Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
File: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft (raw, json)
Hash identifier: +BrD2S3/EeowYw0AXnyyW5c/HJF0/fcFu2VUdfuPWN0=
Subject key identifier: A6:C9:84:A6:23:88:59:60:AA:BA:6A:82:DD:05:3C:FC:31:53:9E:9E
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 019748FA58F691A34C8FE5AC38BB40A1ED44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 06:00:55 +0000
Manifest this update: Sat 07 Jun 2025 06:00:55 +0000
Manifest next update: Sun 08 Jun 2025 06:00:55 +0000
Files and hashes: 1: 1-BYmurPr5LAEsZbg3IkqQQ8bTE.roa (hash: gSRreBFbCS0pgQwKCm4p7z2bTAJn0+Iu8NoE2w5inzM=)
2: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl (hash: notaM7p07DCNE2xLQxtuRPOy6Gbd904nnNWtOmUiNZc=)
3: LkIHKYAztrvXyS2uvM19nitM_J8.roa (hash: bSmM4xvjjm+xIUvcYXqsQ49ZAFIaGh2KEBGQ0EzdDJQ=)
4: YZbRz0TPn2AkN3pts4pehGKPFCQ.roa (hash: +Ns94ZDDFJ4TJopF8u7U1uG56GwRweZl/hjdoUef2a0=)
5: _vdRTtZt9JtL5ja2GczGggJ0SbM.roa (hash: lAHlgKcde7+6Ag5a4YHN2NUrJtyFsbjpueclzD4vqNA=)
6: cPcxLO1mqeKGQGyRnW90EvAI0HE.roa (hash: k9JzzhuzIaxECEDTAdASrMOBk8mvIm/aEbc0qToiokc=)
7: dx0WinCfMz9mrqqCW13H5COmXU8.roa (hash: ljXXTzc+Ws09xCBJIxWwoc/Db/5IEktc/whbot/5Ato=)
8: fx8MLGTxK80dTB_4NJYiocZMPwQ.roa (hash: ktdhmccH0NnIum2PWLW59Gn98yD870nWte0K3STRnHs=)
9: uwiEBGof-KAkpEFhZy-WaLfAvIs.roa (hash: ZnbTLkj0SeUC00zQu5XoWyUlIHf81vfWL1Buec+9xEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:58:f6:91:a3:4c:8f:e5:ac:38:bb:40:a1:ed:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Jun 7 06:00:55 2025 GMT
Not After : Jun 8 06:00:55 2025 GMT
Subject: CN=a6c984a623885960aaba6a82dd053cfc31539e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9e:a3:ef:8f:98:60:38:e0:a8:54:42:a1:a2:
89:55:c5:62:7c:e5:77:15:1c:3b:81:80:df:e3:71:
b7:aa:0f:24:cb:6b:d9:d8:c6:36:d0:f4:e9:4a:3b:
67:2f:c2:5f:2d:bd:ee:af:29:b6:85:ec:82:5c:69:
31:af:38:ee:3b:b0:78:f5:a3:9f:60:78:e4:54:ed:
33:5e:7b:67:8e:ae:ab:a5:ea:8c:7e:a7:65:45:b3:
a4:94:1f:4a:72:2f:f6:71:9b:ec:10:81:84:93:01:
b8:7b:8e:45:9d:48:dc:f2:b9:06:3f:e9:27:8e:75:
88:02:78:58:3c:0f:9f:b9:37:75:cc:c2:cb:11:cb:
14:14:9a:77:a7:38:2a:8d:63:05:e4:3c:b5:de:b7:
0b:ac:30:28:c2:89:32:b1:cd:6f:98:98:e9:58:f8:
d8:ed:cc:04:e3:77:e5:04:b6:da:9b:8a:d8:70:69:
c3:31:98:11:51:73:6f:d3:5c:54:0e:ef:8e:18:5a:
e2:32:4c:f9:c8:8b:e1:32:83:ea:d5:2d:ed:f5:53:
54:5f:8e:4c:ef:49:16:3d:38:4a:cb:3d:f1:24:56:
03:41:9e:ce:e4:08:85:7a:7e:cd:6f:f9:72:38:5c:
