Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
File: kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft (raw, json)
Hash identifier: 7m04YqosYKo2ruTsvxh6NBUqvAeDOWTUBuSWFnJF5dI=
Subject key identifier: 41:F8:12:DC:38:F6:FC:C8:21:4C:6D:B9:01:06:12:B8:1B:95:D7:E3
Authority key identifier: 92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
Certificate issuer: /CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Certificate serial: 01976F2BB9ACD87437E74A632E2AB7DBB0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
Manifest number: 0CAB
Signing time: Sat 14 Jun 2025 16:00:25 +0000
Manifest this update: Sat 14 Jun 2025 16:00:25 +0000
Manifest next update: Sun 15 Jun 2025 16:00:25 +0000
Files and hashes: 1: kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl (hash: cEzH0WobN8FDfeklnpJQ+ZDQi5Z5igbmr3pdczCS5L8=)
2: o0NNJAdQ09Zlx7io8L7w4JsxeRk.roa (hash: GHDYyjn7cWOGvu2PuaUkyCHLa21ud2IleT+Ydwgziyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:b9:ac:d8:74:37:e7:4a:63:2e:2a:b7:db:b0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Validity
Not Before: Jun 14 16:00:25 2025 GMT
Not After : Jun 15 16:00:25 2025 GMT
Subject: CN=41f812dc38f6fcc8214c6db9010612b81b95d7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:a7:16:49:8e:d9:38:4d:90:29:81:00:aa:
99:e9:18:b4:51:8b:18:c1:c3:81:52:a9:7c:c9:96:
d2:69:8a:c5:9a:48:73:43:20:b1:1c:7a:0c:ea:33:
b0:68:f9:23:aa:46:e4:ab:b0:41:81:3f:5f:54:75:
ea:ba:d8:81:1c:07:4e:95:e6:cb:4a:e9:d5:89:dc:
cf:2d:0a:1b:8f:48:06:fe:1f:bb:ee:47:ad:40:29:
ff:4f:0d:b2:c8:aa:1c:6c:4a:0c:a2:6e:04:32:86:
ff:51:fe:b3:25:a2:5a:5b:55:2b:d4:59:e2:05:41:
f4:9e:19:cc:fa:a6:7f:02:27:79:df:78:0c:69:94:
24:85:40:00:d1:9b:c1:10:dd:2f:cc:4d:c1:1d:d6:
16:25:d8:65:3f:0b:f0:e5:53:4f:bb:a7:59:34:f1:
3b:5e:e2:aa:af:ef:89:57:a2:c3:ef:c3:e2:22:e4:
58:fa:bf:97:38:f3:e8:39:5d:1c:66:91:bc:14:49:
1c:54:7c:83:42:bb:47:72:29:cf:58:0c:27:8a:97:
d4:35:22:6d:33:0d:aa:bf:58:b1:d9:39:6a:65:59:
e5:97:da:af:87:49:ba:43:7b:98:0a:07:7f:b9:c7:
3a:7e:f1:5f:33:a6:68:9e:b7:1a:54:80:3e:f6:81:
23:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F8:12:DC:38:F6:FC:C8:21:4C:6D:B9:01:06:12:B8:1B:95:D7:E3
X509v3 Authority Key Identifier:
keyid:92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:29:75:92:dc:9e:e2:a6:cc:79:cb:40:b5:77:ea:78:d9:8d:
d2:93:4a:82:02:2a:99:b5:87:0f:54:64:18:44:9b:e7:3f:3a:
