Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
File: klPiFMjlpvQTRb5oL2gmVbGr6ls.mft (raw, json)
Hash identifier: uGZch+etyQb5naTij5DNqRFanvuswq4VZ41HlT+6Yx0=
Subject key identifier: B8:06:12:51:4F:49:AC:0F:4E:F5:2B:90:63:71:9E:53:25:31:76:D5
Authority key identifier: 92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
Certificate issuer: /CN=9253e214c8e5a6f41345be682f682655b1abea5b
Certificate serial: 0197499ED5A12818ED10EC3F07978FBBB76B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
Manifest number: 0538
Signing time: Sat 07 Jun 2025 09:00:35 +0000
Manifest this update: Sat 07 Jun 2025 09:00:35 +0000
Manifest next update: Sun 08 Jun 2025 09:00:35 +0000
Files and hashes: 1: g9a2AgSYQsELLiSB_-OegEcbQ9I.roa (hash: ImJVXRp/ldmW9cQsi6+awLuGwVI0Qm+zTXoZ5uHaLy0=)
2: klPiFMjlpvQTRb5oL2gmVbGr6ls.crl (hash: QojO9QPGiRkk9BcTS521FPjfXZHLaJAe7w1URVs2ozg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:d5:a1:28:18:ed:10:ec:3f:07:97:8f:bb:b7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9253e214c8e5a6f41345be682f682655b1abea5b
Validity
Not Before: Jun 7 09:00:35 2025 GMT
Not After : Jun 8 09:00:35 2025 GMT
Subject: CN=b80612514f49ac0f4ef52b9063719e53253176d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:1a:75:42:40:64:0b:14:a5:74:fa:f1:06:
7f:cc:49:52:ea:92:fc:25:b2:ab:0f:0b:93:bd:2f:
c4:c2:9a:b7:6f:58:3f:a8:72:f4:1e:a0:3f:25:25:
10:02:ac:0a:31:3b:04:be:3c:a0:f2:9c:f5:12:98:
d2:90:05:6e:b8:64:dd:5b:61:b6:0c:9a:2e:b8:a6:
ee:63:b4:e4:50:16:e3:8d:e2:20:f6:af:85:7f:64:
59:01:af:26:2f:39:50:4c:51:27:9f:a0:eb:d4:51:
5f:38:5b:61:34:3d:b1:bf:50:ce:c7:ce:26:c9:87:
7e:2b:64:07:b0:6d:2c:fd:2c:76:92:d3:1f:85:aa:
30:22:4e:f8:12:83:a7:85:65:83:be:8f:e8:8c:5a:
e2:76:d3:76:d7:3b:93:bf:e1:0d:50:0f:2a:d6:55:
12:82:84:d9:74:25:a5:2a:aa:ab:95:c5:21:9d:7b:
8f:2f:e7:bd:8d:27:6b:fe:e1:08:1c:1d:49:4f:ea:
aa:2e:39:eb:57:84:58:b5:6e:96:47:6b:12:b9:59:
86:4d:e6:25:3c:69:fc:7b:99:4c:4c:eb:6e:b8:c9:
7a:db:a7:8b:36:0a:f7:f4:17:46:45:cf:bf:60:8e:
75:97:cc:bc:ba:46:fc:ff:9e:8a:1f:1b:71:2f:61:
ff:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:06:12:51:4F:49:AC:0F:4E:F5:2B:90:63:71:9E:53:25:31:76:D5
X509v3 Authority Key Identifier:
keyid:92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a2:40:bc:f7:25:b3:25:4b:00:03:89:a0:5c:f7:ff:ac:19:
b7:6f:95:f4:88:8e:c8:d9:cd:7e:bb:a7:6a:43:93:cb:ba:e2:
