Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
File: kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft (raw, json)
Hash identifier: AcJOV3x9xm5WJw9pt0vT9cBbrljKkuRvVRjLs9lRGec=
Subject key identifier: 4A:FC:83:E2:04:7E:8C:64:68:D4:4C:30:69:DA:BE:8D:51:4F:25:EF
Authority key identifier: 90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
Certificate issuer: /CN=9087833e025b2320f9053a103ba61de52eab2afb
Certificate serial: 0197CA5E7E8E1AD2334A41670F566380DF8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
Manifest number: 056A
Signing time: Wed 02 Jul 2025 09:01:19 +0000
Manifest this update: Wed 02 Jul 2025 09:01:19 +0000
Manifest next update: Thu 03 Jul 2025 09:01:19 +0000
Files and hashes: 1: Sl6Vo_wPwtgiIFIYMqrbSQblXKc.roa (hash: l8tp4Qke8V/squeIomyLOU/9sV5KVMqfblcX8Rj/Ujc=)
2: kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl (hash: SS2GD56C9WxL9vM/vdZvxQmiUPTus4s7ORFRwzi+02U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:7e:8e:1a:d2:33:4a:41:67:0f:56:63:80:df:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9087833e025b2320f9053a103ba61de52eab2afb
Validity
Not Before: Jul 2 09:01:19 2025 GMT
Not After : Jul 3 09:01:19 2025 GMT
Subject: CN=4afc83e2047e8c6468d44c3069dabe8d514f25ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:49:ae:b1:b1:f0:b5:1d:42:1a:45:31:5e:79:
be:ed:fc:76:2a:af:01:c9:92:bf:dc:bb:4a:15:42:
c7:ff:90:b7:ea:c8:56:4a:0e:10:c9:fb:64:86:88:
ae:9d:68:38:7d:76:42:1f:33:cb:f0:70:89:58:4d:
82:d4:5f:32:a0:4d:f5:34:34:32:c6:ef:c9:6c:4f:
3a:75:87:37:1f:b7:aa:8b:ed:bc:f3:4a:c7:87:2d:
8b:04:3e:54:a2:cf:42:f8:84:fb:76:96:26:3f:f2:
f5:23:8e:e8:5b:8f:03:96:08:fd:94:0c:62:09:23:
0c:f8:12:06:12:7a:78:9d:91:ea:a5:66:ec:fb:f4:
24:6f:f6:c2:36:1a:2c:eb:1e:96:2a:1a:f4:a7:2d:
62:f5:e4:e4:b0:93:c8:04:c4:5a:d7:60:cc:17:f0:
1b:d4:bb:b9:3f:ca:a2:7e:12:f8:b2:89:5d:c8:33:
bc:1c:de:9d:ae:7b:60:dd:2a:a5:64:0b:6f:4e:e7:
3e:0c:2c:fc:fd:26:be:d2:bc:61:f5:dd:86:b6:d7:
44:ef:75:19:1a:7d:c0:b6:e0:02:ee:34:b9:18:38:
c9:dc:8c:97:c9:d4:75:ef:91:a2:e3:cf:32:df:53:
71:a0:55:1f:ea:25:34:b2:fb:71:6f:d2:c7:4c:03:
a7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FC:83:E2:04:7E:8C:64:68:D4:4C:30:69:DA:BE:8D:51:4F:25:EF
X509v3 Authority Key Identifier:
keyid:90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:df:7c:d8:56:07:7f:50:87:9e:73:85:cc:ff:6b:f2:bb:c7:
31:fe:54:50:7f:e6:b4:9c:9f:c7:c1:f2:9a:7a:15:3a:d5:fd:
b1:e0:d9:c5:10:d0:ca:1d:db:4e:4e:74:57:0b:d6:4b:e9:e1:
9d:5c:3e:6c:27:89:af:b5:fe:08:83:4b:3b:b6:0c:e1:14:3e:
9c:d5:96:25:7e:27:7c:a9:6f:58:3a:90:74:d5:95:04:6f:23:
df:7b:62:cc:82:d2:f0:9e:3b:df:67:dc:d0:d9:25:cb:93:ac:
59:82:ff:12:7d:58:ad:99:46:6d:36:c1:9c:09:71:83:53:be:
ad:d5:d5:29:96:0b:d8:b4:c9:30:52:b5:f5:5f:a7:f8:d1:9c:
18:05:e5:3a:5d:b3:88:17:37:9b:3d:08:c8:45:ad:87:5f:a8:
74:21:58:3b:be:5e:6f:5a:14:ca:3e:6a:52:fb:47:bf:1e:f8:
17:d9:bf:de:46:55:04:f7:f7:d2:c2:f6:a0:20:28:b6:e2:ba:
1a:4f:3a:40:aa:90:a7:c8:15:b1:1a:c9:c6:30:07:6e:2e:f8:
94:be:73:d7:90:29:90:d6:56:ea:a4:1d:59:56:3e:4a:65:f0:
42:91:a9:d9:9c:b2:6e:40:29:44:d1:b6:d3:4d:8e:5d:70:0e:
7a:74:0a:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKXn6OGtIzSkFnD1ZjgN+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwODc4MzNlMDI1YjIzMjBmOTA1M2ExMDNiYTYxZGU1MmVh
YjJhZmIwHhcNMjUwNzAyMDkwMTE5WhcNMjUwNzAzMDkwMTE5WjAzMTEwLwYDVQQD
Eyg0YWZjODNlMjA0N2U4YzY0NjhkNDRjMzA2OWRhYmU4ZDUxNGYyNWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUmusbHwtR1CGkUxXnm+7fx2Kq8B
yZK/3LtKFULH/5C36shWSg4QyftkhoiunWg4fXZCHzPL8HCJWE2C1F8yoE31NDQy
xu/JbE86dYc3H7eqi+2880rHhy2LBD5Uos9C+IT7dpYmP/L1I47oW48Dlgj9lAxi
CSMM+BIGEnp4nZHqpWbs+/Qkb/bCNhos6x6WKhr0py1i9eTksJPIBMRa12DMF/Ab
1Lu5P8qifhL4soldyDO8HN6drntg3SqlZAtvTuc+DCz8/Sa+0rxh9d2GttdE73UZ
Gn3AtuAC7jS5GDjJ3IyXydR175Gi488y31NxoFUf6iU0svtxb9LHTAOnzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEr8g+IEfoxkaNRMMGnavo1RTyXvMB8GA1UdIwQY
MBaAFJCHgz4CWyMg+QU6EDumHeUuqyr7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0llRFBnSmJJeUQ1QlRvUU82WWQ1UzZyS3ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zNzAxZjctMjBlZi00OTY2LWEyY2Qt
MTE5ZGNkMmVhOWRiLzEva0llRFBnSmJJeUQ1QlRvUU82WWQ1UzZyS3ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8zNzAxZjctMjBlZi00OTY2LWEyY2QtMTE5ZGNkMmVhOWRi
LzEva0llRFBnSmJJeUQ1QlRvUU82WWQ1UzZyS3ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeN982FYH
f1CHnnOFzP9r8rvHMf5UUH/mtJyfx8HymnoVOtX9seDZxRDQyh3bTk50VwvWS+nh
nVw+bCeJr7X+CINLO7YM4RQ+nNWWJX4nfKlvWDqQdNWVBG8j33tizILS8J4732fc
0Nkly5OsWYL/En1YrZlGbTbBnAlxg1O+rdXVKZYL2LTJMFK19V+n+NGcGAXlOl2z
iBc3mz0IyEWth1+odCFYO75eb1oUyj5qUvtHvx74F9m/3kZVBPf30sL2oCAotuK6
Gk86QKqQp8gVsRrJxjAHbi74lL5z15ApkNZW6qQdWVY+SmXwQpGp2ZyybkApRNG2
002OXXAOenQKeg==
-----END CERTIFICATE-----
Generated at Wed Jul 2 15:38:21 2025 by rpki-client