Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
File: kioaZ-LacRLUVZzY29gUH48yd-g.mft (raw, json)
Hash identifier: u9tmXMbde02kwrK9CLaL5TVxy3dxcHx780+HcZXgacE=
Subject key identifier: F9:09:3C:7E:FD:AB:C9:AF:67:5D:84:8B:EB:48:E6:CC:40:1A:C9:E3
Authority key identifier: 92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
Certificate issuer: /CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Certificate serial: 0197B77C9F8F24F7F42AAB763C99F2AEE579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 17:01:27 +0000
Manifest this update: Sat 28 Jun 2025 17:01:27 +0000
Manifest next update: Sun 29 Jun 2025 17:01:27 +0000
Files and hashes: 1: kioaZ-LacRLUVZzY29gUH48yd-g.crl (hash: OuyThFOqX7XW2E2MBdwAknJz5tlvf8EzmsZvIlkEuRw=)
2: q7WZGuRVxVy-2pf3zBIUBRQeEL8.roa (hash: /Mga5oX8Op4TctH5TWu+rLivpwbBRAO4KpJeZeXs2ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:9f:8f:24:f7:f4:2a:ab:76:3c:99:f2:ae:e5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Validity
Not Before: Jun 28 17:01:27 2025 GMT
Not After : Jun 29 17:01:27 2025 GMT
Subject: CN=f9093c7efdabc9af675d848beb48e6cc401ac9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ca:5e:ea:46:6f:ad:f9:c7:de:6f:f0:22:12:
d1:9a:d7:95:48:4a:1c:d8:3c:cb:6e:df:97:f1:39:
79:78:f3:65:c6:31:e6:e6:c6:60:ef:c3:0b:38:cb:
22:db:cc:21:0f:58:35:71:29:03:9a:f9:80:29:4d:
34:c6:d6:2a:9d:dc:00:26:c6:ed:3d:b5:c6:8b:f4:
60:b1:e0:c7:5d:d7:30:db:db:31:69:5c:63:96:0a:
a4:18:e1:d2:72:c6:80:71:3a:5f:2c:7a:05:05:f8:
c5:a4:00:cf:45:e2:e2:e9:44:34:f9:fd:84:62:38:
c9:68:2b:a1:8a:d5:f1:76:46:fc:f4:a5:27:8d:cd:
25:ad:1b:6d:b1:f2:6d:f5:e1:b8:59:0a:b3:db:03:
df:31:d4:68:a5:aa:c0:73:1d:6e:a2:0c:56:11:72:
a4:e8:4c:27:08:f0:92:4e:04:a9:7c:ab:ef:60:54:
65:4d:c4:9c:28:e0:42:11:62:2f:cf:e7:b2:73:12:
95:58:81:5e:e2:9b:22:72:64:6f:e0:75:ac:70:1a:
c3:ca:7b:ee:25:db:7e:c0:4e:ba:e2:9f:3f:38:2c:
c7:7b:28:9d:d7:3b:e8:b2:ff:61:ac:a0:65:11:16:
b9:3b:aa:af:68:d5:ad:c0:66:02:41:7b:5a:ab:20:
f5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:09:3C:7E:FD:AB:C9:AF:67:5D:84:8B:EB:48:E6:CC:40:1A:C9:E3
X509v3 Authority Key Identifier:
keyid:92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:63:1e:0a:4a:56:d5:a9:7d:42:b7:c2:d6:41:4c:fe:bf:51:
96:e0:8a:48:48:f6:5d:ba:03:15:7d:76:3d:ce:5f:30:73:26:
b2:d4:84:e6:54:fc:2e:f7:f9:33:c8:a8:e1:d9:98:64:04:a8:
4a:8a:b3:5b:ff:58:64:bd:9e:38:1d:0c:2c:c7:47:c4:f9:6c:
25:f8:f9:93:3d:2f:1a:d5:f8:d8:0c:08:bc:4e:ba:e0:63:19:
19:2a:82:ad:be:13:a6:cb:2a:00:99:85:27:e1:f3:2d:6a:ff:
0a:ca:24:95:aa:27:31:e6:76:79:9b:01:9e:12:f6:47:fb:67:
3d:4d:0f:90:90:2e:5b:fc:ae:8a:93:23:96:03:cd:05:82:2b:
5c:ec:7e:df:dc:48:c7:f5:02:27:c4:ed:18:d7:f6:c1:99:ad:
77:99:61:e5:0e:96:fc:d7:9a:94:69:23:81:6e:9e:b9:08:a1:
b4:12:6b:41:57:10:3d:f5:66:87:0c:f2:26:c7:c6:68:64:46:
08:be:c6:4f:ae:90:86:fd:42:1f:9a:f6:ff:35:a7:5b:21:df:
9b:de:92:fd:fe:77:8a:d9:e3:af:26:a2:21:27:de:38:07:a8:
94:95:28:16:d5:54:77:9a:24:1d:3d:5a:49:f1:74:2e:27:dc:
a4:b9:7e:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fJ+PJPf0Kqt2PJnyruV5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMmExYTY3ZTJkYTcxMTJkNDU1OWNkOGRiZDgxNDFmOGYz
Mjc3ZTgwHhcNMjUwNjI4MTcwMTI3WhcNMjUwNjI5MTcwMTI3WjAzMTEwLwYDVQQD
EyhmOTA5M2M3ZWZkYWJjOWFmNjc1ZDg0OGJlYjQ4ZTZjYzQwMWFjOWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMpe6kZvrfnH3m/wIhLRmteVSEoc
2DzLbt+X8Tl5ePNlxjHm5sZg78MLOMsi28whD1g1cSkDmvmAKU00xtYqndwAJsbt
PbXGi/RgseDHXdcw29sxaVxjlgqkGOHScsaAcTpfLHoFBfjFpADPReLi6UQ0+f2E
YjjJaCuhitXxdkb89KUnjc0lrRttsfJt9eG4WQqz2wPfMdRoparAcx1uogxWEXKk
6EwnCPCSTgSpfKvvYFRlTcScKOBCEWIvz+eycxKVWIFe4psicmRv4HWscBrDynvu
Jdt+wE664p8/OCzHeyid1zvosv9hrKBlERa5O6qvaNWtwGYCQXtaqyD1TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkJPH79q8mvZ12Ei+tI5sxAGsnjMB8GA1UdIwQY
MBaAFJIqGmfi2nES1FWc2NvYFB+PMnfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lvYVotTGFjUkxVVlp6WTI5Z1VINDh5ZC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZGFjMzAtODU3MC00N2IyLWIyNmEt
N2YzYTQyODE3MWM3LzEva2lvYVotTGFjUkxVVlp6WTI5Z1VINDh5ZC1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZGFjMzAtODU3MC00N2IyLWIyNmEtN2YzYTQyODE3MWM3
LzEva2lvYVotTGFjUkxVVlp6WTI5Z1VINDh5ZC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmMeCkpW
1al9QrfC1kFM/r9RluCKSEj2XboDFX12Pc5fMHMmstSE5lT8Lvf5M8io4dmYZASo
SoqzW/9YZL2eOB0MLMdHxPlsJfj5kz0vGtX42AwIvE664GMZGSqCrb4TpssqAJmF
J+HzLWr/CsoklaonMeZ2eZsBnhL2R/tnPU0PkJAuW/yuipMjlgPNBYIrXOx+39xI
x/UCJ8TtGNf2wZmtd5lh5Q6W/NealGkjgW6euQihtBJrQVcQPfVmhwzyJsfGaGRG
CL7GT66Qhv1CH5r2/zWnWyHfm96S/f53itnjryaiISfeOAeolJUoFtVUd5okHT1a
SfF0LifcpLl+Cw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:53 2025 by rpki-client