Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
File: kaBxUIM4JgVRpV8B_QcI_fXggoc.mft (raw, json)
Hash identifier: T8Q6hwS6rQqJa6p7Fp+dyJjPWQjlKvFzlIqRAP0Ab+0=
Subject key identifier: C9:E1:D1:15:20:E4:86:B3:14:4D:3E:B7:47:88:A3:19:AD:44:7C:22
Authority key identifier: 91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
Certificate issuer: /CN=91a071508338260551a55f01fd0708fdf5e08287
Certificate serial: 01977C0BEA119F09100BCE0AB690979C3380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
Manifest number: 1598
Signing time: Tue 17 Jun 2025 04:00:44 +0000
Manifest this update: Tue 17 Jun 2025 04:00:44 +0000
Manifest next update: Wed 18 Jun 2025 04:00:44 +0000
Files and hashes: 1: Cgt_gy7EMOYMV19k2tz2rtLd7TU.roa (hash: j2CPj0aVUdndtIwS2SsvRubF8DiJi7ArwXEuxy5F6uI=)
2: LtAL3K8AdfyisGKqq9Vjp_7EH0w.roa (hash: ExkUCXkAhlWeYSrTyMjTF0LGwM8Q8/UHTNY3ZJzGHYE=)
3: kaBxUIM4JgVRpV8B_QcI_fXggoc.crl (hash: 84JBFVBjbUU4e7H64MkbsesP+aznhHglAGsO9rcwGC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:0b:ea:11:9f:09:10:0b:ce:0a:b6:90:97:9c:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a071508338260551a55f01fd0708fdf5e08287
Validity
Not Before: Jun 17 04:00:44 2025 GMT
Not After : Jun 18 04:00:44 2025 GMT
Subject: CN=c9e1d11520e486b3144d3eb74788a319ad447c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:4e:3c:35:45:bd:f8:38:b1:6a:47:e0:d8:
94:b2:20:36:b0:aa:07:f6:67:63:d7:8c:ac:9e:18:
89:5a:2b:bf:d0:a6:12:88:dc:f7:9f:79:e5:41:21:
01:59:a9:57:de:5f:e7:b4:23:9a:f1:a8:47:b7:d1:
0e:e3:1c:e3:2f:d1:6d:9f:15:fb:a7:85:09:14:20:
3b:11:b2:a0:f7:51:a1:2d:dd:5a:ef:32:5a:23:f8:
18:55:54:1e:c2:ab:c4:dc:d8:43:5d:10:1f:ef:fb:
b8:60:f0:38:e8:97:5d:76:04:32:21:50:8b:05:eb:
fb:23:68:c9:2e:84:76:f1:6d:63:dc:af:b8:a3:b3:
98:13:eb:aa:04:59:d1:a8:16:ba:c8:52:4f:66:21:
f1:be:f8:22:04:a7:f5:b0:c8:c8:6e:29:fa:da:c7:
ae:98:1b:59:af:f0:f6:80:2b:fe:75:b4:fb:37:64:
db:87:9d:99:86:23:bb:cc:b3:18:96:f5:3f:ee:9f:
fa:88:ee:93:1f:61:89:ec:86:2d:f1:57:6c:8f:2e:
b0:f3:5c:a6:0e:06:0f:47:6e:d3:3f:81:62:ab:ef:
6e:59:9e:ca:7e:32:2c:56:b4:fa:06:f0:d4:bb:b8:
c8:7c:b6:72:67:24:68:40:89:5f:89:14:1e:22:ae:
fc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E1:D1:15:20:E4:86:B3:14:4D:3E:B7:47:88:A3:19:AD:44:7C:22
X509v3 Authority Key Identifier:
