Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: RUfpoSFj0wbyFN+fUyi8+UUkVe4Rq+tdqCZI82VolNo=
Subject key identifier: A2:44:AE:42:73:A0:E4:3C:5C:2C:0B:22:EC:3B:88:86:71:C5:B1:D2
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 01977865EE36CFE0D8BF0D183DDC6625734F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 1593
Signing time: Mon 16 Jun 2025 11:00:35 +0000
Manifest this update: Mon 16 Jun 2025 11:00:35 +0000
Manifest next update: Tue 17 Jun 2025 11:00:35 +0000
Files and hashes: 1: FlduQKMxPetRFEf3K99xaEoZ7QU.roa (hash: 2r4TM6IwMUnx2aicUZFPb2Iq+BV2xdiFUdzdromgaYg=)
2: aX_b4UaRWSPBF6_UJgMjS5N9O-c.roa (hash: YV9fhTwKDLCkfBPeMSZl5AvTP7h0hbaT54bWMdXdAUo=)
3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: /sqjErk4W6jdXLPyXIsEMUho67bJoQPOExEGOl+FfN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:65:ee:36:cf:e0:d8:bf:0d:18:3d:dc:66:25:73:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Jun 16 11:00:35 2025 GMT
Not After : Jun 17 11:00:35 2025 GMT
Subject: CN=a244ae4273a0e43c5c2c0b22ec3b888671c5b1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:50:0c:76:f7:87:a2:44:7f:56:5c:77:bc:
b6:9d:98:fa:1c:95:46:25:9b:87:44:2d:3f:04:38:
5a:50:32:72:7b:b0:b8:d7:c6:a8:ba:70:07:ad:1a:
db:23:52:fc:1e:59:49:7d:ac:05:bd:2c:5a:0f:d2:
87:86:a0:41:28:ba:fb:52:f7:f2:6e:61:c9:fe:ac:
fa:27:9a:f8:fe:2d:9a:65:82:37:a6:a7:24:3e:c1:
f4:04:cc:f2:27:0a:44:bf:b2:4c:38:24:35:50:de:
e0:28:14:a3:61:74:e6:e1:d8:c1:6d:10:48:f1:76:
f9:03:dc:1d:8e:44:24:19:1d:6b:a4:80:f9:5e:19:
57:4c:11:f0:bb:10:3b:15:3f:af:d2:ea:41:c0:4a:
49:bb:fc:89:93:b7:76:c4:b5:68:9a:72:b9:fb:df:
55:26:90:2a:a3:31:ef:cc:c0:a5:df:c2:ea:48:90:
e1:ea:1a:fe:1a:ff:4c:10:6c:61:e0:a2:5b:6c:96:
36:4a:df:0b:36:f3:4e:20:67:1a:ea:0e:50:f8:b2:
4d:e8:13:e2:25:ac:63:08:7d:1a:c8:38:b6:15:4d:
ff:ea:2c:2a:e6:69:5a:82:c9:25:46:15:3f:9e:67:
66:10:e3:32:fa:38:4d:8c:4f:ae:c7:bc:c0:22:62:
8c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:44:AE:42:73:A0:E4:3C:5C:2C:0B:22:EC:3B:88:86:71:C5:B1:D2
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:00:ba:e0:30:8f:4a:f2:98:e7:6a:2f:8e:2c:a9:fd:54:f5:
a1:7a:fa:09:1c:38:5d:7c:db:b2:cb:84:43:6b:5c:56:c6:31:
4a:03:61:2e:69:61:9b:d3:80:82:61:b2:4d:3d:02:f0:06:07:
0e:3b:4b:d8:6f:8e:70:c2:2a:20:34:12:7a:99:16:45:af:f3:
5a:2e:e5:c6:5d:6f:e5:35:8b:98:f5:55:41:0d:8c:f5:4f:4d:
21:fc:46:ca:97:e0:33:b6:9e:3d:eb:26:98:77:31:83:27:af:
b7:a9:af:61:cd:a1:4d:98:11:9f:0b:f6:c5:8e:95:57:ba:7d:
0a:ca:fd:84:3c:df:3f:6d:bc:52:9a:dd:6e:bb:2f:c9:53:29:
d7:3c:7b:be:44:03:1d:78:9b:1c:08:d7:bf:d5:cc:23:a1:9e:
a7:5f:3f:cd:c3:33:20:fe:08:75:fa:5e:05:c5:23:c3:98:27:
19:09:f3:76:6d:e8:72:16:f3:9a:53:22:6b:2d:34:80:58:18:
1c:b2:f1:70:23:12:a8:3b:5d:53:58:46:04:ee:f2:94:5d:ca:
9e:20:21:22:19:3d:b9:55:0f:a0:34:60:bf:cc:32:f1:98:54:
a8:e4:91:ed:0b:92:d4:67:b1:46:db:19:ec:ec:4d:30:50:eb:
87:15:fb:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd4Ze42z+DYvw0YPdxmJXNPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyODBmZGM5ZTdhODY0MzBjOGUyOGY1ZTM0OWUzMTdmYmI4
YTFjYTkwHhcNMjUwNjE2MTEwMDM1WhcNMjUwNjE3MTEwMDM1WjAzMTEwLwYDVQQD
EyhhMjQ0YWU0MjczYTBlNDNjNWMyYzBiMjJlYzNiODg4NjcxYzViMWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeJQDHb3h6JEf1Zcd7y2nZj6HJVG
JZuHRC0/BDhaUDJye7C418aounAHrRrbI1L8HllJfawFvSxaD9KHhqBBKLr7Uvfy
bmHJ/qz6J5r4/i2aZYI3pqckPsH0BMzyJwpEv7JMOCQ1UN7gKBSjYXTm4djBbRBI
8Xb5A9wdjkQkGR1rpID5XhlXTBHwuxA7FT+v0upBwEpJu/yJk7d2xLVomnK5+99V
JpAqozHvzMCl38LqSJDh6hr+Gv9MEGxh4KJbbJY2St8LNvNOIGca6g5Q+LJN6BPi
JaxjCH0ayDi2FU3/6iwq5mlagsklRhU/nmdmEOMy+jhNjE+ux7zAImKMZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJErkJzoOQ8XCwLIuw7iIZxxbHSMB8GA1UdIwQY
MBaAFJKA/cnnqGQwyOKPXjSeMX+7ihypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jZjQ5NDYtZjVjMi00NWFhLTlhNDEt
ZjQ0Mjk5ODY1YTI4LzEva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9jZjQ5NDYtZjVjMi00NWFhLTlhNDEtZjQ0Mjk5ODY1YTI4
LzEva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwC64DCP
SvKY52ovjiyp/VT1oXr6CRw4XXzbssuEQ2tcVsYxSgNhLmlhm9OAgmGyTT0C8AYH
DjtL2G+OcMIqIDQSepkWRa/zWi7lxl1v5TWLmPVVQQ2M9U9NIfxGypfgM7aePesm
mHcxgyevt6mvYc2hTZgRnwv2xY6VV7p9Csr9hDzfP228UprdbrsvyVMp1zx7vkQD
HXibHAjXv9XMI6Gep18/zcMzIP4IdfpeBcUjw5gnGQnzdm3ochbzmlMiay00gFgY
HLLxcCMSqDtdU1hGBO7ylF3KniAhIhk9uVUPoDRgv8wy8ZhUqOSR7QuS1GexRtsZ
7OxNMFDrhxX7rw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:52:00 2025 by rpki-client