Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
File: kWg1p4YCMde8FkjUX46Vf1FQWyg.mft (raw, json)
Hash identifier: RUrZAt5jtJxIbPbCQ28aRNTEcIOPzxb4LFnh6LdfN0U=
Subject key identifier: 9E:7B:77:6B:E3:2C:33:03:FE:9E:DF:AB:3F:01:41:70:07:9E:4B:45
Authority key identifier: 91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
Certificate issuer: /CN=916835a7860231d7bc1648d45f8e957f51505b28
Certificate serial: 01974A0CDD097BF9D87EA83A80DC2A81AA38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
Manifest number: 035B
Signing time: Sat 07 Jun 2025 11:00:46 +0000
Manifest this update: Sat 07 Jun 2025 11:00:46 +0000
Manifest next update: Sun 08 Jun 2025 11:00:46 +0000
Files and hashes: 1: kWg1p4YCMde8FkjUX46Vf1FQWyg.crl (hash: yBmiZrL286w/zrDo0L2LrMrwufNhVNTOyFG9A+UTUQE=)
2: wrpYuCoTA0QDqUx1_Pjj2R81Fzo.roa (hash: EwlJIDraNdoBBYvI+7Xd9v0lh6FgCXu/F5yckTradM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:dd:09:7b:f9:d8:7e:a8:3a:80:dc:2a:81:aa:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916835a7860231d7bc1648d45f8e957f51505b28
Validity
Not Before: Jun 7 11:00:46 2025 GMT
Not After : Jun 8 11:00:46 2025 GMT
Subject: CN=9e7b776be32c3303fe9edfab3f014170079e4b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:18:97:f4:f5:e4:7e:18:07:f6:30:81:45:70:
1e:f0:5d:20:a0:6c:0a:e2:59:1d:80:23:c5:f6:b2:
de:24:8b:28:a6:1b:a5:ed:b6:88:a7:2e:70:dd:95:
6c:38:87:16:0c:2d:fe:fd:79:4a:68:e9:24:59:3d:
58:7a:96:03:67:e7:95:e9:46:92:b7:96:88:95:b6:
13:52:80:31:de:9a:d2:2b:be:cd:a1:35:65:66:a1:
a3:ba:d4:aa:26:fb:d0:47:7a:20:20:91:47:fe:bd:
9e:cb:57:b5:d2:3a:11:3d:74:db:bf:8c:77:6f:59:
ac:7d:15:9d:4a:99:90:e3:91:c3:5b:6b:40:4f:e5:
e9:bb:87:9a:c9:05:99:7e:cb:1b:91:27:bd:14:de:
8e:02:c9:6f:ba:0a:72:06:ec:d2:92:1a:49:b2:31:
7e:33:bc:51:ce:88:2b:3b:ad:04:b3:dd:04:9f:d8:
34:c6:e6:b3:98:c4:47:62:e7:02:b5:df:1d:38:3f:
35:85:01:f8:56:c0:15:c3:e0:50:2d:7c:14:97:5c:
8d:e1:67:b5:32:82:9c:b9:5d:16:77:31:c0:e8:d1:
4d:ff:a6:fa:4c:39:90:5b:fb:18:c9:2c:a8:9f:a7:
5a:fe:c5:b8:f7:bf:30:d8:38:fd:b2:41:c6:5a:12:
1e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7B:77:6B:E3:2C:33:03:FE:9E:DF:AB:3F:01:41:70:07:9E:4B:45
X509v3 Authority Key Identifier:
keyid:91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4c:72:58:4e:2c:5e:e7:07:4b:ea:97:fd:b0:fc:db:21:78:
26:85:03:12:2b:07:ce:de:e7:bf:3f:8f:5b:98:91:0a:e2:66:
