Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
File: kFLex7dhf-OchVDuIMOCIBq5ryo.mft (raw, json)
Hash identifier: 2xq6eTvImv+u5K0+eTi9B4h9Kt+CAaEWJyGx5VLLHak=
Subject key identifier: 67:B9:0E:B4:7A:F3:A2:26:16:66:2F:AC:6B:09:29:EC:C5:0D:91:BC
Authority key identifier: 90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
Certificate issuer: /CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Certificate serial: 01976EF4F57B9BDDBD1A8152AE09822F2179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
Manifest number: 1018
Signing time: Sat 14 Jun 2025 15:00:36 +0000
Manifest this update: Sat 14 Jun 2025 15:00:36 +0000
Manifest next update: Sun 15 Jun 2025 15:00:36 +0000
Files and hashes: 1: DoqnptEmFDIWhd5INYDJmXuCj7c.roa (hash: knJh69OYwi71VIfestV+KfQIeq85PlXtAbjPJg+Zm8w=)
2: kFLex7dhf-OchVDuIMOCIBq5ryo.crl (hash: Mvu9Y+CZ1hj2n5DPSjk/d3OSviWR7Iim7CdT4T2XdlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:f5:7b:9b:dd:bd:1a:81:52:ae:09:82:2f:21:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Validity
Not Before: Jun 14 15:00:36 2025 GMT
Not After : Jun 15 15:00:36 2025 GMT
Subject: CN=67b90eb47af3a22616662fac6b0929ecc50d91bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d5:c6:e7:45:c6:10:4f:96:1c:39:50:95:62:
5b:0d:f7:6a:51:0f:9d:de:20:ac:b7:97:e5:bd:d5:
5c:1d:4a:52:41:8a:01:61:98:d9:93:02:32:e1:a6:
04:4e:6a:d8:5a:64:aa:32:ce:ec:18:1d:7c:2f:4f:
ec:c2:1c:50:61:34:fb:7e:10:27:37:6d:d3:3c:38:
42:8b:a9:a2:7d:ce:30:74:fd:3c:94:c0:4c:f9:cb:
19:1e:36:7e:b2:69:17:60:74:28:08:4c:e1:a5:6b:
a6:e5:93:c1:de:91:f6:c1:90:60:e5:83:ed:40:cb:
90:79:95:36:3b:a6:99:0f:31:d4:3c:4c:3f:84:de:
eb:bc:4a:1f:49:1e:9d:9d:a8:86:9a:b8:33:fa:c4:
36:3e:15:ff:56:d6:d7:c1:e8:9e:67:6e:dc:4d:38:
17:93:f2:87:22:21:5a:0f:b7:6d:3d:40:d9:40:f1:
4c:d0:38:ab:b1:3f:c3:71:c2:6d:15:96:27:a2:4e:
df:58:d2:59:d2:8a:37:ab:cf:6b:94:ee:ce:be:48:
f8:cd:75:96:2e:77:d9:20:a3:70:a2:9f:bf:aa:31:
92:c9:d8:22:42:41:c4:17:21:dc:d2:11:fc:56:4c:
f5:a4:32:7a:35:c9:19:db:43:cb:4c:52:ce:e7:3c:
a4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B9:0E:B4:7A:F3:A2:26:16:66:2F:AC:6B:09:29:EC:C5:0D:91:BC
X509v3 Authority Key Identifier:
keyid:90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b6:9f:a8:0a:1e:1d:c0:79:38:8f:f6:2e:73:84:6e:1d:d8:
13:72:cb:29:30:e6:5a:0e:2e:c6:91:ae:83:3f:9f:1e:c9:18:
0e:03:4e:e8:cb:94:cf:d0:ff:f8:c1:61:f4:dc:cd:e5:3d:5f:
1c:85:fd:a3:21:80:fd:9f:9a:e7:70:57:0d:7f:ae:2e:b1:65:
71:8a:11:88:64:a3:05:30:0c:05:de:04:4f:5f:11:6e:c0:98:
58:3e:ae:a1:dc:e7:c7:23:a8:93:1e:26:54:a9:ac:80:c1:be:
48:d2:b7:0b:dc:9a:a1:24:de:df:3c:a9:57:82:e6:19:f9:eb:
24:f5:d4:a9:8d:cd:fc:b1:76:ff:15:1f:38:b5:be:31:df:4e:
25:cd:83:40:22:b2:79:79:80:27:94:fd:36:f4:14:d2:a2:40:
a1:0b:68:fc:5c:85:50:d5:83:32:1b:95:0f:06:0d:20:63:62:
da:6c:59:af:f3:02:1b:b3:67:37:8e:0c:60:70:4e:a7:46:8e:
a3:a4:2d:a0:1b:56:35:41:a9:7d:b5:a0:30:b6:47:15:66:12:
c2:a5:2c:b8:2b:7e:b5:0e:0f:8f:e6:28:b1:b3:0d:c5:3a:85:
20:bb:92:0d:e0:dc:b2:fb:dc:6b:95:e3:d9:64:49:da:65:13:
ae:70:b8:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9PV7m929GoFSrgmCLyF5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNTJkZWM3Yjc2MTdmZTM5Yzg1NTBlZTIwYzM4MjIwMWFi
OWFmMmEwHhcNMjUwNjE0MTUwMDM2WhcNMjUwNjE1MTUwMDM2WjAzMTEwLwYDVQQD
Eyg2N2I5MGViNDdhZjNhMjI2MTY2NjJmYWM2YjA5MjllY2M1MGQ5MWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9XG50XGEE+WHDlQlWJbDfdqUQ+d
3iCst5flvdVcHUpSQYoBYZjZkwIy4aYETmrYWmSqMs7sGB18L0/swhxQYTT7fhAn
N23TPDhCi6mifc4wdP08lMBM+csZHjZ+smkXYHQoCEzhpWum5ZPB3pH2wZBg5YPt
QMuQeZU2O6aZDzHUPEw/hN7rvEofSR6dnaiGmrgz+sQ2PhX/VtbXweieZ27cTTgX
k/KHIiFaD7dtPUDZQPFM0DirsT/DccJtFZYnok7fWNJZ0oo3q89rlO7Ovkj4zXWW
LnfZIKNwop+/qjGSydgiQkHEFyHc0hH8Vkz1pDJ6NckZ20PLTFLO5zykywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGe5DrR686ImFmYvrGsJKezFDZG8MB8GA1UdIwQY
MBaAFJBS3se3YX/jnIVQ7iDDgiAaua8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0ZMZXg3ZGhmLU9jaFZEdUlNT0NJQnE1cnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lOWE3YTEtZTlmZS00N2Q0LWFlMzIt
ZGYwYTQ0ODAwYWE1LzEva0ZMZXg3ZGhmLU9jaFZEdUlNT0NJQnE1cnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9lOWE3YTEtZTlmZS00N2Q0LWFlMzItZGYwYTQ0ODAwYWE1
LzEva0ZMZXg3ZGhmLU9jaFZEdUlNT0NJQnE1cnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrafqAoe
HcB5OI/2LnOEbh3YE3LLKTDmWg4uxpGugz+fHskYDgNO6MuUz9D/+MFh9NzN5T1f
HIX9oyGA/Z+a53BXDX+uLrFlcYoRiGSjBTAMBd4ET18RbsCYWD6uodznxyOokx4m
VKmsgMG+SNK3C9yaoSTe3zypV4LmGfnrJPXUqY3N/LF2/xUfOLW+Md9OJc2DQCKy
eXmAJ5T9NvQU0qJAoQto/FyFUNWDMhuVDwYNIGNi2mxZr/MCG7NnN44MYHBOp0aO
o6QtoBtWNUGpfbWgMLZHFWYSwqUsuCt+tQ4Pj+YosbMNxTqFILuSDeDcsvvca5Xj
2WRJ2mUTrnC4Mw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:40:14 2025 by rpki-client