
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
File: kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft (raw, json)
Hash identifier: jbAEelbCsHtw534MtICTP+1cfnmTn2xVwbwBJlhSeDM=
Subject key identifier: F1:28:78:09:49:54:E6:ED:20:D4:3D:AD:0B:80:14:9E:C9:07:69:5B
Authority key identifier: 90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
Certificate issuer: /CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Certificate serial: 01974B8D93EFDB44117A836B452E5E0EF430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
Manifest number: 087A
Signing time: Sat 07 Jun 2025 18:00:59 +0000
Manifest this update: Sat 07 Jun 2025 18:00:59 +0000
Manifest next update: Sun 08 Jun 2025 18:00:59 +0000
Files and hashes: 1: NfRATxtwxdk8t5k10NmnaIEBcI8.roa (hash: 48zogp0gFyhuprEhPJDieZAGrOKDhLcNh+8XpGM82yA=)
2: kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl (hash: 856TaOPkSpvH2y0vf6exVDKZEN8pK9OgyGUI9bIXMzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:93:ef:db:44:11:7a:83:6b:45:2e:5e:0e:f4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Validity
Not Before: Jun 7 18:00:59 2025 GMT
Not After : Jun 8 18:00:59 2025 GMT
Subject: CN=f12878094954e6ed20d43dad0b80149ec907695b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:72:b4:9c:48:04:76:c6:4e:48:31:6c:28:
4e:2d:42:9e:6a:3d:05:ae:52:06:54:e5:af:7c:42:
83:25:e4:77:ca:71:31:e7:1a:a0:5b:b4:05:3e:c6:
7f:9a:10:f1:1e:ec:09:4a:d4:8b:2a:ec:ac:c1:79:
6e:94:b6:e9:22:fd:a1:df:8b:af:c3:5a:cd:a7:4a:
a5:b1:e3:7a:87:f7:b6:f7:03:6c:c5:65:52:5d:2e:
6a:90:32:bd:df:26:74:15:0f:99:cb:c7:27:e8:01:
54:fc:05:b5:8a:fa:93:78:cf:9e:19:b3:3a:5f:15:
b1:e1:5d:7f:1a:d4:fc:2d:86:c3:ea:d3:2c:8f:9e:
e8:8d:87:61:ec:21:46:44:97:52:49:b1:6c:f2:31:
08:1d:22:bd:97:9d:2e:a6:6b:8f:17:34:c8:18:88:
b4:45:46:bf:b1:b8:b2:5a:14:83:84:f4:1e:36:19:
14:c4:e4:86:00:d1:c2:46:d0:c4:67:9d:8f:29:2f:
1d:46:b7:ed:cf:c9:bf:0d:3a:75:cb:c9:f5:98:45:
5b:1e:60:d4:64:ed:23:05:ea:d8:3d:ac:46:8f:f6:
fa:b3:53:3a:dd:cd:1c:94:fa:11:8d:a2:bc:23:e4:
ba:79:1a:94:db:42:3e:71:8b:6f:ec:ce:14:52:e0:
80:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:28:78:09:49:54:E6:ED:20:D4:3D:AD:0B:80:14:9E:C9:07:69:5B
X509v3 Authority Key Identifier:
keyid:90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c2:50:80:94:aa:23:dc:9c:77:c8:f4:d8:ee:49:b4:06:6c:
e9:ee:99:ee:83:dc:4e:0b:50:bd:0a:b7:ac:2f:49:37:0f:8a:
26:99:f5:26:56:46:78:17:05:2d:00:10:f7:25:11:0c:dc:a2:
47:67:81:4c:d0:5d:bf:ba:eb:13:8b:f3:b8:df:cc:c5:79:79:
4d:9e:fb:6b:90:b6:23:29:6c:1a:fc:5a:c7:48:98:ca:ac:0d:
d5:bc:04:15:82:27:e6:df:fa:a7:4b:6e:36:ce:6c:ab:53:6f:
c9:9c:51:49:ea:b9:c0:2f:f0:be:c7:c1:66:9e:48:cf:f5:d2:
6a:c5:1c:0c:aa:2a:01:87:e5:c1:8d:1c:6d:41:1d:eb:4b:ef:
a1:d6:96:e5:85:d0:bf:3b:24:93:4c:64:01:1d:28:36:bd:42:
47:64:49:63:84:b5:67:9a:81:23:2b:af:06:58:6d:bc:65:42:
41:48:2e:a2:44:ae:f2:cd:9d:b1:c6:6b:15:18:b1:09:01:ef:
64:ac:6a:96:17:ce:19:1c:8e:37:aa:35:6c:42:0f:d0:b1:f3:
f2:c8:fc:4c:e6:59:95:83:fd:45:91:bf:aa:e3:f3:8a:9f:3e:
ca:e4:6f:f8:c8:24:ab:0e:5e:03:ac:23:84:58:81:13:78:8b:
59:70:12:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjZPv20QReoNrRS5eDvQwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjhmYWZjZjdjNDQxYWU0OWMxY2VmOTVjNTE4YjI4MjI4
YzdjNjIwHhcNMjUwNjA3MTgwMDU5WhcNMjUwNjA4MTgwMDU5WjAzMTEwLwYDVQQD
EyhmMTI4NzgwOTQ5NTRlNmVkMjBkNDNkYWQwYjgwMTQ5ZWM5MDc2OTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVNytJxIBHbGTkgxbChOLUKeaj0F
rlIGVOWvfEKDJeR3ynEx5xqgW7QFPsZ/mhDxHuwJStSLKuyswXlulLbpIv2h34uv
w1rNp0qlseN6h/e29wNsxWVSXS5qkDK93yZ0FQ+Zy8cn6AFU/AW1ivqTeM+eGbM6
XxWx4V1/GtT8LYbD6tMsj57ojYdh7CFGRJdSSbFs8jEIHSK9l50upmuPFzTIGIi0
RUa/sbiyWhSDhPQeNhkUxOSGANHCRtDEZ52PKS8dRrftz8m/DTp1y8n1mEVbHmDU
ZO0jBerYPaxGj/b6s1M63c0clPoRjaK8I+S6eRqU20I+cYtv7M4UUuCA5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEoeAlJVObtINQ9rQuAFJ7JB2lbMB8GA1UdIwQY
MBaAFJD4+vz3xEGuScHO+VxRiygijHxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iNzhlNjktMjlkYy00ZTVjLWFjNDct
OGFhNGViYWQ0ZTY1LzEva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9iNzhlNjktMjlkYy00ZTVjLWFjNDctOGFhNGViYWQ0ZTY1
LzEva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAscJQgJSq
I9ycd8j02O5JtAZs6e6Z7oPcTgtQvQq3rC9JNw+KJpn1JlZGeBcFLQAQ9yURDNyi
R2eBTNBdv7rrE4vzuN/MxXl5TZ77a5C2IylsGvxax0iYyqwN1bwEFYIn5t/6p0tu
Ns5sq1NvyZxRSeq5wC/wvsfBZp5Iz/XSasUcDKoqAYflwY0cbUEd60vvodaW5YXQ
vzskk0xkAR0oNr1CR2RJY4S1Z5qBIyuvBlhtvGVCQUguokSu8s2dscZrFRixCQHv
ZKxqlhfOGRyON6o1bEIP0LHz8sj8TOZZlYP9RZG/quPzip8+yuRv+Mgkqw5eA6wj
hFiBE3iLWXASmA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:19:43 2025 by rpki-client