Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
File: KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft (raw, json)
Hash identifier: rDnTaUFHdk2eor/ZNvsmCEftmgfpcXgtowbxmXsw0bQ=
Subject key identifier: 76:91:34:3A:EA:00:FF:D1:A0:61:EF:D6:2E:0F:45:97:32:F1:12:56
Authority key identifier: 28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
Certificate issuer: /CN=2858d2f131715cbaf3cdd920645924f53508e067
Certificate serial: 01976EF4D4637CBB5BC557BB6B2716DED8C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
Manifest number: 0A2F
Signing time: Sat 14 Jun 2025 15:00:28 +0000
Manifest this update: Sat 14 Jun 2025 15:00:28 +0000
Manifest next update: Sun 15 Jun 2025 15:00:28 +0000
Files and hashes: 1: Gxa8ZTehusQ__zJKE-EIDPUx7f0.roa (hash: D3bg8s9LSpHww0XiOamb2fTNkB0scUvbSEDIBYdOll4=)
2: KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl (hash: cYJG1B6ygjZ6buKZqZ7tj8EXN8zFCYCd50A5vFQaV6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:d4:63:7c:bb:5b:c5:57:bb:6b:27:16:de:d8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2858d2f131715cbaf3cdd920645924f53508e067
Validity
Not Before: Jun 14 15:00:28 2025 GMT
Not After : Jun 15 15:00:28 2025 GMT
Subject: CN=7691343aea00ffd1a061efd62e0f459732f11256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:42:bd:1e:96:7e:41:dc:6a:2f:f3:7d:65:
56:b6:c0:87:88:d5:00:1a:ed:05:dc:26:a7:db:07:
72:94:16:28:68:52:2d:dc:e8:7e:be:cb:9f:da:9c:
48:20:d9:73:87:e9:aa:c2:15:76:00:9a:d2:2e:f4:
52:bd:9f:b7:f5:f3:90:83:5a:1e:ad:7c:87:dc:52:
d8:dc:ae:43:56:8c:7f:70:71:9e:a4:f7:14:5a:c2:
2c:2a:46:3b:96:d0:b7:99:0a:2f:71:15:50:37:b0:
5f:4b:df:5d:64:48:d5:aa:17:0a:3b:b8:82:03:97:
b3:94:83:7e:b6:60:32:3e:1d:1c:cc:5c:88:13:d7:
e8:0f:08:9e:3e:69:99:62:67:3b:aa:a1:e3:c6:4f:
cd:65:a4:db:1c:b1:4b:12:2f:3d:1a:bb:28:41:8d:
b2:1a:56:e5:ef:d8:9f:ef:80:7d:93:fa:f6:71:e3:
8a:74:27:16:e1:55:2d:2e:b9:75:8b:3a:44:27:6c:
42:68:2c:30:66:01:49:21:17:44:35:79:80:ba:ad:
d6:ba:ac:2b:a9:dc:46:2e:39:30:ef:4f:d2:e2:7a:
6a:b8:c7:f1:07:6e:bb:1a:b3:6e:cc:fa:5f:28:0e:
22:57:f8:7d:63:30:71:5e:b0:80:1f:35:cf:ac:a4:
d6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:91:34:3A:EA:00:FF:D1:A0:61:EF:D6:2E:0F:45:97:32:F1:12:56
X509v3 Authority Key Identifier:
keyid:28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5f:7c:55:f6:80:a7:71:d9:5c:ab:83:e3:90:e4:e2:9f:85:
