Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
File: kr0ltrnzz-B4X_1OXlQCgztKT40.mft (raw, json)
Hash identifier: sCwVslNu8YzuD/2xxvCfkM0Ggpv4kTysguNzJ3rjnh0=
Subject key identifier: 5A:CA:B0:95:B9:F5:89:E2:84:1F:01:24:C6:79:8B:15:D9:BD:45:1F
Authority key identifier: 92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
Certificate issuer: /CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Certificate serial: 01974DB2443C1198EFA42B7E3DA3869379B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 04:00:17 +0000
Manifest this update: Sun 08 Jun 2025 04:00:17 +0000
Manifest next update: Mon 09 Jun 2025 04:00:17 +0000
Files and hashes: 1: bOAoo9Xlbcl-PK-rbfwF58rAKlc.roa (hash: Vn8yXcKwSTNwIZccCZWqjun9GvkjZC8dYUcNBhWRmco=)
2: kr0ltrnzz-B4X_1OXlQCgztKT40.crl (hash: ckp7nqVAYdNUq5KEoShKDZjUkKwOLMBofD4Hok7EM4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:44:3c:11:98:ef:a4:2b:7e:3d:a3:86:93:79:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Validity
Not Before: Jun 8 04:00:17 2025 GMT
Not After : Jun 9 04:00:17 2025 GMT
Subject: CN=5acab095b9f589e2841f0124c6798b15d9bd451f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c2:aa:55:af:db:0a:b9:c1:42:9a:4d:b4:ac:
be:21:f9:45:4e:36:61:fc:05:80:68:9e:85:07:7e:
b5:b6:95:17:25:53:9e:c7:3a:34:03:09:b0:fa:3e:
25:73:b8:2b:3a:b4:29:b2:9b:47:3a:20:fa:d8:f2:
49:51:bf:42:74:0f:d5:9f:b3:13:a0:d5:b0:73:04:
9f:eb:52:a6:bc:40:df:0b:8b:f5:bb:75:9c:e7:da:
c7:b0:62:d1:cd:94:61:8f:49:88:30:07:ca:c3:ab:
3e:9e:51:cc:1a:76:b3:60:34:43:86:86:72:f3:cb:
5c:41:26:30:7a:5a:d9:de:75:0c:83:aa:06:5d:1a:
5d:80:81:7e:62:5b:94:c0:b1:c7:a2:d2:dc:df:6b:
77:91:34:9d:2e:7f:20:07:a1:60:e5:1c:60:39:08:
30:30:d6:bf:e2:7d:fe:27:15:32:b0:dc:32:89:29:
03:99:8a:62:1d:24:74:19:5a:45:9e:9d:c4:48:5b:
e0:ad:1f:ff:f4:e5:42:f7:8e:76:e4:ad:fb:d7:58:
02:35:c2:b3:c0:50:c2:64:be:6f:f7:70:b7:1d:ff:
f7:e1:ce:4e:20:7a:9c:66:d8:9d:17:8e:6e:2c:67:
d5:e1:08:4e:02:eb:52:c3:ce:be:7e:ec:71:f9:29:
12:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CA:B0:95:B9:F5:89:E2:84:1F:01:24:C6:79:8B:15:D9:BD:45:1F
X509v3 Authority Key Identifier:
keyid:92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:62:f5:75:fe:56:02:1f:b3:60:af:1a:3a:31:2a:65:29:4d:
4f:64:45:a8:18:ce:f5:2f:be:29:a0:94:d2:a0:73:b4:92:11:
ac:f1:57:6b:a9:58:44:52:98:61:57:1e:6f:1d:81:d3:17:c0:
