Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
File: kCGOgBpTJZXptxxkNoTqBflr9fM.mft (raw, json)
Hash identifier: Rio+Scv0t5PW4L0RF0BDq/mwsmFNOKAj+NdomDwYasQ=
Subject key identifier: 2F:AA:70:81:0D:CF:DD:AB:EC:00:68:75:43:FE:B1:F2:67:CF:6A:FB
Authority key identifier: 90:21:8E:80:1A:53:25:95:E9:B7:1C:64:36:84:EA:05:F9:6B:F5:F3
Certificate issuer: /CN=90218e801a532595e9b71c643684ea05f96bf5f3
Certificate serial: 01977E3123FDD086A6BF4292E761C572A4E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCGOgBpTJZXptxxkNoTqBflr9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
Manifest number: 02FC
Signing time: Tue 17 Jun 2025 14:00:39 +0000
Manifest this update: Tue 17 Jun 2025 14:00:39 +0000
Manifest next update: Wed 18 Jun 2025 14:00:39 +0000
Files and hashes: 1: kCGOgBpTJZXptxxkNoTqBflr9fM.crl (hash: DifPNsAOVFAQ5gTPLxuTT5DSfCXTQO1zPvBpqdkp3Lo=)
2: wO4tKRWBwJAF_Ti9XP-8yjRZuUU.roa (hash: G7Rk/RipLXF/QPRugyDtoGfESmr50WO1Zig00oPYW14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kCGOgBpTJZXptxxkNoTqBflr9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:31:23:fd:d0:86:a6:bf:42:92:e7:61:c5:72:a4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90218e801a532595e9b71c643684ea05f96bf5f3
Validity
Not Before: Jun 17 14:00:39 2025 GMT
Not After : Jun 18 14:00:39 2025 GMT
Subject: CN=2faa70810dcfddabec00687543feb1f267cf6afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:9e:90:05:5d:96:d6:b7:8e:d9:c4:0a:42:
eb:b0:a8:cf:79:3f:b7:45:f4:95:d6:51:91:b2:d6:
d8:2f:de:3c:a0:2a:62:62:53:04:2a:5e:6d:ce:d8:
d6:c8:aa:f4:24:98:71:89:bb:17:80:52:b0:83:ee:
98:b2:79:7a:77:6a:63:4b:bc:74:e2:16:ff:1d:3e:
9f:71:48:be:43:4d:3e:4e:a8:02:78:ce:da:d4:b5:
45:fa:ec:4c:bd:b8:c0:18:9d:9b:05:df:64:20:61:
ac:e8:cf:47:7c:1b:0b:d4:9b:64:6e:c7:b0:e8:04:
4e:47:b5:57:3d:bf:82:a8:f1:c3:63:84:c5:63:bd:
ee:98:1b:37:7d:7a:a8:c1:70:2e:88:b5:f2:9c:13:
83:72:d4:60:f3:bb:14:17:b8:8d:cd:5f:49:21:f5:
39:81:db:6c:ee:13:56:75:fa:b9:fc:a4:69:58:16:
d3:7e:76:15:e2:3f:98:65:14:b8:2b:db:da:18:71:
10:a9:02:10:e4:88:17:49:5b:b8:a7:bb:a5:dc:98:
71:26:db:af:86:21:6e:c9:8b:58:01:c4:b9:f6:aa:
12:e6:89:b2:5f:41:b0:ff:44:c8:92:a3:07:5e:26:
b6:c2:7f:b1:ea:9f:74:fa:79:81:27:e9:b7:f5:32:
ec:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AA:70:81:0D:CF:DD:AB:EC:00:68:75:43:FE:B1:F2:67:CF:6A:FB
X509v3 Authority Key Identifier:
keyid:90:21:8E:80:1A:53:25:95:E9:B7:1C:64:36:84:EA:05:F9:6B:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCGOgBpTJZXptxxkNoTqBflr9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:12:95:1d:da:24:ae:27:09:9c:11:d4:9f:d9:1b:9a:69:ea:
