Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
File: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft (raw, json)
Hash identifier: wnHThdvmUcfq1PKC3+bPfAMXfuUUhixTL4nV0IUiC38=
Subject key identifier: 58:87:50:FD:DA:D3:B0:9E:38:9B:BF:8E:D6:6B:F0:B8:8E:F2:E8:9C
Authority key identifier: 29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
Certificate issuer: /CN=292d120970515846360ea223e9a0e6a3c3896934
Certificate serial: 0197688520E2129AC7DF0A78487A8DF7C533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 09:00:44 +0000
Manifest this update: Fri 13 Jun 2025 09:00:44 +0000
Manifest next update: Sat 14 Jun 2025 09:00:44 +0000
Files and hashes: 1: Dmpy31ijG2f6hXZqP5vPJHMC7fc.roa (hash: a19ubK1sseKa07iYGs0SfWBGmOIfQnOOnA1DdC09cIs=)
2: E7yxjynkTDUFSV0KBoIMTHpUAPI.roa (hash: 9bhJ257wp5/WErvUFH4Spo9AhE0rTIMhiGRzFbkOnjk=)
3: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl (hash: 3QF+i6pn8t+rBuexTknyd5vNvORsmo5UFJ2BSFTuQ0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:20:e2:12:9a:c7:df:0a:78:48:7a:8d:f7:c5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d120970515846360ea223e9a0e6a3c3896934
Validity
Not Before: Jun 13 09:00:44 2025 GMT
Not After : Jun 14 09:00:44 2025 GMT
Subject: CN=588750fddad3b09e389bbf8ed66bf0b88ef2e89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e6:e1:c1:70:7e:be:4a:53:48:27:40:a9:6c:
86:c2:0b:8b:eb:b2:fb:2c:fc:ac:c0:6b:7b:be:df:
c4:4c:6e:fd:ae:4c:dd:dd:fc:0b:8a:3a:ac:8f:8a:
da:f4:6c:48:ec:10:c2:40:3c:c0:4b:0d:b2:09:7b:
82:cf:5e:2a:0f:58:01:86:01:d2:ba:eb:ec:8d:82:
02:bf:89:d6:e3:4d:9d:a6:03:00:f1:02:d2:e3:d2:
30:ca:1b:d2:2e:74:01:b6:d3:36:07:69:3a:3d:2b:
8a:e2:9a:40:f6:ac:11:07:a5:35:b1:f9:b5:c4:59:
1d:f4:99:4a:22:41:be:bc:b0:bc:fe:22:2f:b2:b2:
22:e9:2c:4e:3d:19:fa:0e:b9:5f:d1:a5:d3:1f:95:
9f:fa:4e:40:89:29:01:52:fb:6f:36:be:22:3b:d8:
45:09:ea:9e:0e:6a:23:b7:f6:6a:9a:17:40:9e:7f:
ad:40:8d:30:52:ab:1c:3b:f4:5b:9b:63:a3:4f:e6:
a6:88:b1:b1:d4:47:47:53:87:f2:77:a1:99:ad:68:
df:5f:71:2b:3e:29:18:9a:f1:ca:c5:40:4f:b9:65:
83:9b:c7:c0:ef:37:b2:9f:4b:e2:f7:02:96:d2:75:
df:a8:05:52:85:41:4d:41:57:c2:93:78:2b:88:27:
03:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:87:50:FD:DA:D3:B0:9E:38:9B:BF:8E:D6:6B:F0:B8:8E:F2:E8:9C
X509v3 Authority Key Identifier:
keyid:29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0b:23:d9:d1:62:94:cb:3f:b5:e9:ed:cb:34:0f:b6:aa:0f:
06:b6:2f:b5:6e:e9:25:ad:70:5e:37:ed:8b:31:5d:d1:fe:ef:
50:3b:05:35:e8:00:07:2c:48:10:86:28:22:a7:c5:a5:60:a8:
df:32:f5:12:39:ee:cf:dc:ae:36:e7:5d:b8:e2:ce:d3:07:1c:
45:e2:30:02:8c:0b:ed:51:15:50:95:fe:51:77:e1:bd:fa:a0:
8c:3d:ba:60:d7:4f:89:21:a4:fc:f2:b1:46:3c:f4:6a:d4:a6:
c2:a6:3b:7e:41:98:81:88:99:60:68:eb:db:08:c0:79:dd:c8:
fd:69:b4:a9:63:6e:7c:e0:f7:0d:6c:29:ad:62:93:63:a9:8b:
49:f0:63:d9:ea:ff:2b:f4:15:f5:ef:3d:45:c7:8a:52:59:45:
9d:8e:07:02:2a:9c:8b:c6:fd:f6:34:17:29:37:f2:6c:81:f9:
9d:54:8b:c4:14:a5:04:75:44:81:8e:8a:c8:32:5e:fb:4f:44:
ea:e6:26:ad:b6:d9:61:c4:de:47:af:dd:85:b4:5f:bf:7b:56:
f4:50:2b:77:ed:76:bd:c5:f7:c7:b6:30:7a:46:8e:61:6e:22:
33:ab:d3:55:5a:73:7e:de:6c:2e:a0:92:0d:c3:e9:20:d0:88:
21:7b:78:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdohSDiEprH3wp4SHqN98UzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MmQxMjA5NzA1MTU4NDYzNjBlYTIyM2U5YTBlNmEzYzM4
OTY5MzQwHhcNMjUwNjEzMDkwMDQ0WhcNMjUwNjE0MDkwMDQ0WjAzMTEwLwYDVQQD
Eyg1ODg3NTBmZGRhZDNiMDllMzg5YmJmOGVkNjZiZjBiODhlZjJlODljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ubhwXB+vkpTSCdAqWyGwguL67L7
LPyswGt7vt/ETG79rkzd3fwLijqsj4ra9GxI7BDCQDzASw2yCXuCz14qD1gBhgHS
uuvsjYICv4nW402dpgMA8QLS49IwyhvSLnQBttM2B2k6PSuK4ppA9qwRB6U1sfm1
xFkd9JlKIkG+vLC8/iIvsrIi6SxOPRn6Drlf0aXTH5Wf+k5AiSkBUvtvNr4iO9hF
CeqeDmojt/ZqmhdAnn+tQI0wUqscO/Rbm2OjT+amiLGx1EdHU4fyd6GZrWjfX3Er
PikYmvHKxUBPuWWDm8fA7zeyn0vi9wKW0nXfqAVShUFNQVfCk3griCcDawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiHUP3a07CeOJu/jtZr8LiO8uicMB8GA1UdIwQY
MBaAFCktEglwUVhGNg6iI+mg5qPDiWk0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1MwU0NYQlJXRVkyRHFJajZhRG1vOE9KYVRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9kZTkxMzktYTlkMC00OTNhLTkyNjAt
ZWQwZjI1NmE1ZmUzLzEvS1MwU0NYQlJXRVkyRHFJajZhRG1vOE9KYVRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9kZTkxMzktYTlkMC00OTNhLTkyNjAtZWQwZjI1NmE1ZmUz
LzEvS1MwU0NYQlJXRVkyRHFJajZhRG1vOE9KYVRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAsj2dFi
lMs/tentyzQPtqoPBrYvtW7pJa1wXjftizFd0f7vUDsFNegAByxIEIYoIqfFpWCo
3zL1Ejnuz9yuNudduOLO0wccReIwAowL7VEVUJX+UXfhvfqgjD26YNdPiSGk/PKx
Rjz0atSmwqY7fkGYgYiZYGjr2wjAed3I/Wm0qWNufOD3DWwprWKTY6mLSfBj2er/
K/QV9e89RceKUllFnY4HAiqci8b99jQXKTfybIH5nVSLxBSlBHVEgY6KyDJe+09E
6uYmrbbZYcTeR6/dhbRfv3tW9FArd+12vcX3x7YwekaOYW4iM6vTVVpzft5sLqCS
DcPpINCIIXt4fA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:08 2025 by rpki-client