14:bb:48:3e:25:f8:a6:71:6b:91:e8:06:8b:94:fb:
30:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C9:84:A6:23:88:59:60:AA:BA:6A:82:DD:05:3C:FC:31:53:9E:9E
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:62:b7:1b:1a:94:4a:23:36:1e:80:5c:1a:3e:1e:df:69:f7:
f7:6d:c4:10:7a:6f:da:a6:45:cf:95:31:18:c8:0c:39:88:06:
3b:e8:e1:3c:40:3d:5a:76:d2:81:0d:6e:34:1e:2b:a6:8e:81:
dd:ec:7b:ea:0a:0d:b9:49:ae:f2:bc:e6:35:32:63:c8:f6:7d:
da:76:6e:71:e7:00:97:2a:12:bb:1b:f6:aa:33:36:6e:4b:5e:
1d:c8:df:b3:f8:69:4e:33:f6:b6:cc:3a:1b:7f:f1:d6:2f:c2:
01:6c:07:85:96:bb:d6:88:e6:b8:37:cb:68:97:a4:80:9a:57:
84:74:0c:a0:4b:f8:0c:c3:0d:0c:55:e1:54:24:cd:c9:78:b5:
3d:aa:2b:9d:b0:ea:04:30:5e:34:b6:05:34:c1:6c:fb:be:af:
2a:6d:56:eb:ca:f3:dc:c6:01:df:25:83:af:ec:b4:3a:58:a3:
78:ed:67:9c:7a:84:19:c3:9b:1e:f4:91:c4:94:89:96:f6:cf:
eb:5a:09:8c:55:28:a0:46:67:ad:8a:e6:e4:b7:22:fe:ee:bf:
00:c8:08:10:cb:f1:6b:ec:5d:44:40:0c:e7:ab:4f:cf:b6:ae:
81:cf:b5:ec:c4:d9:fe:4d:a2:c7:5b:4a:c1:14:23:b2:05:bb:
a1:9b:fc:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+lj2kaNMj+WsOLtAoe1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MWYwYjczZTY3ZDYzYzVhNGM5MDQ2ODE0MTY2YTllMjE2
MjVmMjgwHhcNMjUwNjA3MDYwMDU1WhcNMjUwNjA4MDYwMDU1WjAzMTEwLwYDVQQD
EyhhNmM5ODRhNjIzODg1OTYwYWFiYTZhODJkZDA1M2NmYzMxNTM5ZTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2p6j74+YYDjgqFRCoaKJVcVifOV3
FRw7gYDf43G3qg8ky2vZ2MY20PTpSjtnL8JfLb3urym2heyCXGkxrzjuO7B49aOf
YHjkVO0zXntnjq6rpeqMfqdlRbOklB9Kci/2cZvsEIGEkwG4e45FnUjc8rkGP+kn
jnWIAnhYPA+fuTd1zMLLEcsUFJp3pzgqjWMF5Dy13rcLrDAowokysc1vmJjpWPjY
7cwE43flBLbam4rYcGnDMZgRUXNv01xUDu+OGFriMkz5yIvhMoPq1S3t9VNUX45M
70kWPThKyz3xJFYDQZ7O5AiFen7Nb/lyOFwUu0g+JfimcWuR6AaLlPswLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbJhKYjiFlgqrpqgt0FPPwxU56eMB8GA1UdIwQY
MBaAFCkfC3PmfWPFpMkEaBQWap4hYl8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQt
MzhlZThmZDY0ZTdkLzEvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQtMzhlZThmZDY0ZTdk
LzEvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmK3GxqU
SiM2HoBcGj4e32n3923EEHpv2qZFz5UxGMgMOYgGO+jhPEA9WnbSgQ1uNB4rpo6B
3ex76goNuUmu8rzmNTJjyPZ92nZucecAlyoSuxv2qjM2bkteHcjfs/hpTjP2tsw6
G3/x1i/CAWwHhZa71ojmuDfLaJekgJpXhHQMoEv4DMMNDFXhVCTNyXi1PaornbDq
BDBeNLYFNMFs+76vKm1W68rz3MYB3yWDr+y0OlijeO1nnHqEGcObHvSRxJSJlvbP
61oJjFUooEZnrYrm5Lci/u6/AMgIEMvxa+xdREAM56tPz7augc+17MTZ/k2ix1tK
wRQjsgW7oZv8PA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:11:03 2025 by rpki-client