Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
File: kKBl7vQNwBahvn8o1uZsp6h-f-U.mft (raw, json)
Hash identifier: BV3VCQuZ/585VaDaFhhjVj/gl/MlGfz2wTRLInjNoMM=
Subject key identifier: BA:6A:8A:84:1E:CC:1D:5D:3A:DA:BA:D9:A5:6B:6C:1E:A0:94:AE:FB
Authority key identifier: 90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
Certificate issuer: /CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Certificate serial: 0197C0B7014E34F15048E08A141714B2F97C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
Manifest number: 15BA
Signing time: Mon 30 Jun 2025 12:01:48 +0000
Manifest this update: Mon 30 Jun 2025 12:01:48 +0000
Manifest next update: Tue 01 Jul 2025 12:01:48 +0000
Files and hashes: 1: kKBl7vQNwBahvn8o1uZsp6h-f-U.crl (hash: 6oIR31otrf9YTqvWVrHCIhhnFxvwGMdaWP31o29nxJ8=)
2: u-dAmjX4oqcf2iXVI7lxfelsBMA.roa (hash: XLlmaFeeXeZeIUJOi3DmWDwWe9ndlrrcSMKKooeEWD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b7:01:4e:34:f1:50:48:e0:8a:14:17:14:b2:f9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Validity
Not Before: Jun 30 12:01:48 2025 GMT
Not After : Jul 1 12:01:48 2025 GMT
Subject: CN=ba6a8a841ecc1d5d3adabad9a56b6c1ea094aefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:15:5c:bf:67:d7:63:55:d3:89:cc:4c:fa:43:
f3:a3:b8:0e:ee:ed:19:67:10:30:b8:25:61:11:12:
99:f7:05:cd:c3:c0:f1:10:c5:5a:f3:71:cd:ca:4b:
38:4e:fb:95:fc:13:e2:36:96:2d:29:1c:33:b8:1e:
d3:36:66:9d:71:78:85:11:c3:fb:c8:8a:54:75:56:
10:be:7b:98:59:b9:20:ca:d8:89:a3:39:da:c9:6e:
5f:fe:3b:58:5d:c4:dd:94:7b:27:28:f1:5d:06:e0:
49:9b:af:8b:04:a2:8b:8f:43:4a:4e:70:49:41:75:
de:af:4f:6f:ee:25:d2:2c:d9:8f:1c:91:39:56:0e:
74:f5:2f:b9:8a:6f:16:ca:3f:cc:27:2c:69:73:b1:
b0:88:73:0f:82:b6:cd:8c:5a:37:e2:cd:6e:6b:66:
0d:35:1d:47:99:11:8b:87:0d:b2:fb:19:79:9e:e2:
ba:26:ba:2d:8f:2f:57:46:d4:54:11:22:89:72:d1:
1d:cd:04:9a:d2:f3:6e:5a:f9:9f:70:62:49:49:22:
b2:83:6e:ae:20:dd:84:98:c0:c8:15:f1:93:44:88:
7d:f4:22:c4:d5:89:98:12:08:9e:0a:e4:6c:ef:fa:
d7:4d:49:71:e5:c6:c6:6f:3d:61:63:54:2f:d8:85:
58:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6A:8A:84:1E:CC:1D:5D:3A:DA:BA:D9:A5:6B:6C:1E:A0:94:AE:FB
X509v3 Authority Key Identifier:
keyid:90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:fe:b6:2e:8e:d2:bb:68:0d:2f:43:8c:83:c4:5c:2e:d7:28:
70:b1:52:b1:f0:68:a6:22:6f:22:eb:32:ad:f6:47:46:f2:1a:
