Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
File: k680jsWk5l4MsTeCGuahOe1_rAA.mft (raw, json)
Hash identifier: +nyUsWSipPYT/zD2iW6SqitgM1X/eoftCoI1XpNeERo=
Subject key identifier: A5:84:79:F7:88:95:05:87:51:83:5E:70:BD:D4:FA:9A:58:74:2F:74
Authority key identifier: 93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
Certificate issuer: /CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Certificate serial: 019747E79AB6FD249776860A6A974D75D39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
Manifest number: 150C
Signing time: Sat 07 Jun 2025 01:00:50 +0000
Manifest this update: Sat 07 Jun 2025 01:00:50 +0000
Manifest next update: Sun 08 Jun 2025 01:00:50 +0000
Files and hashes: 1: gKy-M4ArOB2uxqprqRJ6fbGyEC8.roa (hash: MC8Gw1INJPJBRmJZki75GCuCmqozYCvUY/UxQ+rSFh0=)
2: k680jsWk5l4MsTeCGuahOe1_rAA.crl (hash: YpsPpdEr++nBel8McFpYx7TNyhlUEu9NB02AeWNMeCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:9a:b6:fd:24:97:76:86:0a:6a:97:4d:75:d3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Validity
Not Before: Jun 7 01:00:50 2025 GMT
Not After : Jun 8 01:00:50 2025 GMT
Subject: CN=a58479f78895058751835e70bdd4fa9a58742f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e6:0d:6c:dc:67:6f:81:85:94:b6:97:23:d4:
e8:e2:bd:df:5b:16:54:56:30:b9:95:08:e7:f1:79:
db:9e:af:48:7e:84:75:cb:57:dc:fe:64:56:59:af:
c1:1a:73:b1:c1:81:93:97:e4:0f:3d:c2:b9:87:77:
37:85:bd:79:fc:7c:b0:8b:ba:57:a7:03:d8:ba:b8:
21:8e:c3:96:7b:11:36:f1:f3:53:6b:b8:d3:6a:5e:
a3:f7:5e:3e:97:df:0e:da:21:c3:e3:ba:9a:3d:9d:
9d:18:5f:6e:d5:f9:6a:cd:0f:27:ff:9c:f9:f7:20:
c3:b5:39:53:4c:a2:fd:71:44:37:0d:f3:68:e0:41:
3d:7a:84:82:99:f6:a8:bb:51:9e:67:88:03:94:63:
e3:5c:53:c1:db:6f:0d:f5:2c:19:55:99:31:50:4c:
2b:ef:7b:ab:50:d1:cc:a2:29:07:ab:6a:6a:eb:d7:
27:ad:fa:d0:1c:d1:2b:a6:30:6f:c3:6d:15:31:e5:
0a:66:20:28:4c:88:0c:d5:17:f7:63:18:a1:bd:0e:
60:07:44:0d:e4:f6:af:fd:f6:75:ec:b4:06:58:b3:
58:cc:f8:33:ed:76:bf:a8:cb:6a:84:38:b4:ba:b9:
22:15:e1:5b:c1:7a:6b:bf:5e:00:67:f8:a0:24:c2:
ea:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:84:79:F7:88:95:05:87:51:83:5E:70:BD:D4:FA:9A:58:74:2F:74
X509v3 Authority Key Identifier:
keyid:93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:0c:e6:d2:35:cc:57:49:2a:47:67:90:77:32:3c:7c:25:47:
85:db:b8:5b:a8:9c:d0:c7:43:9e:50:72:59:81:e8:74:d9:bb:
93:83:9c:0f:5c:f5:53:e6:02:2f:78:72:a3:78:e2:f3:80:93:
c8:6b:53:d2:06:23:a2:93:f0:66:16:33:c1:7d:8d:01:d1:cf:
a1:d5:35:ae:46:87:7b:77:8c:99:e1:5c:38:a5:31:67:48:d2:
f3:bf:07:e0:12:79:ff:27:d1:eb:1d:9c:ae:b2:08:66:2e:ac:
a2:22:1d:a4:18:10:60:58:2c:75:ef:70:9e:24:c9:a7:c2:1e:
ce:b0:dd:e0:a8:c3:a9:08:63:ce:0d:4b:fa:1a:f4:77:36:c2:
38:88:71:21:39:cb:0d:af:54:d4:04:a2:ce:50:fa:7b:01:5f:
58:87:44:59:8d:41:7e:bc:f4:1a:2e:8b:08:4d:18:8b:3e:99:
86:7b:6a:ab:54:5b:e0:b1:90:c9:14:fd:66:cd:7c:9d:c8:4f:
92:ea:7d:94:ff:ae:72:19:b7:52:1a:3e:9f:05:19:91:2c:d8:
9f:b0:fa:e3:d8:e8:22:d7:4d:c0:df:44:e1:dd:83:04:89:f5:
25:84:9a:87:df:e8:f2:b4:19:3c:94:7e:0d:03:28:f1:1d:eb:
13:b3:b0:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdH55q2/SSXdoYKapdNddOeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYWYzNDhlYzVhNGU2NWUwY2IxMzc4MjFhZTZhMTM5ZWQ3
ZmFjMDAwHhcNMjUwNjA3MDEwMDUwWhcNMjUwNjA4MDEwMDUwWjAzMTEwLwYDVQQD
EyhhNTg0NzlmNzg4OTUwNTg3NTE4MzVlNzBiZGQ0ZmE5YTU4NzQyZjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheYNbNxnb4GFlLaXI9To4r3fWxZU
VjC5lQjn8Xnbnq9IfoR1y1fc/mRWWa/BGnOxwYGTl+QPPcK5h3c3hb15/Hywi7pX
pwPYurghjsOWexE28fNTa7jTal6j914+l98O2iHD47qaPZ2dGF9u1flqzQ8n/5z5
9yDDtTlTTKL9cUQ3DfNo4EE9eoSCmfaou1GeZ4gDlGPjXFPB228N9SwZVZkxUEwr
73urUNHMoikHq2pq69cnrfrQHNErpjBvw20VMeUKZiAoTIgM1Rf3YxihvQ5gB0QN
5Pav/fZ17LQGWLNYzPgz7Xa/qMtqhDi0urkiFeFbwXprv14AZ/igJMLqCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWEefeIlQWHUYNecL3U+ppYdC90MB8GA1UdIwQY
MBaAFJOvNI7FpOZeDLE3ghrmoTntf6wAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazY4MGpzV2s1bDRNc1RlQ0d1YWhPZTFfckFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iZDc4MjAtNWMxYy00ODg0LTlhYjgt
YzVhYjk3ZGJhODk4LzEvazY4MGpzV2s1bDRNc1RlQ0d1YWhPZTFfckFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iZDc4MjAtNWMxYy00ODg0LTlhYjgtYzVhYjk3ZGJhODk4
LzEvazY4MGpzV2s1bDRNc1RlQ0d1YWhPZTFfckFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgzm0jXM
V0kqR2eQdzI8fCVHhdu4W6ic0MdDnlByWYHodNm7k4OcD1z1U+YCL3hyo3ji84CT
yGtT0gYjopPwZhYzwX2NAdHPodU1rkaHe3eMmeFcOKUxZ0jS878H4BJ5/yfR6x2c
rrIIZi6soiIdpBgQYFgsde9wniTJp8IezrDd4KjDqQhjzg1L+hr0dzbCOIhxITnL
Da9U1ASizlD6ewFfWIdEWY1Bfrz0Gi6LCE0Yiz6Zhntqq1Rb4LGQyRT9Zs18nchP
kup9lP+uchm3Uho+nwUZkSzYn7D649joItdNwN9E4d2DBIn1JYSah9/o8rQZPJR+
DQMo8R3rE7OwOA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:12:07 2025 by rpki-client