7b:ce:bc:87:72:fd:23:4e:ad:cf:02:a6:40:1e:df:d7:82:63:
ab:63:b8:60:19:e4:ce:9a:9a:99:2a:6b:77:01:59:23:35:2d:
05:09:64:25:25:5d:ce:48:38:2c:1d:69:20:15:b6:f6:ef:13:
83:0d:a1:57:58:73:02:48:d1:cf:f1:38:ed:40:50:0d:1f:57:
07:49:a5:bd:8e:f4:4c:75:f9:8f:c7:0c:7a:c6:0f:69:32:11:
8a:8c:30:59:c4:01:22:20:61:98:50:03:8c:50:28:2f:63:90:
b6:35:d7:26:00:09:0e:8b:c6:64:96:26:0e:71:81:96:ef:37:
2b:a9:b6:20:5d:d4:cb:a3:cd:c0:6e:7a:2a:4f:e0:ec:a7:dc:
d1:53:6b:de:bf:db:49:26:1f:8f:f8:ab:15:d4:04:dc:5c:a4:
80:71:d7:5c:41:db:53:ef:a0:fb:04:86:6a:0d:44:0f:fc:7d:
fc:52:07:d1:91:86:a3:06:f1:1f:59:5c:b9:f9:b8:70:64:1c:
d3:93:04:04:68:af:64:c8:d9:b2:00:5d:d4:71:a4:36:c0:11:
b5:87:b3:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDN0Je/nYfqg6gNwqgao4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNjgzNWE3ODYwMjMxZDdiYzE2NDhkNDVmOGU5NTdmNTE1
MDViMjgwHhcNMjUwNjA3MTEwMDQ2WhcNMjUwNjA4MTEwMDQ2WjAzMTEwLwYDVQQD
Eyg5ZTdiNzc2YmUzMmMzMzAzZmU5ZWRmYWIzZjAxNDE3MDA3OWU0YjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBiX9PXkfhgH9jCBRXAe8F0goGwK
4lkdgCPF9rLeJIsophul7baIpy5w3ZVsOIcWDC3+/XlKaOkkWT1YepYDZ+eV6UaS
t5aIlbYTUoAx3prSK77NoTVlZqGjutSqJvvQR3ogIJFH/r2ey1e10joRPXTbv4x3
b1msfRWdSpmQ45HDW2tAT+Xpu4eayQWZfssbkSe9FN6OAslvugpyBuzSkhpJsjF+
M7xRzogrO60Es90En9g0xuazmMRHYucCtd8dOD81hQH4VsAVw+BQLXwUl1yN4We1
MoKcuV0WdzHA6NFN/6b6TDmQW/sYySyon6da/sW4978w2Dj9skHGWhIedwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ57d2vjLDMD/p7fqz8BQXAHnktFMB8GA1UdIwQY
MBaAFJFoNaeGAjHXvBZI1F+OlX9RUFsoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1dnMXA0WUNNZGU4RmtqVVg0NlZmMUZRV3lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lZWIxNzctMzZiOS00M2QzLTljZmEt
NGRlYmIxYWZhOTk3LzEva1dnMXA0WUNNZGU4RmtqVVg0NlZmMUZRV3lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9lZWIxNzctMzZiOS00M2QzLTljZmEtNGRlYmIxYWZhOTk3
LzEva1dnMXA0WUNNZGU4RmtqVVg0NlZmMUZRV3lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdExyWE4s
XucHS+qX/bD82yF4JoUDEisHzt7nvz+PW5iRCuJme868h3L9I06tzwKmQB7f14Jj
q2O4YBnkzpqamSprdwFZIzUtBQlkJSVdzkg4LB1pIBW29u8Tgw2hV1hzAkjRz/E4
7UBQDR9XB0mlvY70THX5j8cMesYPaTIRiowwWcQBIiBhmFADjFAoL2OQtjXXJgAJ
DovGZJYmDnGBlu83K6m2IF3Uy6PNwG56Kk/g7Kfc0VNr3r/bSSYfj/irFdQE3Fyk
gHHXXEHbU++g+wSGag1ED/x9/FIH0ZGGowbxH1lcufm4cGQc05MEBGivZMjZsgBd
1HGkNsARtYezFQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:52:46 2025 by rpki-client