Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
File: kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft (raw, json)
Hash identifier: QiSv7BFwNRKirOkJWi2hlQovRHkYUvyfgqQUSYQoAnU=
Subject key identifier: 56:70:59:B2:19:9E:13:72:DC:9D:E4:58:61:43:8A:54:0D:73:D6:71
Authority key identifier: 90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
Certificate issuer: /CN=901f648dce927fe41833f86d575160b0bc5130a2
Certificate serial: 0197B7EA714BF198336086AC516A7BA507D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
Manifest number: 0249
Signing time: Sat 28 Jun 2025 19:01:24 +0000
Manifest this update: Sat 28 Jun 2025 19:01:24 +0000
Manifest next update: Sun 29 Jun 2025 19:01:24 +0000
Files and hashes: 1: kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl (hash: rP+Xwr9JwOxHUkFopWT/TSdJw8iey6LEMlY69A6uOSY=)
2: zfxMRbf5mdjUMmv1wfh1AaOn2cM.roa (hash: jcUlXj90sAjd3pxsJhlKVr5rFOgIRX3LrqrBra0uGW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:71:4b:f1:98:33:60:86:ac:51:6a:7b:a5:07:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901f648dce927fe41833f86d575160b0bc5130a2
Validity
Not Before: Jun 28 19:01:24 2025 GMT
Not After : Jun 29 19:01:24 2025 GMT
Subject: CN=567059b2199e1372dc9de45861438a540d73d671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f3:e5:f0:eb:5f:df:cb:04:eb:49:29:ba:75:
3a:14:34:ad:62:eb:8c:ab:0e:d5:c7:e4:2d:22:23:
03:6c:46:fd:b9:e8:b2:09:98:d8:9d:eb:ff:5b:c1:
66:1e:6d:35:df:2a:35:57:56:57:df:59:dc:5a:d1:
f8:e8:ab:55:61:51:a3:e2:9e:7d:79:55:91:bd:08:
f3:fb:66:0b:73:c9:8f:82:6a:7c:5b:71:67:e7:43:
69:88:79:61:16:43:cc:b5:73:4b:dc:a8:c5:b8:bc:
a5:c2:d7:22:4d:2f:89:65:29:e6:45:48:ad:6c:34:
39:56:69:e0:47:79:7a:8d:e3:1c:3d:6c:7d:4b:ac:
43:96:ea:08:10:22:a8:3d:85:1b:54:85:00:c0:4a:
15:14:d7:9c:4b:22:d8:e4:56:46:ac:d2:df:66:a6:
76:9e:62:85:bb:30:22:11:71:69:11:78:31:5a:4e:
ca:fe:50:dd:2c:d8:66:55:2a:87:1c:45:57:48:47:
c1:8d:de:38:66:89:3d:94:9d:af:ba:40:25:67:f7:
db:50:d6:12:2b:46:f7:95:dd:3e:c7:28:48:0d:e8:
94:9d:8a:55:b2:af:09:93:d1:7b:29:85:e0:5f:22:
cc:02:c7:3a:30:d6:a0:0d:25:c6:02:de:fa:c2:d1:
73:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:70:59:B2:19:9E:13:72:DC:9D:E4:58:61:43:8A:54:0D:73:D6:71
X509v3 Authority Key Identifier:
keyid:90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:66:a6:ab:ac:7b:7d:16:25:40:32:51:96:3b:90:2c:e3:09:
3e:66:a5:fa:ff:61:2e:de:37:9e:a3:3e:de:0a:b6:e2:06:e8:
dc:85:59:ad:a1:93:17:b1:da:48:bc:e6:73:e1:16:f5:15:54:
89:22:57:1e:85:a7:48:98:cb:b1:c2:5d:05:49:70:c6:70:c1:
3e:27:75:01:1b:cb:84:6f:fe:31:91:c6:4a:49:57:80:1c:37:
27:bd:28:77:33:ba:a9:d7:b2:be:a0:30:bb:75:ca:68:4c:61:
89:e4:15:a3:fd:e5:8c:64:e4:86:5f:e9:02:3e:00:ad:c1:b4:
24:20:5a:ab:9f:48:9e:eb:52:41:be:f2:da:07:78:2d:ed:6b:
f9:dd:ef:f1:7f:f4:83:0e:e6:97:50:0b:a1:95:5e:bc:36:af:
af:24:ba:f7:3a:80:20:7a:91:28:88:97:be:9b:39:85:35:da:
89:a7:68:ad:01:5a:99:40:ce:4f:0c:d6:1b:40:2c:da:5c:95:
5f:1b:81:93:a0:d1:d9:7d:3b:2b:8b:81:30:a8:59:3c:8c:46:
4c:5f:ca:50:f3:08:07:c8:30:0e:0b:7d:b0:a2:4c:a6:35:25:
d9:ff:13:0b:97:84:35:f9:cc:43:33:87:5c:a4:09:c1:0c:e0:
0b:07:e1:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36nFL8ZgzYIasUWp7pQfYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwMWY2NDhkY2U5MjdmZTQxODMzZjg2ZDU3NTE2MGIwYmM1
MTMwYTIwHhcNMjUwNjI4MTkwMTI0WhcNMjUwNjI5MTkwMTI0WjAzMTEwLwYDVQQD
Eyg1NjcwNTliMjE5OWUxMzcyZGM5ZGU0NTg2MTQzOGE1NDBkNzNkNjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PPl8Otf38sE60kpunU6FDStYuuM
qw7Vx+QtIiMDbEb9ueiyCZjYnev/W8FmHm013yo1V1ZX31ncWtH46KtVYVGj4p59
eVWRvQjz+2YLc8mPgmp8W3Fn50NpiHlhFkPMtXNL3KjFuLylwtciTS+JZSnmRUit
bDQ5VmngR3l6jeMcPWx9S6xDluoIECKoPYUbVIUAwEoVFNecSyLY5FZGrNLfZqZ2
nmKFuzAiEXFpEXgxWk7K/lDdLNhmVSqHHEVXSEfBjd44Zok9lJ2vukAlZ/fbUNYS
K0b3ld0+xyhIDeiUnYpVsq8Jk9F7KYXgXyLMAsc6MNagDSXGAt76wtFzTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZwWbIZnhNy3J3kWGFDilQNc9ZxMB8GA1UdIwQY
MBaAFJAfZI3Okn/kGDP4bVdRYLC8UTCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0I5a2pjNlNmLVFZTV9odFYxRmdzTHhSTUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83M2MwODUtY2M0Mi00Y2MxLWExYWIt
NGMxM2M1ZTFlMWFhLzEva0I5a2pjNlNmLVFZTV9odFYxRmdzTHhSTUtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC83M2MwODUtY2M0Mi00Y2MxLWExYWItNGMxM2M1ZTFlMWFh
LzEva0I5a2pjNlNmLVFZTV9odFYxRmdzTHhSTUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmamq6x7
fRYlQDJRljuQLOMJPmal+v9hLt43nqM+3gq24gbo3IVZraGTF7HaSLzmc+EW9RVU
iSJXHoWnSJjLscJdBUlwxnDBPid1ARvLhG/+MZHGSklXgBw3J70odzO6qdeyvqAw
u3XKaExhieQVo/3ljGTkhl/pAj4ArcG0JCBaq59InutSQb7y2gd4Le1r+d3v8X/0
gw7ml1ALoZVevDavryS69zqAIHqRKIiXvps5hTXaiadorQFamUDOTwzWG0As2lyV
XxuBk6DR2X07K4uBMKhZPIxGTF/KUPMIB8gwDgt9sKJMpjUl2f8TC5eENfnMQzOH
XKQJwQzgCwfhUQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:38:02 2025 by rpki-client