Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
File: k680jsWk5l4MsTeCGuahOe1_rAA.mft (raw, json)
Hash identifier: tftzN2Ltn+YHvZwYNukSil6dwyqShHi5gtmpZ4tKYbQ=
Subject key identifier: D6:38:EE:93:14:63:F9:8A:D0:4E:97:EB:26:20:E2:C7:2D:FB:D8:B7
Authority key identifier: 93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
Certificate issuer: /CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Certificate serial: 01976E86E970301B7818A7EE335895AD2D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
Manifest number: 1520
Signing time: Sat 14 Jun 2025 13:00:24 +0000
Manifest this update: Sat 14 Jun 2025 13:00:24 +0000
Manifest next update: Sun 15 Jun 2025 13:00:24 +0000
Files and hashes: 1: gKy-M4ArOB2uxqprqRJ6fbGyEC8.roa (hash: MC8Gw1INJPJBRmJZki75GCuCmqozYCvUY/UxQ+rSFh0=)
2: k680jsWk5l4MsTeCGuahOe1_rAA.crl (hash: 3rLufFGT5Vs5Ncflj3lFmIp7uU0KL9vwODNwo2CrIMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:86:e9:70:30:1b:78:18:a7:ee:33:58:95:ad:2d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Validity
Not Before: Jun 14 13:00:24 2025 GMT
Not After : Jun 15 13:00:24 2025 GMT
Subject: CN=d638ee931463f98ad04e97eb2620e2c72dfbd8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cb:e2:bc:73:3e:ac:5c:ae:72:73:81:d3:43:
31:17:10:73:87:4b:ce:fc:ab:1a:2c:f3:fa:4c:9e:
64:3f:ee:19:d2:b3:a1:29:0e:2c:e2:7e:f4:ad:47:
93:07:6a:9e:a9:e2:3e:dd:a2:c1:1b:b6:e3:21:d1:
cb:b6:32:90:3c:9f:89:b9:7d:d7:cf:fe:34:af:29:
ed:e2:8b:18:29:4f:74:5b:97:60:61:57:e0:b8:7e:
92:70:e3:e8:a0:bf:c3:85:ee:52:d4:b1:9c:eb:e7:
08:1d:17:6a:5a:29:f4:33:f3:4f:bf:23:25:a0:7a:
79:dc:c4:01:95:db:4c:9e:9e:da:24:e1:50:67:b3:
4f:43:39:28:fe:36:60:8e:b0:01:18:07:98:b6:16:
53:41:74:6d:a5:4c:fc:f9:d7:61:03:d9:02:fe:13:
52:6d:39:f1:82:0c:ed:e3:b9:f2:5a:a9:6a:f2:a8:
91:ed:18:74:b5:e1:8c:a2:a1:12:78:d9:70:d0:55:
37:58:7e:2d:8f:12:d6:0f:aa:05:95:3f:f4:2b:b2:
ae:fc:82:09:4f:8c:63:2a:00:06:c8:a2:2e:66:70:
0f:52:42:3e:ab:de:6f:1c:31:16:bb:78:71:34:f1:
53:85:c4:bb:37:46:f6:d9:d2:5d:4d:81:65:c2:5a:
1f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:38:EE:93:14:63:F9:8A:D0:4E:97:EB:26:20:E2:C7:2D:FB:D8:B7
X509v3 Authority Key Identifier:
keyid:93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ae:38:a0:27:ce:62:b0:8e:5e:e1:6a:71:3f:d8:f4:91:b2:
3e:1e:38:b1:88:b9:23:6a:86:a7:d4:e0:eb:9a:89:10:0d:54:
