Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier: yvKd40AonFq5y6sShBraLuYCGuUzoDJdx9C0JLj7/eA=
Subject key identifier: D1:C6:B2:42:B8:3A:01:46:53:FC:61:3D:79:0D:AB:6F:F9:A0:B4:79
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 0197696118902CCA8CF8D81B8EB61850C367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 13:01:00 +0000
Manifest this update: Fri 13 Jun 2025 13:01:00 +0000
Manifest next update: Sat 14 Jun 2025 13:01:00 +0000
Files and hashes: 1: deIOkmJ8ssMd2RwtI-v-jMre1M8.roa (hash: 1DQjFOIdMCv4n8BARwPWSteFX1+/0FvbC04tqMoZb0Q=)
2: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: 8uxwWYQU/3bDBD+9abq67tZ8eMflWt6vFD1SdtcYxiQ=)
3: pNxIm0SmH7kBUMbare2mFQXDHOk.roa (hash: FL47b2q1GAJAcT+EDiWHDQ+iV/Lo12DMIiUY1wrMTeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:18:90:2c:ca:8c:f8:d8:1b:8e:b6:18:50:c3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: Jun 13 13:01:00 2025 GMT
Not After : Jun 14 13:01:00 2025 GMT
Subject: CN=d1c6b242b83a014653fc613d790dab6ff9a0b479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:37:ee:32:a6:12:a2:97:e6:2a:bf:1c:28:
d1:be:52:a4:a4:20:4b:e8:86:b9:29:46:e6:de:2d:
b7:43:f3:28:8b:24:6f:69:f4:75:4e:90:82:5c:5c:
f0:a6:41:0e:8f:95:73:7d:50:1e:6a:a8:68:8b:56:
45:67:16:c7:aa:d3:f5:d4:4f:ed:27:81:a4:91:c1:
50:4b:bc:8f:b3:ac:5d:d5:ce:ef:be:b8:06:65:e0:
c6:c6:34:fb:1a:78:01:89:84:e0:03:fe:63:b1:4e:
f0:f8:fc:f3:c3:55:28:4f:9c:a9:98:47:2c:a6:bd:
f8:5a:92:77:25:7e:fc:27:31:25:7e:bf:66:b0:e7:
d5:89:9e:c1:75:e6:06:49:48:c7:7a:8f:79:14:1b:
ae:2b:6f:6c:59:fa:5d:34:b2:54:51:1c:52:53:b5:
90:dc:65:60:fc:fb:7f:62:56:0f:61:9c:f8:32:bb:
18:d6:a7:42:31:27:32:e5:42:8b:28:cf:00:ef:7a:
4a:cc:3d:79:dc:e0:2c:e1:d2:2c:44:98:96:6e:8b:
34:84:fc:dd:73:d3:12:13:83:29:e0:79:e2:7a:90:
b8:6e:39:8c:bd:c6:61:09:b9:9c:5c:ca:49:cf:0d:
7b:85:97:c9:5a:18:0a:a0:ee:b4:7e:36:dd:65:73:
67:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C6:B2:42:B8:3A:01:46:53:FC:61:3D:79:0D:AB:6F:F9:A0:B4:79
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:af:d3:03:63:90:b1:a0:4f:d7:1d:6c:0e:9e:18:64:ec:a0:
4b:5c:9f:97:1a:40:75:3e:61:72:46:04:aa:08:69:60:9a:83:
70:74:6b:d7:dc:9c:4d:4b:2c:18:75:56:95:7f:fb:01:76:cf:
fb:f4:75:33:78:d0:9c:96:43:51:5d:32:15:02:db:d2:5e:bb:
a7:12:05:c6:74:41:8d:33:f9:12:ab:bb:5d:81:df:f6:1f:e7:
60:66:b9:69:86:d2:91:bf:07:dc:e0:e9:21:d0:06:bd:a3:5c:
68:1c:e1:3c:02:06:79:f7:c1:c4:ef:cf:20:c1:36:26:36:9b:
27:90:7e:c2:8a:f1:ab:55:58:27:61:ba:5c:63:8f:c0:bc:de:
94:23:3f:01:2f:fa:24:51:06:d5:4e:50:bf:95:4b:a7:1d:00:
c8:3e:45:e5:aa:9e:fd:62:67:6f:c2:66:8f:61:92:56:ca:42:
dc:b3:2b:40:71:ee:d2:31:53:51:b0:38:d1:72:c3:cf:4b:a1:
00:80:b9:92:f4:d1:8e:e8:46:5f:d8:70:51:6b:c3:5e:2f:1b:
39:52:0b:ee:7d:a5:24:db:c9:9e:7a:84:2d:10:1a:b8:63:c5:
a1:d1:84:bc:ea:8b:e1:b1:b0:90:60:33:f7:69:cd:71:f9:93:
8a:91:ec:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYRiQLMqM+NgbjrYYUMNnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMmUzMzBiNTg3OTU5MGFiYWU4MWJmNDBhOTFhNTEwMWJj
MThmYTAwHhcNMjUwNjEzMTMwMTAwWhcNMjUwNjE0MTMwMTAwWjAzMTEwLwYDVQQD
EyhkMWM2YjI0MmI4M2EwMTQ2NTNmYzYxM2Q3OTBkYWI2ZmY5YTBiNDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5s37jKmEqKX5iq/HCjRvlKkpCBL
6Ia5KUbm3i23Q/MoiyRvafR1TpCCXFzwpkEOj5VzfVAeaqhoi1ZFZxbHqtP11E/t
J4GkkcFQS7yPs6xd1c7vvrgGZeDGxjT7GngBiYTgA/5jsU7w+Pzzw1UoT5ypmEcs
pr34WpJ3JX78JzElfr9msOfViZ7BdeYGSUjHeo95FBuuK29sWfpdNLJUURxSU7WQ
3GVg/Pt/YlYPYZz4MrsY1qdCMScy5UKLKM8A73pKzD153OAs4dIsRJiWbos0hPzd
c9MSE4Mp4HniepC4bjmMvcZhCbmcXMpJzw17hZfJWhgKoO60fjbdZXNnwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHGskK4OgFGU/xhPXkNq2/5oLR5MB8GA1UdIwQY
MBaAFJIuMwtYeVkKuugb9AqRpRAbwY+gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2k0ekMxaDVXUXE2NkJ2MENwR2xFQnZCajZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mMTgwZmYtMzM2Yy00YjQ1LTkzNzgt
NTY4NjcyYzI1Y2E4LzEva2k0ekMxaDVXUXE2NkJ2MENwR2xFQnZCajZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mMTgwZmYtMzM2Yy00YjQ1LTkzNzgtNTY4NjcyYzI1Y2E4
LzEva2k0ekMxaDVXUXE2NkJ2MENwR2xFQnZCajZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGq/TA2OQ
saBP1x1sDp4YZOygS1yflxpAdT5hckYEqghpYJqDcHRr19ycTUssGHVWlX/7AXbP
+/R1M3jQnJZDUV0yFQLb0l67pxIFxnRBjTP5Equ7XYHf9h/nYGa5aYbSkb8H3ODp
IdAGvaNcaBzhPAIGeffBxO/PIME2JjabJ5B+worxq1VYJ2G6XGOPwLzelCM/AS/6
JFEG1U5Qv5VLpx0AyD5F5aqe/WJnb8Jmj2GSVspC3LMrQHHu0jFTUbA40XLDz0uh
AIC5kvTRjuhGX9hwUWvDXi8bOVIL7n2lJNvJnnqELRAauGPFodGEvOqL4bGwkGAz
92nNcfmTipHsDA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:06 2025 by rpki-client