Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
File: kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft (raw, json)
Hash identifier: 4VBGF8FXVTvpbkwb6izcNM99rPrskuumWBYX9NZFXSI=
Subject key identifier: 94:60:B9:0D:01:E3:D5:DE:10:C6:99:35:94:36:2B:93:2D:41:2A:6B
Authority key identifier: 90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
Certificate issuer: /CN=90a02705006532ef33a0064f875a100923509fd5
Certificate serial: 0197C45C3C540329E78D65CD921545A4722D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
Manifest number: 0F8F
Signing time: Tue 01 Jul 2025 05:01:08 +0000
Manifest this update: Tue 01 Jul 2025 05:01:08 +0000
Manifest next update: Wed 02 Jul 2025 05:01:08 +0000
Files and hashes: 1: Is94Q2E0TcL99ktPLy3XOhFlG9s.roa (hash: QmvTWH4bMNqja9fgfEB+gdmLSFW4G8IyUfhDS4uj7O4=)
2: kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl (hash: bstZuaZ1fKj8aIDIs96Qy1xrIhxT6j7KpD5HHbp7Yw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:5c:3c:54:03:29:e7:8d:65:cd:92:15:45:a4:72:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a02705006532ef33a0064f875a100923509fd5
Validity
Not Before: Jul 1 05:01:08 2025 GMT
Not After : Jul 2 05:01:08 2025 GMT
Subject: CN=9460b90d01e3d5de10c6993594362b932d412a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:9d:5a:fa:b9:7a:7f:ae:7d:99:95:2a:84:
a1:ce:03:f5:d0:de:14:77:da:eb:cc:3b:a6:9e:b5:
bc:80:25:ad:e8:58:d1:b7:08:d1:d5:0c:46:d3:16:
fe:85:a0:04:8a:a3:2a:0c:ca:b6:f1:a2:95:75:04:
d1:0e:f9:a9:fa:d8:d6:68:ad:e0:2d:b9:e3:1d:16:
f8:01:9d:45:d3:72:0f:81:1d:77:3d:3a:6a:e3:9c:
ce:84:89:cf:ed:e3:72:8b:a0:82:95:a7:1f:98:64:
66:d8:bc:4e:29:93:52:0e:26:7a:5d:af:99:36:70:
49:6b:85:f5:df:23:ae:3d:8e:fc:f3:d8:64:ea:b7:
84:50:ea:39:23:ab:0e:37:e7:81:64:76:01:9c:f7:
7c:86:59:11:a6:f5:6e:d0:13:7b:a6:90:eb:a0:e8:
de:8e:4d:f4:c2:7c:44:53:1c:91:c5:64:cb:02:23:
10:1d:83:b9:68:6c:7d:29:1a:f4:23:09:a8:25:fd:
c9:12:e9:47:fe:96:b9:07:af:92:66:d1:d5:f3:a6:
f2:f2:06:0e:8e:51:16:2e:a5:d3:e2:40:a2:8d:62:
7d:62:44:d5:e7:35:e1:1b:80:c0:10:40:dd:c1:0f:
09:13:68:89:20:25:58:a2:5e:11:00:6f:fa:17:5a:
7c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:60:B9:0D:01:E3:D5:DE:10:C6:99:35:94:36:2B:93:2D:41:2A:6B
X509v3 Authority Key Identifier:
keyid:90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e5:33:61:d2:8c:e3:d2:ff:fe:e3:f0:bb:a8:1b:dd:58:11:
d5:14:09:ad:41:8f:0b:ca:e0:aa:f9:8a:e1:bb:d6:c6:f6:61:
7c:2d:e5:f9:1f:3c:da:ba:63:91:22:15:09:59:ce:c8:eb:40:
5d:34:8d:f3:57:fa:6b:19:5f:ab:16:c3:70:c2:f5:bd:66:71:
b7:c0:08:53:ce:da:ec:af:a0:19:b1:1c:c0:04:b5:9c:21:9a:
ef:c2:50:47:7d:4b:17:38:0c:cf:32:18:5a:0a:95:da:4f:35:
b9:49:0c:34:cd:8e:45:bc:d6:6d:8d:33:89:ec:b4:4d:c7:25:
7f:99:2e:32:d8:c6:68:c1:49:c7:26:77:62:f2:e8:e4:c4:ee:
75:2e:9c:b9:57:ec:fb:62:1f:c9:47:92:b7:8f:52:07:2d:69:
bb:03:01:36:48:6f:02:b7:32:e4:5c:d6:21:11:2e:e4:91:c0:
61:38:b7:ba:7d:e3:0b:8b:ad:82:50:ee:c1:8d:73:e1:9d:46:
bd:3a:dd:fd:d1:85:f3:7f:3f:db:b3:d3:45:a6:22:7b:b9:38:
65:22:ed:6d:3d:c8:78:37:de:d3:70:49:ba:e0:bb:0e:38:cd:
1b:2d:c0:65:41:54:e0:34:28:da:1e:8d:a0:ff:2f:f8:45:01:
49:5e:88:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEXDxUAynnjWXNkhVFpHItMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYTAyNzA1MDA2NTMyZWYzM2EwMDY0Zjg3NWExMDA5MjM1
MDlmZDUwHhcNMjUwNzAxMDUwMTA4WhcNMjUwNzAyMDUwMTA4WjAzMTEwLwYDVQQD
Eyg5NDYwYjkwZDAxZTNkNWRlMTBjNjk5MzU5NDM2MmI5MzJkNDEyYTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqOdWvq5en+ufZmVKoShzgP10N4U
d9rrzDumnrW8gCWt6FjRtwjR1QxG0xb+haAEiqMqDMq28aKVdQTRDvmp+tjWaK3g
LbnjHRb4AZ1F03IPgR13PTpq45zOhInP7eNyi6CClacfmGRm2LxOKZNSDiZ6Xa+Z
NnBJa4X13yOuPY7889hk6reEUOo5I6sON+eBZHYBnPd8hlkRpvVu0BN7ppDroOje
jk30wnxEUxyRxWTLAiMQHYO5aGx9KRr0IwmoJf3JEulH/pa5B6+SZtHV86by8gYO
jlEWLqXT4kCijWJ9YkTV5zXhG4DAEEDdwQ8JE2iJICVYol4RAG/6F1p8dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRguQ0B49XeEMaZNZQ2K5MtQSprMB8GA1UdIwQY
MBaAFJCgJwUAZTLvM6AGT4daEAkjUJ/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0tBbkJRQmxNdTh6b0FaUGgxb1FDU05RbjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kOWY0ODItMTM1ZS00N2Y2LTkzMTct
Njc4NWFkYTUyN2MxLzEva0tBbkJRQmxNdTh6b0FaUGgxb1FDU05RbjlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9kOWY0ODItMTM1ZS00N2Y2LTkzMTctNjc4NWFkYTUyN2Mx
LzEva0tBbkJRQmxNdTh6b0FaUGgxb1FDU05RbjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaeUzYdKM
49L//uPwu6gb3VgR1RQJrUGPC8rgqvmK4bvWxvZhfC3l+R882rpjkSIVCVnOyOtA
XTSN81f6axlfqxbDcML1vWZxt8AIU87a7K+gGbEcwAS1nCGa78JQR31LFzgMzzIY
WgqV2k81uUkMNM2ORbzWbY0ziey0Tcclf5kuMtjGaMFJxyZ3YvLo5MTudS6cuVfs
+2IfyUeSt49SBy1puwMBNkhvArcy5FzWIREu5JHAYTi3un3jC4utglDuwY1z4Z1G
vTrd/dGF838/27PTRaYie7k4ZSLtbT3IeDfe03BJuuC7DjjNGy3AZUFU4DQo2h6N
oP8v+EUBSV6IxA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 13:11:29 2025 by rpki-client