Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
File: Kf8VWBu5BPG5BTh0IRiwH576pmI.mft (raw, json)
Hash identifier: yaq5OAKRg5J9FpfIV7jyThPOz7TOv4K6gcf8wfzyECE=
Subject key identifier: EF:0F:24:09:D0:36:A5:9C:6C:08:AB:1C:B1:7F:94:62:02:A5:D0:3B
Authority key identifier: 29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
Certificate issuer: /CN=29ff15581bb904f1b90538742118b01f9efaa662
Certificate serial: 01976D744154C4C2990C832808FDCC08480E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 08:00:24 +0000
Manifest this update: Sat 14 Jun 2025 08:00:24 +0000
Manifest next update: Sun 15 Jun 2025 08:00:24 +0000
Files and hashes: 1: Kf8VWBu5BPG5BTh0IRiwH576pmI.crl (hash: OQhj1x7VS8v4ukqoIfc2NJRP12SidTFqROiZeocf9TA=)
2: Pt5jCGzvovgNs5CdDynFwkh2QzQ.roa (hash: nVdxdKNGSJEZ6402xd/EQ5NSj2OrYk/HxmlnqTUvP6Y=)
3: c_ThGFbqhteIloHLISS2D3Is-B0.roa (hash: dWKCcE+KdsbeTu7uVlboc1SJNBL/6lqMpvChZHMYdHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:41:54:c4:c2:99:0c:83:28:08:fd:cc:08:48:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ff15581bb904f1b90538742118b01f9efaa662
Validity
Not Before: Jun 14 08:00:24 2025 GMT
Not After : Jun 15 08:00:24 2025 GMT
Subject: CN=ef0f2409d036a59c6c08ab1cb17f946202a5d03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f7:f5:8e:97:2c:ba:fd:18:ef:ca:27:81:bd:
a9:5f:11:2a:fe:aa:9f:56:9c:5e:ce:af:ea:b2:04:
42:40:6c:8b:60:04:e1:5a:ad:95:30:8c:61:cd:29:
25:5b:f9:d4:e4:77:a3:06:7c:48:38:1d:e2:6b:76:
41:f7:2a:e5:ce:b4:34:6c:8e:f1:d8:54:16:f9:62:
b2:96:f2:99:d4:ce:5e:48:a3:64:0a:3c:38:cf:1e:
f0:e0:a7:4e:13:74:78:17:85:7e:90:ae:d8:2a:5b:
11:57:15:1a:c1:48:4d:1d:44:48:da:f0:10:83:f0:
b7:55:79:0b:c2:64:91:8b:09:6d:58:31:8c:50:3e:
ae:8f:5c:9c:ce:fa:a4:02:1d:81:f1:36:7b:9c:67:
92:19:d8:9f:a8:15:d7:b3:eb:6b:f9:be:c0:58:9b:
5e:0f:e3:6a:b8:67:41:d0:35:81:a0:67:15:0e:d4:
4d:61:7b:e0:80:40:af:fe:d1:9a:4b:de:9a:a3:8f:
39:13:c0:f3:46:c6:09:d7:7f:22:87:9c:4e:ba:0d:
85:c4:59:ec:9c:23:c0:20:66:39:69:da:c4:8a:d9:
80:58:11:66:fd:4f:3d:a8:3f:d2:45:13:37:cf:c5:
be:45:93:30:b9:9f:18:e5:6d:7c:96:b4:87:b8:06:
58:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0F:24:09:D0:36:A5:9C:6C:08:AB:1C:B1:7F:94:62:02:A5:D0:3B
X509v3 Authority Key Identifier:
keyid:29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d1:5a:66:f4:35:8a:e4:13:1d:c9:18:c0:24:89:4a:48:d3:
dd:b2:24:0b:9a:82:7c:0f:03:f1:42:b0:9c:7b:1f:60:74:c4:
