Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
File: _kWQZfcoEX0ccLjFTNqPRh24BHU.mft (raw, json)
Hash identifier: F+u/rAVc85+U36330sRKqBUllgimr/YwNJvZ87Hh/kY=
Subject key identifier: 33:81:EB:BB:56:DA:68:A6:C1:98:DF:22:91:54:B3:F0:80:1C:96:A4
Authority key identifier: FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
Certificate issuer: /CN=fe459065f728117d1c70b8c54cda8f461db80475
Certificate serial: 01974B1F7D11826B35C61F5C7ECDDBE504BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
Manifest number: 04A3
Signing time: Sat 07 Jun 2025 16:00:44 +0000
Manifest this update: Sat 07 Jun 2025 16:00:44 +0000
Manifest next update: Sun 08 Jun 2025 16:00:44 +0000
Files and hashes: 1: _kWQZfcoEX0ccLjFTNqPRh24BHU.crl (hash: 3p+LE13shpnF8UQp+981/Xac58CTqakY1WS/rbm31xs=)
2: j0TrgD1mMe4SCFwW2zXApzSjMys.roa (hash: A16AXZA8TA0369WZ1QSUTK6vpWpKMrbFHrcl2YyzIA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:7d:11:82:6b:35:c6:1f:5c:7e:cd:db:e5:04:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe459065f728117d1c70b8c54cda8f461db80475
Validity
Not Before: Jun 7 16:00:44 2025 GMT
Not After : Jun 8 16:00:44 2025 GMT
Subject: CN=3381ebbb56da68a6c198df229154b3f0801c96a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:62:3e:34:60:00:55:aa:2f:a4:09:fe:aa:39:
e8:8f:94:0b:db:c3:41:ca:2a:d4:c4:c7:64:cb:ca:
f8:23:87:6d:a0:6d:3b:52:77:93:d9:5f:a9:22:14:
f1:f9:fc:24:b8:ae:a7:6e:8a:b2:7b:e0:52:4a:a4:
39:63:16:1d:2b:b1:8b:5c:81:6d:52:d3:c6:57:d7:
6f:23:74:10:ed:ce:ae:c8:cb:22:8f:cb:55:0f:d6:
2a:b8:28:95:76:fd:3d:c1:83:d1:5d:02:86:a9:6a:
e2:3c:11:48:f7:01:0e:87:cb:0a:e3:92:47:c1:8b:
64:92:a3:5b:17:73:9e:3e:96:3f:be:63:51:65:91:
f9:95:ed:14:9b:11:32:8e:f2:ec:fa:b7:82:96:2b:
10:06:b2:a1:ee:3b:49:65:ae:88:12:e9:79:1a:a1:
a7:1e:d1:e9:c4:05:bf:1f:59:02:33:35:5b:33:12:
0f:ee:84:e7:50:b5:21:44:35:f9:5d:81:d7:2a:97:
1d:a6:f8:57:cb:f7:89:ec:5f:7a:9f:04:bc:2e:4d:
3a:32:c5:da:6c:30:e5:1a:ff:10:55:3f:d5:79:6b:
35:e0:11:eb:46:e8:26:ab:7a:c6:7c:2e:7c:90:6b:
0a:60:2f:d9:7b:a3:e9:50:20:5b:ab:93:75:89:8f:
6d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:81:EB:BB:56:DA:68:A6:C1:98:DF:22:91:54:B3:F0:80:1C:96:A4
X509v3 Authority Key Identifier:
keyid:FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:99:ce:ec:23:ef:67:21:8f:ce:ef:f1:3e:98:d9:02:ea:45:
35:6c:84:fc:22:6a:ec:ab:41:30:35:a1:e2:bd:d2:a8:a1:6a:
7b:8c:bd:51:1a:25:4b:f2:62:4a:b8:c2:e1:c2:ee:95:7e:cf:
9f:4b:1d:41:8d:37:50:36:e3:76:d0:03:36:91:be:2a:b2:2a:
1c:1e:5f:92:8f:ab:cb:33:46:7b:d9:ee:6e:10:b2:28:00:94:
42:b6:fa:3b:8d:ba:46:c1:b3:e2:b9:ff:3d:08:d1:ba:10:30:
a5:ba:de:7d:f7:fe:f2:1b:85:54:47:09:6a:6d:8f:fd:66:fe:
88:dd:fa:06:dd:c2:5a:e4:43:1d:74:88:6e:f9:25:db:8a:57:
e3:e3:6d:e1:04:75:b7:2c:99:63:b2:00:44:7b:fc:b2:de:3c:
90:41:28:84:73:5e:2c:3a:3f:1f:91:98:a4:30:10:53:1c:6e:
99:50:2f:6f:7f:d7:5d:ac:c3:28:40:de:ed:7d:73:81:68:44:
0d:25:47:75:28:e7:35:bb:bd:44:a8:f0:2e:3c:f0:c5:f2:e2:
d4:40:28:0b:af:d3:2e:20:02:ed:3a:c6:3f:57:dd:7a:a8:32:
7e:e5:2b:c1:92:34:b2:5b:aa:a5:a1:30:e9:13:fd:ad:5d:b5:
4d:e2:92:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLH30Rgms1xh9cfs3b5QS+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNDU5MDY1ZjcyODExN2QxYzcwYjhjNTRjZGE4ZjQ2MWRi
ODA0NzUwHhcNMjUwNjA3MTYwMDQ0WhcNMjUwNjA4MTYwMDQ0WjAzMTEwLwYDVQQD
EygzMzgxZWJiYjU2ZGE2OGE2YzE5OGRmMjI5MTU0YjNmMDgwMWM5NmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWI+NGAAVaovpAn+qjnoj5QL28NB
yirUxMdky8r4I4dtoG07UneT2V+pIhTx+fwkuK6nboqye+BSSqQ5YxYdK7GLXIFt
UtPGV9dvI3QQ7c6uyMsij8tVD9YquCiVdv09wYPRXQKGqWriPBFI9wEOh8sK45JH
wYtkkqNbF3OePpY/vmNRZZH5le0UmxEyjvLs+reClisQBrKh7jtJZa6IEul5GqGn
HtHpxAW/H1kCMzVbMxIP7oTnULUhRDX5XYHXKpcdpvhXy/eJ7F96nwS8Lk06MsXa
bDDlGv8QVT/VeWs14BHrRugmq3rGfC58kGsKYC/Ze6PpUCBbq5N1iY9tYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOB67tW2mimwZjfIpFUs/CAHJakMB8GA1UdIwQY
MBaAFP5FkGX3KBF9HHC4xUzaj0YduAR1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2tXUVpmY29FWDBjY0xqRlROcVBSaDI0QkhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wNjAyMjItNTc0MS00ZTIzLTk3ZDYt
ZDYzYTIzY2YxMTRjLzEvX2tXUVpmY29FWDBjY0xqRlROcVBSaDI0QkhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8wNjAyMjItNTc0MS00ZTIzLTk3ZDYtZDYzYTIzY2YxMTRj
LzEvX2tXUVpmY29FWDBjY0xqRlROcVBSaDI0QkhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAspnO7CPv
ZyGPzu/xPpjZAupFNWyE/CJq7KtBMDWh4r3SqKFqe4y9URolS/JiSrjC4cLulX7P
n0sdQY03UDbjdtADNpG+KrIqHB5fko+ryzNGe9nubhCyKACUQrb6O426RsGz4rn/
PQjRuhAwpbrefff+8huFVEcJam2P/Wb+iN36Bt3CWuRDHXSIbvkl24pX4+Nt4QR1
tyyZY7IARHv8st48kEEohHNeLDo/H5GYpDAQUxxumVAvb3/XXazDKEDe7X1zgWhE
DSVHdSjnNbu9RKjwLjzwxfLi1EAoC6/TLiAC7TrGP1fdeqgyfuUrwZI0sluqpaEw
6RP9rV21TeKSJA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:57:58 2025 by rpki-client