keyid:91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e7:26:37:89:c3:1f:6b:1d:7c:1e:6f:3f:48:dc:ab:c0:09:
ab:39:97:53:d5:fb:26:ef:03:ca:28:15:c7:be:43:a7:03:4a:
f9:b7:59:9a:fe:03:97:ec:38:06:93:1a:dd:59:f0:ab:65:c2:
21:da:4a:90:2d:1d:6e:d4:6c:1d:91:c1:9e:0d:36:0b:eb:f3:
9a:84:8a:55:97:a8:ce:97:b1:bc:98:05:20:a7:d2:68:32:85:
21:7d:5d:45:ae:fb:86:37:aa:21:e8:c3:39:cc:02:f1:8a:cc:
3d:29:5b:8f:d7:c5:28:6e:5d:17:ec:7f:16:00:6d:76:5a:e6:
94:8d:c5:f9:42:42:53:d2:8e:0a:a3:95:24:0c:47:76:d7:d7:
3d:1b:8b:8c:0f:16:2c:65:7e:dc:8a:0c:da:03:41:67:bd:02:
1b:4a:4b:4b:d5:4c:bf:f9:b7:02:98:5d:0d:41:8d:de:b8:7b:
62:18:91:c9:66:fa:3c:67:4a:cd:62:33:a0:ef:77:42:79:b2:
bb:25:70:bd:f5:9a:98:18:eb:ad:23:8e:40:51:ed:21:d6:0e:
d7:b9:04:73:1c:e4:16:47:b6:ff:f7:6b:73:ae:09:de:84:90:
4d:f0:4a:61:4a:6a:84:a6:e8:4d:ea:00:d0:fa:cc:16:90:87:
3c:aa:a4:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd8C+oRnwkQC84KtpCXnDOAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYTA3MTUwODMzODI2MDU1MWE1NWYwMWZkMDcwOGZkZjVl
MDgyODcwHhcNMjUwNjE3MDQwMDQ0WhcNMjUwNjE4MDQwMDQ0WjAzMTEwLwYDVQQD
EyhjOWUxZDExNTIwZTQ4NmIzMTQ0ZDNlYjc0Nzg4YTMxOWFkNDQ3YzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTxOPDVFvfg4sWpH4NiUsiA2sKoH
9mdj14ysnhiJWiu/0KYSiNz3n3nlQSEBWalX3l/ntCOa8ahHt9EO4xzjL9FtnxX7
p4UJFCA7EbKg91GhLd1a7zJaI/gYVVQewqvE3NhDXRAf7/u4YPA46JdddgQyIVCL
Bev7I2jJLoR28W1j3K+4o7OYE+uqBFnRqBa6yFJPZiHxvvgiBKf1sMjIbin62seu
mBtZr/D2gCv+dbT7N2Tbh52ZhiO7zLMYlvU/7p/6iO6TH2GJ7IYt8Vdsjy6w81ym
DgYPR27TP4Fiq+9uWZ7KfjIsVrT6BvDUu7jIfLZyZyRoQIlfiRQeIq78IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnh0RUg5IazFE0+t0eIoxmtRHwiMB8GA1UdIwQY
MBaAFJGgcVCDOCYFUaVfAf0HCP314IKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xNWNjNTItNTFlZS00NjBlLTlhZWIt
ZWU1NTU5YjM2NThiLzEva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xNWNjNTItNTFlZS00NjBlLTlhZWItZWU1NTU5YjM2NThi
LzEva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFecmN4nD
H2sdfB5vP0jcq8AJqzmXU9X7Ju8DyigVx75DpwNK+bdZmv4Dl+w4BpMa3Vnwq2XC
IdpKkC0dbtRsHZHBng02C+vzmoSKVZeozpexvJgFIKfSaDKFIX1dRa77hjeqIejD
OcwC8YrMPSlbj9fFKG5dF+x/FgBtdlrmlI3F+UJCU9KOCqOVJAxHdtfXPRuLjA8W
LGV+3IoM2gNBZ70CG0pLS9VMv/m3AphdDUGN3rh7YhiRyWb6PGdKzWIzoO93Qnmy
uyVwvfWamBjrrSOOQFHtIdYO17kEcxzkFke2//drc64J3oSQTfBKYUpqhKboTeoA
0PrMFpCHPKqkhQ==
-----END CERTIFICATE-----
Generated at Tue Jun 17 10:41:48 2025 by rpki-client