Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
File: klPiFMjlpvQTRb5oL2gmVbGr6ls.mft (raw, json)
Hash identifier: nyA0B/OZQNykGRt56vtBgO/ChAMawse4ZbVPWG5tgXQ=
Subject key identifier: E7:CC:E6:2C:86:B9:D6:F1:1D:6C:3F:2C:42:23:EF:99:E5:9C:1F:DB
Authority key identifier: 92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
Certificate issuer: /CN=9253e214c8e5a6f41345be682f682655b1abea5b
Certificate serial: 0197B7B37F0CDB41AFB69E7D4D2FFCBA6924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
Manifest number: 0571
Signing time: Sat 28 Jun 2025 18:01:23 +0000
Manifest this update: Sat 28 Jun 2025 18:01:23 +0000
Manifest next update: Sun 29 Jun 2025 18:01:23 +0000
Files and hashes: 1: g9a2AgSYQsELLiSB_-OegEcbQ9I.roa (hash: ImJVXRp/ldmW9cQsi6+awLuGwVI0Qm+zTXoZ5uHaLy0=)
2: klPiFMjlpvQTRb5oL2gmVbGr6ls.crl (hash: hitlaV2gVzrk2IeY9XuD+FtS+CVGWb2+0Hy84dTvHhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:7f:0c:db:41:af:b6:9e:7d:4d:2f:fc:ba:69:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9253e214c8e5a6f41345be682f682655b1abea5b
Validity
Not Before: Jun 28 18:01:23 2025 GMT
Not After : Jun 29 18:01:23 2025 GMT
Subject: CN=e7cce62c86b9d6f11d6c3f2c4223ef99e59c1fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6f:f7:93:e4:ab:96:9f:46:d4:f7:1a:ce:73:
1c:b2:d7:08:22:da:3b:ae:4c:7d:b0:b7:63:61:64:
35:ea:87:8c:d1:15:3f:57:46:7f:2d:c8:9e:69:e3:
c4:50:2a:aa:ea:85:5b:00:ad:a9:80:1e:76:75:a9:
73:cf:2c:b1:1d:f7:82:63:fe:9b:21:03:07:ef:07:
6e:73:06:dc:13:f4:02:af:ea:1b:5b:5c:16:8e:17:
63:f8:e3:6b:c7:e7:dc:62:4a:3d:eb:19:a8:89:65:
31:81:05:81:be:a4:e9:d0:eb:89:83:2f:47:da:3f:
cf:76:37:fc:2c:bf:34:ea:3c:a4:ed:e1:99:37:fb:
eb:4e:1a:a3:37:1a:ed:e8:b8:cb:c8:6b:a8:89:17:
93:9e:b6:c8:a0:6d:72:ff:5e:3f:27:56:c7:79:b3:
f9:df:79:00:0e:4f:4d:49:d0:12:e2:b2:fb:5e:a0:
4e:d7:4f:99:a5:24:45:34:e8:09:a8:f9:79:ce:d1:
50:c8:03:80:75:1a:4e:7c:09:0a:42:d8:7c:f2:3f:
7a:ab:a8:8f:d8:9b:63:60:dc:50:e1:15:5f:dd:87:
b2:aa:d3:74:ed:0b:e7:65:e1:01:e7:02:15:7b:e8:
f3:52:97:e2:72:0b:97:9f:47:b5:d6:85:ce:83:c9:
c2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CC:E6:2C:86:B9:D6:F1:1D:6C:3F:2C:42:23:EF:99:E5:9C:1F:DB
X509v3 Authority Key Identifier:
keyid:92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b3:4e:ed:6b:d8:cf:ab:8f:8a:b2:7c:87:63:a5:8f:de:78:
c6:43:ff:a7:c4:89:81:3d:e4:bc:33:d4:67:69:5b:e6:6a:e9:
