Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
File: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft (raw, json)
Hash identifier: 4h6j0nQfhq3k2XhirZXD/6mfOlaK5zLYa8CbfKp8ggY=
Subject key identifier: F1:49:2F:8B:2A:75:7E:A5:B7:53:85:DA:DA:0D:B6:43:1B:5E:2C:69
Authority key identifier: 91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
Certificate issuer: /CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Certificate serial: 01975CB78DD8081AC67DF042381EBA010299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
Manifest number: 05A3
Signing time: Wed 11 Jun 2025 02:00:22 +0000
Manifest this update: Wed 11 Jun 2025 02:00:22 +0000
Manifest next update: Thu 12 Jun 2025 02:00:22 +0000
Files and hashes: 1: 1-PjUZT902dDkd6VPDrdDPHXwUZw.roa (hash: MHJPB3k7tQCL3suOF/2f4yZcUJ+jnvq9tJxwFWeEEbc=)
2: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl (hash: d+S619su5sBm4vAToVo5IXdncLvWV870jOmGyQZrvmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:b7:8d:d8:08:1a:c6:7d:f0:42:38:1e:ba:01:02:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Validity
Not Before: Jun 11 02:00:22 2025 GMT
Not After : Jun 12 02:00:22 2025 GMT
Subject: CN=f1492f8b2a757ea5b75385dada0db6431b5e2c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:69:74:57:fd:73:f1:bf:a5:9d:e4:ed:11:b1:
3c:9c:1b:8b:69:70:d4:5d:9f:3c:2f:51:b1:68:7d:
66:78:a1:20:f4:30:d3:e7:41:57:e6:91:28:ab:b8:
86:8b:83:4d:83:3f:09:95:87:e5:07:2c:55:3b:24:
c9:83:a0:0e:1c:14:9b:87:a0:76:ae:19:b4:e4:99:
e8:b6:62:6f:f1:19:a7:ba:63:60:14:35:0c:0d:f9:
6d:69:ad:30:12:97:fb:d8:89:71:f7:cf:68:bf:9c:
53:d1:58:7d:95:5b:f9:48:a8:83:b9:ac:d6:6f:d4:
62:49:2f:e3:9d:15:dc:e7:3f:06:61:e3:e5:ba:6a:
d5:13:df:4f:33:ba:ab:da:f3:ae:66:99:cd:00:df:
16:7f:a1:86:e3:b8:90:7c:10:fe:b7:c6:56:3c:7c:
b4:9c:a6:21:b3:95:3d:55:97:f5:c6:94:24:50:d6:
1c:e2:b4:af:2b:1b:6a:8e:c8:51:fe:d4:ae:23:02:
db:ce:dd:26:f2:8c:f5:a3:90:72:82:02:07:0d:51:
a1:74:cd:3f:5f:37:1f:95:d5:e9:64:05:eb:a5:d0:
62:89:e0:85:62:ec:71:ad:f7:cd:3d:2a:b2:93:74:
62:96:67:ff:48:5b:dd:b3:92:93:e5:1e:cf:0d:32:
5d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:49:2F:8B:2A:75:7E:A5:B7:53:85:DA:DA:0D:B6:43:1B:5E:2C:69
X509v3 Authority Key Identifier:
keyid:91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:80:c1:f4:90:ba:90:66:d4:2b:0d:74:af:da:96:37:86:7c:
0a:ae:82:fa:1f:1f:13:f9:dd:ff:dd:2c:43:5a:80:1a:62:98:
f1:24:08:c0:56:96:90:e5:af:33:7e:77:f0:e0:d6:33:e4:5f:
31:c0:d0:20:b8:39:5b:84:37:97:0e:5f:4c:92:d6:38:4c:0f:
49:10:d8:07:5c:e2:af:ee:68:a0:7a:c2:85:02:5d:20:0a:8b:
a5:19:9a:f5:ad:ca:da:6e:51:c6:eb:d2:ff:5a:da:a8:18:23:
de:58:ba:14:6d:c3:44:8e:b1:25:ee:b5:2b:2c:64:a0:63:ef:
b9:d9:aa:f1:c6:a6:d5:c5:c6:48:88:d3:6d:91:ba:a2:cd:fa:
c8:9d:ea:b4:9c:67:98:ab:79:f8:0e:da:d7:34:38:21:dd:a7:
3a:5f:c4:b2:d5:be:f6:e1:e4:4d:7a:26:7a:21:fe:81:8c:7b:
62:ca:66:8e:69:55:e0:58:2c:f0:0f:34:34:63:68:42:7d:27:
e8:50:bc:1d:67:a6:f5:ae:96:8a:2d:50:65:34:5f:40:9e:a5:
f8:0a:8c:ad:94:5c:f3:bf:5f:5b:52:3b:f1:20:17:b5:f3:7d:
e3:ae:05:6f:37:65:ab:6e:8e:ab:fb:99:cc:3b:4f:19:1c:33:
bc:1f:ad:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdct43YCBrGffBCOB66AQKZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxN2MzM2M3NTk2MTMxOGQ4ZWUzY2IxMzQ2NGE5MGQwMGFi
OGJkMmQwHhcNMjUwNjExMDIwMDIyWhcNMjUwNjEyMDIwMDIyWjAzMTEwLwYDVQQD
EyhmMTQ5MmY4YjJhNzU3ZWE1Yjc1Mzg1ZGFkYTBkYjY0MzFiNWUyYzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGl0V/1z8b+lneTtEbE8nBuLaXDU
XZ88L1GxaH1meKEg9DDT50FX5pEoq7iGi4NNgz8JlYflByxVOyTJg6AOHBSbh6B2
rhm05JnotmJv8RmnumNgFDUMDfltaa0wEpf72Ilx989ov5xT0Vh9lVv5SKiDuazW
b9RiSS/jnRXc5z8GYePlumrVE99PM7qr2vOuZpnNAN8Wf6GG47iQfBD+t8ZWPHy0
nKYhs5U9VZf1xpQkUNYc4rSvKxtqjshR/tSuIwLbzt0m8oz1o5ByggIHDVGhdM0/
XzcfldXpZAXrpdBiieCFYuxxrffNPSqyk3Rilmf/SFvds5KT5R7PDTJdYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFJL4sqdX6lt1OF2toNtkMbXixpMB8GA1UdIwQY
MBaAFJF8M8dZYTGNjuPLE0ZKkNAKuL0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1h3engxbGhNWTJPNDhzVFJrcVEwQXE0dlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hYzI3M2EtOWM4Yi00ZWY3LWE0MDAt
YzM3NjFhNzVkMDQ3LzEva1h3engxbGhNWTJPNDhzVFJrcVEwQXE0dlMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9hYzI3M2EtOWM4Yi00ZWY3LWE0MDAtYzM3NjFhNzVkMDQ3
LzEva1h3engxbGhNWTJPNDhzVFJrcVEwQXE0dlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANoDB9JC6
kGbUKw10r9qWN4Z8Cq6C+h8fE/nd/90sQ1qAGmKY8SQIwFaWkOWvM3538ODWM+Rf
McDQILg5W4Q3lw5fTJLWOEwPSRDYB1zir+5ooHrChQJdIAqLpRma9a3K2m5RxuvS
/1raqBgj3li6FG3DRI6xJe61KyxkoGPvudmq8cam1cXGSIjTbZG6os36yJ3qtJxn
mKt5+A7a1zQ4Id2nOl/EstW+9uHkTXomeiH+gYx7YspmjmlV4Fgs8A80NGNoQn0n
6FC8HWem9a6Wii1QZTRfQJ6l+AqMrZRc879fW1I78SAXtfN9464Fbzdlq26Oq/uZ
zDtPGRwzvB+tbw==
-----END CERTIFICATE-----
Generated at Wed Jun 11 12:26:27 2025 by rpki-client