Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
File: KRlGGERUmCRQC3zRxFHYJLpuVnc.mft (raw, json)
Hash identifier: AEPzhkz6nUtghrQVo+jU9Y2mmKClPW4e/rEpqfS6qYo=
Subject key identifier: F0:B5:62:A8:A1:57:FF:66:7F:32:3C:38:21:C9:4D:3D:2B:D1:B6:93
Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
Certificate issuer: /CN=2919461844549824500b7cd1c451d824ba6e5677
Certificate serial: 019751FD26B0048EFAB8324B4411091EF1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
Manifest number: 100C
Signing time: Mon 09 Jun 2025 00:00:34 +0000
Manifest this update: Mon 09 Jun 2025 00:00:34 +0000
Manifest next update: Tue 10 Jun 2025 00:00:34 +0000
Files and hashes: 1: CJLUw4mYIg1UnnSDFK1Ml0o--zU.roa (hash: Tsn7ljuanQRqC13NxQKS7gSB56PsLYk7GAqdYRh4Uz0=)
2: KRlGGERUmCRQC3zRxFHYJLpuVnc.crl (hash: ZfiuEWC/gebbuhLK7PdZo2UOrm6tKfKfFubiHy65ZDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:fd:26:b0:04:8e:fa:b8:32:4b:44:11:09:1e:f1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677
Validity
Not Before: Jun 9 00:00:34 2025 GMT
Not After : Jun 10 00:00:34 2025 GMT
Subject: CN=f0b562a8a157ff667f323c3821c94d3d2bd1b693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:50:9a:a1:b8:20:a8:6f:3d:cc:e7:ac:82:
89:2d:17:bc:24:59:45:d8:fd:77:2a:ab:f0:89:5a:
2a:d2:d2:fc:9d:cc:0c:b8:69:2b:bf:07:b7:9c:53:
e6:f1:be:0d:e5:75:73:bb:32:de:16:de:e5:13:00:
97:df:0f:2a:67:3a:bc:dc:56:12:72:7b:98:5d:05:
78:fe:46:3d:d8:4d:da:a6:e2:e4:12:90:d3:df:6a:
68:02:38:af:fc:ab:79:76:cd:b6:e2:d2:f2:67:30:
a0:d5:88:13:1e:55:63:2a:30:0a:0c:f7:3c:6b:2e:
21:80:fc:c4:8c:c3:f8:7e:02:27:79:2a:98:18:64:
81:25:d5:e6:ec:f9:61:6f:e8:4a:d0:53:d6:72:c5:
79:89:03:59:0a:40:c8:52:9f:40:74:c4:ca:f2:a2:
b9:92:f8:0b:45:d8:c9:07:f2:03:22:44:b7:65:7c:
30:ed:58:51:db:4a:45:49:f5:9c:0f:76:d6:79:47:
f9:2c:ab:7f:71:b4:1c:aa:e3:94:55:a5:1b:78:85:
56:2f:14:86:e6:fd:e7:e4:66:3b:9b:95:26:aa:68:
21:2e:eb:84:51:b9:06:9e:e0:f9:80:f0:d3:b2:be:
8e:e0:4b:96:1c:6a:da:8e:f4:8e:50:e8:6e:06:c7:
d4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B5:62:A8:A1:57:FF:66:7F:32:3C:38:21:C9:4D:3D:2B:D1:B6:93
X509v3 Authority Key Identifier:
keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:2e:1e:e1:61:56:27:fe:37:c1:06:32:b4:73:39:00:f1:39:
17:68:de:86:7e:ed:2b:09:90:d5:42:c5:07:ba:d6:a6:24:6e:
05:ef:af:3d:93:88:67:5e:f6:49:2e:4b:de:6b:55:aa:5d:a5:
66:ec:a9:9a:06:9b:bd:9f:3a:dd:e2:31:25:58:cc:45:fa:31:
df:d0:15:c8:4d:7a:33:8d:0b:05:04:94:69:2c:9b:e1:6e:0c:
54:f3:c1:df:63:2f:c4:d4:cb:a9:5a:e9:00:9d:ed:aa:48:78:
a3:4a:c8:ac:a3:7e:fb:51:0d:17:52:8b:17:3e:7d:3c:90:d5:
1c:db:cf:58:e6:da:39:dd:a5:25:66:13:80:1c:ce:81:f2:c3:
03:b1:dd:74:53:a3:24:54:57:fd:40:43:f2:e9:71:31:82:55:
ee:bf:19:09:9d:1a:48:7b:8a:17:de:42:15:70:74:33:cc:5b:
fe:6b:e4:af:a8:a5:7a:62:26:d5:a6:1f:0d:a0:7d:99:a8:17:
3a:43:ad:09:4a:a1:28:99:4a:31:73:93:a2:63:66:47:d4:be:
0d:03:00:96:dd:59:50:1c:75:5a:48:e8:74:0f:b9:ae:34:26:
ae:3e:a7:13:19:b8:bb:33:39:63:fe:92:57:29:63:f2:07:2f:
81:35:e5:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdR/SawBI76uDJLRBEJHvHxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MTk0NjE4NDQ1NDk4MjQ1MDBiN2NkMWM0NTFkODI0YmE2
ZTU2NzcwHhcNMjUwNjA5MDAwMDM0WhcNMjUwNjEwMDAwMDM0WjAzMTEwLwYDVQQD
EyhmMGI1NjJhOGExNTdmZjY2N2YzMjNjMzgyMWM5NGQzZDJiZDFiNjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB5QmqG4IKhvPcznrIKJLRe8JFlF
2P13KqvwiVoq0tL8ncwMuGkrvwe3nFPm8b4N5XVzuzLeFt7lEwCX3w8qZzq83FYS
cnuYXQV4/kY92E3apuLkEpDT32poAjiv/Kt5ds224tLyZzCg1YgTHlVjKjAKDPc8
ay4hgPzEjMP4fgIneSqYGGSBJdXm7Plhb+hK0FPWcsV5iQNZCkDIUp9AdMTK8qK5
kvgLRdjJB/IDIkS3ZXww7VhR20pFSfWcD3bWeUf5LKt/cbQcquOUVaUbeIVWLxSG
5v3n5GY7m5UmqmghLuuEUbkGnuD5gPDTsr6O4EuWHGrajvSOUOhuBsfUiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPC1YqihV/9mfzI8OCHJTT0r0baTMB8GA1UdIwQY
MBaAFCkZRhhEVJgkUAt80cRR2CS6blZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kOGM2ZjItNDE5MS00NmU2LThkYjYt
YjZlYTgyZjE5MjIwLzEvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9kOGM2ZjItNDE5MS00NmU2LThkYjYtYjZlYTgyZjE5MjIw
LzEvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsS4e4WFW
J/43wQYytHM5APE5F2jehn7tKwmQ1ULFB7rWpiRuBe+vPZOIZ172SS5L3mtVql2l
ZuypmgabvZ863eIxJVjMRfox39AVyE16M40LBQSUaSyb4W4MVPPB32MvxNTLqVrp
AJ3tqkh4o0rIrKN++1ENF1KLFz59PJDVHNvPWObaOd2lJWYTgBzOgfLDA7HddFOj
JFRX/UBD8ulxMYJV7r8ZCZ0aSHuKF95CFXB0M8xb/mvkr6ilemIm1aYfDaB9magX
OkOtCUqhKJlKMXOTomNmR9S+DQMAlt1ZUBx1WkjodA+5rjQmrj6nExm4uzM5Y/6S
Vylj8gcvgTXlhw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 07:25:46 2025 by rpki-client