Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
File: kRbcv3jGLVHakHag0Gra027jt1U.mft (raw, json)
Hash identifier: vEN8ZupSdEFMjX9pNuuW9dGQbNpRSUG40j/wR/wlXSg=
Subject key identifier: FF:D8:E0:1C:FA:62:03:71:4F:8C:FC:DC:92:2C:D0:EF:C1:52:72:0B
Authority key identifier: 91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
Certificate issuer: /CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Certificate serial: 01974E8E860E565A40EE645BA833DE830BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 08:00:52 +0000
Manifest this update: Sun 08 Jun 2025 08:00:52 +0000
Manifest next update: Mon 09 Jun 2025 08:00:52 +0000
Files and hashes: 1: DNiv8WMGcPKANx-uQmW-sx5fNXI.roa (hash: Lj5hqHXoRMsEWF++FwaU7YyRf1SOoK6ggthX5YqRKwg=)
2: kRbcv3jGLVHakHag0Gra027jt1U.crl (hash: bZUuZkxf2+esaq3kH7STylW2fEL8F0mNn6IwNfkUBOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:86:0e:56:5a:40:ee:64:5b:a8:33:de:83:0b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Validity
Not Before: Jun 8 08:00:52 2025 GMT
Not After : Jun 9 08:00:52 2025 GMT
Subject: CN=ffd8e01cfa6203714f8cfcdc922cd0efc152720b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3d:0c:14:26:b4:30:0f:84:69:cd:31:46:3d:
ff:4f:bd:db:12:3f:a0:80:f5:c0:3d:da:28:c7:b2:
20:9a:4a:69:c7:3a:8a:a8:42:d2:c9:04:6a:2e:08:
3d:c1:f2:97:b8:46:60:c1:40:ac:b6:63:91:c8:d4:
5e:7a:8c:4c:df:a4:e9:0e:f4:0e:8c:84:3d:1c:fb:
2e:69:d1:64:f6:a3:ac:d7:99:86:cc:36:d1:17:ac:
8d:9d:8f:27:4b:f6:dd:03:23:cb:80:3e:4b:67:02:
78:f0:cf:5f:0a:73:4d:31:38:9b:1f:a3:2c:6d:5d:
90:cb:95:54:c1:cc:bf:08:2c:68:c7:c7:a7:8c:92:
11:08:fb:b7:6a:d9:2f:46:93:48:b8:4f:4a:ba:48:
72:f1:79:4f:72:3d:93:64:76:c5:07:1a:e2:f1:d9:
d6:44:a9:36:7d:13:82:8d:0c:89:0e:62:c5:a1:9c:
2c:29:88:76:eb:db:00:bb:fc:a9:0a:95:20:a3:a2:
af:05:0e:6c:4f:e3:d7:7b:d1:90:5c:a2:bb:66:d7:
79:b5:ee:db:06:28:26:72:00:54:8a:bc:c3:fd:5f:
84:c7:33:c1:c2:66:94:08:bc:33:9a:45:ab:55:1f:
76:a8:b3:dd:1e:42:08:a7:cc:0d:7f:df:fb:5c:a2:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D8:E0:1C:FA:62:03:71:4F:8C:FC:DC:92:2C:D0:EF:C1:52:72:0B
X509v3 Authority Key Identifier:
keyid:91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0a:37:1b:fe:89:7e:ec:13:75:26:c8:c6:a7:06:e4:d3:d9:
b4:62:32:47:a5:6b:9a:10:9f:06:3a:fe:46:14:6f:76:7f:64:
80:52:ba:05:60:ab:98:81:26:de:88:d2:95:04:76:fb:50:05:
