Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
File: kFTGmagd2WKohg8_sLfQM0Pev3Y.mft (raw, json)
Hash identifier: SzrAZYGUnyaLs19LYIyg6vjYgiLIXjJZypJxUm5NfTs=
Subject key identifier: 5C:2F:80:F2:98:1D:0C:DC:C8:D7:ED:37:12:55:0A:D7:4A:D1:5D:ED
Authority key identifier: 90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76
Certificate issuer: /CN=9054c699a81dd962a8860f3fb0b7d03343debf76
Certificate serial: 0197BA7DC8802AD88F4A3CEFB2CC7301126D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 07:01:34 +0000
Manifest this update: Sun 29 Jun 2025 07:01:34 +0000
Manifest next update: Mon 30 Jun 2025 07:01:34 +0000
Files and hashes: 1: AJkLm8QLqcA4cpdlMxjyYpGgKig.roa (hash: Kdq77qB2Z4PyfWGbDab2B0pk/vx4xIRx3C/YwD+0yYQ=)
2: kFTGmagd2WKohg8_sLfQM0Pev3Y.crl (hash: bSLLmcCfYynOWdkyDY+7yvRog3g0Rav/BCxTBjLYFF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:c8:80:2a:d8:8f:4a:3c:ef:b2:cc:73:01:12:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9054c699a81dd962a8860f3fb0b7d03343debf76
Validity
Not Before: Jun 29 07:01:34 2025 GMT
Not After : Jun 30 07:01:34 2025 GMT
Subject: CN=5c2f80f2981d0cdcc8d7ed3712550ad74ad15ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:81:bb:b2:1d:2b:e6:f3:11:36:65:9c:c5:
b0:3e:fd:35:40:08:90:a8:47:26:09:b9:32:4e:c7:
a5:5b:c7:34:01:25:65:6c:a9:40:86:af:db:b0:7d:
c4:0b:df:24:55:74:cc:5f:57:af:53:3f:3f:60:2d:
93:75:fb:c0:17:c8:95:95:f3:cb:a9:97:35:74:f8:
6b:5d:0d:4a:c1:60:0e:a4:35:76:37:97:63:41:d9:
4d:17:1f:c4:4e:f0:2c:60:ce:7b:30:91:3f:b3:a0:
31:36:49:cf:f1:de:17:df:ca:9d:36:01:2b:95:f8:
40:3c:98:e7:f4:df:29:7b:5b:3f:c4:7b:53:2e:29:
b6:be:ac:6d:d3:df:cb:ae:ba:48:bc:5a:67:68:30:
da:bc:1f:bb:d8:d9:c6:b3:5d:d2:70:9f:30:26:f4:
a7:c1:21:80:15:5d:7b:56:86:14:53:49:fa:18:3a:
e9:0e:74:87:b6:a4:41:87:ad:c3:29:27:19:af:ab:
f0:4a:60:55:6e:be:f7:16:2f:95:ca:3a:49:11:ff:
3d:1b:ba:6d:9a:0d:20:fe:25:b1:54:a3:69:0b:70:
aa:c0:03:b2:91:cd:cc:f8:a2:0d:56:90:a1:6f:86:
89:b8:b5:61:35:b2:34:bc:76:e7:b6:99:03:60:ea:
d1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2F:80:F2:98:1D:0C:DC:C8:D7:ED:37:12:55:0A:D7:4A:D1:5D:ED
X509v3 Authority Key Identifier:
keyid:90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4c:81:c6:65:54:cf:05:d7:12:ea:09:53:ad:6d:d3:a5:1d:
b6:1f:13:88:b0:e4:1c:4f:d6:90:ce:f9:cd:4a:47:61:2f:d9:
