Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
File: kLW7gP7vNEZQqadz9h8LLPv3zow.mft (raw, json)
Hash identifier: mDoi3R7D4+j94VOyGm35xlQ7frBiZVyzK3xLlvfePw0=
Subject key identifier: 34:D9:D1:BC:E2:9D:86:92:05:94:9E:B3:5F:3E:43:9A:32:F8:73:2F
Authority key identifier: 90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
Certificate issuer: /CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Certificate serial: 0197C0B709F7AB9A173A02DF813F2E619789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
Manifest number: 15BC
Signing time: Mon 30 Jun 2025 12:01:50 +0000
Manifest this update: Mon 30 Jun 2025 12:01:50 +0000
Manifest next update: Tue 01 Jul 2025 12:01:50 +0000
Files and hashes: 1: FGJLDNwIe5pLjXrqbymC0a0gPJo.roa (hash: kQgzQHprcEB53dC9DqKWQUqd46ovamQ0wepPNfm8eyk=)
2: kLW7gP7vNEZQqadz9h8LLPv3zow.crl (hash: 6MN8QiqYVlqmAENRW4d5dr06rIh15pptIKGkjHHxFaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b7:09:f7:ab:9a:17:3a:02:df:81:3f:2e:61:97:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Validity
Not Before: Jun 30 12:01:50 2025 GMT
Not After : Jul 1 12:01:50 2025 GMT
Subject: CN=34d9d1bce29d869205949eb35f3e439a32f8732f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:b1:97:e7:ef:df:a8:05:ce:22:2e:19:22:
9f:48:d9:30:c4:5d:60:37:ae:fc:ec:6f:34:da:f6:
e2:79:bb:36:55:f6:52:8d:44:eb:75:89:e7:ac:86:
21:95:41:42:0f:2d:1e:de:8b:2d:8d:c1:dd:af:5b:
da:7a:7a:28:2f:2d:fc:e2:84:9c:48:fc:3d:87:aa:
37:37:5d:3e:f5:2a:2f:f3:2f:2a:1c:ca:ad:b0:01:
dd:f8:7a:0c:79:08:2b:45:bf:fa:22:b9:45:12:42:
fc:6c:52:f0:2e:f5:e8:0d:eb:ee:57:40:85:5b:d3:
bc:f3:f5:40:ad:28:01:69:bc:86:89:cd:2a:01:2c:
d0:4e:db:c4:a4:77:7a:2a:c0:83:d2:55:56:c7:03:
dd:85:47:4f:f8:cb:f5:4d:69:8c:31:c1:fa:45:e5:
ee:f8:91:30:89:2c:d3:5a:4a:82:ec:8a:28:cf:6a:
ce:4c:45:c1:2b:63:f8:62:a3:f4:d6:33:d7:dc:b8:
1b:73:e4:2b:04:70:0e:4b:70:1b:99:68:81:df:b9:
3b:ef:93:93:4f:42:77:51:e3:87:3c:d3:c1:bf:84:
b5:c0:69:58:44:d3:50:63:ff:cc:f9:eb:8f:a9:2a:
27:88:7d:b1:77:c4:9c:37:78:11:51:03:97:c8:c8:
c3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D9:D1:BC:E2:9D:86:92:05:94:9E:B3:5F:3E:43:9A:32:F8:73:2F
X509v3 Authority Key Identifier:
keyid:90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:79:ba:6d:86:5e:55:46:ba:f0:9a:2c:78:fd:39:d1:c3:77:
76:9c:52:7f:e5:2b:9d:9b:68:20:44:42:ba:34:2f:50:a2:e2:
0c:1e:fe:3b:52:36:08:1e:71:0f:60:df:cd:9c:74:5f:de:a7:
28:ad:7e:f3:0b:44:4d:c1:b6:e2:62:a8:40:6d:b8:c3:24:c3:
dc:f7:13:3f:90:eb:65:c6:44:97:39:a1:6a:80:e3:8d:22:8d:
89:e9:14:cf:7c:ed:58:8c:c6:1c:ff:ec:ac:3f:6d:f0:8d:0e:
3f:c1:f0:83:f7:78:97:94:65:d4:90:f7:91:06:81:26:01:2f:
20:81:44:76:b9:b2:90:50:31:f1:0b:1c:b4:5d:5f:ae:62:8d:
09:c4:87:99:47:d2:13:19:57:e4:f6:8a:fa:bf:6d:36:71:86:
ff:42:5d:7f:d6:1c:c3:4e:25:5c:97:ee:0b:cc:59:ef:bb:30:
58:59:a0:ee:00:a8:f0:0f:32:d5:70:79:4f:49:f9:96:03:3d:
42:2a:c8:b7:76:5f:90:10:5d:c1:d2:94:75:72:e3:f3:64:23:
a6:d4:11:52:f3:f5:0b:b1:f1:a0:74:13:49:74:5d:e9:20:b6:
8e:ca:6a:78:1b:2a:ab:26:ae:a2:40:ee:6c:89:e7:d6:be:78:
b6:5d:70:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfAtwn3q5oXOgLfgT8uYZeJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYjViYjgwZmVlZjM0NDY1MGE5YTc3M2Y2MWYwYjJjZmJm
N2NlOGMwHhcNMjUwNjMwMTIwMTUwWhcNMjUwNzAxMTIwMTUwWjAzMTEwLwYDVQQD
EygzNGQ5ZDFiY2UyOWQ4NjkyMDU5NDllYjM1ZjNlNDM5YTMyZjg3MzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbuxl+fv36gFziIuGSKfSNkwxF1g
N6787G802vbiebs2VfZSjUTrdYnnrIYhlUFCDy0e3ostjcHdr1vaenooLy384oSc
SPw9h6o3N10+9Sov8y8qHMqtsAHd+HoMeQgrRb/6IrlFEkL8bFLwLvXoDevuV0CF
W9O88/VArSgBabyGic0qASzQTtvEpHd6KsCD0lVWxwPdhUdP+Mv1TWmMMcH6ReXu
+JEwiSzTWkqC7Iooz2rOTEXBK2P4YqP01jPX3Lgbc+QrBHAOS3AbmWiB37k775OT
T0J3UeOHPNPBv4S1wGlYRNNQY//M+euPqSoniH2xd8ScN3gRUQOXyMjD+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTZ0bzinYaSBZSes18+Q5oy+HMvMB8GA1UdIwQY
MBaAFJC1u4D+7zRGUKmnc/YfCyz7986MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0xXN2dQN3ZORVpRcWFkejloOExMUHYzem93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wNTIxMTgtYzQ2Yi00OGI0LTg3ZGMt
NWVkNTI3MGVkZjIzLzEva0xXN2dQN3ZORVpRcWFkejloOExMUHYzem93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8wNTIxMTgtYzQ2Yi00OGI0LTg3ZGMtNWVkNTI3MGVkZjIz
LzEva0xXN2dQN3ZORVpRcWFkejloOExMUHYzem93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3m6bYZe
VUa68JoseP050cN3dpxSf+UrnZtoIERCujQvUKLiDB7+O1I2CB5xD2DfzZx0X96n
KK1+8wtETcG24mKoQG24wyTD3PcTP5DrZcZElzmhaoDjjSKNiekUz3ztWIzGHP/s
rD9t8I0OP8Hwg/d4l5Rl1JD3kQaBJgEvIIFEdrmykFAx8QsctF1frmKNCcSHmUfS
ExlX5PaK+r9tNnGG/0Jdf9Ycw04lXJfuC8xZ77swWFmg7gCo8A8y1XB5T0n5lgM9
QirIt3ZfkBBdwdKUdXLj82QjptQRUvP1C7HxoHQTSXRd6SC2jspqeBsqqyauokDu
bInn1r54tl1wmg==
-----END CERTIFICATE-----
Generated at Mon Jun 30 15:11:48 2025 by rpki-client