c0:8e:47:1f:4e:74:f9:f6:aa:5b:36:8c:07:dd:cd:61:13:bb:
83:3f:c4:46:2c:64:26:59:33:c2:4c:fa:41:39:77:d1:7e:f5:
92:a6:90:e1:9d:a8:1f:f0:e8:dd:d5:93:e2:99:56:72:f0:6a:
85:25:7e:2c:81:9f:62:cd:00:3b:14:12:9f:ec:d0:55:48:a4:
d7:0e:bf:f2:f6:ce:e2:3b:7c:bc:9b:58:dc:9e:f1:15:96:2f:
a5:14:59:cc:4f:a8:5e:f8:c1:7a:b8:4f:51:f9:49:c9:3e:00:
5a:a8:e3:2d:84:d8:c1:e1:10:0a:d2:9c:19:98:43:66:2b:b1:
70:bf:1d:72:1c:d1:d6:16:9c:2e:c6:83:29:a6:b4:61:b0:5a:
47:3d:a6:98:37:b2:15:77:85:10:b7:f0:ec:dc:65:6b:53:85:
3c:3f:5d:9c:21:4f:98:a3:38:0d:c4:b7:8a:be:2d:88:d7:75:
95:de:7e:4e:e7:d2:b1:fb:ec:f4:1b:29:70:2a:8c:c7:33:c3:
70:66:56:3e:80:85:fc:52:56:27:c6:0a:c2:a3:25:a7:7f:c0:
52:0d:b7:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtdEFUxMKZDIMoCP3MCEgOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZmYxNTU4MWJiOTA0ZjFiOTA1Mzg3NDIxMThiMDFmOWVm
YWE2NjIwHhcNMjUwNjE0MDgwMDI0WhcNMjUwNjE1MDgwMDI0WjAzMTEwLwYDVQQD
EyhlZjBmMjQwOWQwMzZhNTljNmMwOGFiMWNiMTdmOTQ2MjAyYTVkMDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/f1jpcsuv0Y78ongb2pXxEq/qqf
Vpxezq/qsgRCQGyLYAThWq2VMIxhzSklW/nU5HejBnxIOB3ia3ZB9yrlzrQ0bI7x
2FQW+WKylvKZ1M5eSKNkCjw4zx7w4KdOE3R4F4V+kK7YKlsRVxUawUhNHURI2vAQ
g/C3VXkLwmSRiwltWDGMUD6uj1yczvqkAh2B8TZ7nGeSGdifqBXXs+tr+b7AWJte
D+NquGdB0DWBoGcVDtRNYXvggECv/tGaS96ao485E8DzRsYJ138ih5xOug2FxFns
nCPAIGY5adrEitmAWBFm/U89qD/SRRM3z8W+RZMwuZ8Y5W18lrSHuAZYUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8PJAnQNqWcbAirHLF/lGICpdA7MB8GA1UdIwQY
MBaAFCn/FVgbuQTxuQU4dCEYsB+e+qZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2Y4VldCdTVCUEc1QlRoMElSaXdINTc2cG1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9kYjYyMzEtM2E3YS00ODRkLThiZWUt
M2I4ZDhiNzZiN2Y2LzEvS2Y4VldCdTVCUEc1QlRoMElSaXdINTc2cG1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9kYjYyMzEtM2E3YS00ODRkLThiZWUtM2I4ZDhiNzZiN2Y2
LzEvS2Y4VldCdTVCUEc1QlRoMElSaXdINTc2cG1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD9FaZvQ1
iuQTHckYwCSJSkjT3bIkC5qCfA8D8UKwnHsfYHTEwI5HH050+faqWzaMB93NYRO7
gz/ERixkJlkzwkz6QTl30X71kqaQ4Z2oH/Do3dWT4plWcvBqhSV+LIGfYs0AOxQS
n+zQVUik1w6/8vbO4jt8vJtY3J7xFZYvpRRZzE+oXvjBerhPUflJyT4AWqjjLYTY
weEQCtKcGZhDZiuxcL8dchzR1hacLsaDKaa0YbBaRz2mmDeyFXeFELfw7Nxla1OF
PD9dnCFPmKM4DcS3ir4tiNd1ld5+TufSsfvs9BspcCqMxzPDcGZWPoCF/FJWJ8YK
wqMlp3/AUg23Kg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:08:19 2025 by rpki-client