Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
File: kFFjeaBC33RF5C77NkbR8lpn1QQ.mft (raw, json)
Hash identifier: xNle6Z4HNbHiDBFhhamseCNpSTUatbtTK/99IONfl4Q=
Subject key identifier: 87:9B:A0:CB:34:69:DC:ED:6E:69:9B:B6:99:D4:D8:AA:F3:7E:57:C1
Authority key identifier: 90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
Certificate issuer: /CN=90516379a042df7445e42efb3646d1f25a67d504
Certificate serial: 019769CEEDB70C032626071177FC5E5C8F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 15:00:58 +0000
Manifest this update: Fri 13 Jun 2025 15:00:58 +0000
Manifest next update: Sat 14 Jun 2025 15:00:58 +0000
Files and hashes: 1: kFFjeaBC33RF5C77NkbR8lpn1QQ.crl (hash: ezKNOptSxRiZma9bLpG6SOVxSshLUw3t05B9HCpikdk=)
2: rczaP9LTvMdCWFhSuJS68LMo07w.roa (hash: sQzVo7OVIJVEVCzdhJjUAGI9F/0+IxOCNUaxnRm3OZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:ed:b7:0c:03:26:26:07:11:77:fc:5e:5c:8f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90516379a042df7445e42efb3646d1f25a67d504
Validity
Not Before: Jun 13 15:00:58 2025 GMT
Not After : Jun 14 15:00:58 2025 GMT
Subject: CN=879ba0cb3469dced6e699bb699d4d8aaf37e57c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:36:36:e5:64:c3:f0:69:d9:d9:36:fe:c7:3a:
ee:f9:92:78:62:23:17:7e:be:4e:f7:db:10:d1:3d:
7e:6d:b4:76:43:9a:ad:6e:b4:7d:be:24:ef:84:69:
29:18:53:a2:9b:f1:cb:ca:b7:4e:4c:4a:3d:06:fa:
5f:32:f8:cb:a6:fb:bf:a1:ca:c7:d8:71:3c:0a:c1:
5d:21:7b:a7:41:9f:18:fb:1d:ef:30:2f:de:97:b0:
74:3b:fa:3d:2f:bb:98:8e:9b:d7:ae:30:62:3d:e2:
2d:f2:31:7a:e6:76:68:ee:5b:87:c5:dc:91:e7:7b:
c0:10:39:07:49:01:30:af:a2:f1:80:9a:81:51:ad:
81:35:7d:4d:67:13:1a:28:e3:93:0f:95:c2:7e:fb:
fa:d4:0d:6a:a0:65:d1:0d:80:88:62:87:8c:16:3a:
4c:ca:eb:82:e6:6d:b0:13:eb:71:8a:00:9f:aa:72:
82:ce:30:76:ed:ff:e0:22:9b:fc:4e:27:ff:c3:55:
40:30:4b:f3:94:ed:b3:d2:70:c0:a7:61:7e:b8:3a:
40:e4:b2:f7:17:2b:0d:89:af:f4:aa:f9:dd:c2:fc:
ad:05:70:e7:b6:fa:d1:e0:4d:50:a0:f6:a3:16:c3:
8e:27:36:35:19:67:33:5c:38:7d:5a:f8:da:79:47:
da:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9B:A0:CB:34:69:DC:ED:6E:69:9B:B6:99:D4:D8:AA:F3:7E:57:C1
X509v3 Authority Key Identifier:
keyid:90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:67:11:e2:41:8b:fa:e8:42:30:68:eb:16:8d:b5:2e:4f:89:
55:2b:46:94:d9:9b:17:85:1b:20:cd:50:56:8b:a9:40:95:29:
71:1e:9e:0b:4a:6e:e3:ab:6c:06:a2:5f:8c:3e:a3:42:6a:1c:
3d:cc:d1:6a:08:f0:9e:f8:a4:6d:c3:a3:c4:eb:0f:2a:43:22:
0a:68:6c:61:aa:37:bf:97:90:96:14:f0:b4:dc:ef:aa:07:d7:
92:bc:d4:73:55:59:2a:6b:fb:be:8b:e9:72:a1:0a:3e:a0:b4:
74:8c:f9:16:73:2d:21:e6:f9:62:2c:31:48:db:fa:49:5c:93:
26:69:81:43:0d:f1:eb:78:aa:e3:5b:f1:6e:dd:bc:53:65:75:
f7:dd:80:44:23:6a:6c:1c:0b:af:4f:98:f2:3e:de:a1:91:18:
e0:34:0e:6e:94:7c:2e:45:c3:3e:08:ff:29:05:31:00:37:94:
8e:fc:6f:f1:e7:4c:1d:56:1e:36:c6:dd:de:df:52:d4:34:a3:
bb:4b:55:fe:c3:4a:49:0d:61:f4:20:65:a0:bf:d5:6b:0b:0d:
8a:9b:33:b8:4f:3d:d7:65:f7:60:03:64:54:d8:38:d7:db:73:
fe:9a:fc:80:17:e9:c9:f7:d9:06:98:fd:e4:b3:fe:73:6d:ba:
bb:d8:9f:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzu23DAMmJgcRd/xeXI+JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNTE2Mzc5YTA0MmRmNzQ0NWU0MmVmYjM2NDZkMWYyNWE2
N2Q1MDQwHhcNMjUwNjEzMTUwMDU4WhcNMjUwNjE0MTUwMDU4WjAzMTEwLwYDVQQD
Eyg4NzliYTBjYjM0NjlkY2VkNmU2OTliYjY5OWQ0ZDhhYWYzN2U1N2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDY25WTD8GnZ2Tb+xzru+ZJ4YiMX
fr5O99sQ0T1+bbR2Q5qtbrR9viTvhGkpGFOim/HLyrdOTEo9BvpfMvjLpvu/ocrH
2HE8CsFdIXunQZ8Y+x3vMC/el7B0O/o9L7uYjpvXrjBiPeIt8jF65nZo7luHxdyR
53vAEDkHSQEwr6LxgJqBUa2BNX1NZxMaKOOTD5XCfvv61A1qoGXRDYCIYoeMFjpM
yuuC5m2wE+txigCfqnKCzjB27f/gIpv8Tif/w1VAMEvzlO2z0nDAp2F+uDpA5LL3
FysNia/0qvndwvytBXDntvrR4E1QoPajFsOOJzY1GWczXDh9WvjaeUfaWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeboMs0adztbmmbtpnU2KrzflfBMB8GA1UdIwQY
MBaAFJBRY3mgQt90ReQu+zZG0fJaZ9UEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0ZGamVhQkMzM1JGNUM3N05rYlI4bHBuMVFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNWQ5OGYtZmE3ZS00MDFmLTgwOGYt
NDRhOTFiYTE3YjA4LzEva0ZGamVhQkMzM1JGNUM3N05rYlI4bHBuMVFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9hNWQ5OGYtZmE3ZS00MDFmLTgwOGYtNDRhOTFiYTE3YjA4
LzEva0ZGamVhQkMzM1JGNUM3N05rYlI4bHBuMVFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmcR4kGL
+uhCMGjrFo21Lk+JVStGlNmbF4UbIM1QVoupQJUpcR6eC0pu46tsBqJfjD6jQmoc
PczRagjwnvikbcOjxOsPKkMiCmhsYao3v5eQlhTwtNzvqgfXkrzUc1VZKmv7vovp
cqEKPqC0dIz5FnMtIeb5YiwxSNv6SVyTJmmBQw3x63iq41vxbt28U2V1992ARCNq
bBwLr0+Y8j7eoZEY4DQObpR8LkXDPgj/KQUxADeUjvxv8edMHVYeNsbd3t9S1DSj
u0tV/sNKSQ1h9CBloL/VawsNipszuE8912X3YANkVNg419tz/pr8gBfpyffZBpj9
5LP+c226u9ifKA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:04:05 2025 by rpki-client