Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File: klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier: vCtHRRhghyhl44M87VI70y/Xc+hmAUgXGcv9f63R/Uc=
Subject key identifier: 70:94:3D:E8:9C:35:15:85:FC:47:7D:9C:79:88:81:B6:AD:53:D1:64
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 0197B6D797798F18FADB14CE3F0EBB4E4797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 14:01:11 +0000
Manifest this update: Sat 28 Jun 2025 14:01:11 +0000
Manifest next update: Sun 29 Jun 2025 14:01:11 +0000
Files and hashes: 1: 7U4mLLCZOK9jPZHgW6zPsanLT3o.roa (hash: zZ/3JaVashrdH1tPBAExwSunuDftYH55jv3g8RDnCrA=)
2: kDuhU048DTixv805ND5N0u_g9CE.roa (hash: XMPtRafhUHkyRUyzV4cxQSEk7ukN2f738Fahel2JBqI=)
3: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: tFe23ZUW8p5lK/7BtHCIL4ENtlbEcCUVJqvbtT+SrnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:97:79:8f:18:fa:db:14:ce:3f:0e:bb:4e:47:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Jun 28 14:01:11 2025 GMT
Not After : Jun 29 14:01:11 2025 GMT
Subject: CN=70943de89c351585fc477d9c798881b6ad53d164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2c:78:27:0c:6d:9f:d0:1d:6a:7c:9e:20:e7:
88:cf:22:19:64:96:04:21:f3:83:67:fe:38:f5:0b:
c5:f2:d3:91:e3:40:ad:4c:17:44:64:90:f8:6a:94:
df:a7:4c:81:af:5f:63:8b:ba:eb:2d:b9:8c:0d:fe:
14:97:e5:93:1a:0b:66:d5:79:7a:29:b1:ea:d7:67:
41:f5:d9:44:39:1b:98:77:f1:b7:e1:00:03:3f:39:
1f:1b:dc:63:ee:35:1e:89:7e:f3:80:56:bf:4e:88:
3f:09:bf:be:95:73:fa:d6:ec:47:2e:10:79:dc:ae:
6a:4b:fc:07:07:ce:e8:d8:a3:7f:5a:73:9f:94:75:
7c:59:b5:69:0e:64:07:3b:dc:76:1f:17:a4:1f:b4:
bd:10:56:52:c0:b6:f2:24:c6:57:9a:33:1a:78:ae:
20:fc:d9:92:e9:cb:cf:07:8e:75:10:a0:8d:d4:db:
c9:6a:4b:cf:70:ac:2e:07:01:74:7b:e0:49:09:66:
04:21:6e:ed:fb:72:a4:bc:d2:fa:21:33:3e:15:d1:
13:12:be:5c:d8:12:61:2e:51:d8:aa:80:a9:9a:86:
df:5b:a6:82:67:31:fd:68:1a:f6:98:86:88:5c:23:
ad:2c:15:09:9a:fc:fc:7e:cd:67:67:e4:75:11:85:
b2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:94:3D:E8:9C:35:15:85:FC:47:7D:9C:79:88:81:B6:AD:53:D1:64
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d8:78:ac:9d:e3:31:61:f8:bd:00:ac:62:73:c0:9e:35:a8:
13:91:77:60:e0:69:77:d2:2f:a1:18:a5:0d:89:97:2f:3d:b1:
8b:39:44:88:68:03:7d:db:78:63:bb:db:d1:dc:fd:5f:e2:bf:
f9:68:73:0a:c6:3c:bb:0e:95:8c:c1:43:97:85:2b:1f:7b:a8:
13:2c:1e:0e:fd:23:92:50:da:71:f8:6e:47:2a:0f:a8:ae:fa:
5e:6c:f8:25:57:11:42:8b:07:1d:2c:fe:e0:7f:c3:23:4c:aa:
38:ad:83:e8:3f:6d:d7:cc:d4:a7:82:bc:a2:4e:bf:ff:62:b7:
5f:ac:b9:bc:69:71:30:09:ca:85:a9:47:7c:95:00:d1:a7:d5:
15:97:aa:77:17:33:4a:57:03:b8:7b:25:42:b3:57:50:2f:c9:
92:6c:6b:2c:05:06:74:7f:c6:40:78:db:dd:34:68:a3:f8:c2:
7f:d4:d8:7f:f1:55:7d:50:de:27:a7:9e:ab:ac:3d:33:99:4d:
3a:34:77:5e:c6:6b:ce:45:be:6c:34:8c:9f:d7:06:a4:5f:b0:
ed:8d:38:b1:e9:e1:84:0d:c2:7a:ca:ff:85:54:b3:10:06:40:
a0:75:5a:94:7c:35:4f:b8:a4:77:75:76:33:ef:b4:a0:cc:90:
b7:c8:2f:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe215d5jxj62xTOPw67TkeXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTEwYTY4NzFjMjliYzAyOTIwNjhhOWI3MmRjMzRmZjgx
YjRmYzcwHhcNMjUwNjI4MTQwMTExWhcNMjUwNjI5MTQwMTExWjAzMTEwLwYDVQQD
Eyg3MDk0M2RlODljMzUxNTg1ZmM0NzdkOWM3OTg4ODFiNmFkNTNkMTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSx4Jwxtn9AdanyeIOeIzyIZZJYE
IfODZ/449QvF8tOR40CtTBdEZJD4apTfp0yBr19ji7rrLbmMDf4Ul+WTGgtm1Xl6
KbHq12dB9dlEORuYd/G34QADPzkfG9xj7jUeiX7zgFa/Tog/Cb++lXP61uxHLhB5
3K5qS/wHB87o2KN/WnOflHV8WbVpDmQHO9x2HxekH7S9EFZSwLbyJMZXmjMaeK4g
/NmS6cvPB451EKCN1NvJakvPcKwuBwF0e+BJCWYEIW7t+3KkvNL6ITM+FdETEr5c
2BJhLlHYqoCpmobfW6aCZzH9aBr2mIaIXCOtLBUJmvz8fs1nZ+R1EYWyRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCUPeicNRWF/Ed9nHmIgbatU9FkMB8GA1UdIwQY
MBaAFJJRCmhxwpvAKSBoqbctw0/4G0/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xFS2FISENtOEFwSUdpcHR5M0RUX2diVDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84ZGM3MDMtMTYzMS00MGY4LTkwYzUt
MThhMzBjMzAyOTBkLzEva2xFS2FISENtOEFwSUdpcHR5M0RUX2diVDhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni84ZGM3MDMtMTYzMS00MGY4LTkwYzUtMThhMzBjMzAyOTBk
LzEva2xFS2FISENtOEFwSUdpcHR5M0RUX2diVDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNh4rJ3j
MWH4vQCsYnPAnjWoE5F3YOBpd9IvoRilDYmXLz2xizlEiGgDfdt4Y7vb0dz9X+K/
+WhzCsY8uw6VjMFDl4UrH3uoEyweDv0jklDacfhuRyoPqK76Xmz4JVcRQosHHSz+
4H/DI0yqOK2D6D9t18zUp4K8ok6//2K3X6y5vGlxMAnKhalHfJUA0afVFZeqdxcz
SlcDuHslQrNXUC/JkmxrLAUGdH/GQHjb3TRoo/jCf9TYf/FVfVDeJ6eeq6w9M5lN
OjR3XsZrzkW+bDSMn9cGpF+w7Y04senhhA3Cesr/hVSzEAZAoHValHw1T7ikd3V2
M++0oMyQt8gvcQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:23 2025 by rpki-client