b1:c4:4d:e9:1c:7e:aa:e8:02:b5:33:91:19:49:65:bd:a1:d2:
e8:0e:e4:cb:b1:ba:0e:6e:60:d0:c7:3e:d8:ed:23:46:ba:01:
68:a9:21:13:c5:14:6a:33:04:59:92:b7:f4:5c:02:83:09:d8:
bb:45:41:0b:c9:92:fb:d0:32:cc:96:a2:da:7c:03:10:bc:03:
e9:f6:62:25:f1:80:c9:e3:2a:ee:34:c3:bc:df:f2:f1:67:3a:
bc:6a:cd:97:3a:31:b0:df:4f:62:30:53:00:41:73:11:bc:5e:
04:6a:83:0c:47:f2:ce:5c:ae:1f:5f:81:cf:66:57:a0:11:c7:
1b:85:cf:bd:87:08:1d:2c:4a:27:13:6f:fa:50:6c:8c:9a:3e:
25:2f:95:b6:b0:78:e1:b6:1e:b0:70:af:75:0e:69:96:21:ea:
11:a1:d5:41:3d:13:7f:86:c3:7c:7c:5c:34:7e:de:ad:c5:a5:
59:07:83:97:69:fd:7c:b9:1f:d4:88:6b:89:0a:bf:6e:21:01:
2d:eb:c0:ce:c5:21:42:c1:99:38:fe:12:70:8e:87:f7:4e:9b:
f2:8a:ec:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfAtwFONPFQSOCKFBcUsvl8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYTA2NWVlZjQwZGMwMTZhMWJlN2YyOGQ2ZTY2Y2E3YTg3
ZTdmZTUwHhcNMjUwNjMwMTIwMTQ4WhcNMjUwNzAxMTIwMTQ4WjAzMTEwLwYDVQQD
EyhiYTZhOGE4NDFlY2MxZDVkM2FkYWJhZDlhNTZiNmMxZWEwOTRhZWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxVcv2fXY1XTicxM+kPzo7gO7u0Z
ZxAwuCVhERKZ9wXNw8DxEMVa83HNyks4TvuV/BPiNpYtKRwzuB7TNmadcXiFEcP7
yIpUdVYQvnuYWbkgytiJoznayW5f/jtYXcTdlHsnKPFdBuBJm6+LBKKLj0NKTnBJ
QXXer09v7iXSLNmPHJE5Vg509S+5im8Wyj/MJyxpc7GwiHMPgrbNjFo34s1ua2YN
NR1HmRGLhw2y+xl5nuK6Jrotjy9XRtRUESKJctEdzQSa0vNuWvmfcGJJSSKyg26u
IN2EmMDIFfGTRIh99CLE1YmYEgieCuRs7/rXTUlx5cbGbz1hY1Qv2IVY5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpqioQezB1dOtq62aVrbB6glK77MB8GA1UdIwQY
MBaAFJCgZe70DcAWob5/KNbmbKeofn/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0tCbDd2UU53QmFodm44bzF1WnNwNmgtZi1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS83NjhhYTItMGI0NC00Y2Y0LWI5ODQt
OTI0Y2RmMjc2ZDhkLzEva0tCbDd2UU53QmFodm44bzF1WnNwNmgtZi1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS83NjhhYTItMGI0NC00Y2Y0LWI5ODQtOTI0Y2RmMjc2ZDhk
LzEva0tCbDd2UU53QmFodm44bzF1WnNwNmgtZi1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6f62Lo7S
u2gNL0OMg8RcLtcocLFSsfBopiJvIusyrfZHRvIascRN6Rx+qugCtTORGUllvaHS
6A7ky7G6Dm5g0Mc+2O0jRroBaKkhE8UUajMEWZK39FwCgwnYu0VBC8mS+9AyzJai
2nwDELwD6fZiJfGAyeMq7jTDvN/y8Wc6vGrNlzoxsN9PYjBTAEFzEbxeBGqDDEfy
zlyuH1+Bz2ZXoBHHG4XPvYcIHSxKJxNv+lBsjJo+JS+VtrB44bYesHCvdQ5pliHq
EaHVQT0Tf4bDfHxcNH7ercWlWQeDl2n9fLkf1IhriQq/biEBLevAzsUhQsGZOP4S
cI6H906b8ors8w==
-----END CERTIFICATE-----
Generated at Mon Jun 30 21:05:37 2025 by rpki-client