08:87:6e:9a:35:71:d1:3d:31:37:05:d3:d2:49:d2:48:02:4e:
71:cb:aa:fb:00:18:0e:03:aa:58:d5:c7:22:c8:94:9d:8b:19:
9d:54:ca:f3:39:cf:cc:20:70:b5:8c:6b:de:39:4a:0c:1e:d8:
7d:0d:88:23:8a:0a:39:a2:bc:fd:e3:98:65:9f:b0:b3:25:1f:
b0:fb:04:c1:55:27:36:7e:7f:5e:b3:a7:0c:94:58:63:f3:31:
b8:a0:55:92:38:9b:3c:4b:f5:46:56:df:69:76:e6:5e:da:ec:
77:9d:c1:48:14:0c:26:07:8c:81:51:1d:6c:1a:45:79:43:df:
f6:01:e1:2b:82:32:78:d2:c1:a0:ac:21:32:dd:84:11:e6:d7:
bc:9c:72:2e:62:6d:a6:bd:db:e7:0c:89:85:14:ed:0a:8b:22:
d4:66:56:c3:3a:1c:bf:9a:41:ef:2f:f9:92:c8:e1:0b:41:08:
0e:60:ea:f3:f7:f1:dc:ee:20:9b:e6:81:4f:ad:a6:b5:fb:13:
73:d4:04:77:e4:b1:75:5d:f1:9a:f9:17:21:b7:f1:2a:35:65:
e9:2b:93:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJntWhKBjtEOw/B5ePu7drMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTNlMjE0YzhlNWE2ZjQxMzQ1YmU2ODJmNjgyNjU1YjFh
YmVhNWIwHhcNMjUwNjA3MDkwMDM1WhcNMjUwNjA4MDkwMDM1WjAzMTEwLwYDVQQD
EyhiODA2MTI1MTRmNDlhYzBmNGVmNTJiOTA2MzcxOWU1MzI1MzE3NmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhcadUJAZAsUpXT68QZ/zElS6pL8
JbKrDwuTvS/Ewpq3b1g/qHL0HqA/JSUQAqwKMTsEvjyg8pz1EpjSkAVuuGTdW2G2
DJouuKbuY7TkUBbjjeIg9q+Ff2RZAa8mLzlQTFEnn6Dr1FFfOFthND2xv1DOx84m
yYd+K2QHsG0s/Sx2ktMfhaowIk74EoOnhWWDvo/ojFridtN21zuTv+ENUA8q1lUS
goTZdCWlKqqrlcUhnXuPL+e9jSdr/uEIHB1JT+qqLjnrV4RYtW6WR2sSuVmGTeYl
PGn8e5lMTOtuuMl626eLNgr39BdGRc+/YI51l8y8ukb8/56KHxtxL2H/nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgGElFPSawPTvUrkGNxnlMlMXbVMB8GA1UdIwQY
MBaAFJJT4hTI5ab0E0W+aC9oJlWxq+pbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xQaUZNamxwdlFUUmI1b0wyZ21WYkdyNmxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81MWE0YTMtNzMwNC00NjEzLThhODAt
Y2EzYjFjYWM2OWM3LzEva2xQaUZNamxwdlFUUmI1b0wyZ21WYkdyNmxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My81MWE0YTMtNzMwNC00NjEzLThhODAtY2EzYjFjYWM2OWM3
LzEva2xQaUZNamxwdlFUUmI1b0wyZ21WYkdyNmxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6JAvPcl
syVLAAOJoFz3/6wZt2+V9IiOyNnNfrunakOTy7riCIdumjVx0T0xNwXT0knSSAJO
ccuq+wAYDgOqWNXHIsiUnYsZnVTK8znPzCBwtYxr3jlKDB7YfQ2II4oKOaK8/eOY
ZZ+wsyUfsPsEwVUnNn5/XrOnDJRYY/MxuKBVkjibPEv1RlbfaXbmXtrsd53BSBQM
JgeMgVEdbBpFeUPf9gHhK4IyeNLBoKwhMt2EEebXvJxyLmJtpr3b5wyJhRTtCosi
1GZWwzocv5pB7y/5ksjhC0EIDmDq8/fx3O4gm+aBT62mtfsTc9QEd+SxdV3xmvkX
IbfxKjVl6SuTdw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:52:05 2025 by rpki-client