Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
File: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft (raw, json)
Hash identifier: gPKMze/oWcbVkGF79ezhDCVIFsM4Jl7C41nP2ShyeCo=
Subject key identifier: 0A:FF:5A:57:9B:CE:26:5F:1D:72:54:6A:D2:13:0E:C1:C0:CF:9D:A0
Authority key identifier: 29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
Certificate issuer: /CN=292d120970515846360ea223e9a0e6a3c3896934
Certificate serial: 0197499F255BA28632975B4A77610816C874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 09:00:55 +0000
Manifest this update: Sat 07 Jun 2025 09:00:55 +0000
Manifest next update: Sun 08 Jun 2025 09:00:55 +0000
Files and hashes: 1: Dmpy31ijG2f6hXZqP5vPJHMC7fc.roa (hash: a19ubK1sseKa07iYGs0SfWBGmOIfQnOOnA1DdC09cIs=)
2: E7yxjynkTDUFSV0KBoIMTHpUAPI.roa (hash: 9bhJ257wp5/WErvUFH4Spo9AhE0rTIMhiGRzFbkOnjk=)
3: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl (hash: haWXdQpzVJID+Anzc28umL7JBRhmC16K8GXROeV5HNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:25:5b:a2:86:32:97:5b:4a:77:61:08:16:c8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d120970515846360ea223e9a0e6a3c3896934
Validity
Not Before: Jun 7 09:00:55 2025 GMT
Not After : Jun 8 09:00:55 2025 GMT
Subject: CN=0aff5a579bce265f1d72546ad2130ec1c0cf9da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d2:49:a1:bf:c7:1f:b5:53:c4:46:6a:58:ed:
c6:b9:ac:a0:c1:48:19:24:e3:cc:cf:20:21:64:d1:
b9:db:3f:0a:6e:16:cd:45:0d:f3:2d:0f:93:b5:8f:
d0:c5:f8:f9:03:fe:6f:4d:01:e4:9a:04:68:36:2c:
7e:c2:df:64:e8:6f:c0:66:db:cc:eb:b1:37:e1:4d:
5e:4e:a3:0e:cc:0e:26:84:7f:03:b5:4d:c7:55:de:
d7:c2:bc:64:ab:c3:4a:d7:28:6f:37:78:57:4f:e4:
63:0f:d2:cf:8f:f7:7e:90:66:f1:fb:8c:50:2f:a0:
5f:f2:97:44:e2:4e:d8:fc:f5:06:eb:f0:df:a5:4b:
3f:e2:60:a2:c4:e4:4c:47:78:69:13:28:9b:8c:8e:
cb:25:e1:39:ec:a7:a5:f6:cc:2a:3d:fc:2a:da:77:
85:fe:8b:e9:79:5d:72:a4:63:a6:f9:e3:14:42:79:
be:33:a4:b7:4d:ca:17:69:56:dc:32:6e:8c:e3:6a:
cd:57:b2:1d:01:84:26:e4:6c:25:7e:70:20:96:cd:
78:e1:34:44:af:0f:51:f0:1e:22:e0:e5:c1:e9:c8:
e3:f7:9a:75:db:c8:0f:6a:f3:0d:cb:70:35:4a:a3:
50:05:73:2b:c9:32:d9:0e:46:2a:fa:57:7a:48:ac:
43:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FF:5A:57:9B:CE:26:5F:1D:72:54:6A:D2:13:0E:C1:C0:CF:9D:A0
X509v3 Authority Key Identifier:
keyid:29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d2:43:1f:1e:2f:a1:ea:53:20:61:e2:c7:67:32:8a:3f:f3:
2f:32:0e:f5:c6:66:bf:cf:0e:63:ad:10:bb:d3:77:42:32:c2:
75:78:4b:0a:d1:d7:da:c2:96:13:e8:1f:b3:ae:43:89:cc:a9:
d2:49:46:ac:1e:d2:89:ef:96:20:7c:b2:da:b7:f9:a0:69:93:
9b:ce:22:28:1d:04:a4:79:4a:90:ed:ca:77:b0:91:d8:f9:93:
45:fc:a1:60:76:a2:5e:3c:2d:0e:f4:c2:56:07:b5:0c:72:a1:
60:82:f7:74:2e:9b:06:65:4d:e8:fe:ba:df:09:db:6f:68:e7:
b1:8d:0b:b2:da:c8:45:8c:6a:61:c7:d8:34:16:fb:4a:45:31:
07:30:ad:f0:b7:58:ba:7b:57:46:18:f3:58:f6:79:69:d3:e8:
29:88:50:ec:f6:f2:ed:aa:1d:b5:68:20:83:f9:18:8d:44:d8:
35:5f:16:b9:34:77:89:e8:1d:01:0f:26:6b:a1:80:57:0e:d2:
25:1d:56:64:21:5f:e9:fd:33:09:7e:fa:46:7c:dc:03:2d:34:
ed:d9:02:77:f3:f5:2d:93:25:8b:6a:54:6f:9e:51:95:f6:b4:
aa:3a:49:a5:9f:ac:5f:63:63:8c:1c:21:16:7e:97:a0:14:da:
67:87:f0:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJnyVbooYyl1tKd2EIFsh0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MmQxMjA5NzA1MTU4NDYzNjBlYTIyM2U5YTBlNmEzYzM4
OTY5MzQwHhcNMjUwNjA3MDkwMDU1WhcNMjUwNjA4MDkwMDU1WjAzMTEwLwYDVQQD
EygwYWZmNWE1NzliY2UyNjVmMWQ3MjU0NmFkMjEzMGVjMWMwY2Y5ZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dJJob/HH7VTxEZqWO3GuaygwUgZ
JOPMzyAhZNG52z8KbhbNRQ3zLQ+TtY/Qxfj5A/5vTQHkmgRoNix+wt9k6G/AZtvM
67E34U1eTqMOzA4mhH8DtU3HVd7Xwrxkq8NK1yhvN3hXT+RjD9LPj/d+kGbx+4xQ
L6Bf8pdE4k7Y/PUG6/DfpUs/4mCixORMR3hpEyibjI7LJeE57Kel9swqPfwq2neF
/ovpeV1ypGOm+eMUQnm+M6S3TcoXaVbcMm6M42rNV7IdAYQm5GwlfnAgls144TRE
rw9R8B4i4OXB6cjj95p128gPavMNy3A1SqNQBXMryTLZDkYq+ld6SKxDJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAr/WlebziZfHXJUatITDsHAz52gMB8GA1UdIwQY
MBaAFCktEglwUVhGNg6iI+mg5qPDiWk0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1MwU0NYQlJXRVkyRHFJajZhRG1vOE9KYVRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9kZTkxMzktYTlkMC00OTNhLTkyNjAt
ZWQwZjI1NmE1ZmUzLzEvS1MwU0NYQlJXRVkyRHFJajZhRG1vOE9KYVRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9kZTkxMzktYTlkMC00OTNhLTkyNjAtZWQwZjI1NmE1ZmUz
LzEvS1MwU0NYQlJXRVkyRHFJajZhRG1vOE9KYVRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdJDHx4v
oepTIGHix2cyij/zLzIO9cZmv88OY60Qu9N3QjLCdXhLCtHX2sKWE+gfs65Dicyp
0klGrB7Sie+WIHyy2rf5oGmTm84iKB0EpHlKkO3Kd7CR2PmTRfyhYHaiXjwtDvTC
Vge1DHKhYIL3dC6bBmVN6P663wnbb2jnsY0LstrIRYxqYcfYNBb7SkUxBzCt8LdY
untXRhjzWPZ5adPoKYhQ7Pby7aodtWggg/kYjUTYNV8WuTR3iegdAQ8ma6GAVw7S
JR1WZCFf6f0zCX76RnzcAy007dkCd/P1LZMli2pUb55Rlfa0qjpJpZ+sX2NjjBwh
Fn6XoBTaZ4fwfQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:39:29 2025 by rpki-client