Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
File: kNPlNxtkq5QtbcugSt_yrnq3xxI.mft (raw, json)
Hash identifier: 7Id+05QUrZBu/kWiHorVZVO3AjzEJOh0JVWX9gNLy/M=
Subject key identifier: 43:F2:33:89:32:B9:E8:6A:02:97:3A:8D:83:E0:BF:5F:50:AA:5B:7A
Authority key identifier: 90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
Certificate issuer: /CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712
Certificate serial: 01974A7B1194DBD76F44B5DF2ABC8A9AA951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 13:01:08 +0000
Manifest this update: Sat 07 Jun 2025 13:01:08 +0000
Manifest next update: Sun 08 Jun 2025 13:01:08 +0000
Files and hashes: 1: 8qr5TNtGc99EM-QMiEzlHX-eukY.roa (hash: dcTHPs/n6VDmLIgcktF37rlPg3cwpYptx2bPoNDPRlM=)
2: kNPlNxtkq5QtbcugSt_yrnq3xxI.crl (hash: UTWmWoasvocXuV/j0GIqJ1urSj0kO+ZbzYagsNNEEAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:11:94:db:d7:6f:44:b5:df:2a:bc:8a:9a:a9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712
Validity
Not Before: Jun 7 13:01:08 2025 GMT
Not After : Jun 8 13:01:08 2025 GMT
Subject: CN=43f2338932b9e86a02973a8d83e0bf5f50aa5b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4c:df:6b:b6:fc:0a:8c:66:45:fe:d5:da:04:
d1:7b:76:fc:0a:e8:6a:11:b2:de:ee:48:77:cd:22:
16:fe:c6:52:ce:69:32:1f:0e:a2:e5:b7:66:47:97:
15:d6:fb:9d:42:56:d4:0c:da:3c:43:1e:9d:75:7a:
ac:e4:4f:0f:63:bb:c3:f2:0b:2a:5e:37:d1:a8:54:
1e:75:e8:41:f8:d9:8a:04:dd:dd:b5:f0:e6:58:a5:
fa:77:81:2d:df:b7:1d:50:07:76:97:08:ef:5d:8c:
c6:dd:bd:e9:01:cd:fe:e0:85:ec:26:a9:d9:0e:3f:
89:f3:36:43:23:50:08:33:9f:24:7b:b7:d5:86:57:
f1:7f:24:e9:53:1f:63:63:80:1a:da:1b:b5:0a:fc:
d1:ab:10:88:74:97:24:de:a5:ce:19:9c:ca:d6:51:
af:89:1a:bf:6b:b5:dc:c5:54:37:e1:87:14:03:6a:
25:8f:5a:5f:75:72:35:69:70:7a:0d:e7:a1:25:71:
66:1f:70:bb:ed:d8:b2:e1:d7:65:d9:af:53:6f:34:
ff:b0:50:6f:6a:f8:b6:1a:64:7a:25:82:5e:1b:ff:
1f:ba:55:60:90:48:2b:64:c5:32:db:fa:3b:41:da:
9f:d8:2c:fa:9b:48:46:4c:b2:78:eb:68:30:76:b5:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F2:33:89:32:B9:E8:6A:02:97:3A:8D:83:E0:BF:5F:50:AA:5B:7A
X509v3 Authority Key Identifier:
keyid:90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a7:26:99:82:ba:0e:1e:7b:3d:1a:c6:77:6c:d6:1a:6e:5a:
67:89:80:f7:c9:a9:93:93:6c:63:78:89:01:01:8c:5e:94:02:
dd:dd:6f:72:a8:9a:7d:65:9f:20:02:b9:91:ee:fb:90:e6:c7:
27:82:67:a4:92:36:44:d1:5e:85:9a:1f:1f:94:96:e1:62:a0:
96:1e:9f:e8:d6:22:91:68:d7:f7:a7:89:76:2d:a5:14:b2:1f:
fa:b1:12:c0:ec:88:9c:27:d0:16:17:f2:32:fe:be:1b:e6:7e:
ef:aa:2e:87:e2:c4:c9:45:41:27:2a:65:df:19:c1:7f:1c:55:
c1:dc:c6:da:21:21:73:b7:21:f2:3f:c9:a9:00:22:56:90:20:
bd:0e:66:36:ca:4a:c9:30:95:8a:a5:76:cc:94:15:bc:23:a8:
91:45:96:aa:7c:98:6d:e7:71:1f:3f:00:66:25:28:ad:67:e6:
16:e3:c1:18:84:72:64:d5:3a:94:3a:4f:36:8b:46:3c:24:30:
b6:52:8c:8b:e9:bc:93:2f:6a:5c:eb:cf:78:4a:ca:62:58:81:
25:27:91:59:1c:23:49:6d:08:06:e4:61:65:c6:71:a1:5b:de:
84:d7:72:27:05:0e:7a:a3:2c:cc:98:f7:48:d2:86:f7:42:a3:
03:cd:f5:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKexGU29dvRLXfKryKmqlRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZDNlNTM3MWI2NGFiOTQyZDZkY2JhMDRhZGZmMmFlN2Fi
N2M3MTIwHhcNMjUwNjA3MTMwMTA4WhcNMjUwNjA4MTMwMTA4WjAzMTEwLwYDVQQD
Eyg0M2YyMzM4OTMyYjllODZhMDI5NzNhOGQ4M2UwYmY1ZjUwYWE1YjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUzfa7b8CoxmRf7V2gTRe3b8Cuhq
EbLe7kh3zSIW/sZSzmkyHw6i5bdmR5cV1vudQlbUDNo8Qx6ddXqs5E8PY7vD8gsq
XjfRqFQedehB+NmKBN3dtfDmWKX6d4Et37cdUAd2lwjvXYzG3b3pAc3+4IXsJqnZ
Dj+J8zZDI1AIM58ke7fVhlfxfyTpUx9jY4Aa2hu1CvzRqxCIdJck3qXOGZzK1lGv
iRq/a7XcxVQ34YcUA2olj1pfdXI1aXB6DeehJXFmH3C77diy4ddl2a9TbzT/sFBv
avi2GmR6JYJeG/8fulVgkEgrZMUy2/o7Qdqf2Cz6m0hGTLJ462gwdrX1twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPyM4kyuehqApc6jYPgv19Qqlt6MB8GA1UdIwQY
MBaAFJDT5TcbZKuULW3LoErf8q56t8cSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva05QbE54dGtxNVF0YmN1Z1N0X3lybnEzeHhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jMTM5YTQtNmRhMi00MzI5LWFhZTIt
YTE3ODgyYjkyNmEwLzEva05QbE54dGtxNVF0YmN1Z1N0X3lybnEzeHhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9jMTM5YTQtNmRhMi00MzI5LWFhZTItYTE3ODgyYjkyNmEw
LzEva05QbE54dGtxNVF0YmN1Z1N0X3lybnEzeHhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqcmmYK6
Dh57PRrGd2zWGm5aZ4mA98mpk5NsY3iJAQGMXpQC3d1vcqiafWWfIAK5ke77kObH
J4JnpJI2RNFehZofH5SW4WKglh6f6NYikWjX96eJdi2lFLIf+rESwOyInCfQFhfy
Mv6+G+Z+76ouh+LEyUVBJypl3xnBfxxVwdzG2iEhc7ch8j/JqQAiVpAgvQ5mNspK
yTCViqV2zJQVvCOokUWWqnyYbedxHz8AZiUorWfmFuPBGIRyZNU6lDpPNotGPCQw
tlKMi+m8ky9qXOvPeErKYliBJSeRWRwjSW0IBuRhZcZxoVvehNdyJwUOeqMszJj3
SNKG90KjA831kA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:16:45 2025 by rpki-client