Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
File: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json)
Hash identifier: 2jK2sBFNe2YKCRRcMPLobjsr4aq188dE4h/E8YmFx2U=
Subject key identifier: D3:51:18:88:13:F2:7E:0A:5F:17:5C:5E:14:4C:F9:6B:64:43:40:47
Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
Certificate issuer: /CN=a4a37878c14f216c32649819ea428a58225504fb
Certificate serial: 01976F2CACA30A57D3CCFAF72A63FD4B81F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
Manifest number: 0538
Signing time: Sat 14 Jun 2025 16:01:27 +0000
Manifest this update: Sat 14 Jun 2025 16:01:27 +0000
Manifest next update: Sun 15 Jun 2025 16:01:27 +0000
Files and hashes: 1: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: WMW7DndSVfej0Fqd6fFfmJnV5CCU0UQ5hPChLmq2eVs=)
2: ro12KKiX-LBkOFDMXKVrhIyQ9tA.roa (hash: 3rfI99WFfWKHo+rtyifcnFcBumsIBP/guPHdSOGN9zM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:ac:a3:0a:57:d3:cc:fa:f7:2a:63:fd:4b:81:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb
Validity
Not Before: Jun 14 16:01:27 2025 GMT
Not After : Jun 15 16:01:27 2025 GMT
Subject: CN=d351188813f27e0a5f175c5e144cf96b64434047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:ce:b4:bc:ab:2b:ff:b4:c2:1e:0a:b2:e9:
06:cd:3a:dd:91:bc:bb:7f:e0:36:94:e1:f5:e9:58:
53:f9:c1:f6:3f:c8:a9:4f:aa:d3:39:e8:5f:4f:96:
87:8e:0e:6c:2a:b2:52:fc:4b:12:5e:62:9b:9b:a8:
ad:6c:b3:dd:31:05:30:3a:96:b4:62:9b:8a:e8:7a:
89:9c:6e:03:5f:9f:53:8c:7d:f8:0b:6a:f2:6b:d0:
77:d8:e3:ad:8d:41:58:65:9e:13:75:fb:4e:6f:76:
26:80:6f:fc:7f:29:7a:ad:e6:75:d7:91:c9:b2:47:
7e:02:cb:b9:d3:f2:b9:d4:8f:de:55:de:15:6a:76:
f1:76:ca:98:73:b9:55:6f:89:64:12:68:64:e7:22:
8c:e3:2d:a3:03:d5:68:f5:d4:2b:06:99:67:7a:fa:
68:b0:52:67:b0:a4:5b:ae:d5:12:20:ee:ed:09:63:
4b:6c:54:20:fc:fe:49:89:79:f5:f5:2e:52:22:22:
d7:ef:6f:80:68:1d:70:0f:19:38:cb:15:cd:02:2b:
24:2b:10:d2:58:fe:56:58:cd:95:7d:f1:4c:29:0b:
77:30:d0:92:9e:77:68:18:22:f4:1d:db:07:36:c1:
47:98:f7:d4:6a:92:3a:6d:5d:0b:4d:9d:76:94:a9:
c2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:51:18:88:13:F2:7E:0A:5F:17:5C:5E:14:4C:F9:6B:64:43:40:47
X509v3 Authority Key Identifier:
keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:12:1c:71:97:3a:40:96:fc:0e:08:b5:14:b5:50:6c:65:a7:
3f:f5:ad:56:9d:2e:b7:b4:ce:65:7e:57:50:73:40:46:c7:e4:
74:e7:eb:c3:44:a8:f1:49:dd:29:2c:70:3e:f2:5b:17:77:e3:
f5:2d:93:91:28:97:97:b1:56:6b:1c:fc:3f:95:56:1c:10:13:
71:2b:c2:ca:cc:5c:b1:60:d7:38:e2:2b:8a:01:47:dc:4e:c8:
77:26:24:f1:a0:50:53:f2:c9:4f:94:8b:a7:d2:3b:71:f4:13:
02:17:a7:db:04:84:d3:a6:db:80:05:e6:45:cc:66:ac:6f:6d:
5f:5b:d1:4c:c5:99:ae:b1:c9:88:2a:a1:40:e3:dc:9b:54:6a:
46:a9:99:6a:5c:e4:db:34:a0:eb:fb:57:83:00:fd:a1:35:48:
f8:b2:bd:21:95:f9:34:1b:1f:6d:29:3a:f0:9a:c9:cd:7d:e2:
b9:50:3a:ae:3d:42:b1:39:d9:2b:c1:93:cd:e9:2e:38:0a:64:
17:d8:84:5e:70:f8:55:8f:05:cb:2c:e2:6e:a9:c0:6a:9a:68:
7e:f4:df:ea:fd:44:bd:18:86:87:32:08:7f:9c:67:d6:ee:fa:
86:78:89:04:c8:56:f4:c1:f2:a4:9b:c3:00:ef:23:55:9b:44:
6c:94:31:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLKyjClfTzPr3KmP9S4H1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YTM3ODc4YzE0ZjIxNmMzMjY0OTgxOWVhNDI4YTU4MjI1
NTA0ZmIwHhcNMjUwNjE0MTYwMTI3WhcNMjUwNjE1MTYwMTI3WjAzMTEwLwYDVQQD
EyhkMzUxMTg4ODEzZjI3ZTBhNWYxNzVjNWUxNDRjZjk2YjY0NDM0MDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpPOtLyrK/+0wh4KsukGzTrdkby7
f+A2lOH16VhT+cH2P8ipT6rTOehfT5aHjg5sKrJS/EsSXmKbm6itbLPdMQUwOpa0
YpuK6HqJnG4DX59TjH34C2rya9B32OOtjUFYZZ4TdftOb3YmgG/8fyl6reZ115HJ
skd+Asu50/K51I/eVd4VanbxdsqYc7lVb4lkEmhk5yKM4y2jA9Vo9dQrBplnevpo
sFJnsKRbrtUSIO7tCWNLbFQg/P5JiXn19S5SIiLX72+AaB1wDxk4yxXNAiskKxDS
WP5WWM2VffFMKQt3MNCSnndoGCL0HdsHNsFHmPfUapI6bV0LTZ12lKnCwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNRGIgT8n4KXxdcXhRM+WtkQ0BHMB8GA1UdIwQY
MBaAFKSjeHjBTyFsMmSYGepCilgiVQT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEtONGVNRlBJV3d5WkpnWjZrS0tXQ0pWQlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNjA2ZmItMTA3Zi00Mjk2LTg4NzAt
NGIwZTBhYzhkMjI5LzEvcEtONGVNRlBJV3d5WkpnWjZrS0tXQ0pWQlBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9lNjA2ZmItMTA3Zi00Mjk2LTg4NzAtNGIwZTBhYzhkMjI5
LzEvcEtONGVNRlBJV3d5WkpnWjZrS0tXQ0pWQlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxRIccZc6
QJb8Dgi1FLVQbGWnP/WtVp0ut7TOZX5XUHNARsfkdOfrw0So8UndKSxwPvJbF3fj
9S2TkSiXl7FWaxz8P5VWHBATcSvCysxcsWDXOOIrigFH3E7IdyYk8aBQU/LJT5SL
p9I7cfQTAhen2wSE06bbgAXmRcxmrG9tX1vRTMWZrrHJiCqhQOPcm1RqRqmZalzk
2zSg6/tXgwD9oTVI+LK9IZX5NBsfbSk68JrJzX3iuVA6rj1CsTnZK8GTzekuOApk
F9iEXnD4VY8FyyzibqnAappofvTf6v1EvRiGhzIIf5xn1u76hniJBMhW9MHypJvD
AO8jVZtEbJQxVw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:27:22 2025 by rpki-client