Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
File: kJgVO94ONFhLrJH6GGjX7yTWi88.mft (raw, json)
Hash identifier: cKm+iDH8J35t72L7XycpWsIvqKMmb4RmHCYztP2KjOc=
Subject key identifier: BF:CD:18:2D:9F:FF:53:33:B0:2F:6A:E7:ED:13:05:74:D0:E8:2B:0E
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 01977E685D845044D5215AA4BAF950C9D1CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
Manifest number: 128F
Signing time: Tue 17 Jun 2025 15:00:58 +0000
Manifest this update: Tue 17 Jun 2025 15:00:58 +0000
Manifest next update: Wed 18 Jun 2025 15:00:58 +0000
Files and hashes: 1: kGuaXeFXRy7zk4r_fksHu1gERzY.roa (hash: eMXSEjP4L4hwARJ1cK2WpXviS5zDUtCbinSWtpWSvYQ=)
2: kJgVO94ONFhLrJH6GGjX7yTWi88.crl (hash: l9m7GAZ9nxiGtP4DCkVqaR0PWkuwDRf3AhEgu/SThAQ=)
3: vvhvE6BMZMFQ1G4AEbYHHR_JKn4.roa (hash: kxXe/kCsq1l7fHe6/tvS8feYMvtFQTY38JduUQRo50I=)
4: x_9yjr6rLqSNbiZnjmWq-mNvOgg.roa (hash: mAB0u4tnNy3pI1HtMQoSvS+geYvks2ItYBoen25rRrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:68:5d:84:50:44:d5:21:5a:a4:ba:f9:50:c9:d1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Jun 17 15:00:58 2025 GMT
Not After : Jun 18 15:00:58 2025 GMT
Subject: CN=bfcd182d9fff5333b02f6ae7ed130574d0e82b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:c0:8c:62:02:a2:cc:78:50:27:ca:9b:a3:
dc:46:81:32:8b:e6:d4:9f:26:32:62:ad:3e:dc:9a:
26:e3:7c:21:ce:2f:20:d5:0d:df:96:d0:e4:54:5b:
ed:b4:e1:c1:dd:0c:ef:30:e7:74:4d:24:4d:48:42:
69:bc:08:cf:f1:f8:f2:62:2f:4d:a9:e7:f1:23:0c:
e3:25:53:e5:cf:37:06:7c:86:4a:a5:1f:f6:cb:1b:
dc:e8:90:2f:3c:7c:ff:6a:ba:fb:41:fe:d7:2c:fe:
84:95:8b:e1:a9:c2:02:bc:0e:55:93:3f:78:ae:19:
c5:0d:b6:11:1b:53:f1:4a:d5:d9:c9:c5:00:7d:47:
22:9c:a1:cb:23:92:17:58:3a:8a:45:97:a4:9f:46:
bb:bf:b3:e2:3b:05:c4:40:19:ca:ca:ba:5d:36:a0:
52:1e:37:35:eb:ed:89:f0:7c:97:12:b4:9d:69:49:
05:a5:bc:be:c9:76:c4:ec:e2:02:dc:9e:84:85:e7:
e8:8a:e1:96:c0:57:89:6b:7b:b4:3f:5c:dd:09:60:
95:ef:5f:a5:f0:0f:85:a1:41:36:99:d1:4d:f9:6f:
3a:02:26:5d:e5:c2:12:20:cd:16:ec:95:ce:06:81:
27:ae:11:73:c9:db:22:c0:71:09:d8:3c:f0:ef:e8:
92:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CD:18:2D:9F:FF:53:33:B0:2F:6A:E7:ED:13:05:74:D0:E8:2B:0E
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:30:d8:a4:8b:a5:c2:75:f9:07:f8:bb:83:ba:e9:71:4b:54:
de:d3:9b:29:08:f5:14:2d:64:fb:02:26:87:ab:87:0f:28:5d:
37:87:42:bd:17:0b:8c:d4:9b:e8:ab:df:2b:eb:fd:d3:10:27:
07:dd:19:11:ec:cb:73:d7:7f:f7:92:bd:72:37:3a:69:17:93:
1b:91:6e:a5:97:a1:77:78:57:17:4f:89:d7:73:86:4c:38:52:
33:4d:d9:17:4f:32:85:b8:be:a1:45:26:ae:d4:af:d5:89:51:
0a:5d:a4:c3:f9:36:db:25:fa:d0:0b:92:36:dd:65:b5:2d:15:
91:4f:86:7f:6b:9c:34:f6:54:ff:d4:59:1d:c5:f6:45:1b:a3:
cf:cd:80:0c:ef:e7:d4:c8:b9:c0:a4:9f:73:8f:44:eb:13:22:
09:31:0f:12:7c:f5:33:6a:fd:ac:cb:27:37:da:81:b6:13:56:
e1:f3:34:54:09:5b:60:31:6e:d3:de:c9:e5:c9:52:8a:1b:d2:
10:95:a1:d1:7c:1a:cf:f7:98:2a:49:5d:01:1c:d4:26:fa:8c:
37:bc:ea:9e:7d:78:23:2c:33:58:97:3b:81:a9:a3:9d:ff:59:
be:84:9e:ba:bc:86:53:1f:99:81:39:7e:c8:49:6a:bb:08:5d:
d2:c2:30:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd+aF2EUETVIVqkuvlQydHNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwOTgxNTNiZGUwZTM0NTg0YmFjOTFmYTE4NjhkN2VmMjRk
NjhiY2YwHhcNMjUwNjE3MTUwMDU4WhcNMjUwNjE4MTUwMDU4WjAzMTEwLwYDVQQD
EyhiZmNkMTgyZDlmZmY1MzMzYjAyZjZhZTdlZDEzMDU3NGQwZTgyYjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNbAjGICosx4UCfKm6PcRoEyi+bU
nyYyYq0+3Jom43whzi8g1Q3fltDkVFvttOHB3QzvMOd0TSRNSEJpvAjP8fjyYi9N
qefxIwzjJVPlzzcGfIZKpR/2yxvc6JAvPHz/arr7Qf7XLP6ElYvhqcICvA5Vkz94
rhnFDbYRG1PxStXZycUAfUcinKHLI5IXWDqKRZekn0a7v7PiOwXEQBnKyrpdNqBS
Hjc16+2J8HyXErSdaUkFpby+yXbE7OIC3J6EhefoiuGWwFeJa3u0P1zdCWCV71+l
8A+FoUE2mdFN+W86AiZd5cISIM0W7JXOBoEnrhFzydsiwHEJ2Dzw7+iSuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/NGC2f/1MzsC9q5+0TBXTQ6CsOMB8GA1UdIwQY
MBaAFJCYFTveDjRYS6yR+hho1+8k1ovPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9iYTkwMDMtZDQzMy00MDk1LTg0Yjct
MmY5MzNkOTg5NmUwLzEva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9iYTkwMDMtZDQzMy00MDk1LTg0YjctMmY5MzNkOTg5NmUw
LzEva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjDYpIul
wnX5B/i7g7rpcUtU3tObKQj1FC1k+wImh6uHDyhdN4dCvRcLjNSb6KvfK+v90xAn
B90ZEezLc9d/95K9cjc6aReTG5FupZehd3hXF0+J13OGTDhSM03ZF08yhbi+oUUm
rtSv1YlRCl2kw/k22yX60AuSNt1ltS0VkU+Gf2ucNPZU/9RZHcX2RRujz82ADO/n
1Mi5wKSfc49E6xMiCTEPEnz1M2r9rMsnN9qBthNW4fM0VAlbYDFu097J5clSihvS
EJWh0Xwaz/eYKkldARzUJvqMN7zqnn14IywzWJc7gamjnf9ZvoSeuryGUx+ZgTl+
yElquwhd0sIw8g==
-----END CERTIFICATE-----
Generated at Wed Jun 18 01:08:40 2025 by rpki-client