1f:14:65:8b:22:12:23:a5:b8:e0:6d:48:9b:84:4c:c2:63:47:
06:07:b4:22:03:a2:a2:2b:3f:aa:3b:25:57:12:00:c5:ae:fe:
2b:83:c1:8a:9a:9c:1a:42:23:a5:f8:4c:00:9f:c9:cf:35:03:
68:d5:c3:9d:44:0b:4e:34:89:3c:d1:48:c5:f4:c3:f6:a6:b1:
52:3e:e2:e6:97:e0:97:ad:41:e5:0a:40:16:fd:04:2b:ab:fd:
49:2c:a8:02:98:7a:ca:12:89:31:8e:45:42:9a:20:c6:f0:30:
d2:25:e4:02:74:c0:6c:63:b0:c9:96:ff:f7:d2:50:92:b7:18:
8f:c3:b6:cb:10:59:89:bc:6e:ef:95:48:43:a6:8c:4b:d3:04:
31:7f:96:fb:d7:38:61:df:29:4a:e3:b4:e0:07:9a:05:a0:a7:
79:91:c4:ac:0a:0a:c7:51:1a:2d:62:97:b0:29:91:29:20:d7:
30:a1:eb:5e:da:bf:1d:ad:6a:bf:ef:c8:ed:55:9b:83:39:d1:
d0:5f:80:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOjoYOVlpA7mRbqDPegwvsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMTZkY2JmNzhjNjJkNTFkYTkwNzZhMGQwNmFkYWQzNmVl
M2I3NTUwHhcNMjUwNjA4MDgwMDUyWhcNMjUwNjA5MDgwMDUyWjAzMTEwLwYDVQQD
EyhmZmQ4ZTAxY2ZhNjIwMzcxNGY4Y2ZjZGM5MjJjZDBlZmMxNTI3MjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1T0MFCa0MA+Eac0xRj3/T73bEj+g
gPXAPdoox7IgmkppxzqKqELSyQRqLgg9wfKXuEZgwUCstmORyNReeoxM36TpDvQO
jIQ9HPsuadFk9qOs15mGzDbRF6yNnY8nS/bdAyPLgD5LZwJ48M9fCnNNMTibH6Ms
bV2Qy5VUwcy/CCxox8enjJIRCPu3atkvRpNIuE9Kukhy8XlPcj2TZHbFBxri8dnW
RKk2fROCjQyJDmLFoZwsKYh269sAu/ypCpUgo6KvBQ5sT+PXe9GQXKK7Ztd5te7b
BigmcgBUirzD/V+ExzPBwmaUCLwzmkWrVR92qLPdHkIIp8wNf9/7XKKpEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/Y4Bz6YgNxT4z83JIs0O/BUnILMB8GA1UdIwQY
MBaAFJEW3L94xi1R2pB2oNBq2tNu47dVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1JiY3YzakdMVkhha0hhZzBHcmEwMjdqdDFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xMmY1ZDEtZTc2MC00MTAxLWFmMjUt
N2ZjNDlkYTUzZDEzLzEva1JiY3YzakdMVkhha0hhZzBHcmEwMjdqdDFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8xMmY1ZDEtZTc2MC00MTAxLWFmMjUtN2ZjNDlkYTUzZDEz
LzEva1JiY3YzakdMVkhha0hhZzBHcmEwMjdqdDFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwo3G/6J
fuwTdSbIxqcG5NPZtGIyR6VrmhCfBjr+RhRvdn9kgFK6BWCrmIEm3ojSlQR2+1AF
HxRliyISI6W44G1Im4RMwmNHBge0IgOiois/qjslVxIAxa7+K4PBipqcGkIjpfhM
AJ/JzzUDaNXDnUQLTjSJPNFIxfTD9qaxUj7i5pfgl61B5QpAFv0EK6v9SSyoAph6
yhKJMY5FQpogxvAw0iXkAnTAbGOwyZb/99JQkrcYj8O2yxBZibxu75VIQ6aMS9ME
MX+W+9c4Yd8pSuO04AeaBaCneZHErAoKx1EaLWKXsCmRKSDXMKHrXtq/Ha1qv+/I
7VWbgznR0F+AOg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:47:39 2025 by rpki-client