Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
File: kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft (raw, json)
Hash identifier: LqICNtx3RpoE0g6wUkmweIMXtI0/TcgRsjTLx3wGstE=
Subject key identifier: 60:41:F2:28:3E:0A:2F:C7:9E:63:C0:C5:D5:74:80:82:52:21:E4:59
Authority key identifier: 90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
Certificate issuer: /CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Certificate serial: 0196A19B63112FF97EEEEEDD1C082DFF1A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
Manifest number: 0822
Signing time: Mon 05 May 2025 18:00:37 +0000
Manifest this update: Mon 05 May 2025 18:00:37 +0000
Manifest next update: Tue 06 May 2025 18:00:37 +0000
Files and hashes: 1: NfRATxtwxdk8t5k10NmnaIEBcI8.roa (hash: 48zogp0gFyhuprEhPJDieZAGrOKDhLcNh+8XpGM82yA=)
2: kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl (hash: E0IbPg3WGCeTF+yH0VdZn4HC6prmb//xdRay+pwZkdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:63:11:2f:f9:7e:ee:ee:dd:1c:08:2d:ff:1a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Validity
Not Before: May 5 18:00:37 2025 GMT
Not After : May 6 18:00:37 2025 GMT
Subject: CN=6041f2283e0a2fc79e63c0c5d57480825221e459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fd:42:ab:df:4e:5f:47:cb:e6:7b:b7:10:3f:
a6:3b:40:6e:3b:88:ac:9d:74:b8:3e:94:59:cd:76:
f9:49:97:bd:6c:71:fd:be:48:e0:8e:d1:ae:ec:4d:
d8:25:a8:5e:c7:7e:9e:fa:bb:34:38:c6:32:1b:50:
82:fc:b4:58:da:03:32:cb:9a:93:09:1d:cb:e8:be:
12:c2:b4:6a:3b:74:ff:f2:af:14:53:b6:e9:9f:c2:
12:61:e5:9a:75:a6:cd:a1:c5:8b:66:6c:4f:5e:5c:
8a:bd:96:68:bb:9a:96:98:de:9b:94:d9:65:92:d0:
1e:f3:a9:99:44:db:9e:08:5f:7a:de:a1:32:7e:36:
20:20:f2:ce:af:28:72:09:4c:2d:22:14:2b:83:77:
67:9e:cf:22:b5:ef:dd:5c:a7:45:91:13:8d:08:6f:
32:4a:e1:44:d5:b2:86:e8:89:2a:52:11:95:81:93:
80:aa:f3:21:05:8e:f8:6f:94:2d:5d:ad:49:ac:a9:
53:9e:e3:f1:11:30:79:e3:61:6a:4f:06:02:fc:c1:
b7:97:a1:48:1e:a2:31:37:b3:0e:e8:39:c0:fb:55:
bd:2e:f9:5f:4e:b9:f3:ec:63:a6:b3:24:b0:c4:53:
56:0c:e0:66:b0:3b:42:c2:f5:d1:27:4e:66:8d:9f:
5d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:41:F2:28:3E:0A:2F:C7:9E:63:C0:C5:D5:74:80:82:52:21:E4:59
X509v3 Authority Key Identifier:
keyid:90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2d:10:59:c4:6d:2d:10:a4:57:1d:21:a9:3a:a7:77:89:e2:
68:d9:68:b5:61:01:b4:2c:0d:e1:e2:9c:0d:45:03:ce:6e:1a:
e1:e9:50:a5:c5:82:38:8d:7a:2f:24:c3:37:2b:ac:de:b4:31:
94:df:4b:b5:41:5e:d7:83:18:da:4d:68:d1:f8:2c:ed:e0:7f:
a0:f0:bd:eb:08:69:7c:a3:73:86:d2:46:a2:93:ae:0c:14:bb:
b6:d5:2f:b5:9b:6c:c3:24:37:20:e5:4f:6b:56:d5:78:38:9b:
4f:19:4f:2b:a6:0b:39:dc:9b:87:7b:1b:92:39:0d:97:5d:16:
07:4a:a4:d5:aa:6b:29:7d:ba:e3:7e:c2:5a:2b:aa:6c:95:33:
fc:73:a9:4e:ea:f6:f7:f9:1c:26:dd:93:91:34:fd:6d:00:ad:
5b:ef:5a:32:ba:4b:7d:de:c3:8e:ce:c3:65:e5:fe:f5:bd:04:
5e:ab:53:dd:31:92:80:27:ef:f4:8c:88:d3:ee:21:00:1b:51:
81:ee:77:4f:7b:6b:19:f7:f8:e2:4a:38:4a:e3:6a:5f:2c:fb:
2c:bc:34:0b:98:04:ac:af:9b:22:0c:25:20:b9:ed:1c:e7:55:
6e:82:1a:16:30:87:59:2c:60:89:83:e7:20:f5:87:75:26:9c:
05:7f:e9:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZahm2MRL/l+7u7dHAgt/xoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjhmYWZjZjdjNDQxYWU0OWMxY2VmOTVjNTE4YjI4MjI4
YzdjNjIwHhcNMjUwNTA1MTgwMDM3WhcNMjUwNTA2MTgwMDM3WjAzMTEwLwYDVQQD
Eyg2MDQxZjIyODNlMGEyZmM3OWU2M2MwYzVkNTc0ODA4MjUyMjFlNDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif1Cq99OX0fL5nu3ED+mO0BuO4is
nXS4PpRZzXb5SZe9bHH9vkjgjtGu7E3YJahex36e+rs0OMYyG1CC/LRY2gMyy5qT
CR3L6L4SwrRqO3T/8q8UU7bpn8ISYeWadabNocWLZmxPXlyKvZZou5qWmN6blNll
ktAe86mZRNueCF963qEyfjYgIPLOryhyCUwtIhQrg3dnns8ite/dXKdFkRONCG8y
SuFE1bKG6IkqUhGVgZOAqvMhBY74b5QtXa1JrKlTnuPxETB542FqTwYC/MG3l6FI
HqIxN7MO6DnA+1W9LvlfTrnz7GOmsySwxFNWDOBmsDtCwvXRJ05mjZ9dZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBB8ig+Ci/HnmPAxdV0gIJSIeRZMB8GA1UdIwQY
MBaAFJD4+vz3xEGuScHO+VxRiygijHxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iNzhlNjktMjlkYy00ZTVjLWFjNDct
OGFhNGViYWQ0ZTY1LzEva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9iNzhlNjktMjlkYy00ZTVjLWFjNDctOGFhNGViYWQ0ZTY1
LzEva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYy0QWcRt
LRCkVx0hqTqnd4niaNlotWEBtCwN4eKcDUUDzm4a4elQpcWCOI16LyTDNyus3rQx
lN9LtUFe14MY2k1o0fgs7eB/oPC96whpfKNzhtJGopOuDBS7ttUvtZtswyQ3IOVP
a1bVeDibTxlPK6YLOdybh3sbkjkNl10WB0qk1aprKX26437CWiuqbJUz/HOpTur2
9/kcJt2TkTT9bQCtW+9aMrpLfd7Djs7DZeX+9b0EXqtT3TGSgCfv9IyI0+4hABtR
ge53T3trGff44ko4SuNqXyz7LLw0C5gErK+bIgwlILntHOdVboIaFjCHWSxgiYPn
IPWHdSacBX/paA==
-----END CERTIFICATE-----
Generated at Mon May 5 21:58:15 2025 by rpki-client