Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
File: kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft (raw, json)
Hash identifier: C9EzA9cDyQfQgeQ/0B632ggdFMonndhZUHT777Iz7pE=
Subject key identifier: 5F:CC:27:14:A2:93:21:D4:BB:1B:D9:65:64:0D:AF:AB:D2:90:4B:6F
Authority key identifier: 91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
Certificate issuer: /CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Certificate serial: 01975422CBDC5281C76673FEA04778530DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
Manifest number: 157F
Signing time: Mon 09 Jun 2025 10:00:55 +0000
Manifest this update: Mon 09 Jun 2025 10:00:55 +0000
Manifest next update: Tue 10 Jun 2025 10:00:55 +0000
Files and hashes: 1: KWOjeTqrWS2bhx1qeVkVPGbzw7c.roa (hash: XUqhrwHbJF26mG4HYcUUQFE+zak+QHQ/0xU36G+fK8E=)
2: kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl (hash: lCPwcbwxGMhYyiFIDCAhK/rFk/YSUaegXaw+7suxm6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:cb:dc:52:81:c7:66:73:fe:a0:47:78:53:0d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Validity
Not Before: Jun 9 10:00:55 2025 GMT
Not After : Jun 10 10:00:55 2025 GMT
Subject: CN=5fcc2714a29321d4bb1bd965640dafabd2904b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:08:4c:09:99:cc:78:f9:9e:68:31:7d:2a:6f:
f6:bb:e8:bd:88:b3:3d:90:91:83:d0:56:0d:f6:ad:
a7:cc:0b:6c:97:fd:20:d6:8e:83:ec:8a:99:9b:59:
91:fd:52:43:13:a7:8c:0e:ca:8d:21:fa:69:df:74:
95:72:18:b0:05:52:f1:72:b6:8c:92:35:a3:f6:2e:
f6:bb:a6:89:1b:4e:3a:28:5a:d0:5c:6f:d2:f3:89:
74:bf:dd:7d:57:3d:ff:76:db:39:52:03:d8:3a:6b:
e6:6c:3f:5f:65:41:20:71:ad:b2:86:4c:ea:b8:79:
99:52:ef:38:08:6e:81:03:3f:c4:ea:7c:b7:62:a1:
e0:aa:c3:5c:4c:63:43:a1:fc:7a:5a:ff:ce:e1:f9:
07:b0:60:9e:88:c8:2a:c0:5d:99:c8:d4:dd:55:1a:
15:f5:ca:00:4a:3c:4d:db:00:d0:3c:88:84:c2:d5:
76:a0:c8:c5:55:a3:40:6a:3d:46:8c:91:e9:eb:28:
f6:f1:9b:5a:32:94:96:ba:f9:35:8d:7f:59:32:84:
c8:71:70:b9:0d:83:39:d2:0a:70:40:07:50:2d:03:
ca:f5:60:7f:50:a9:74:3b:b1:0b:38:84:e2:cf:55:
0a:26:96:b4:bb:8f:6b:9d:bb:67:05:16:74:47:6e:
dc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CC:27:14:A2:93:21:D4:BB:1B:D9:65:64:0D:AF:AB:D2:90:4B:6F
X509v3 Authority Key Identifier:
keyid:91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5a:3f:96:30:fe:de:d9:66:f7:56:42:b7:10:ed:5c:3e:69:
e4:7d:4c:d2:ca:7d:63:ab:04:2e:a6:01:49:85:ff:cb:ee:84:
db:28:d7:e9:31:f3:c9:43:c9:48:c9:67:ab:fb:cb:3e:16:c5:
6b:74:01:dd:1b:dc:b6:cb:31:2d:cc:97:8a:99:0a:b6:d0:94:
1e:75:c4:d3:43:ef:9c:69:86:d7:ae:1d:2a:01:d9:53:5e:4e:
8b:0c:d9:b7:e9:da:bb:3f:8a:49:d2:f6:bc:11:53:20:23:3b:
1c:a5:43:47:5f:e8:b4:2b:cf:22:c5:37:c5:c8:7d:2e:26:e7:
ba:77:f1:8e:fa:2e:52:82:f8:9a:74:50:bd:ef:4d:71:54:ac:
8b:c9:b4:c3:42:82:2a:3c:d5:e1:c2:b9:d2:6d:f3:ba:08:5a:
6f:9e:8e:f0:44:8b:06:6a:22:c5:e7:3e:b9:66:7c:b6:f6:e2:
ae:90:1d:0c:ea:c7:ee:e8:88:56:1b:5d:72:f1:e9:66:a3:73:
91:8f:41:49:ed:50:ce:4f:c2:4c:e7:a9:a2:3e:49:50:ea:42:
df:c0:db:64:75:bb:8a:9f:e4:36:f5:ca:af:bc:57:a9:50:c0:
b8:56:21:53:ab:2f:86:a2:42:2c:ed:e0:a2:a6:12:de:d0:ee:
7d:a2:01:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUIsvcUoHHZnP+oEd4Uw2kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxOTRiODU3YzAzN2E3ZDdjYjA1NzVlMzU4MjNlNWUyODAz
MmJkYTMwHhcNMjUwNjA5MTAwMDU1WhcNMjUwNjEwMTAwMDU1WjAzMTEwLwYDVQQD
Eyg1ZmNjMjcxNGEyOTMyMWQ0YmIxYmQ5NjU2NDBkYWZhYmQyOTA0YjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwhMCZnMePmeaDF9Km/2u+i9iLM9
kJGD0FYN9q2nzAtsl/0g1o6D7IqZm1mR/VJDE6eMDsqNIfpp33SVchiwBVLxcraM
kjWj9i72u6aJG046KFrQXG/S84l0v919Vz3/dts5UgPYOmvmbD9fZUEgca2yhkzq
uHmZUu84CG6BAz/E6ny3YqHgqsNcTGNDofx6Wv/O4fkHsGCeiMgqwF2ZyNTdVRoV
9coASjxN2wDQPIiEwtV2oMjFVaNAaj1GjJHp6yj28ZtaMpSWuvk1jX9ZMoTIcXC5
DYM50gpwQAdQLQPK9WB/UKl0O7ELOITiz1UKJpa0u49rnbtnBRZ0R27cLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/MJxSikyHUuxvZZWQNr6vSkEtvMB8GA1UdIwQY
MBaAFJGUuFfAN6fXywV141gj5eKAMr2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1pTNFY4QTNwOWZMQlhYaldDUGw0b0F5dmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zN2FjNTktODUyOS00YWM5LWJhNGUt
M2JmN2Q3Nzc0OWFiLzEva1pTNFY4QTNwOWZMQlhYaldDUGw0b0F5dmFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zN2FjNTktODUyOS00YWM5LWJhNGUtM2JmN2Q3Nzc0OWFi
LzEva1pTNFY4QTNwOWZMQlhYaldDUGw0b0F5dmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFo/ljD+
3tlm91ZCtxDtXD5p5H1M0sp9Y6sELqYBSYX/y+6E2yjX6THzyUPJSMlnq/vLPhbF
a3QB3RvctssxLcyXipkKttCUHnXE00PvnGmG164dKgHZU15OiwzZt+nauz+KSdL2
vBFTICM7HKVDR1/otCvPIsU3xch9LibnunfxjvouUoL4mnRQve9NcVSsi8m0w0KC
KjzV4cK50m3zughab56O8ESLBmoixec+uWZ8tvbirpAdDOrH7uiIVhtdcvHpZqNz
kY9BSe1Qzk/CTOepoj5JUOpC38DbZHW7ip/kNvXKr7xXqVDAuFYhU6svhqJCLO3g
oqYS3tDufaIBWA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 19:43:24 2025 by rpki-client