da:34:07:b1:0d:57:ec:21:2d:70:fc:5f:b5:f8:c6:26:90:a2:
a2:79:46:2b:f5:c0:06:56:d0:53:7d:90:4c:f1:0b:43:7b:62:
d2:a6:5d:5e:35:d1:5b:05:69:3b:80:af:1d:f1:cb:4b:40:69:
17:9b:d7:36:35:93:7e:17:ed:7e:4a:86:fe:68:2e:35:62:0f:
89:1b:1a:bf:f4:98:87:ff:c8:ea:8b:a1:19:e2:f8:54:a3:a1:
f0:14:02:88:aa:0c:a0:7d:b8:22:3f:77:82:f2:50:37:b7:20:
4f:00:b7:6d:9b:03:2c:bc:55:41:ba:b0:4c:30:8d:06:94:df:
e5:ff:73:e5:2d:79:52:60:39:0b:50:6f:54:5f:3d:49:1f:3c:
af:e1:14:63:8b:02:f0:a0:9d:bb:85:8a:ad:6a:d6:db:1b:76:
2b:3e:41:4e:e3:c6:b8:75:21:64:eb:b8:e1:d3:6d:81:7e:f0:
52:4c:f6:72:28:dd:7e:84:e3:89:21:26:1e:bf:e1:56:e2:57:
d9:33:cd:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNskQ8EZjvpCt+PaOGk3mwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYmQyNWI2YjlmM2NmZTA3ODVmZmQ0ZTVlNTQwMjgzM2I0
YTRmOGQwHhcNMjUwNjA4MDQwMDE3WhcNMjUwNjA5MDQwMDE3WjAzMTEwLwYDVQQD
Eyg1YWNhYjA5NWI5ZjU4OWUyODQxZjAxMjRjNjc5OGIxNWQ5YmQ0NTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MKqVa/bCrnBQppNtKy+IflFTjZh
/AWAaJ6FB361tpUXJVOexzo0Awmw+j4lc7grOrQpsptHOiD62PJJUb9CdA/Vn7MT
oNWwcwSf61KmvEDfC4v1u3Wc59rHsGLRzZRhj0mIMAfKw6s+nlHMGnazYDRDhoZy
88tcQSYwelrZ3nUMg6oGXRpdgIF+YluUwLHHotLc32t3kTSdLn8gB6Fg5RxgOQgw
MNa/4n3+JxUysNwyiSkDmYpiHSR0GVpFnp3ESFvgrR//9OVC94525K3711gCNcKz
wFDCZL5v93C3Hf/34c5OIHqcZtidF45uLGfV4QhOAutSw86+fuxx+SkSywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrKsJW59YnihB8BJMZ5ixXZvUUfMB8GA1UdIwQY
MBaAFJK9Jba588/geF/9Tl5UAoM7Sk+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3IwbHRybnp6LUI0WF8xT1hsUUNnenRLVDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wMmM2OGItY2VkZi00MzE3LTgyYjgt
MmNkOGM5MTM5MDMwLzEva3IwbHRybnp6LUI0WF8xT1hsUUNnenRLVDQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8wMmM2OGItY2VkZi00MzE3LTgyYjgtMmNkOGM5MTM5MDMw
LzEva3IwbHRybnp6LUI0WF8xT1hsUUNnenRLVDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWL1df5W
Ah+zYK8aOjEqZSlNT2RFqBjO9S++KaCU0qBztJIRrPFXa6lYRFKYYVcebx2B0xfA
2jQHsQ1X7CEtcPxftfjGJpCionlGK/XABlbQU32QTPELQ3ti0qZdXjXRWwVpO4Cv
HfHLS0BpF5vXNjWTfhftfkqG/mguNWIPiRsav/SYh//I6ouhGeL4VKOh8BQCiKoM
oH24Ij93gvJQN7cgTwC3bZsDLLxVQbqwTDCNBpTf5f9z5S15UmA5C1BvVF89SR88
r+EUY4sC8KCdu4WKrWrW2xt2Kz5BTuPGuHUhZOu44dNtgX7wUkz2cijdfoTjiSEm
Hr/hVuJX2TPNwA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 10:08:27 2025 by rpki-client