Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
File: k4yI3syI92r_E7wIWNs4eDS-FxE.mft (raw, json)
Hash identifier: KH0gDVdJlR4nwOsvOWJzAF48IlDKI9HhNmj4yivCpYM=
Subject key identifier: 41:BF:45:27:19:5C:F3:EC:27:C1:C3:42:8A:77:E0:A6:67:EF:4F:38
Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
Certificate issuer: /CN=938c88decc88f76aff13bc0858db387834be1711
Certificate serial: 019770AC5D2FF15FF918D68304B2AD5757C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
Manifest number: 1032
Signing time: Sat 14 Jun 2025 23:00:33 +0000
Manifest this update: Sat 14 Jun 2025 23:00:33 +0000
Manifest next update: Sun 15 Jun 2025 23:00:33 +0000
Files and hashes: 1: GzSJNC8rXvHPR5ECqFrqBc47EjY.roa (hash: DpRxP+N8EisPg5SdQn8IRQde36mD1fsRwPBj23IbYe0=)
2: k4yI3syI92r_E7wIWNs4eDS-FxE.crl (hash: jWL1OHmi0iRjody05s73fld5LUXrtkkaJ85i5Ere3wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:5d:2f:f1:5f:f9:18:d6:83:04:b2:ad:57:57:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938c88decc88f76aff13bc0858db387834be1711
Validity
Not Before: Jun 14 23:00:33 2025 GMT
Not After : Jun 15 23:00:33 2025 GMT
Subject: CN=41bf4527195cf3ec27c1c3428a77e0a667ef4f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:48:15:33:e1:56:14:19:49:ed:1e:3a:62:4e:
e8:9f:6e:20:56:40:9a:d6:65:2e:3c:1a:1f:29:42:
49:d6:6b:43:69:df:57:74:ad:bf:87:8f:64:85:2b:
ad:37:91:c5:82:11:e3:a3:62:8c:ac:00:d1:71:29:
87:0a:14:0f:dd:60:df:dd:2a:c2:10:c6:39:90:84:
9f:aa:f5:54:28:40:d3:f9:45:b1:70:69:d5:a5:1d:
5f:d8:18:5d:04:76:06:bc:31:41:c7:16:9a:7b:d6:
6c:df:70:86:71:44:a8:70:02:a6:6e:54:bf:b7:0b:
33:98:f2:e8:ca:c1:cd:58:2a:21:51:64:89:14:16:
6e:28:43:50:a3:3c:9e:97:02:97:95:06:4e:93:9f:
32:c9:a4:7b:f3:ff:d2:b8:76:3c:fc:97:07:7d:ef:
5a:c1:73:09:6a:75:a1:b0:f5:37:5b:89:94:f0:9f:
d8:54:57:d1:f1:72:86:94:18:ac:9b:9d:45:b5:70:
2d:b5:64:9a:f9:32:84:c0:2e:2b:fb:bb:c3:02:76:
e2:f4:03:ae:c0:41:49:6c:75:3e:21:a4:43:8b:39:
2b:38:d5:0e:98:42:66:67:0e:75:34:3c:61:44:f3:
c7:db:f8:ea:bf:03:df:42:1a:10:d6:4e:14:39:3e:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BF:45:27:19:5C:F3:EC:27:C1:C3:42:8A:77:E0:A6:67:EF:4F:38
X509v3 Authority Key Identifier:
keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:95:a0:e3:be:7c:bc:df:ef:bc:37:0e:65:e9:73:b9:17:35:
0c:6a:31:2a:26:02:64:9e:5b:af:5a:39:0c:39:12:fc:40:99:
ac:ab:01:62:ac:50:f7:20:85:fb:40:27:24:98:ea:3f:97:52:
7a:a8:f9:90:c4:06:98:1b:fb:14:40:e5:a8:0f:71:94:21:ab:
b9:ff:0c:cd:4b:65:4f:83:29:66:25:78:33:d0:46:84:42:79:
b4:7a:ca:34:97:44:cb:65:7d:3b:1c:c6:79:5c:b0:e4:d3:20:
97:24:67:01:4f:94:eb:7c:33:c1:9c:17:c3:ba:81:7f:21:b5:
18:2b:18:10:b0:2a:79:c2:97:e2:c9:f3:c5:d5:e7:d1:15:bc:
4f:c7:86:41:a9:3e:cc:2e:b5:30:51:d5:bd:9d:10:2b:d8:f9:
2e:6f:a1:92:5a:3a:cd:3e:6d:6e:03:11:6d:4d:73:9a:58:32:
15:3e:a8:bf:bb:e6:1b:83:67:53:25:ba:17:50:a4:b9:9a:7f:
77:5a:71:a4:bd:2c:05:e7:d5:d0:8c:dd:50:0c:03:36:c5:1d:
f7:c0:22:f9:e1:d2:63:0f:64:94:fb:1c:06:19:89:9a:67:90:
00:0a:b9:73:60:06:f8:bb:bb:c3:9e:e8:59:04:89:a6:73:4a:
27:48:68:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwrF0v8V/5GNaDBLKtV1fIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzOGM4OGRlY2M4OGY3NmFmZjEzYmMwODU4ZGIzODc4MzRi
ZTE3MTEwHhcNMjUwNjE0MjMwMDMzWhcNMjUwNjE1MjMwMDMzWjAzMTEwLwYDVQQD
Eyg0MWJmNDUyNzE5NWNmM2VjMjdjMWMzNDI4YTc3ZTBhNjY3ZWY0ZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0gVM+FWFBlJ7R46Yk7on24gVkCa
1mUuPBofKUJJ1mtDad9XdK2/h49khSutN5HFghHjo2KMrADRcSmHChQP3WDf3SrC
EMY5kISfqvVUKEDT+UWxcGnVpR1f2BhdBHYGvDFBxxaae9Zs33CGcUSocAKmblS/
twszmPLoysHNWCohUWSJFBZuKENQozyelwKXlQZOk58yyaR78//SuHY8/JcHfe9a
wXMJanWhsPU3W4mU8J/YVFfR8XKGlBism51FtXAttWSa+TKEwC4r+7vDAnbi9AOu
wEFJbHU+IaRDizkrONUOmEJmZw51NDxhRPPH2/jqvwPfQhoQ1k4UOT4n8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEG/RScZXPPsJ8HDQop34KZn7084MB8GA1UdIwQY
MBaAFJOMiN7MiPdq/xO8CFjbOHg0vhcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yMzIyNmYtN2MyMS00MzM4LTlkY2Et
ZmY5ZjUwM2UyZGQzLzEvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yMzIyNmYtN2MyMS00MzM4LTlkY2EtZmY5ZjUwM2UyZGQz
LzEvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJWg4758
vN/vvDcOZelzuRc1DGoxKiYCZJ5br1o5DDkS/ECZrKsBYqxQ9yCF+0AnJJjqP5dS
eqj5kMQGmBv7FEDlqA9xlCGruf8MzUtlT4MpZiV4M9BGhEJ5tHrKNJdEy2V9OxzG
eVyw5NMglyRnAU+U63wzwZwXw7qBfyG1GCsYELAqecKX4snzxdXn0RW8T8eGQak+
zC61MFHVvZ0QK9j5Lm+hklo6zT5tbgMRbU1zmlgyFT6ov7vmG4NnUyW6F1CkuZp/
d1pxpL0sBefV0IzdUAwDNsUd98Ai+eHSYw9klPscBhmJmmeQAAq5c2AG+Lu7w57o
WQSJpnNKJ0hobg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:12:53 2025 by rpki-client