Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
File: K04tNMzuRXa1znYFoITmwIUiwig.mft (raw, json)
Hash identifier: 0YOjvYom8wybPHe4YXq7hbmNz5U8Q/+nlLkZN5weruA=
Subject key identifier: 22:55:93:E4:0E:89:48:F7:ED:34:05:B1:64:89:16:3B:0B:B9:61:A0
Authority key identifier: 2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
Certificate issuer: /CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Certificate serial: 01974CD6F95C7EF0459E17C06512F1290A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 00:00:46 +0000
Manifest this update: Sun 08 Jun 2025 00:00:46 +0000
Manifest next update: Mon 09 Jun 2025 00:00:46 +0000
Files and hashes: 1: GSpTlfTO5KcQK2jI527EKT02SMc.roa (hash: TpoUJbGzlzV0iUGibBYOB2or2f2ZUtWBHSlc5utMfHk=)
2: K04tNMzuRXa1znYFoITmwIUiwig.crl (hash: P45c8q6jVV6PC1LMfWrLArcltkgqIPkEFhzykPCMp/k=)
3: inTF6SWHroBiGHmy-0U30O5ydnA.roa (hash: evzJBNLsSCaxTpI1F1FxS8W2lXJa9MwPxDq+MYhTrqw=)
4: qgbAAtOcnU1uj0vsxF1XX4uS6aw.roa (hash: sqwZAEeBQvSXLjPqcFlAmMMOVHBKwCNCWM9uKLuZCYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:f9:5c:7e:f0:45:9e:17:c0:65:12:f1:29:0a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Validity
Not Before: Jun 8 00:00:46 2025 GMT
Not After : Jun 9 00:00:46 2025 GMT
Subject: CN=225593e40e8948f7ed3405b16489163b0bb961a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fc:a5:7b:73:ee:39:16:9a:7d:12:97:a2:38:
8b:a9:a3:24:38:a9:5f:e2:1d:47:34:f9:a0:74:14:
66:12:7e:11:63:21:79:76:c4:45:73:f4:a9:08:f7:
fc:17:93:40:d3:9a:99:69:46:10:05:1d:b8:78:17:
9e:a5:ab:86:1f:1d:d8:d2:00:41:19:31:62:be:d5:
40:91:7f:aa:74:ed:fb:41:18:bf:29:6d:1a:47:98:
15:ec:c2:f6:ec:a6:70:98:7d:e5:28:73:3f:1b:0c:
64:82:43:86:39:7b:7e:3e:33:4a:c6:5a:b3:b9:c5:
0d:8e:cd:e4:91:63:57:41:87:97:e6:c2:13:d9:33:
ba:5c:b7:9c:06:3e:17:74:c4:fd:6a:cb:48:da:0b:
36:d8:80:d6:59:97:5c:b0:2f:1c:68:62:b0:2d:c2:
7c:0a:40:4e:50:b0:1e:53:c2:e3:fb:88:06:28:27:
fe:3c:e7:ea:e7:26:3c:64:a7:4c:e0:43:fe:37:57:
f4:5b:89:90:ff:fb:ef:4b:a0:07:58:21:f1:97:fa:
87:73:42:fb:43:9d:e9:77:37:5f:cc:68:81:ba:24:
8b:31:5a:12:53:26:3e:78:9a:7f:3e:6d:c1:1a:82:
23:ef:5c:de:04:e6:16:61:21:be:6a:13:e7:e6:96:
97:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:55:93:E4:0E:89:48:F7:ED:34:05:B1:64:89:16:3B:0B:B9:61:A0
X509v3 Authority Key Identifier:
keyid:2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4e:f8:04:f2:62:21:02:b6:f1:e2:c3:3a:af:4f:c5:48:5c:
53:45:12:12:cd:7e:64:7a:86:57:f9:05:09:00:e8:70:24:4f:
a3:6f:41:b0:09:80:a3:1a:a7:a1:0a:34:db:fb:05:6e:b0:ba:
b7:ec:19:46:f3:f5:5c:d8:fb:bb:25:f7:9f:77:4b:1f:8a:5a:
76:cf:b9:f8:48:a1:1a:c3:c4:d5:fe:08:df:a8:87:e8:e6:a5:
37:0f:a3:c5:0a:88:5f:6a:cb:ad:32:b3:df:b7:d1:7f:05:42:
c8:49:2c:22:43:24:75:60:e8:b1:24:ca:ac:51:ca:d4:d1:35:
39:80:b1:42:6c:89:a7:7d:f5:bf:b5:90:03:75:a4:5d:a3:cc:
5d:65:8b:94:c9:c0:37:af:00:fc:2c:6b:10:82:5c:c4:9c:c1:
22:63:3e:e5:c5:f9:81:4f:54:03:21:2c:54:8c:38:72:c9:49:
de:04:c6:f5:61:24:e0:be:b0:e2:04:d3:d1:45:78:fb:5f:56:
19:cb:67:d4:86:4f:0f:d5:e4:53:5d:93:d6:55:22:e6:84:48:
a2:0c:93:65:35:31:15:a2:d7:b5:22:c7:c7:20:55:13:ca:90:
32:00:4e:8c:a5:d4:76:43:b1:60:b3:bb:7b:b3:7c:ea:bd:b4:
ce:fd:12:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM1vlcfvBFnhfAZRLxKQpVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNGUyZDM0Y2NlZTQ1NzZiNWNlNzYwNWEwODRlNmMwODUy
MmMyMjgwHhcNMjUwNjA4MDAwMDQ2WhcNMjUwNjA5MDAwMDQ2WjAzMTEwLwYDVQQD
EygyMjU1OTNlNDBlODk0OGY3ZWQzNDA1YjE2NDg5MTYzYjBiYjk2MWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vyle3PuORaafRKXojiLqaMkOKlf
4h1HNPmgdBRmEn4RYyF5dsRFc/SpCPf8F5NA05qZaUYQBR24eBeepauGHx3Y0gBB
GTFivtVAkX+qdO37QRi/KW0aR5gV7ML27KZwmH3lKHM/GwxkgkOGOXt+PjNKxlqz
ucUNjs3kkWNXQYeX5sIT2TO6XLecBj4XdMT9astI2gs22IDWWZdcsC8caGKwLcJ8
CkBOULAeU8Lj+4gGKCf+POfq5yY8ZKdM4EP+N1f0W4mQ//vvS6AHWCHxl/qHc0L7
Q53pdzdfzGiBuiSLMVoSUyY+eJp/Pm3BGoIj71zeBOYWYSG+ahPn5paXVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJVk+QOiUj37TQFsWSJFjsLuWGgMB8GA1UdIwQY
MBaAFCtOLTTM7kV2tc52BaCE5sCFIsIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzA0dE5NenVSWGExem5ZRm9JVG13SVVpd2lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kODk5Y2MtNTM1Ny00NzFhLWJjMWMt
MDc3YmM4YmExZTVkLzEvSzA0dE5NenVSWGExem5ZRm9JVG13SVVpd2lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kODk5Y2MtNTM1Ny00NzFhLWJjMWMtMDc3YmM4YmExZTVk
LzEvSzA0dE5NenVSWGExem5ZRm9JVG13SVVpd2lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApU74BPJi
IQK28eLDOq9PxUhcU0USEs1+ZHqGV/kFCQDocCRPo29BsAmAoxqnoQo02/sFbrC6
t+wZRvP1XNj7uyX3n3dLH4pads+5+EihGsPE1f4I36iH6OalNw+jxQqIX2rLrTKz
37fRfwVCyEksIkMkdWDosSTKrFHK1NE1OYCxQmyJp331v7WQA3WkXaPMXWWLlMnA
N68A/CxrEIJcxJzBImM+5cX5gU9UAyEsVIw4cslJ3gTG9WEk4L6w4gTT0UV4+19W
Gctn1IZPD9XkU12T1lUi5oRIogyTZTUxFaLXtSLHxyBVE8qQMgBOjKXUdkOxYLO7
e7N86r20zv0Sng==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:27:23 2025 by rpki-client