Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
File: kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft (raw, json)
Hash identifier: W3nuC+w+UjDOOPxu3AvfCTuoeMxka2Ahkj4jPTSHaro=
Subject key identifier: 1B:F3:AE:63:C3:5C:12:61:BB:79:D3:26:AA:50:CB:AC:FE:89:79:FB
Authority key identifier: 90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
Certificate issuer: /CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Certificate serial: 0197B9D8E1A878391A9BE30B9FFF1452EABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
Manifest number: 0616
Signing time: Sun 29 Jun 2025 04:01:27 +0000
Manifest this update: Sun 29 Jun 2025 04:01:27 +0000
Manifest next update: Mon 30 Jun 2025 04:01:27 +0000
Files and hashes: 1: KC67bUzfDKSrHmCB6UUpuneAEt0.roa (hash: kjD/C1Ln2i2diMcFsx9dGCTAO1I1ywN8NGufWziFBfg=)
2: kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl (hash: WQ9lBr5O+sIflbtI3RJ15xJ79dIGzslKoWWxi8ABvKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:e1:a8:78:39:1a:9b:e3:0b:9f:ff:14:52:ea:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Validity
Not Before: Jun 29 04:01:27 2025 GMT
Not After : Jun 30 04:01:27 2025 GMT
Subject: CN=1bf3ae63c35c1261bb79d326aa50cbacfe8979fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:99:24:81:aa:58:ef:c6:e4:1c:f0:b8:f6:
61:60:97:90:0d:5f:45:ed:e1:69:70:85:59:71:0d:
2e:2f:73:da:8c:4f:a4:cb:53:4e:f0:b2:5a:8b:4f:
e0:01:7e:a1:0b:05:40:12:ed:96:58:2b:c6:de:9a:
2f:d6:37:10:7e:9c:4f:c7:68:e7:11:2a:7d:df:e0:
e4:ce:08:4d:72:2b:f3:5f:61:92:34:0e:73:4a:5d:
b8:0b:6a:82:80:14:e0:be:f5:4c:e0:87:c4:6d:62:
16:ff:27:02:53:09:65:6d:48:9a:bb:5d:2c:6c:4e:
af:38:57:ce:75:be:0d:7e:c1:67:ba:79:95:23:dc:
2c:00:4a:63:fb:f4:1b:34:d6:f2:0a:29:9d:6b:2d:
3d:1f:b9:40:fe:ec:d7:1b:3e:97:47:bf:b8:ce:28:
25:da:c7:51:e0:6c:37:a3:98:be:69:37:04:88:18:
a4:c1:73:f3:c9:94:98:16:f2:07:73:84:d1:1c:07:
cf:cb:f7:80:fb:87:9c:35:0b:14:6a:48:c4:a6:4c:
0a:4a:e6:1b:07:2b:e9:ec:74:8f:f9:1c:3d:c9:ef:
3a:e5:82:8f:0d:72:59:21:70:c6:2d:2a:c4:0a:2f:
57:ee:23:6e:fe:28:e0:e4:0b:b6:ab:d4:66:ae:08:
a1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F3:AE:63:C3:5C:12:61:BB:79:D3:26:AA:50:CB:AC:FE:89:79:FB
X509v3 Authority Key Identifier:
keyid:90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:bf:95:1c:06:2b:74:08:c3:d4:c2:ef:74:10:2d:09:43:37:
b1:f7:a8:fb:f8:96:81:6b:e6:6c:67:8d:b6:13:46:ac:1a:89:
fd:f0:83:bb:61:74:44:b5:cd:af:bf:d2:e0:f1:cb:d1:36:15:
09:45:fc:4f:36:99:40:06:f9:c8:ce:c2:90:1c:10:34:84:c7:
5a:45:52:fd:0a:29:dc:8d:76:f5:21:98:9b:cd:89:eb:c1:7d:
82:c1:eb:9e:32:88:82:e3:32:8f:e0:9d:ab:30:ed:d8:38:fb:
71:1d:0e:fe:f8:8d:53:18:ec:9f:45:41:6f:81:1f:59:0b:9a:
81:11:f9:d4:4f:32:48:63:32:7a:15:fc:86:ad:9f:64:d2:e5:
0e:fc:94:54:6c:e4:58:78:59:11:8b:b3:d7:41:9d:35:03:83:
36:72:fc:67:f7:c9:04:5c:5e:08:c7:64:2c:b7:c2:cf:87:2b:
7e:3a:10:e8:4b:96:13:e4:71:b2:c0:69:0d:12:69:38:52:46:
30:c1:fa:bd:2b:43:5c:d0:45:65:fd:bd:01:d9:fa:69:a5:d8:
35:8e:a6:f9:bb:80:1c:ba:65:52:9c:a9:a1:3e:07:41:e4:02:
10:91:e3:9f:52:bb:0a:ee:27:e4:a2:e6:21:83:fc:36:7b:bc:
2e:56:f4:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe52OGoeDkam+MLn/8UUuq6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNWExMDkzMzZkZTg5NzEyZTI0OWM5ODQ2YzlkYmIxYjNj
OThjN2UwHhcNMjUwNjI5MDQwMTI3WhcNMjUwNjMwMDQwMTI3WjAzMTEwLwYDVQQD
EygxYmYzYWU2M2MzNWMxMjYxYmI3OWQzMjZhYTUwY2JhY2ZlODk3OWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjWZJIGqWO/G5BzwuPZhYJeQDV9F
7eFpcIVZcQ0uL3PajE+ky1NO8LJai0/gAX6hCwVAEu2WWCvG3pov1jcQfpxPx2jn
ESp93+DkzghNcivzX2GSNA5zSl24C2qCgBTgvvVM4IfEbWIW/ycCUwllbUiau10s
bE6vOFfOdb4NfsFnunmVI9wsAEpj+/QbNNbyCimday09H7lA/uzXGz6XR7+4zigl
2sdR4Gw3o5i+aTcEiBikwXPzyZSYFvIHc4TRHAfPy/eA+4ecNQsUakjEpkwKSuYb
Byvp7HSP+Rw9ye865YKPDXJZIXDGLSrECi9X7iNu/ijg5Au2q9RmrgihCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvzrmPDXBJhu3nTJqpQy6z+iXn7MB8GA1UdIwQY
MBaAFJBaEJM23olxLiScmEbJ27GzyYx+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0ZvUWt6YmVpWEV1Skp5WVJzbmJzYlBKakg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kYWI2YWUtZGJhOC00YjI4LTljOGYt
YjI0OGNmYTk2YTY5LzEva0ZvUWt6YmVpWEV1Skp5WVJzbmJzYlBKakg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9kYWI2YWUtZGJhOC00YjI4LTljOGYtYjI0OGNmYTk2YTY5
LzEva0ZvUWt6YmVpWEV1Skp5WVJzbmJzYlBKakg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADb+VHAYr
dAjD1MLvdBAtCUM3sfeo+/iWgWvmbGeNthNGrBqJ/fCDu2F0RLXNr7/S4PHL0TYV
CUX8TzaZQAb5yM7CkBwQNITHWkVS/Qop3I129SGYm82J68F9gsHrnjKIguMyj+Cd
qzDt2Dj7cR0O/viNUxjsn0VBb4EfWQuagRH51E8ySGMyehX8hq2fZNLlDvyUVGzk
WHhZEYuz10GdNQODNnL8Z/fJBFxeCMdkLLfCz4crfjoQ6EuWE+RxssBpDRJpOFJG
MMH6vStDXNBFZf29Adn6aaXYNY6m+buAHLplUpypoT4HQeQCEJHjn1K7Cu4n5KLm
IYP8Nnu8Llb0SQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:23:51 2025 by rpki-client