Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
File: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft (raw, json)
Hash identifier: aaeosx9knDhNZCGbU+LzME2kP6gv/EHSEkxKojGZgdw=
Subject key identifier: AE:59:7F:99:EE:22:5F:FA:7C:36:25:B0:5D:92:3C:4B:03:E5:74:61
Authority key identifier: 2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
Certificate issuer: /CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Certificate serial: 0197B6D7A837165813D123B584ADBF3019BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 14:01:15 +0000
Manifest this update: Sat 28 Jun 2025 14:01:15 +0000
Manifest next update: Sun 29 Jun 2025 14:01:15 +0000
Files and hashes: 1: AAnX94FZ-tQzXcJk_elGxuLR8aQ.roa (hash: D5KLLlx/C1ALQLS5LYzAlXJyxWisqcBsxXVALk1wu4g=)
2: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl (hash: ZSZsyLDw1+GOsP+gLLNziS2TBH+dcnVe+Gn8CpG0BJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a8:37:16:58:13:d1:23:b5:84:ad:bf:30:19:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Validity
Not Before: Jun 28 14:01:15 2025 GMT
Not After : Jun 29 14:01:15 2025 GMT
Subject: CN=ae597f99ee225ffa7c3625b05d923c4b03e57461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:69:09:e0:c1:37:be:4c:96:29:07:b6:31:
64:89:95:13:12:e7:1d:ac:fc:6f:2f:96:7b:e6:e0:
4f:b2:4d:bb:71:ec:a4:77:69:a3:31:d8:df:61:78:
7b:e2:10:8c:ba:87:ad:2d:85:17:cb:f2:4b:37:9a:
59:ff:60:e8:c4:ad:02:21:20:9b:46:2a:61:70:3a:
5c:50:15:4c:ee:29:7d:dc:96:d9:54:89:91:26:5d:
b2:6e:94:10:c3:fb:9b:aa:4f:82:8b:04:80:a2:2c:
5a:44:90:53:59:fe:48:ae:fb:0e:22:7d:e4:f1:3a:
8c:3e:53:98:ed:e6:89:bf:f7:14:94:ab:14:d7:e3:
4e:44:6b:8c:93:1d:2b:54:06:f1:cb:7a:7b:97:eb:
9e:5c:50:f9:65:a4:99:98:7c:36:6f:a5:8b:22:76:
c3:18:c3:b6:80:02:c0:2d:13:49:ee:36:60:d1:79:
cb:54:ea:41:92:64:81:52:22:41:48:17:19:21:74:
81:d4:81:54:ca:2c:6a:68:97:eb:4c:b7:0b:93:0e:
d9:74:d3:db:42:31:cf:15:07:5b:fa:f6:78:9b:c7:
13:3d:0c:5e:b8:c6:e0:15:c1:ff:51:69:36:23:53:
ca:eb:90:7e:93:18:6a:25:61:d5:7c:53:ea:11:53:
99:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:59:7F:99:EE:22:5F:FA:7C:36:25:B0:5D:92:3C:4B:03:E5:74:61
X509v3 Authority Key Identifier:
keyid:2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e9:c1:7f:bd:6a:75:a1:fd:6b:46:c8:43:89:ee:a8:88:c9:
71:1a:10:07:d6:af:1a:a6:b1:13:11:3a:10:a7:8e:29:5c:ec:
6e:ba:a3:85:85:09:44:85:00:31:f1:eb:03:6f:bf:21:89:8b:
28:10:3e:4b:d1:2c:a4:1b:3f:c6:69:18:db:f0:91:15:8a:c3:
25:c9:61:69:7c:10:c5:08:9b:98:10:db:4c:c1:0a:6d:f9:17:
db:19:8e:96:a7:6b:8f:8c:a1:fd:29:e7:6c:09:c3:2d:bd:91:
0a:f1:28:ef:ba:56:b1:51:9b:40:05:1b:a1:4a:e9:49:2e:ea:
e8:93:ae:c1:ce:78:2c:66:6f:ba:a0:4f:df:86:c1:b0:85:2c:
b8:da:90:fb:01:d3:87:48:2b:48:0c:3a:7e:65:28:eb:1a:a3:
ba:52:2f:33:4e:88:ee:f3:c8:cc:e8:d3:1a:ea:f2:b6:81:5d:
ab:61:f5:ac:a7:c7:01:ab:1f:e9:2c:bd:de:c8:9f:0b:65:25:
3f:36:50:1d:6c:85:7c:a3:d4:0b:80:97:93:92:a7:93:05:f5:
c0:b6:bc:d9:41:a9:88:6f:13:99:f1:f3:c2:dc:49:2b:15:12:
f1:4c:78:78:7f:6b:30:e6:9c:79:23:86:b4:13:0f:e2:30:c9:
7e:b7:4a:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe216g3FlgT0SO1hK2/MBm/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMzY5Y2E5YmE4NGFkODQ3ZDQ5ZDMxZTI3NDY1ZmFmNTdi
ZjI4ZTQwHhcNMjUwNjI4MTQwMTE1WhcNMjUwNjI5MTQwMTE1WjAzMTEwLwYDVQQD
EyhhZTU5N2Y5OWVlMjI1ZmZhN2MzNjI1YjA1ZDkyM2M0YjAzZTU3NDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcVpCeDBN75MlikHtjFkiZUTEucd
rPxvL5Z75uBPsk27ceykd2mjMdjfYXh74hCMuoetLYUXy/JLN5pZ/2DoxK0CISCb
RiphcDpcUBVM7il93JbZVImRJl2ybpQQw/ubqk+CiwSAoixaRJBTWf5IrvsOIn3k
8TqMPlOY7eaJv/cUlKsU1+NORGuMkx0rVAbxy3p7l+ueXFD5ZaSZmHw2b6WLInbD
GMO2gALALRNJ7jZg0XnLVOpBkmSBUiJBSBcZIXSB1IFUyixqaJfrTLcLkw7ZdNPb
QjHPFQdb+vZ4m8cTPQxeuMbgFcH/UWk2I1PK65B+kxhqJWHVfFPqEVOZGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5Zf5nuIl/6fDYlsF2SPEsD5XRhMB8GA1UdIwQY
MBaAFCo2nKm6hK2EfUnTHidGX69XvyjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2phY3FicUVyWVI5U2RNZUowWmZyMWVfS09RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hMGIyNjYtM2M5ZS00ZTBjLThhNmQt
NTg5NWI2OWQxODllLzEvS2phY3FicUVyWVI5U2RNZUowWmZyMWVfS09RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hMGIyNjYtM2M5ZS00ZTBjLThhNmQtNTg5NWI2OWQxODll
LzEvS2phY3FicUVyWVI5U2RNZUowWmZyMWVfS09RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaunBf71q
daH9a0bIQ4nuqIjJcRoQB9avGqaxExE6EKeOKVzsbrqjhYUJRIUAMfHrA2+/IYmL
KBA+S9EspBs/xmkY2/CRFYrDJclhaXwQxQibmBDbTMEKbfkX2xmOlqdrj4yh/Snn
bAnDLb2RCvEo77pWsVGbQAUboUrpSS7q6JOuwc54LGZvuqBP34bBsIUsuNqQ+wHT
h0grSAw6fmUo6xqjulIvM06I7vPIzOjTGurytoFdq2H1rKfHAasf6Sy93sifC2Ul
PzZQHWyFfKPUC4CXk5KnkwX1wLa82UGpiG8TmfHzwtxJKxUS8Ux4eH9rMOaceSOG
tBMP4jDJfrdKiA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:19:35 2025 by rpki-client