Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
File: KygwYXxDyMvImvPLKnTqXdAP5uo.mft (raw, json)
Hash identifier: hYOR4OHZEOyCPMYOdJoxGuKyR7DUcOvjXQqbT6PkGBc=
Subject key identifier: 13:F9:B6:01:B2:F7:73:B2:D7:97:AD:16:A0:26:80:BE:8B:0F:95:27
Authority key identifier: 2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
Certificate issuer: /CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Certificate serial: 01976BBCB28530B55E7609CF5C8BF6F7920B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
Manifest number: 0ED0
Signing time: Sat 14 Jun 2025 00:00:17 +0000
Manifest this update: Sat 14 Jun 2025 00:00:17 +0000
Manifest next update: Sun 15 Jun 2025 00:00:17 +0000
Files and hashes: 1: KygwYXxDyMvImvPLKnTqXdAP5uo.crl (hash: hvKyo0Ux60cmfNWXnD9TQvz5WNvbkKuTOhO+BQX3k3c=)
2: VH29zUdUoDMFkb4I3pkZNKsYstE.roa (hash: 1yNsQGwt5wFqKyahcKf4KUa3JWkLXkh+qcfoDSK2Rlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:b2:85:30:b5:5e:76:09:cf:5c:8b:f6:f7:92:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Validity
Not Before: Jun 14 00:00:17 2025 GMT
Not After : Jun 15 00:00:17 2025 GMT
Subject: CN=13f9b601b2f773b2d797ad16a02680be8b0f9527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:b9:2b:1b:d5:2d:af:83:21:de:85:11:17:
25:34:59:a6:f0:a9:aa:be:84:e6:53:2a:6d:3f:f1:
4d:a0:7e:56:5e:16:7e:5d:a0:78:7d:23:4d:f1:55:
b3:ca:59:4b:5e:15:0b:cc:f6:7f:2a:e4:e0:d2:26:
b1:a0:94:99:e1:d4:29:f1:26:d2:a4:d3:ba:bc:9a:
42:70:62:e2:8e:10:b3:d2:39:a9:6a:a5:a3:5c:5f:
55:41:b1:0f:27:f3:84:3d:95:2e:76:6b:e6:11:e8:
76:b7:d1:f9:58:b7:c3:08:a5:ef:c9:5f:40:92:b9:
99:a9:58:00:d1:a2:6a:78:be:3f:82:3a:1e:0f:0b:
b9:eb:ff:5e:51:43:68:14:ca:9a:5e:bd:b0:11:54:
dd:3a:e4:28:33:8f:37:8e:80:5e:cc:11:01:6f:83:
38:b8:c7:56:48:f9:e7:9f:db:72:a0:7b:f1:59:6d:
a2:95:fa:ed:af:5a:0b:19:0b:02:4a:3b:bc:32:6d:
ce:97:71:6e:b0:73:15:c2:12:12:48:3b:f9:04:5e:
1b:0e:01:b2:a6:4b:12:2c:30:2e:77:f0:8c:95:ba:
fb:a0:68:1f:77:43:5c:e0:09:e9:0d:62:00:2b:7a:
cd:2d:9d:1d:02:57:d8:5c:d9:3b:52:66:df:48:13:
c0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F9:B6:01:B2:F7:73:B2:D7:97:AD:16:A0:26:80:BE:8B:0F:95:27
X509v3 Authority Key Identifier:
keyid:2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:61:a0:46:6d:19:3f:51:0c:df:89:a0:b9:d2:ce:d5:59:cc:
6c:62:7d:3f:16:90:36:8f:0b:f0:5b:33:ae:c2:fe:fe:74:4d:
7c:42:b6:38:38:0b:d6:c0:b4:f9:d5:6d:a5:4c:92:5a:5c:1d:
35:53:4c:2d:3f:3c:a8:29:1b:a4:cf:1b:1a:28:28:76:45:d2:
ef:9b:32:b3:28:c2:b1:81:79:3f:77:b4:00:f8:45:bc:60:52:
0a:59:fb:bd:cb:6d:f2:29:33:d7:2e:bf:9e:19:2e:14:8f:ce:
91:fe:8e:42:57:ba:e7:66:cb:50:de:10:13:80:b5:39:40:34:
e1:2c:ea:28:51:58:1d:95:cb:90:65:8d:76:9c:63:a8:1f:c3:
15:67:44:97:d2:73:f1:7f:83:cd:a4:b9:c4:7b:54:88:5f:44:
8d:a8:c8:50:a3:16:79:4d:63:23:f7:19:9a:64:b2:b2:24:ea:
0b:8a:5c:21:e3:d0:88:53:df:40:4f:9a:5e:e4:67:6d:20:43:
3d:5f:cc:a7:00:25:79:76:a9:17:1a:20:ef:04:e8:d5:9d:88:
43:6f:54:56:18:2f:04:3f:1f:34:ed:62:2b:44:b9:f3:51:5c:
81:78:69:8c:50:d1:c0:00:a1:3b:1e:79:9c:f7:bb:4f:7a:fb:
4c:cc:50:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvLKFMLVedgnPXIv295ILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMjgzMDYxN2M0M2M4Y2JjODlhZjNjYjJhNzRlYTVkZDAw
ZmU2ZWEwHhcNMjUwNjE0MDAwMDE3WhcNMjUwNjE1MDAwMDE3WjAzMTEwLwYDVQQD
EygxM2Y5YjYwMWIyZjc3M2IyZDc5N2FkMTZhMDI2ODBiZThiMGY5NTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBW5KxvVLa+DId6FERclNFmm8Kmq
voTmUyptP/FNoH5WXhZ+XaB4fSNN8VWzyllLXhULzPZ/KuTg0iaxoJSZ4dQp8SbS
pNO6vJpCcGLijhCz0jmpaqWjXF9VQbEPJ/OEPZUudmvmEeh2t9H5WLfDCKXvyV9A
krmZqVgA0aJqeL4/gjoeDwu56/9eUUNoFMqaXr2wEVTdOuQoM483joBezBEBb4M4
uMdWSPnnn9tyoHvxWW2ilfrtr1oLGQsCSju8Mm3Ol3FusHMVwhISSDv5BF4bDgGy
pksSLDAud/CMlbr7oGgfd0Nc4AnpDWIAK3rNLZ0dAlfYXNk7UmbfSBPALQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBP5tgGy93Oy15etFqAmgL6LD5UnMB8GA1UdIwQY
MBaAFCsoMGF8Q8jLyJrzyyp06l3QD+bqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3lnd1lYeER5TXZJbXZQTEtuVHFYZEFQNXVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jOWVlOGMtNTc0ZC00Y2Y2LWEwMDgt
MTFiNTJjMjRhMTEyLzEvS3lnd1lYeER5TXZJbXZQTEtuVHFYZEFQNXVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9jOWVlOGMtNTc0ZC00Y2Y2LWEwMDgtMTFiNTJjMjRhMTEy
LzEvS3lnd1lYeER5TXZJbXZQTEtuVHFYZEFQNXVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2GgRm0Z
P1EM34mgudLO1VnMbGJ9PxaQNo8L8FszrsL+/nRNfEK2ODgL1sC0+dVtpUySWlwd
NVNMLT88qCkbpM8bGigodkXS75sysyjCsYF5P3e0APhFvGBSCln7vctt8ikz1y6/
nhkuFI/Okf6OQle652bLUN4QE4C1OUA04SzqKFFYHZXLkGWNdpxjqB/DFWdEl9Jz
8X+DzaS5xHtUiF9EjajIUKMWeU1jI/cZmmSysiTqC4pcIePQiFPfQE+aXuRnbSBD
PV/MpwAleXapFxog7wTo1Z2IQ29UVhgvBD8fNO1iK0S581FcgXhpjFDRwAChOx55
nPe7T3r7TMxQrw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:06:46 2025 by rpki-client