Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
File: KvXkhmugmCASSm5REQT8QfpUGZU.mft (raw, json)
Hash identifier: yLKJ6IsZhxWYnFoUXFkdBGNUppLs+9POcK3DmQ3Oymw=
Subject key identifier: CF:9C:B5:81:B2:46:C1:BE:86:D7:6D:96:A0:70:3E:99:1A:67:56:CC
Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
Certificate issuer: /CN=2af5e4866ba09820124a6e511104fc41fa541995
Certificate serial: 019777C18DD472E3FBA77C78769F546E7887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
Manifest number: 12D4
Signing time: Mon 16 Jun 2025 08:01:02 +0000
Manifest this update: Mon 16 Jun 2025 08:01:02 +0000
Manifest next update: Tue 17 Jun 2025 08:01:02 +0000
Files and hashes: 1: 5r4roNSh8TWW8XLP5gLpTUYEtC8.roa (hash: AktxI+V17na/V+Hz9k9ha+hVm279Tijdqa0CvwmI/7Q=)
2: Gxhnb8KOTrVvxDF8yuKOv2GjqtU.roa (hash: QO/QE2IRS/pPOvcN+3PpcsYmJwErYvPF742Zst4rEP8=)
3: KvXkhmugmCASSm5REQT8QfpUGZU.crl (hash: v17ok1OcvFMKsmRx82aaAKwVVLfJbGZ7jjAPNT1HswM=)
4: TtvNTrhsW3wjOkk9eOHVRXZxsEg.roa (hash: gPmUeUcfbob5JNxYnTxCOkrudyCPlteleGt+PSj2/00=)
5: ekdDszvqGt_eJ_hGO_xIWYzbzAA.roa (hash: zqr+o3bWODGGGIrhIMHHh91Y/JEASXYkOBODwzmfRz8=)
6: iIQaeGWo37d4w_fiU_R29carNk8.roa (hash: FbNS7L7XPQULlvHXJ6Yq35UuABtJRjSmhRiCGjDk29Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c1:8d:d4:72:e3:fb:a7:7c:78:76:9f:54:6e:78:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995
Validity
Not Before: Jun 16 08:01:02 2025 GMT
Not After : Jun 17 08:01:02 2025 GMT
Subject: CN=cf9cb581b246c1be86d76d96a0703e991a6756cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e4:1a:38:77:ef:b9:27:b3:67:51:62:49:19:
9c:e0:7e:24:8d:d5:40:76:b8:ce:93:64:ec:44:6f:
e8:d9:88:c8:c3:a7:02:ff:dc:50:84:96:7b:64:26:
a8:78:78:f2:91:2b:2a:a5:7c:f0:e4:56:00:84:64:
ba:5c:e8:78:4b:a4:07:fa:79:c2:58:c6:3f:23:b6:
1f:85:8c:ee:a5:4f:47:bf:5a:56:70:38:b7:4c:e0:
c7:f6:26:3b:75:fc:19:42:82:6a:c3:60:06:ec:84:
fb:3d:4e:a0:f0:be:17:e4:bd:4b:23:48:b8:18:b0:
80:c2:77:41:b1:7f:b8:13:51:0a:db:95:5c:44:09:
71:31:65:33:33:62:ac:55:52:7a:1d:26:2b:e0:bf:
f7:e5:be:93:1a:2b:b1:08:53:87:ed:91:dc:17:13:
57:6a:0e:9b:01:b3:13:1d:72:be:cd:a0:6f:c8:e5:
f8:34:2a:a7:0b:bc:56:2a:19:0f:8e:35:a0:a8:c3:
d2:8a:ce:35:c2:8e:1e:1c:28:93:3d:29:17:82:39:
b6:9c:53:2e:9d:9b:bb:20:d3:98:10:6b:51:6f:2b:
6b:5d:70:11:c5:e1:10:df:40:7e:19:62:9a:ac:99:
7c:56:5a:3f:f6:62:a7:9d:0e:bb:b7:71:2c:fb:09:
41:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9C:B5:81:B2:46:C1:BE:86:D7:6D:96:A0:70:3E:99:1A:67:56:CC
X509v3 Authority Key Identifier:
keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7c:f6:7b:16:03:f9:53:ab:9c:5e:2e:f3:f1:3e:85:74:48:
be:68:7a:db:4f:29:7e:0a:a0:4a:71:4b:df:c8:41:95:de:1d:
88:f4:05:34:20:74:09:3f:61:d2:e4:54:15:d5:4f:4f:6e:a2:
b4:cb:35:d3:e7:7c:9a:1f:b4:0f:06:3d:bc:79:48:09:51:aa:
6a:45:88:20:b5:a0:6e:1c:21:8b:1f:a9:87:59:4a:cd:68:a2:
67:f0:9d:8d:81:5f:c2:82:59:b7:b9:0c:c5:55:d7:a8:57:69:
a7:4a:ab:b6:69:7f:c0:c2:e9:87:54:3b:c0:61:ed:c9:ec:ef:
4d:7e:7e:1f:73:f7:18:f4:f5:42:55:1e:c8:b9:16:dd:85:78:
f5:b1:7b:8b:83:7e:cc:7a:52:8c:35:f0:21:bc:c6:be:92:46:
ec:41:20:3e:93:36:23:a6:62:d3:23:21:c5:b4:cc:40:59:e2:
c6:09:03:88:c3:5a:4b:e7:df:9c:77:37:ca:05:d7:d5:38:1a:
e0:70:b4:5b:e0:d7:24:af:48:bb:c7:d1:08:a8:f1:99:5e:90:
0b:eb:7c:85:53:ec:d3:6c:18:56:90:2e:aa:5d:ad:b8:6e:23:
e1:11:cf:7d:21:2a:82:bb:b5:6f:19:53:b7:5a:7d:df:cd:c1:
81:37:33:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3wY3UcuP7p3x4dp9UbniHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZjVlNDg2NmJhMDk4MjAxMjRhNmU1MTExMDRmYzQxZmE1
NDE5OTUwHhcNMjUwNjE2MDgwMTAyWhcNMjUwNjE3MDgwMTAyWjAzMTEwLwYDVQQD
EyhjZjljYjU4MWIyNDZjMWJlODZkNzZkOTZhMDcwM2U5OTFhNjc1NmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+QaOHfvuSezZ1FiSRmc4H4kjdVA
drjOk2TsRG/o2YjIw6cC/9xQhJZ7ZCaoeHjykSsqpXzw5FYAhGS6XOh4S6QH+nnC
WMY/I7YfhYzupU9Hv1pWcDi3TODH9iY7dfwZQoJqw2AG7IT7PU6g8L4X5L1LI0i4
GLCAwndBsX+4E1EK25VcRAlxMWUzM2KsVVJ6HSYr4L/35b6TGiuxCFOH7ZHcFxNX
ag6bAbMTHXK+zaBvyOX4NCqnC7xWKhkPjjWgqMPSis41wo4eHCiTPSkXgjm2nFMu
nZu7INOYEGtRbytrXXARxeEQ30B+GWKarJl8Vlo/9mKnnQ67t3Es+wlBTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+ctYGyRsG+htdtlqBwPpkaZ1bMMB8GA1UdIwQY
MBaAFCr15IZroJggEkpuUREE/EH6VBmVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3ZYa2htdWdtQ0FTU201UkVRVDhRZnBVR1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNTI3NjEtMDE5YS00ZGU1LTk1N2Qt
YzMyMGU1MGEzYzc5LzEvS3ZYa2htdWdtQ0FTU201UkVRVDhRZnBVR1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8yNTI3NjEtMDE5YS00ZGU1LTk1N2QtYzMyMGU1MGEzYzc5
LzEvS3ZYa2htdWdtQ0FTU201UkVRVDhRZnBVR1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnz2exYD
+VOrnF4u8/E+hXRIvmh6208pfgqgSnFL38hBld4diPQFNCB0CT9h0uRUFdVPT26i
tMs10+d8mh+0DwY9vHlICVGqakWIILWgbhwhix+ph1lKzWiiZ/CdjYFfwoJZt7kM
xVXXqFdpp0qrtml/wMLph1Q7wGHtyezvTX5+H3P3GPT1QlUeyLkW3YV49bF7i4N+
zHpSjDXwIbzGvpJG7EEgPpM2I6Zi0yMhxbTMQFnixgkDiMNaS+ffnHc3ygXX1Tga
4HC0W+DXJK9Iu8fRCKjxmV6QC+t8hVPs02wYVpAuql2tuG4j4RHPfSEqgru1bxlT
t1p9383BgTcz5g==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:58:51 2025 by rpki-client