Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
File: kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft (raw, json)
Hash identifier: 9FXOJg/3S5D387EVXWl0QiIGMgyRuintmK/J4gDSMp4=
Subject key identifier: C5:34:A3:A8:FE:FA:E9:60:71:95:E2:0E:C4:39:3E:C0:BE:7F:CA:1E
Authority key identifier: 90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
Certificate issuer: /CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Certificate serial: 01976E5062B9DAF3794EBBE7CD0F3F333072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
Manifest number: 088C
Signing time: Sat 14 Jun 2025 12:00:51 +0000
Manifest this update: Sat 14 Jun 2025 12:00:51 +0000
Manifest next update: Sun 15 Jun 2025 12:00:51 +0000
Files and hashes: 1: NfRATxtwxdk8t5k10NmnaIEBcI8.roa (hash: 48zogp0gFyhuprEhPJDieZAGrOKDhLcNh+8XpGM82yA=)
2: kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl (hash: 6yHA4hLM4CelMOUtXjU5pKbeRvSTW2aYfHDXK4QlMxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:62:b9:da:f3:79:4e:bb:e7:cd:0f:3f:33:30:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Validity
Not Before: Jun 14 12:00:51 2025 GMT
Not After : Jun 15 12:00:51 2025 GMT
Subject: CN=c534a3a8fefae9607195e20ec4393ec0be7fca1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:aa:32:40:75:ee:28:ff:1a:4a:b6:97:99:5e:
85:1e:83:f4:fa:24:bb:b3:24:c8:e7:78:9d:4b:40:
14:c9:d4:d7:4b:05:50:1c:85:4b:96:3b:72:d4:79:
92:ec:06:78:f6:f3:2e:4d:f2:a9:04:ba:64:4c:e9:
f0:58:54:2a:84:a2:07:1f:77:30:9e:92:35:f2:f4:
b7:77:3a:92:40:0f:82:c9:78:67:79:f7:ed:7d:05:
25:dd:1f:79:c8:8b:2a:9d:24:c8:a7:2f:1e:e7:2b:
86:9d:a7:cc:67:27:cf:30:06:82:79:d5:fe:5c:b4:
c3:69:5c:4b:35:54:c9:25:e0:b9:65:cf:46:e3:85:
f2:27:e3:4f:99:ef:78:fa:36:4e:92:a7:3f:b5:b8:
7e:85:dc:5e:9b:d8:fb:87:c1:b3:af:ca:39:25:b2:
ed:01:79:f4:45:4c:a5:bd:37:69:b1:51:3f:16:17:
f8:0c:0a:35:51:c1:28:65:eb:72:67:72:e9:13:dc:
af:5a:86:a9:46:87:a4:2f:96:ab:df:58:f6:aa:a2:
71:fa:06:cd:fa:b8:ec:bb:73:ba:6d:0e:69:7b:a0:
f7:c1:5c:f3:43:c1:84:ed:be:71:ea:9d:5b:a4:ec:
58:6c:1b:1f:88:81:e2:82:10:6d:7f:71:24:ac:3b:
2c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:34:A3:A8:FE:FA:E9:60:71:95:E2:0E:C4:39:3E:C0:BE:7F:CA:1E
X509v3 Authority Key Identifier:
keyid:90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:33:34:ee:7e:90:16:b5:f9:66:1b:bf:4f:d1:6b:c2:ba:7d:
7b:dc:88:7e:f9:c4:e2:8c:27:7c:ce:60:c8:fc:be:29:db:9a:
da:4e:af:ee:61:4d:93:28:53:3c:e9:03:25:1d:76:4e:28:8e:
87:94:4e:da:8a:32:81:e2:05:05:b3:84:72:2a:32:ef:90:7f:
df:7d:da:87:dc:0c:34:70:bd:aa:df:1a:53:14:21:4c:1e:1f:
b1:df:a6:f4:9b:59:9b:fd:fd:87:9c:5d:89:58:27:1a:ef:77:
87:61:21:a3:37:a2:75:ad:51:d7:bf:0b:96:cf:e7:ec:b9:c7:
af:76:20:6c:b4:1b:51:78:cc:8f:f9:8c:3f:bc:e3:47:90:38:
80:b9:cf:b3:3c:28:ec:08:6a:7e:54:4a:f3:34:80:c0:4d:fc:
65:78:09:68:fb:d4:cb:eb:79:8d:84:8d:66:ed:5e:3c:9c:97:
d9:c0:bc:dd:c7:12:fd:93:63:cc:c6:53:5a:e2:55:dd:f9:16:
df:9e:fa:af:af:b6:1b:52:91:64:7d:f0:ba:c6:2c:4a:7c:15:
b5:70:58:05:18:34:19:70:db:25:0a:5e:5a:a8:47:64:80:5f:
cb:56:2b:1c:bb:90:f8:73:4d:82:1d:59:a5:2b:6c:05:fc:ed:
02:47:b2:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduUGK52vN5TrvnzQ8/MzByMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjhmYWZjZjdjNDQxYWU0OWMxY2VmOTVjNTE4YjI4MjI4
YzdjNjIwHhcNMjUwNjE0MTIwMDUxWhcNMjUwNjE1MTIwMDUxWjAzMTEwLwYDVQQD
EyhjNTM0YTNhOGZlZmFlOTYwNzE5NWUyMGVjNDM5M2VjMGJlN2ZjYTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaoyQHXuKP8aSraXmV6FHoP0+iS7
syTI53idS0AUydTXSwVQHIVLljty1HmS7AZ49vMuTfKpBLpkTOnwWFQqhKIHH3cw
npI18vS3dzqSQA+CyXhnefftfQUl3R95yIsqnSTIpy8e5yuGnafMZyfPMAaCedX+
XLTDaVxLNVTJJeC5Zc9G44XyJ+NPme94+jZOkqc/tbh+hdxem9j7h8Gzr8o5JbLt
AXn0RUylvTdpsVE/Fhf4DAo1UcEoZetyZ3LpE9yvWoapRoekL5ar31j2qqJx+gbN
+rjsu3O6bQ5pe6D3wVzzQ8GE7b5x6p1bpOxYbBsfiIHighBtf3EkrDssRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMU0o6j++ulgcZXiDsQ5PsC+f8oeMB8GA1UdIwQY
MBaAFJD4+vz3xEGuScHO+VxRiygijHxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iNzhlNjktMjlkYy00ZTVjLWFjNDct
OGFhNGViYWQ0ZTY1LzEva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9iNzhlNjktMjlkYy00ZTVjLWFjNDctOGFhNGViYWQ0ZTY1
LzEva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArzM07n6Q
FrX5Zhu/T9Frwrp9e9yIfvnE4ownfM5gyPy+Kdua2k6v7mFNkyhTPOkDJR12TiiO
h5RO2ooygeIFBbOEcioy75B/333ah9wMNHC9qt8aUxQhTB4fsd+m9JtZm/39h5xd
iVgnGu93h2Ehozeida1R178Lls/n7LnHr3YgbLQbUXjMj/mMP7zjR5A4gLnPszwo
7AhqflRK8zSAwE38ZXgJaPvUy+t5jYSNZu1ePJyX2cC83ccS/ZNjzMZTWuJV3fkW
3576r6+2G1KRZH3wusYsSnwVtXBYBRg0GXDbJQpeWqhHZIBfy1YrHLuQ+HNNgh1Z
pStsBfztAkeymA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:46:26 2025 by rpki-client