Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
File: rKjs_uUfaNX4A6rm-_wf3EGQJio.mft (raw, json)
Hash identifier: /vYr/6GqYtSnmQUT+1yr0U/rt8EE6c1iAndKGRuZGso=
Subject key identifier: 91:39:80:36:C8:60:C7:0E:56:04:8A:46:64:DE:97:D4:12:29:32:FD
Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
Certificate issuer: /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Certificate serial: 01976DABC52DBE13E91ADCBE0BDB8096AFEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
Manifest number: 0CC6
Signing time: Sat 14 Jun 2025 09:01:03 +0000
Manifest this update: Sat 14 Jun 2025 09:01:03 +0000
Manifest next update: Sun 15 Jun 2025 09:01:03 +0000
Files and hashes: 1: TNPcdBpnbKooEgmUt2YrkLdYDmQ.roa (hash: WQcIls3E5pX4tymrsMPubCPP31sHiDGN5xYJkHTcWEg=)
2: rKjs_uUfaNX4A6rm-_wf3EGQJio.crl (hash: RezRM3eFTXsmOmhpYHWUgnXayzDj1os+LU1zGa5gw+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:c5:2d:be:13:e9:1a:dc:be:0b:db:80:96:af:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Validity
Not Before: Jun 14 09:01:03 2025 GMT
Not After : Jun 15 09:01:03 2025 GMT
Subject: CN=91398036c860c70e56048a4664de97d4122932fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5e:82:a4:b2:89:6f:2d:f5:a8:5a:7f:e0:ca:
46:c5:ae:2f:23:ac:52:8b:bf:d8:ec:de:7e:09:e5:
42:42:cf:ec:4c:6d:63:c2:30:bd:84:43:5f:1d:6c:
c6:fa:68:b6:56:49:3f:d8:87:3f:22:70:13:29:a4:
40:9f:d2:a4:1f:78:08:64:68:40:37:35:23:32:85:
9f:78:4c:35:c4:53:bd:35:52:07:d7:1f:79:26:0f:
d7:de:ce:4d:af:9c:51:5b:ad:91:e3:2d:0a:53:b1:
c5:86:97:56:a3:6c:b8:01:02:ed:0c:1e:af:26:03:
f1:f5:5e:b3:c8:ae:35:41:56:bc:f1:9d:07:2b:b1:
4f:96:9e:d6:29:1f:cb:a0:1f:08:b1:83:71:0a:0a:
ff:2d:ba:2d:46:bc:f4:11:85:e6:55:14:7a:a3:82:
db:47:a5:13:91:8e:5c:4d:0d:f7:c5:21:5e:ad:aa:
15:b5:23:23:86:9f:9b:fe:0f:93:3d:35:a5:ba:80:
7f:00:13:08:25:a1:7a:5d:0e:76:e3:3b:7c:33:fd:
92:28:8d:7f:e8:33:61:0f:c5:d4:bd:cb:a0:3e:b2:
a5:14:b6:46:29:c3:e8:f9:0f:7b:2e:b8:88:2e:41:
2d:cf:33:c8:b4:06:dc:57:2c:db:e6:23:ef:7a:2a:
d6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:39:80:36:C8:60:C7:0E:56:04:8A:46:64:DE:97:D4:12:29:32:FD
X509v3 Authority Key Identifier:
keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7f:6c:58:64:50:cb:2f:5c:70:fa:c1:a4:2a:d0:84:70:83:
eb:62:40:a5:31:0e:e5:2e:aa:bb:d4:c6:59:64:ee:c4:78:23:
25:5e:f8:90:a9:8e:d4:e7:c5:18:35:9a:54:dc:3b:80:e0:4d:
