjA5MDUwMTA5WjAzMTEwLwYDVQQD
Eyg4NTBjYTdkY2U4MjFlNzFjZDE4Y2RlZWY1YmUzNDIxZjUzNWFkNzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BwG8EAwTUfNE3N3RwNXyQMdA97V
nnA559Vr8kly8sF+dCFZI6l6Cg/wYp8QbIDUhqWu2eai6B7cp+RgirJyXbG6/jcq
dZ3ACNJ11i2k+5LaQYlQ4mQfUVpKDa+VlMm6mA/P2rL23FlNPX4EE9KtJ/kUam5h
R3vpwcMEGSwTCXucS4HV3i/xpShblMtN5K3gPMhLTkBAyfPq33TYStG0lImjeGJ8
962oFcEn4IQ+vkmLFxG9K3k/uZKiespDn5jCjWdY5g0s4vNljQuL+5eS2wd0veGk
JsTrjdAeBfjHfvfXAowfv2IjLsyrl6jUj6PQVHg8OHvRNxq5MPb17JMatwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUMp9zoIecc0Yze71vjQh9TWtceMB8GA1UdIwQY
MBaAFJPPTnkn4QSWTkyW9EFknONBdM46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazg5T2VTZmhCSlpPVEpiMFFXU2M0MEYwempvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wYjAwMDctZDMwYS00OTk0LWFiMDAt
YmQ1YjRlNTQ3MTJiLzEvazg5T2VTZmhCSlpPVEpiMFFXU2M0MEYwempvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wYjAwMDctZDMwYS00OTk0LWFiMDAtYmQ1YjRlNTQ3MTJi
LzEvazg5T2VTZmhCSlpPVEpiMFFXU2M0MEYwempvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpVKhwqA
ocbTqZjN6gkht8vV/1xxSd+/Vfr9i6XjFLigF8jOuzBZxra8hGe7jmZkOq+k8Czg
6pUYkVIJo/0MGo+yIwNPAhdzNmeflpGkUr4qRh+ueaR/4ieesvifFm1HYgEc3MaC
CCcqdFBQtzRx9iadoyOHiQGlmAYXMXiAKWAGqNt3f/Lzm4wxW50mIE5w/giWcmew
gpM+88YXqnmD2Dy8QfAdmW19Qh4x5Vs5WoMcQTPJ39np8ZuWJGWZ7tNAPfkMSrZI
gn3YFNfXfF3S83jpWJHg0+id7V5W4HjgyWOwiruXV1qvBg3o8nIDhJLBqRyt3AwF
fS4Ku+Jn4AV6ew==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:37:24 2025 by rpki-client