Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
File: KwUe8jBg61G_2MeXlfak2vSKOqA.mft (raw, json)
Hash identifier: s3WNby4aLVcC3iAJQM5TU/q6oQ9V6T4EPBdBiygcCWQ=
Subject key identifier: F6:E8:4D:F9:C1:F7:8B:5D:97:C2:4C:E4:CF:55:73:74:F4:CD:50:72
Authority key identifier: 2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
Certificate issuer: /CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Certificate serial: 01977DF9E70193C79B14307082E52FFF7A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
Manifest number: 09CA
Signing time: Tue 17 Jun 2025 13:00:18 +0000
Manifest this update: Tue 17 Jun 2025 13:00:18 +0000
Manifest next update: Wed 18 Jun 2025 13:00:18 +0000
Files and hashes: 1: K7bHv-ntCkLHGgtD3GP4pZg-0HE.roa (hash: sF0L1bfvPm8HvYASjwb0jRSaCB2jonmzTiMF+U2X9qc=)
2: KwUe8jBg61G_2MeXlfak2vSKOqA.crl (hash: HSlK8sywh8b8kGZDiFIyNnG9nui4NkiDCVe5Ys0GsrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:f9:e7:01:93:c7:9b:14:30:70:82:e5:2f:ff:7a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Validity
Not Before: Jun 17 13:00:18 2025 GMT
Not After : Jun 18 13:00:18 2025 GMT
Subject: CN=f6e84df9c1f78b5d97c24ce4cf557374f4cd5072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:fd:18:62:d6:0b:ed:96:67:e5:3d:45:16:
42:c0:4e:a2:ed:e2:f4:ca:21:df:97:0f:ab:75:db:
b5:ec:f4:29:8e:ab:c1:b5:57:e2:24:51:60:59:29:
3c:e0:7d:eb:0d:19:86:bb:6a:e4:8d:1a:a3:3e:33:
d3:3d:43:7a:d8:08:a0:19:5c:85:8d:9e:5a:55:40:
b3:f6:6e:bc:c5:2b:1c:60:f5:00:42:3d:f7:ef:21:
44:8b:47:d2:f1:c8:aa:a7:ca:7a:e3:4e:d0:96:6f:
09:b1:fc:34:66:ab:28:99:b9:74:a8:30:a2:7b:fa:
21:fa:72:8c:a2:0f:f1:6d:4c:cf:5b:e1:76:94:54:
c7:10:9d:89:5c:43:b8:7a:c6:c9:0e:8c:c5:01:f2:
41:01:0e:0b:ce:7a:c7:86:47:63:b4:9b:9c:bc:55:
18:33:c8:9e:0a:3b:ee:00:24:5d:23:0f:10:a6:09:
6b:0d:f4:dc:b4:3d:55:11:a8:5b:88:2d:26:1e:9d:
01:ea:12:52:93:f7:0b:25:0a:c8:3b:b4:19:91:a4:
b1:c4:29:d7:08:f6:7c:41:43:9f:fe:d0:bb:14:f4:
9e:cd:90:b3:4d:eb:63:e4:db:91:a2:7e:26:eb:6f:
da:28:ec:00:13:60:c9:8c:db:ff:43:cf:43:67:28:
67:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E8:4D:F9:C1:F7:8B:5D:97:C2:4C:E4:CF:55:73:74:F4:CD:50:72
X509v3 Authority Key Identifier:
keyid:2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f3:41:e6:88:b1:67:bf:1c:b6:a5:88:17:ad:71:98:11:38:
04:66:4b:2e:02:69:df:8c:68:27:65:c9:2b:5e:cf:53:69:f3:
49:49:74:6f:8e:73:a9:38:63:54:fb:ef:e3:29:7c:d6:29:94:
51:b0:a3:99:0e:be:a6:b8:eb:07:31:34:dd:4a:4c:4f:37:85:
12:ff:0c:f1:82:6b:81:16:fd:d4:4c:9b:34:b7:e1:fb:df:b6:
37:3e:73:96:8b:a1:96:6e:01:3c:7e:14:ae:cf:5d:1e:d7:e0:
14:ce:b6:71:79:90:9e:a8:68:0f:41:fe:80:31:4c:c9:c9:2b:
fb:b3:a1:a3:43:8d:0e:92:8f:76:28:05:d2:79:a9:d6:60:5d:
b0:e4:5c:eb:e3:27:08:e6:9b:82:ac:39:9d:90:c2:97:fd:ea:
c7:2b:e1:48:ce:53:93:a1:11:c1:ca:ec:92:36:14:6c:ae:87:
fd:eb:b8:01:d5:69:20:e7:25:67:58:13:56:95:24:0a:c2:8e:
e2:fa:bf:fd:f7:96:3b:6a:7c:dc:d0:38:ac:b2:d0:4d:54:95:
e7:33:ed:35:f5:e8:1a:16:fd:30:d9:8c:df:75:4a:05:bf:a5:
b8:6e:60:f1:cc:72:df:f8:33:d6:ce:f1:53:dc:df:df:a4:78:
aa:27:37:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd9+ecBk8ebFDBwguUv/3qJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMDUxZWYyMzA2MGViNTFiZmQ4Yzc5Nzk1ZjZhNGRhZjQ4
YTNhYTAwHhcNMjUwNjE3MTMwMDE4WhcNMjUwNjE4MTMwMDE4WjAzMTEwLwYDVQQD
EyhmNmU4NGRmOWMxZjc4YjVkOTdjMjRjZTRjZjU1NzM3NGY0Y2Q1MDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslr9GGLWC+2WZ+U9RRZCwE6i7eL0
yiHflw+rddu17PQpjqvBtVfiJFFgWSk84H3rDRmGu2rkjRqjPjPTPUN62AigGVyF
jZ5aVUCz9m68xSscYPUAQj337yFEi0fS8ciqp8p6407Qlm8Jsfw0Zqsombl0qDCi
e/oh+nKMog/xbUzPW+F2lFTHEJ2JXEO4esbJDozFAfJBAQ4LznrHhkdjtJucvFUY
M8ieCjvuACRdIw8QpglrDfTctD1VEahbiC0mHp0B6hJSk/cLJQrIO7QZkaSxxCnX
CPZ8QUOf/tC7FPSezZCzTetj5NuRon4m62/aKOwAE2DJjNv/Q89DZyhnNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPboTfnB94tdl8JM5M9Vc3T0zVByMB8GA1UdIwQY
MBaAFCsFHvIwYOtRv9jHl5X2pNr0ijqgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3dVZThqQmc2MUdfMk1lWGxmYWsydlNLT3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8zODE3OWMtMjVhYi00MzY4LThjZjgt
NTdlNTkzY2Y5YTRlLzEvS3dVZThqQmc2MUdfMk1lWGxmYWsydlNLT3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8zODE3OWMtMjVhYi00MzY4LThjZjgtNTdlNTkzY2Y5YTRl
LzEvS3dVZThqQmc2MUdfMk1lWGxmYWsydlNLT3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevNB5oix
Z78ctqWIF61xmBE4BGZLLgJp34xoJ2XJK17PU2nzSUl0b45zqThjVPvv4yl81imU
UbCjmQ6+prjrBzE03UpMTzeFEv8M8YJrgRb91EybNLfh+9+2Nz5zlouhlm4BPH4U
rs9dHtfgFM62cXmQnqhoD0H+gDFMyckr+7Oho0ONDpKPdigF0nmp1mBdsORc6+Mn
COabgqw5nZDCl/3qxyvhSM5Tk6ERwcrskjYUbK6H/eu4AdVpIOclZ1gTVpUkCsKO
4vq//feWO2p83NA4rLLQTVSV5zPtNfXoGhb9MNmM33VKBb+luG5g8cxy3/gz1s7x
U9zf36R4qic3Lw==
-----END CERTIFICATE-----
Generated at Tue Jun 17 21:23:39 2025 by rpki-client