8b:ed:b8:b2:b6:de:18:1c:7c:cc:bf:9d:b7:cc:c8:64:e9:d5:
65:cc:c7:20:0b:c8:64:be:47:63:43:b6:75:ae:47:89:24:cb:
bd:1c:55:ec:2f:9e:27:8e:7b:7e:7f:3b:c6:97:9b:e5:a9:c4:
6a:06:dc:82:ac:cc:cb:b0:1a:08:cd:f5:48:ff:36:65:f7:e5:
a5:57:eb:a0:d4:20:79:01:f6:0d:bb:9a:b9:7e:7f:b7:d8:e2:
8d:9e:bd:63:c3:8b:19:74:1c:ce:07:ad:41:00:6f:b4:70:7e:
bd:68:1b:1a:8e:b4:ab:a6:2c:71:d4:c8:52:f3:44:10:0a:6d:
94:6f:51:0d:29:5e:3d:17:4b:ef:8f:fc:8b:2c:86:c0:72:2e:
c9:2e:b1:59:2c:fb:38:f5:0f:21:af:ea:58:0e:a2:64:2b:62:
cd:fc:05:e2:df:32:96:98:d5:0a:da:58:c6:d9:60:74:28:61:
8c:b8:98:ea:a7:4f:ca:ad:71:44:99:bd:6a:df:fd:e6:a5:bc:
b5:31:0e:e7:67:e2:52:8d:ca:9d:22:b1:d7:1a:fb:69:22:5b:
db:e1:b4:d8:b1:7f:79:28:51:7f:44:42:c6:f8:1e:fc:b8:51:
c8:7e:2c:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9NRjfLtbxVe7aycW3tjCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NThkMmYxMzE3MTVjYmFmM2NkZDkyMDY0NTkyNGY1MzUw
OGUwNjcwHhcNMjUwNjE0MTUwMDI4WhcNMjUwNjE1MTUwMDI4WjAzMTEwLwYDVQQD
Eyg3NjkxMzQzYWVhMDBmZmQxYTA2MWVmZDYyZTBmNDU5NzMyZjExMjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0BCvR6WfkHcai/zfWVWtsCHiNUA
Gu0F3Can2wdylBYoaFIt3Oh+vsuf2pxIINlzh+mqwhV2AJrSLvRSvZ+39fOQg1oe
rXyH3FLY3K5DVox/cHGepPcUWsIsKkY7ltC3mQovcRVQN7BfS99dZEjVqhcKO7iC
A5ezlIN+tmAyPh0czFyIE9foDwiePmmZYmc7qqHjxk/NZaTbHLFLEi89GrsoQY2y
Glbl79if74B9k/r2ceOKdCcW4VUtLrl1izpEJ2xCaCwwZgFJIRdENXmAuq3Wuqwr
qdxGLjkw70/S4npquMfxB267GrNuzPpfKA4iV/h9YzBxXrCAHzXPrKTWZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaRNDrqAP/RoGHv1i4PRZcy8RJWMB8GA1UdIwQY
MBaAFChY0vExcVy6883ZIGRZJPU1COBnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0ZqUzhURnhYTHJ6emRrZ1pGa2s5VFVJNEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83NWRiYzQtYWUyMi00OTcxLTllZjUt
YTNmMzU1YmVlZWRkLzEvS0ZqUzhURnhYTHJ6emRrZ1pGa2s5VFVJNEdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi83NWRiYzQtYWUyMi00OTcxLTllZjUtYTNmMzU1YmVlZWRk
LzEvS0ZqUzhURnhYTHJ6emRrZ1pGa2s5VFVJNEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaF98VfaA
p3HZXKuD45Dk4p+Fi+24srbeGBx8zL+dt8zIZOnVZczHIAvIZL5HY0O2da5HiSTL
vRxV7C+eJ457fn87xpeb5anEagbcgqzMy7AaCM31SP82ZfflpVfroNQgeQH2Dbua
uX5/t9jijZ69Y8OLGXQczgetQQBvtHB+vWgbGo60q6YscdTIUvNEEAptlG9RDSle
PRdL74/8iyyGwHIuyS6xWSz7OPUPIa/qWA6iZCtizfwF4t8ylpjVCtpYxtlgdChh
jLiY6qdPyq1xRJm9at/95qW8tTEO52fiUo3KnSKx1xr7aSJb2+G02LF/eShRf0RC
xvge/LhRyH4sbQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:01:03 2025 by rpki-client