Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
File: KC5DLtiL7BrRRURJYygU1DmWseA.mft (raw, json)
Hash identifier: XhWgjaU/cXb4yPb6JDEE3f/VZHhPc0AHRk6NSs0wP3M=
Subject key identifier: 88:54:9E:D8:18:D0:C9:7B:C0:50:04:C2:E9:D8:15:78:8A:41:69:E8
Authority key identifier: 28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
Certificate issuer: /CN=282e432ed88bec1ad1454449632814d43996b1e0
Certificate serial: 01974BC433753B6B5A779CD283470A90BC7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
Manifest number: 0BD5
Signing time: Sat 07 Jun 2025 19:00:38 +0000
Manifest this update: Sat 07 Jun 2025 19:00:38 +0000
Manifest next update: Sun 08 Jun 2025 19:00:38 +0000
Files and hashes: 1: 9FnOB-XBygoB-RgBBWEsPTbvFTc.roa (hash: faK52ZKxn8mhj7q+v4KziaARqXuKQdUnupgh7Jp3IVk=)
2: KC5DLtiL7BrRRURJYygU1DmWseA.crl (hash: QQX6/fsYyv5dvzO4EiCFskUlstuD0QDWxkp+fyJLFYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:33:75:3b:6b:5a:77:9c:d2:83:47:0a:90:bc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282e432ed88bec1ad1454449632814d43996b1e0
Validity
Not Before: Jun 7 19:00:38 2025 GMT
Not After : Jun 8 19:00:38 2025 GMT
Subject: CN=88549ed818d0c97bc05004c2e9d815788a4169e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:eb:03:03:ff:f8:2c:1f:9c:81:70:d3:64:96:
54:52:23:96:c6:7a:1c:6a:11:c2:d2:2e:52:bb:9d:
2e:71:ed:aa:9d:ef:6c:13:da:6c:a6:c3:3e:ed:c9:
71:3f:f3:7c:f1:0b:27:f9:a3:67:48:f9:e3:e9:2b:
7f:26:ec:f5:0b:3c:a6:d8:11:7d:c1:f7:02:d3:3e:
6a:4d:cb:5e:7b:38:3d:23:42:74:64:15:6d:2b:99:
16:5e:2e:e7:a9:65:84:aa:ec:77:75:5b:3c:2c:b4:
3c:67:02:c3:e0:6e:bf:ed:68:f5:1d:d3:91:48:80:
8e:e7:ce:e1:bd:5e:9f:31:a9:a9:df:30:a7:e1:eb:
1d:ba:38:02:99:3f:15:6b:d8:01:df:24:0f:55:47:
bf:4d:fc:73:64:30:1a:b9:86:93:bd:c4:50:e0:2b:
1d:fd:cd:e8:18:40:88:ad:63:05:c0:d5:e0:ad:dd:
67:8e:60:37:86:9e:74:13:80:86:40:01:24:4c:29:
e3:52:97:9d:29:4c:15:1e:71:c1:34:0f:bc:ec:ae:
fc:f7:d0:d3:d5:d4:c8:35:67:f1:91:fc:c9:3a:c0:
d9:cd:70:8b:c3:9c:f2:75:ba:e0:90:bf:82:17:76:
4d:ea:8a:64:7e:a1:2e:92:56:84:45:00:b1:9f:ce:
b3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:54:9E:D8:18:D0:C9:7B:C0:50:04:C2:E9:D8:15:78:8A:41:69:E8
X509v3 Authority Key Identifier:
keyid:28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e0:a5:ff:52:27:b6:d6:af:80:a6:b1:62:2a:3f:b1:e6:f2:
88:30:7c:2f:9b:0d:7c:cc:e2:54:92:0b:53:d0:24:4b:fa:99:
f5:f2:9c:2b:8c:3f:ed:15:3e:2c:b7:73:f3:dc:35:23:12:a5:
c8:f7:0c:c3:0d:bb:b2:e7:cf:b7:1b:e4:93:77:2a:59:3a:e6:
01:a5:82:da:83:d9:58:7e:89:a5:db:fc:3d:97:63:32:5e:66:
80:82:ee:e6:7e:26:b3:16:aa:47:2b:ae:56:98:1e:41:64:e2:
ad:af:f7:4b:72:73:ba:6c:31:30:4c:95:7a:12:89:e9:76:9c:
ef:94:ba:a3:5e:05:88:af:bd:38:61:7f:8c:5f:7f:57:b2:72:
83:63:e9:62:ac:1e:80:cd:45:54:13:e8:22:ab:ed:c1:74:3d:
6f:2f:65:96:40:5d:e4:05:59:0f:92:47:87:95:a9:e1:70:c5:
39:5c:a7:25:53:76:a3:ba:40:7b:19:df:a6:f6:4a:1c:ca:7a:
f9:9d:f9:a0:40:f9:ac:7f:e5:ef:17:84:82:eb:ec:03:68:32:
af:54:5a:5e:9d:32:17:82:90:4b:05:05:e3:62:43:9a:4e:fa:
f3:d0:f2:ec:d2:56:7b:1c:71:1a:32:86:5b:50:b7:27:0c:e7:
83:71:eb:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLxDN1O2tad5zSg0cKkLx7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MmU0MzJlZDg4YmVjMWFkMTQ1NDQ0OTYzMjgxNGQ0Mzk5
NmIxZTAwHhcNMjUwNjA3MTkwMDM4WhcNMjUwNjA4MTkwMDM4WjAzMTEwLwYDVQQD
Eyg4ODU0OWVkODE4ZDBjOTdiYzA1MDA0YzJlOWQ4MTU3ODhhNDE2OWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmesDA//4LB+cgXDTZJZUUiOWxnoc
ahHC0i5Su50uce2qne9sE9pspsM+7clxP/N88Qsn+aNnSPnj6St/Juz1Czym2BF9
wfcC0z5qTcteezg9I0J0ZBVtK5kWXi7nqWWEqux3dVs8LLQ8ZwLD4G6/7Wj1HdOR
SICO587hvV6fMamp3zCn4esdujgCmT8Va9gB3yQPVUe/TfxzZDAauYaTvcRQ4Csd
/c3oGECIrWMFwNXgrd1njmA3hp50E4CGQAEkTCnjUpedKUwVHnHBNA+87K7899DT
1dTINWfxkfzJOsDZzXCLw5zydbrgkL+CF3ZN6opkfqEuklaERQCxn86zcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhUntgY0Ml7wFAEwunYFXiKQWnoMB8GA1UdIwQY
MBaAFCguQy7Yi+wa0UVESWMoFNQ5lrHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0M1REx0aUw3QnJSUlVSSll5Z1UxRG1Xc2VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jNjBmMDgtYjI0Yi00ZGM0LWEyN2Mt
ZmMwYWE3MmU4ZWFkLzEvS0M1REx0aUw3QnJSUlVSSll5Z1UxRG1Xc2VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9jNjBmMDgtYjI0Yi00ZGM0LWEyN2MtZmMwYWE3MmU4ZWFk
LzEvS0M1REx0aUw3QnJSUlVSSll5Z1UxRG1Xc2VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACuCl/1In
ttavgKaxYio/sebyiDB8L5sNfMziVJILU9AkS/qZ9fKcK4w/7RU+LLdz89w1IxKl
yPcMww27sufPtxvkk3cqWTrmAaWC2oPZWH6Jpdv8PZdjMl5mgILu5n4msxaqRyuu
VpgeQWTira/3S3JzumwxMEyVehKJ6Xac75S6o14FiK+9OGF/jF9/V7Jyg2PpYqwe
gM1FVBPoIqvtwXQ9by9llkBd5AVZD5JHh5Wp4XDFOVynJVN2o7pAexnfpvZKHMp6
+Z35oED5rH/l7xeEguvsA2gyr1RaXp0yF4KQSwUF42JDmk7689Dy7NJWexxxGjKG
W1C3Jwzng3Hrcg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 01:48:21 2025 by rpki-client