84:dd:84:bd:9a:be:a0:41:3e:3f:c3:da:ad:63:52:ee:57:f3:
fa:3d:9b:82:b9:ca:ed:6d:d2:4b:bf:75:78:e3:82:a6:7f:df:
86:df:56:9b:71:88:5f:39:30:4b:35:6d:db:1b:a9:e4:d5:c1:
57:6e:f0:58:ac:19:f8:82:6e:74:5a:6e:0a:b7:57:4f:84:20:
7d:ca:b9:ff:25:12:33:d1:88:c4:36:1f:a3:23:7c:0c:1b:95:
3e:e3:1c:c1:5b:1d:90:7f:d0:df:e3:1a:f3:92:58:f7:a7:7a:
63:f6:04:40:1f:5b:6d:35:13:ce:56:6b:20:24:ac:bd:e8:41:
04:45:02:33:36:0e:be:45:7d:99:5b:11:69:01:36:78:29:ab:
e0:5e:1c:d0:24:02:bd:13:51:4b:09:81:e0:fd:fc:87:3e:47:
13:1c:84:df:97:bf:be:92:ef:78:e3:bb:35:aa:15:18:f9:d3:
a1:dd:0f:c6:be:d2:7f:33:6a:b2:0e:fc:51:a1:6a:6b:0b:6b:
a2:27:0b:ea:98:fe:21:54:4d:2e:b2:ce:d5:2c:ae:0d:8c:ef:
99:c6:ac:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s38M20Gvtp59TS/8umkkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTNlMjE0YzhlNWE2ZjQxMzQ1YmU2ODJmNjgyNjU1YjFh
YmVhNWIwHhcNMjUwNjI4MTgwMTIzWhcNMjUwNjI5MTgwMTIzWjAzMTEwLwYDVQQD
EyhlN2NjZTYyYzg2YjlkNmYxMWQ2YzNmMmM0MjIzZWY5OWU1OWMxZmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0m/3k+Srlp9G1PcaznMcstcIIto7
rkx9sLdjYWQ16oeM0RU/V0Z/LcieaePEUCqq6oVbAK2pgB52dalzzyyxHfeCY/6b
IQMH7wducwbcE/QCr+obW1wWjhdj+ONrx+fcYko96xmoiWUxgQWBvqTp0OuJgy9H
2j/Pdjf8LL806jyk7eGZN/vrThqjNxrt6LjLyGuoiReTnrbIoG1y/14/J1bHebP5
33kADk9NSdAS4rL7XqBO10+ZpSRFNOgJqPl5ztFQyAOAdRpOfAkKQth88j96q6iP
2JtjYNxQ4RVf3YeyqtN07QvnZeEB5wIVe+jzUpficguXn0e11oXOg8nCjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfM5iyGudbxHWw/LEIj75nlnB/bMB8GA1UdIwQY
MBaAFJJT4hTI5ab0E0W+aC9oJlWxq+pbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xQaUZNamxwdlFUUmI1b0wyZ21WYkdyNmxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81MWE0YTMtNzMwNC00NjEzLThhODAt
Y2EzYjFjYWM2OWM3LzEva2xQaUZNamxwdlFUUmI1b0wyZ21WYkdyNmxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My81MWE0YTMtNzMwNC00NjEzLThhODAtY2EzYjFjYWM2OWM3
LzEva2xQaUZNamxwdlFUUmI1b0wyZ21WYkdyNmxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbNO7WvY
z6uPirJ8h2Olj954xkP/p8SJgT3kvDPUZ2lb5mrphN2EvZq+oEE+P8ParWNS7lfz
+j2bgrnK7W3SS791eOOCpn/fht9Wm3GIXzkwSzVt2xup5NXBV27wWKwZ+IJudFpu
CrdXT4Qgfcq5/yUSM9GIxDYfoyN8DBuVPuMcwVsdkH/Q3+Ma85JY96d6Y/YEQB9b
bTUTzlZrICSsvehBBEUCMzYOvkV9mVsRaQE2eCmr4F4c0CQCvRNRSwmB4P38hz5H
ExyE35e/vpLveOO7NaoVGPnTod0Pxr7SfzNqsg78UaFqawtroicL6pj+IVRNLrLO
1SyuDYzvmcasTQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:13 2025 by rpki-client