Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
File: kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft (raw, json)
Hash identifier: yzA2mh3w4eKjXfiehzaOobLCstguPYcUnlugHBxm83U=
Subject key identifier: 84:88:E0:89:CE:47:36:4B:38:21:CF:FF:92:BE:B9:22:19:46:F0:11
Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
Certificate issuer: /CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Certificate serial: 01974A43708B198C82663C65CCFE04756891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
Manifest number: 0470
Signing time: Sat 07 Jun 2025 12:00:23 +0000
Manifest this update: Sat 07 Jun 2025 12:00:23 +0000
Manifest next update: Sun 08 Jun 2025 12:00:23 +0000
Files and hashes: 1: URATm4jCOgD3H4rtfNMfks3a2e4.roa (hash: nWiO/SjK1FVtNWytxucXj9X6RnD6dSqkVKhRqQz1kHk=)
2: hOs9nIaVlgbTGSRX2cF-L9A292Q.roa (hash: 2H7Eh3LEgJqf2jRLorxXZOs950af5ymfMFZuDGRu8KE=)
3: kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl (hash: oHgqwikUNqPH91Gzw7efMhljvZDaCruQPwhG4GmpM84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:70:8b:19:8c:82:66:3c:65:cc:fe:04:75:68:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Validity
Not Before: Jun 7 12:00:23 2025 GMT
Not After : Jun 8 12:00:23 2025 GMT
Subject: CN=8488e089ce47364b3821cfff92beb9221946f011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3e:83:9a:62:3c:0d:fe:cc:74:71:35:ef:36:
22:9d:ea:cf:32:3c:87:c9:89:06:21:d5:83:d1:08:
d4:82:ad:06:e6:79:55:c8:74:11:c0:5f:a8:f4:f0:
a2:be:80:01:64:ba:59:96:27:37:23:3d:5b:60:8f:
fe:0d:51:f2:d2:49:6b:17:a0:f4:e8:8e:65:d4:90:
33:32:d7:c9:6c:6d:d5:23:31:48:b4:8c:2b:e3:d4:
65:d7:58:bb:23:f7:5c:57:e9:f6:05:e3:54:70:ee:
22:f5:b7:36:ae:7d:fb:64:c0:b6:4d:b6:bb:56:a3:
37:08:7d:69:d7:e0:3e:c2:83:ef:12:78:35:0a:eb:
62:5f:88:d7:37:1d:0c:49:b5:49:cd:81:06:18:3a:
30:67:b3:05:78:fe:54:0d:49:86:44:db:8b:bf:f2:
86:ae:d4:ae:cf:9f:78:64:dd:ca:e0:3e:d5:42:d3:
d4:f9:0c:3a:6d:36:0b:d6:b9:28:e5:0c:38:f6:9f:
22:dc:3a:a6:e4:8c:e8:fa:b9:92:4d:2d:fa:b7:6a:
98:76:11:67:c0:31:7f:3f:2c:4a:9d:8d:68:0f:5b:
8e:5b:49:f9:ef:ff:ef:81:60:19:be:c4:64:d4:6d:
4c:ef:c3:4b:36:fd:7b:c3:1f:39:b9:5f:ce:f7:90:
74:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:88:E0:89:CE:47:36:4B:38:21:CF:FF:92:BE:B9:22:19:46:F0:11
X509v3 Authority Key Identifier:
keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b8:36:1d:56:18:bf:a4:98:2e:7d:ac:2e:ed:27:98:2b:6d:
81:7b:95:e5:b0:7c:a1:c1:4e:9d:33:8c:12:2f:eb:70:21:1d:
ab:fa:dd:58:13:b4:e0:47:d4:b2:f3:95:09:58:2d:8a:2e:67:
05:3f:7d:8a:62:5a:40:61:3c:20:95:53:87:93:8c:11:cc:2f:
6b:33:80:91:39:5d:3c:8a:5a:24:0f:84:7a:10:81:54:ca:5b:
d0:6d:49:93:e2:35:92:f7:9d:fb:d6:f3:83:65:30:e2:48:a7:
67:4c:47:f8:fe:7f:07:74:94:32:59:c0:a0:2d:ba:7d:ea:1a:
d7:63:d7:15:a9:75:6b:a2:9b:4e:c7:25:9f:17:db:27:dd:2e:
c0:7c:e9:36:0e:0c:af:81:c4:c9:d2:4b:7a:1f:a9:2b:e6:0e:
f3:39:aa:62:61:c7:b4:3a:97:85:b7:32:3c:b3:7c:26:a7:d9:
61:60:9e:5f:9b:b5:fb:1f:0d:ad:b6:77:51:e0:4b:2f:08:af:
43:47:53:cd:93:96:1c:fb:2d:80:76:53:de:4d:d5:a7:2c:db:
0d:77:8a:70:fa:9d:44:71:9c:bf:25:2b:0d:4a:eb:be:07:2a:
39:a9:0f:19:fa:60:8b:92:6b:69:e4:94:89:4e:10:ca:c9:99:
71:a6:fd:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ3CLGYyCZjxlzP4EdWiRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNjU4N2E3YzQyYzI2MWZhMjU0YjBiODJlN2JjMDcxOWNj
NjQ4MTIwHhcNMjUwNjA3MTIwMDIzWhcNMjUwNjA4MTIwMDIzWjAzMTEwLwYDVQQD
Eyg4NDg4ZTA4OWNlNDczNjRiMzgyMWNmZmY5MmJlYjkyMjE5NDZmMDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T6DmmI8Df7MdHE17zYinerPMjyH
yYkGIdWD0QjUgq0G5nlVyHQRwF+o9PCivoABZLpZlic3Iz1bYI/+DVHy0klrF6D0
6I5l1JAzMtfJbG3VIzFItIwr49Rl11i7I/dcV+n2BeNUcO4i9bc2rn37ZMC2Tba7
VqM3CH1p1+A+woPvEng1CutiX4jXNx0MSbVJzYEGGDowZ7MFeP5UDUmGRNuLv/KG
rtSuz594ZN3K4D7VQtPU+Qw6bTYL1rko5Qw49p8i3Dqm5Izo+rmSTS36t2qYdhFn
wDF/PyxKnY1oD1uOW0n57//vgWAZvsRk1G1M78NLNv17wx85uV/O95B0BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISI4InORzZLOCHP/5K+uSIZRvARMB8GA1UdIwQY
MBaAFJJlh6fELCYfolSwuC57wHGcxkgSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iZDIwMDUtZmI3Yi00MDUyLWIzZjIt
ODhmYTNiNmViMDA2LzEva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9iZDIwMDUtZmI3Yi00MDUyLWIzZjItODhmYTNiNmViMDA2
LzEva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrg2HVYY
v6SYLn2sLu0nmCttgXuV5bB8ocFOnTOMEi/rcCEdq/rdWBO04EfUsvOVCVgtii5n
BT99imJaQGE8IJVTh5OMEcwvazOAkTldPIpaJA+EehCBVMpb0G1Jk+I1kved+9bz
g2Uw4kinZ0xH+P5/B3SUMlnAoC26feoa12PXFal1a6KbTsclnxfbJ90uwHzpNg4M
r4HEydJLeh+pK+YO8zmqYmHHtDqXhbcyPLN8JqfZYWCeX5u1+x8NrbZ3UeBLLwiv
Q0dTzZOWHPstgHZT3k3VpyzbDXeKcPqdRHGcvyUrDUrrvgcqOakPGfpgi5JraeSU
iU4QysmZcab9HA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 17:35:56 2025 by rpki-client