be:c5:2c:94:04:8c:23:7a:b9:ce:91:90:10:67:2d:24:97:44:
81:7f:2b:87:34:80:88:a3:1e:fa:0a:9b:ce:93:1e:de:a9:fb:
a9:9b:fd:89:69:21:1c:d0:ef:8f:de:a0:d9:0e:f5:05:a1:63:
35:4e:50:b2:22:eb:0b:c2:3b:9f:ad:13:45:26:67:0d:3a:65:
30:5f:7a:c8:f7:74:74:7a:7e:91:35:7b:1d:c3:80:ae:4a:92:
5e:70:6d:0a:9a:3c:b0:b8:54:87:de:f6:94:fa:a0:c7:16:9e:
4c:c6:b6:ca:b7:0a:fe:78:f4:6e:64:a7:25:da:a1:7f:9e:f9:
48:37:c4:13:98:bc:15:18:e1:80:6b:96:b8:6e:3b:ae:98:c5:
49:a5:03:f8:c8:77:c3:c2:e5:3d:9a:f6:27:41:6a:7e:2f:e6:
25:53:83:fc:46:ad:7a:2c:ad:94:1c:1f:4c:a0:4e:97:d0:f5:
52:46:ab:83:b3:37:3d:6f:5f:8b:3b:e5:d8:ed:d5:64:21:a1:
9e:d2:82:f2:7d:83:35:96:7a:bd:2f:cb:b7:b6:70:11:46:d6:
b8:98:a7:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvK7ms2HQ350pjLiq327C8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZjg1NjIyZTIyZmM5NmNlYWNmNzMxMTRkODkwZjRmM2Fh
N2Q0OTUwHhcNMjUwNjE0MTYwMDI1WhcNMjUwNjE1MTYwMDI1WjAzMTEwLwYDVQQD
Eyg0MWY4MTJkYzM4ZjZmY2M4MjE0YzZkYjkwMTA2MTJiODFiOTVkN2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJanFkmO2ThNkCmBAKqZ6Ri0UYsY
wcOBUql8yZbSaYrFmkhzQyCxHHoM6jOwaPkjqkbkq7BBgT9fVHXqutiBHAdOlebL
SunVidzPLQobj0gG/h+77ketQCn/Tw2yyKocbEoMom4EMob/Uf6zJaJaW1Ur1Fni
BUH0nhnM+qZ/Aid533gMaZQkhUAA0ZvBEN0vzE3BHdYWJdhlPwvw5VNPu6dZNPE7
XuKqr++JV6LD78PiIuRY+r+XOPPoOV0cZpG8FEkcVHyDQrtHcinPWAwnipfUNSJt
Mw2qv1ix2TlqZVnll9qvh0m6Q3uYCgd/ucc6fvFfM6ZonrcaVIA+9oEjYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEH4Etw49vzIIUxtuQEGErgbldfjMB8GA1UdIwQY
MBaAFJL4ViLiL8ls6s9zEU2JD086p9SVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3ZoV0l1SXZ5V3pxejNNUlRZa1BUenFuMUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8xMDAwZWItZmZkMC00ZmUzLWI3YWYt
MDczOGMyMzM0ZTdmLzEva3ZoV0l1SXZ5V3pxejNNUlRZa1BUenFuMUpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8xMDAwZWItZmZkMC00ZmUzLWI3YWYtMDczOGMyMzM0ZTdm
LzEva3ZoV0l1SXZ5V3pxejNNUlRZa1BUenFuMUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKil1ktye
4qbMectAtXfqeNmN0pNKggIqmbWHD1RkGESb5z86vsUslASMI3q5zpGQEGctJJdE
gX8rhzSAiKMe+gqbzpMe3qn7qZv9iWkhHNDvj96g2Q71BaFjNU5QsiLrC8I7n60T
RSZnDTplMF96yPd0dHp+kTV7HcOArkqSXnBtCpo8sLhUh972lPqgxxaeTMa2yrcK
/nj0bmSnJdqhf575SDfEE5i8FRjhgGuWuG47rpjFSaUD+Mh3w8LlPZr2J0Fqfi/m
JVOD/EateiytlBwfTKBOl9D1Ukarg7M3PW9fizvl2O3VZCGhntKC8n2DNZZ6vS/L
t7ZwEUbWuJin9w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:48:42 2025 by rpki-client