70:8f:af:03:f8:fc:c5:dc:9e:e1:2b:4e:4d:a1:81:9a:0b:fc:
84:9e:4c:0b:da:f0:45:4f:f1:de:9b:91:e3:87:57:04:14:6d:
75:57:6c:ca:08:d9:e9:fc:63:01:a6:ee:9f:f8:a6:32:67:75:
13:27:76:42:03:27:e1:ec:3f:f0:64:cb:2b:2f:28:43:0d:6c:
24:df:1a:d7:bf:9b:2c:5a:4c:73:ac:16:25:a6:51:06:1a:de:
c1:43:0e:6c:b2:84:96:cc:76:4b:1d:19:4b:37:11:be:56:8c:
8c:b2:d2:fd:a3:24:14:d1:e4:7f:32:ae:c0:9a:0a:ec:b6:aa:
33:f8:e0:2e:55:a9:1c:b6:37:3f:4b:01:e0:61:b1:59:b0:20:
dd:ec:d5:38:f7:52:38:79:34:97:fc:a7:60:03:94:16:fc:86:
2d:ae:8b:86:43:3a:de:94:10:91:54:47:98:fb:0c:11:23:c3:
a8:fa:1d:20:78:ca:05:e8:01:4f:2a:b1:81:84:b2:e7:42:41:
bb:43:5a:bf:c4:e6:f7:b0:ad:40:ea:37:a8:f5:02:b7:48:7c:
07:61:75:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6fciAKtiPSjzvssxzARJtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNTRjNjk5YTgxZGQ5NjJhODg2MGYzZmIwYjdkMDMzNDNk
ZWJmNzYwHhcNMjUwNjI5MDcwMTM0WhcNMjUwNjMwMDcwMTM0WjAzMTEwLwYDVQQD
Eyg1YzJmODBmMjk4MWQwY2RjYzhkN2VkMzcxMjU1MGFkNzRhZDE1ZGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeWBu7IdK+bzETZlnMWwPv01QAiQ
qEcmCbkyTselW8c0ASVlbKlAhq/bsH3EC98kVXTMX1evUz8/YC2TdfvAF8iVlfPL
qZc1dPhrXQ1KwWAOpDV2N5djQdlNFx/ETvAsYM57MJE/s6AxNknP8d4X38qdNgEr
lfhAPJjn9N8pe1s/xHtTLim2vqxt09/LrrpIvFpnaDDavB+72NnGs13ScJ8wJvSn
wSGAFV17VoYUU0n6GDrpDnSHtqRBh63DKScZr6vwSmBVbr73Fi+VyjpJEf89G7pt
mg0g/iWxVKNpC3CqwAOykc3M+KINVpChb4aJuLVhNbI0vHbntpkDYOrRHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwvgPKYHQzcyNftNxJVCtdK0V3tMB8GA1UdIwQY
MBaAFJBUxpmoHdliqIYPP7C30DND3r92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0ZUR21hZ2QyV0tvaGc4X3NMZlFNMFBldjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82OWVmYTEtOGM5OS00OGY4LTk0M2Mt
MmI0YTE2NTk0MjEzLzEva0ZUR21hZ2QyV0tvaGc4X3NMZlFNMFBldjNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi82OWVmYTEtOGM5OS00OGY4LTk0M2MtMmI0YTE2NTk0MjEz
LzEva0ZUR21hZ2QyV0tvaGc4X3NMZlFNMFBldjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUyBxmVU
zwXXEuoJU61t06Udth8TiLDkHE/WkM75zUpHYS/ZcI+vA/j8xdye4StOTaGBmgv8
hJ5MC9rwRU/x3puR44dXBBRtdVdsygjZ6fxjAabun/imMmd1Eyd2QgMn4ew/8GTL
Ky8oQw1sJN8a17+bLFpMc6wWJaZRBhrewUMObLKElsx2Sx0ZSzcRvlaMjLLS/aMk
FNHkfzKuwJoK7LaqM/jgLlWpHLY3P0sB4GGxWbAg3ezVOPdSOHk0l/ynYAOUFvyG
La6LhkM63pQQkVRHmPsMESPDqPodIHjKBegBTyqxgYSy50JBu0Nav8Tm97CtQOo3
qPUCt0h8B2F1nQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:32:03 2025 by rpki-client