eb:cb:16:98:c8:a3:0c:e4:de:78:48:53:c9:09:18:b2:10:78:
c1:b1:e9:c2:d8:8a:da:77:32:1e:95:7d:ca:e6:1e:dc:17:46:
35:8e:74:58:ad:f3:2c:56:f6:39:c6:67:95:10:6a:dc:7f:b1:
7f:4b:04:02:76:e3:21:c6:ce:d8:00:e4:1b:66:be:44:d3:45:
db:0d:c4:78:37:de:bc:5c:59:a8:24:4c:18:23:9e:91:ef:ce:
c2:3b:5a:89:e6:f1:74:b6:ec:97:50:6a:a4:04:f9:c5:15:ea:
0b:aa:95:e3:63:4c:35:36:e5:0b:3a:90:44:28:89:8d:a8:61:
f8:7f:5d:7b:5a:2a:1a:93:42:3a:9e:ff:d3:73:a3:8f:12:45:
c5:e9:85:07:e8:c0:35:d1:99:cb:9a:9b:80:fa:c2:fb:02:c4:
fe:ae:98:e2:ff:d5:31:0d:bf:9d:0c:a0:2f:57:86:e4:ff:42:
e6:7e:9e:a6:eb:cd:28:55:5d:13:6b:82:33:ae:5a:9b:34:fd:
3c:57:9f:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtq8UtvhPpGty+C9uAlq/rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYThlY2ZlZTUxZjY4ZDVmODAzYWFlNmZiZmMxZmRjNDE5
MDI2MmEwHhcNMjUwNjE0MDkwMTAzWhcNMjUwNjE1MDkwMTAzWjAzMTEwLwYDVQQD
Eyg5MTM5ODAzNmM4NjBjNzBlNTYwNDhhNDY2NGRlOTdkNDEyMjkzMmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl6CpLKJby31qFp/4MpGxa4vI6xS
i7/Y7N5+CeVCQs/sTG1jwjC9hENfHWzG+mi2Vkk/2Ic/InATKaRAn9KkH3gIZGhA
NzUjMoWfeEw1xFO9NVIH1x95Jg/X3s5Nr5xRW62R4y0KU7HFhpdWo2y4AQLtDB6v
JgPx9V6zyK41QVa88Z0HK7FPlp7WKR/LoB8IsYNxCgr/LbotRrz0EYXmVRR6o4Lb
R6UTkY5cTQ33xSFeraoVtSMjhp+b/g+TPTWluoB/ABMIJaF6XQ524zt8M/2SKI1/
6DNhD8XUvcugPrKlFLZGKcPo+Q97LriILkEtzzPItAbcVyzb5iPveirWwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJE5gDbIYMcOVgSKRmTel9QSKTL9MB8GA1UdIwQY
MBaAFKyo7P7lH2jV+AOq5vv8H9xBkCYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktqc191VWZhTlg0QTZybS1fd2YzRUdRSmlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iMDk1MzAtOWNhMC00NDA3LThhMDUt
YmJkN2IwYWJhNmFiLzEvcktqc191VWZhTlg0QTZybS1fd2YzRUdRSmlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9iMDk1MzAtOWNhMC00NDA3LThhMDUtYmJkN2IwYWJhNmFi
LzEvcktqc191VWZhTlg0QTZybS1fd2YzRUdRSmlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ39sWGRQ
yy9ccPrBpCrQhHCD62JApTEO5S6qu9TGWWTuxHgjJV74kKmO1OfFGDWaVNw7gOBN
68sWmMijDOTeeEhTyQkYshB4wbHpwtiK2ncyHpV9yuYe3BdGNY50WK3zLFb2OcZn
lRBq3H+xf0sEAnbjIcbO2ADkG2a+RNNF2w3EeDfevFxZqCRMGCOeke/Owjtaiebx
dLbsl1BqpAT5xRXqC6qV42NMNTblCzqQRCiJjahh+H9de1oqGpNCOp7/03OjjxJF
xemFB+jANdGZy5qbgPrC+wLE/q6Y4v/VMQ2/nQygL1eG5P9C5n6epuvNKFVdE2uC
M65amzT9PFefqg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:49:25 2025 by rpki-client