Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json)
Hash identifier: HLpQDmKit2eGjgiQoPJcd27gEtogHEx+oIdxnIgZm2M=
Subject key identifier: 93:17:FF:63:E2:CC:4E:C9:AF:CB:9F:0C:8C:4F:73:0F:C4:F1:DE:FF
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 0197B70E803A9F13698635F7C5A6F5FDE142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
Manifest number: 0483
Signing time: Sat 28 Jun 2025 15:01:10 +0000
Manifest this update: Sat 28 Jun 2025 15:01:10 +0000
Manifest next update: Sun 29 Jun 2025 15:01:10 +0000
Files and hashes: 1: 3IEfkjrujN1otjC8OV1_yIF0n7I.roa (hash: Wz9JDIVRLlsFUBi000ABJhgJex6MuDmGadz9gz6sp1w=)
2: ZStJjyYeeW80s3UrenWKL6Fviiw.roa (hash: QylBnhEyvnv79g3JL425L8t6RW7UscFPY8hGIf7mOwQ=)
3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: OZQEix3l8ykBDDOpz7AQoyXs5QX4bry0QLwrqbFVsR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:80:3a:9f:13:69:86:35:f7:c5:a6:f5:fd:e1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: Jun 28 15:01:10 2025 GMT
Not After : Jun 29 15:01:10 2025 GMT
Subject: CN=9317ff63e2cc4ec9afcb9f0c8c4f730fc4f1deff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:8d:9b:27:a3:49:d7:d9:fe:37:40:d1:a6:
87:6d:ef:7e:e6:50:e2:8b:bd:d0:04:e1:c5:db:b9:
44:0f:8d:2a:45:78:7e:1c:5a:d0:01:5a:b6:e1:52:
41:19:01:27:db:24:f1:3c:56:f8:98:35:ff:54:97:
a2:95:49:5d:86:44:23:10:5c:76:6f:29:99:45:55:
a3:b0:98:83:72:8c:f9:b0:f0:3e:6d:24:26:03:89:
a6:84:ef:b1:0a:65:32:1c:27:a5:98:10:2b:b9:f8:
16:78:09:69:38:82:da:f7:2f:cd:92:9a:84:de:3d:
6d:18:1f:7e:c3:88:d9:ff:3a:e8:d4:d4:95:30:a0:
fb:c6:1f:ab:88:3b:a1:64:fa:ef:d4:6e:20:42:eb:
5d:5b:f1:31:db:0d:df:d3:b8:f5:cd:97:e8:21:03:
6c:f1:f7:1c:0d:51:e4:41:05:fa:5e:72:eb:25:d7:
49:89:11:44:fa:49:55:4f:be:2d:2b:b3:e6:4b:2e:
e6:5a:8a:86:b6:6f:82:39:f4:6a:d4:10:30:2b:f2:
2d:11:a8:d4:a3:98:80:20:e3:03:06:8d:55:90:23:
40:ce:9f:71:c3:3e:0a:7f:9b:5e:97:b3:d3:3b:1f:
7b:b9:85:d9:16:c1:d4:cc:6a:7f:05:88:ed:da:8c:
82:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:17:FF:63:E2:CC:4E:C9:AF:CB:9F:0C:8C:4F:73:0F:C4:F1:DE:FF
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:74:b1:bd:a6:50:34:42:1b:eb:bf:47:1c:cd:5f:f3:68:2b:
9c:57:4d:9b:33:18:dd:a6:01:df:0a:b6:81:64:95:f1:9f:12:
ef:18:8a:90:5c:a1:24:3b:61:d7:a8:53:f2:70:5b:fc:3b:30:
d2:05:c9:d9:33:5f:fc:73:70:02:84:ad:84:3a:60:31:9f:61:
2f:a9:ee:cd:7a:0f:87:59:77:b2:ac:c2:f0:72:f6:fd:6e:c5:
68:3e:ca:94:35:8b:d7:1f:2a:79:38:0a:fa:79:ae:42:6e:8e:
32:3c:8b:b7:88:d3:a5:df:db:bc:04:9a:2c:43:59:64:88:2b:
6a:c6:e4:b4:e9:d7:59:45:86:04:8d:47:8a:97:07:75:1e:a6:
46:67:b7:d3:ae:87:ff:d5:1a:35:0f:af:92:fc:59:b3:43:06:
ec:f9:00:77:7e:e8:63:75:34:6d:fd:4a:01:30:82:f3:d2:a8:
dd:6c:b8:7a:39:93:52:30:8c:94:82:43:da:40:02:b5:68:dd:
94:47:37:a5:8c:b8:eb:f3:bb:e2:72:e5:90:b7:4b:7c:6d:33:
e2:e7:4a:5c:15:fe:1e:1e:07:ad:f0:9a:56:a4:7f:9e:90:cf:
9c:5c:72:6f:8d:27:41:a8:d4:ca:9c:0c:ec:31:6e:ba:f8:db:
2a:41:89:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DoA6nxNphjX3xab1/eFCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwODc4YzM5NjI0YWVkZTM5MjllMTdjY2Q5NTg3OGMyOTJi
MmYzNTEwHhcNMjUwNjI4MTUwMTEwWhcNMjUwNjI5MTUwMTEwWjAzMTEwLwYDVQQD
Eyg5MzE3ZmY2M2UyY2M0ZWM5YWZjYjlmMGM4YzRmNzMwZmM0ZjFkZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwGNmyejSdfZ/jdA0aaHbe9+5lDi
i73QBOHF27lED40qRXh+HFrQAVq24VJBGQEn2yTxPFb4mDX/VJeilUldhkQjEFx2
bymZRVWjsJiDcoz5sPA+bSQmA4mmhO+xCmUyHCelmBArufgWeAlpOILa9y/NkpqE
3j1tGB9+w4jZ/zro1NSVMKD7xh+riDuhZPrv1G4gQutdW/Ex2w3f07j1zZfoIQNs
8fccDVHkQQX6XnLrJddJiRFE+klVT74tK7PmSy7mWoqGtm+COfRq1BAwK/ItEajU
o5iAIOMDBo1VkCNAzp9xwz4Kf5tel7PTOx97uYXZFsHUzGp/BYjt2oyCkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMX/2PizE7Jr8ufDIxPcw/E8d7/MB8GA1UdIwQY
MBaAFJCHjDliSu3jkp4XzNlYeMKSsvNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZDMxY2ItNDZjNi00YjU4LTgyNzkt
ZDVhZWZjY2M5NTIyLzEva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81ZDMxY2ItNDZjNi00YjU4LTgyNzktZDVhZWZjY2M5NTIy
LzEva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHSxvaZQ
NEIb679HHM1f82grnFdNmzMY3aYB3wq2gWSV8Z8S7xiKkFyhJDth16hT8nBb/Dsw
0gXJ2TNf/HNwAoSthDpgMZ9hL6nuzXoPh1l3sqzC8HL2/W7FaD7KlDWL1x8qeTgK
+nmuQm6OMjyLt4jTpd/bvASaLENZZIgrasbktOnXWUWGBI1HipcHdR6mRme3066H
/9UaNQ+vkvxZs0MG7PkAd37oY3U0bf1KATCC89Ko3Wy4ejmTUjCMlIJD2kACtWjd
lEc3pYy46/O74nLlkLdLfG0z4udKXBX+Hh4HrfCaVqR/npDPnFxyb40nQajUypwM
7DFuuvjbKkGJlg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:59 2025 by rpki-client