22:92:85:3a:28:f4:22:0e:f6:d8:c6:f0:14:29:57:46:7e:59:
50:27:66:56:ca:b8:27:f9:51:90:58:48:cf:41:70:2e:01:84:
89:89:3e:12:f0:00:dc:f9:77:31:23:d8:ba:7b:d7:6d:79:0e:
fb:0d:c8:a5:85:65:b5:32:a4:58:80:29:17:ba:55:ca:d2:ed:
8c:aa:04:32:43:28:17:69:8f:43:97:e5:e4:8b:ef:52:be:4d:
31:65:ae:ce:20:fc:b4:10:fc:8d:14:4a:f7:44:f2:4a:6f:02:
b5:63:5d:97:f0:ce:6f:e1:d0:b8:4d:f6:47:ea:c6:2e:af:4e:
89:e3:f3:7a:7d:c4:d6:d9:9b:8e:00:0f:26:01:2c:0e:69:a8:
bc:9f:35:2a:cf:19:c2:c7:37:c9:15:bd:e9:13:55:9a:1c:f7:
24:b5:19:62:37:f3:69:8f:82:bf:81:fe:dc:41:97:03:02:8b:
10:9b:18:19:2a:3b:93:f5:a3:ed:56:49:68:81:48:b1:90:6c:
b9:95:74:ac:14:21:e7:5f:64:66:6e:ec:90:a9:ef:1b:c8:8b:
54:62:0e:8c:df:5c:92:06:2d:1e:85:d6:4e:1d:23:23:33:31:
90:87:66:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd+MSP90Iamv0KS52HFcqTmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwMjE4ZTgwMWE1MzI1OTVlOWI3MWM2NDM2ODRlYTA1Zjk2
YmY1ZjMwHhcNMjUwNjE3MTQwMDM5WhcNMjUwNjE4MTQwMDM5WjAzMTEwLwYDVQQD
EygyZmFhNzA4MTBkY2ZkZGFiZWMwMDY4NzU0M2ZlYjFmMjY3Y2Y2YWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPiekAVdlta3jtnECkLrsKjPeT+3
RfSV1lGRstbYL948oCpiYlMEKl5tztjWyKr0JJhxibsXgFKwg+6Ysnl6d2pjS7x0
4hb/HT6fcUi+Q00+TqgCeM7a1LVF+uxMvbjAGJ2bBd9kIGGs6M9HfBsL1Jtkbsew
6AROR7VXPb+CqPHDY4TFY73umBs3fXqowXAuiLXynBODctRg87sUF7iNzV9JIfU5
gdts7hNWdfq5/KRpWBbTfnYV4j+YZRS4K9vaGHEQqQIQ5IgXSVu4p7ul3JhxJtuv
hiFuyYtYAcS59qoS5omyX0Gw/0TIkqMHXia2wn+x6p90+nmBJ+m39TLs0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+qcIENz92r7ABodUP+sfJnz2r7MB8GA1UdIwQY
MBaAFJAhjoAaUyWV6bccZDaE6gX5a/XzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0NHT2dCcFRKWlhwdHh4a05vVHFCZmxyOWZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xYjY2MjQtODQ0MS00ZDAxLTk2ZTMt
NjAxODEyZWY0MjhiLzEva0NHT2dCcFRKWlhwdHh4a05vVHFCZmxyOWZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8xYjY2MjQtODQ0MS00ZDAxLTk2ZTMtNjAxODEyZWY0Mjhi
LzEva0NHT2dCcFRKWlhwdHh4a05vVHFCZmxyOWZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxKVHdok
ricJnBHUn9kbmmnqIpKFOij0Ig722MbwFClXRn5ZUCdmVsq4J/lRkFhIz0FwLgGE
iYk+EvAA3Pl3MSPYunvXbXkO+w3IpYVltTKkWIApF7pVytLtjKoEMkMoF2mPQ5fl
5IvvUr5NMWWuziD8tBD8jRRK90TySm8CtWNdl/DOb+HQuE32R+rGLq9OiePzen3E
1tmbjgAPJgEsDmmovJ81Ks8Zwsc3yRW96RNVmhz3JLUZYjfzaY+Cv4H+3EGXAwKL
EJsYGSo7k/Wj7VZJaIFIsZBsuZV0rBQh519kZm7skKnvG8iLVGIOjN9ckgYtHoXW
Th0jIzMxkIdmyQ==
-----END CERTIFICATE-----
Generated at Tue Jun 17 16:53:37 2025 by rpki-client