da:1f:ca:c1:27:6f:e4:9f:de:73:07:ae:25:d2:54:af:67:5e:
42:cd:60:5d:e5:33:40:59:1c:d2:74:ae:9d:f4:35:04:e2:29:
9d:a1:74:df:b9:56:92:8c:68:86:a3:93:0c:da:b7:13:5c:f5:
7e:87:47:3c:3d:8d:4c:d6:82:ab:d6:c4:ed:76:f0:d1:7c:8e:
a0:5f:93:39:a8:ea:5b:b4:b9:fa:06:44:e6:db:c0:41:d7:d3:
97:49:58:11:d1:89:46:b7:e5:cc:d0:57:b4:34:ff:7a:ec:85:
c5:1b:14:c2:85:53:70:2c:c3:2b:f5:db:ab:b8:09:b2:a5:94:
ad:f5:80:2d:0f:fd:99:f9:70:42:e7:94:18:14:90:59:8f:d2:
8b:8a:77:4a:6b:d0:f6:2c:3a:43:a8:ab:fc:07:f4:ae:b0:0b:
37:4e:0b:b2:0d:6b:42:69:10:b5:3c:62:82:5c:4b:a7:5f:ee:
0f:fa:02:6f:84:2e:0f:f0:36:01:12:2c:8f:e3:fb:62:8f:6d:
da:d8:0b:30:1a:72:4c:71:dc:0a:e5:94:80:70:96:ef:60:ea:
c2:9b:23:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduhulwMBt4GKfuM1iVrS1aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYWYzNDhlYzVhNGU2NWUwY2IxMzc4MjFhZTZhMTM5ZWQ3
ZmFjMDAwHhcNMjUwNjE0MTMwMDI0WhcNMjUwNjE1MTMwMDI0WjAzMTEwLwYDVQQD
EyhkNjM4ZWU5MzE0NjNmOThhZDA0ZTk3ZWIyNjIwZTJjNzJkZmJkOGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsvivHM+rFyucnOB00MxFxBzh0vO
/KsaLPP6TJ5kP+4Z0rOhKQ4s4n70rUeTB2qeqeI+3aLBG7bjIdHLtjKQPJ+JuX3X
z/40rynt4osYKU90W5dgYVfguH6ScOPooL/Dhe5S1LGc6+cIHRdqWin0M/NPvyMl
oHp53MQBldtMnp7aJOFQZ7NPQzko/jZgjrABGAeYthZTQXRtpUz8+ddhA9kC/hNS
bTnxggzt47nyWqlq8qiR7Rh0teGMoqESeNlw0FU3WH4tjxLWD6oFlT/0K7Ku/IIJ
T4xjKgAGyKIuZnAPUkI+q95vHDEWu3hxNPFThcS7N0b22dJdTYFlwlofnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNY47pMUY/mK0E6X6yYg4sct+9i3MB8GA1UdIwQY
MBaAFJOvNI7FpOZeDLE3ghrmoTntf6wAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazY4MGpzV2s1bDRNc1RlQ0d1YWhPZTFfckFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iZDc4MjAtNWMxYy00ODg0LTlhYjgt
YzVhYjk3ZGJhODk4LzEvazY4MGpzV2s1bDRNc1RlQ0d1YWhPZTFfckFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iZDc4MjAtNWMxYy00ODg0LTlhYjgtYzVhYjk3ZGJhODk4
LzEvazY4MGpzV2s1bDRNc1RlQ0d1YWhPZTFfckFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu644oCfO
YrCOXuFqcT/Y9JGyPh44sYi5I2qGp9Tg65qJEA1U2h/KwSdv5J/ecweuJdJUr2de
Qs1gXeUzQFkc0nSunfQ1BOIpnaF037lWkoxohqOTDNq3E1z1fodHPD2NTNaCq9bE
7Xbw0XyOoF+TOajqW7S5+gZE5tvAQdfTl0lYEdGJRrflzNBXtDT/euyFxRsUwoVT
cCzDK/Xbq7gJsqWUrfWALQ/9mflwQueUGBSQWY/Si4p3SmvQ9iw6Q6ir/Af0rrAL
N04Lsg1rQmkQtTxiglxLp1/uD/oCb4QuD/A2ARIsj+P7Yo9t2tgLMBpyTHHcCuWU
gHCW72DqwpsjaQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:46:10 2025 by rpki-client