Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
File: kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft (raw, json)
Hash identifier: y5WbTOwdKvrX2/ppHjsuBFTa7CDq0XRwpaDwPhMg1m4=
Subject key identifier: BC:6F:B6:94:7A:20:44:7E:63:90:F4:D7:6A:07:7A:E7:04:86:40:5F
Authority key identifier: 91:78:30:D9:41:EE:09:0A:8E:32:34:8F:97:B8:30:8F:D1:CE:09:FD
Certificate issuer: /CN=917830d941ee090a8e32348f97b8308fd1ce09fd
Certificate serial: 01977187E52749904DF1401864F543514ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
Manifest number: 0C0D
Signing time: Sun 15 Jun 2025 03:00:20 +0000
Manifest this update: Sun 15 Jun 2025 03:00:20 +0000
Manifest next update: Mon 16 Jun 2025 03:00:20 +0000
Files and hashes: 1: kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl (hash: 3tFlla6E63I0LcyZyg5nCWsQ1cav5zSWxNye05DRsxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:87:e5:27:49:90:4d:f1:40:18:64:f5:43:51:4a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917830d941ee090a8e32348f97b8308fd1ce09fd
Validity
Not Before: Jun 15 03:00:20 2025 GMT
Not After : Jun 16 03:00:20 2025 GMT
Subject: CN=bc6fb6947a20447e6390f4d76a077ae70486405f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:95:bc:34:7b:e6:34:13:5b:d3:c7:47:71:b7:
2d:25:c8:d9:9f:4d:08:73:33:6b:da:b9:44:19:f9:
86:0b:24:6f:8b:9c:8e:5c:af:13:1b:6a:64:aa:46:
9d:29:92:6c:1e:45:65:c8:b6:72:e5:0c:83:17:8b:
73:c6:73:e1:00:cc:ab:bb:98:a5:9b:c4:03:05:3c:
19:d1:57:6a:a6:4b:67:d8:3a:c5:60:2d:00:fe:b0:
3f:b2:47:ba:f7:bf:4d:6f:55:58:e9:15:2d:96:53:
a3:9a:6b:32:8c:75:d7:65:01:1a:c3:35:ec:4c:db:
9f:54:18:fa:72:66:ed:ec:19:94:94:1b:a5:9e:bb:
8c:a8:96:f8:04:7c:b9:27:78:fb:84:5b:ce:f1:99:
2c:b3:41:2b:b8:48:1b:45:a4:98:51:01:67:66:bc:
18:68:8b:1c:80:48:df:e6:4a:66:b5:fc:43:c7:76:
70:1c:3e:6c:87:2d:31:01:fa:bb:ca:ff:7d:68:92:
08:82:ff:b5:77:e9:cc:ad:e8:f7:97:75:be:32:7e:
e4:39:21:6c:ec:ee:f1:24:c3:4e:2c:6a:e8:70:42:
c9:6b:88:f3:db:1e:49:89:35:08:55:c4:6c:3c:2d:
94:28:bf:3e:bb:d8:a1:de:bb:ee:90:44:cd:d4:b0:
f5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6F:B6:94:7A:20:44:7E:63:90:F4:D7:6A:07:7A:E7:04:86:40:5F
X509v3 Authority Key Identifier:
keyid:91:78:30:D9:41:EE:09:0A:8E:32:34:8F:97:B8:30:8F:D1:CE:09:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:52:1b:b1:5a:7c:78:88:f4:73:d3:5a:8f:4e:d8:4f:0d:a0:
5f:2c:23:08:6a:29:54:f3:44:6a:f2:1f:4d:31:ac:92:94:d4:
c0:e7:38:59:91:39:da:05:e1:82:ef:d7:ea:b9:28:28:ae:63:
af:1a:da:b3:31:5d:a7:25:29:b4:06:9c:f4:aa:1b:f1:db:5f:
0d:0e:4f:28:28:a0:04:8d:4d:01:5d:c1:43:eb:57:a3:16:43:
ac:a4:ea:4c:ce:81:6f:2b:2d:11:ed:cc:f4:db:5b:b2:7a:da:
b2:75:0b:bb:48:56:68:cc:83:02:bb:5b:a7:e4:2a:b9:8e:c3:
0f:08:8b:ea:4e:ca:09:d3:15:ae:15:50:7d:17:50:06:08:09:
9c:28:7e:72:6b:76:ca:c5:84:9a:8f:7d:51:20:36:9b:07:14:
d2:9a:c5:31:c8:92:a8:10:d6:fe:a7:82:fd:a0:60:72:85:af:
bd:c4:cf:87:38:c1:3a:da:63:9f:4a:f6:41:9a:8d:df:f8:67:
1d:45:b3:08:c9:9f:16:ec:58:f1:77:3c:8e:ed:fc:e7:41:41:
19:9c:60:5d:ee:b6:97:ed:b6:22:54:65:9d:71:b5:8a:54:93:
d6:18:8f:c9:a8:c6:d9:a4:2a:d2:62:9b:38:d2:21:f3:0b:19:
d2:4d:53:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxh+UnSZBN8UAYZPVDUUrKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNzgzMGQ5NDFlZTA5MGE4ZTMyMzQ4Zjk3YjgzMDhmZDFj
ZTA5ZmQwHhcNMjUwNjE1MDMwMDIwWhcNMjUwNjE2MDMwMDIwWjAzMTEwLwYDVQQD
EyhiYzZmYjY5NDdhMjA0NDdlNjM5MGY0ZDc2YTA3N2FlNzA0ODY0MDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpW8NHvmNBNb08dHcbctJcjZn00I
czNr2rlEGfmGCyRvi5yOXK8TG2pkqkadKZJsHkVlyLZy5QyDF4tzxnPhAMyru5il
m8QDBTwZ0Vdqpktn2DrFYC0A/rA/ske6979Nb1VY6RUtllOjmmsyjHXXZQEawzXs
TNufVBj6cmbt7BmUlBulnruMqJb4BHy5J3j7hFvO8Zkss0EruEgbRaSYUQFnZrwY
aIscgEjf5kpmtfxDx3ZwHD5shy0xAfq7yv99aJIIgv+1d+nMrej3l3W+Mn7kOSFs
7O7xJMNOLGrocELJa4jz2x5JiTUIVcRsPC2UKL8+u9ih3rvukETN1LD1DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxvtpR6IER+Y5D012oHeucEhkBfMB8GA1UdIwQY
MBaAFJF4MNlB7gkKjjI0j5e4MI/Rzgn9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1hndzJVSHVDUXFPTWpTUGw3Z3dqOUhPQ2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9mZjJmZDAtNjI0ZC00N2Y4LWJlOWYt
ZDFmMTgwM2IxODEyLzEva1hndzJVSHVDUXFPTWpTUGw3Z3dqOUhPQ2YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9mZjJmZDAtNjI0ZC00N2Y4LWJlOWYtZDFmMTgwM2IxODEy
LzEva1hndzJVSHVDUXFPTWpTUGw3Z3dqOUhPQ2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAclIbsVp8
eIj0c9Naj07YTw2gXywjCGopVPNEavIfTTGskpTUwOc4WZE52gXhgu/X6rkoKK5j
rxraszFdpyUptAac9Kob8dtfDQ5PKCigBI1NAV3BQ+tXoxZDrKTqTM6BbystEe3M
9NtbsnrasnULu0hWaMyDArtbp+QquY7DDwiL6k7KCdMVrhVQfRdQBggJnCh+cmt2
ysWEmo99USA2mwcU0prFMciSqBDW/qeC/aBgcoWvvcTPhzjBOtpjn0r2QZqN3/hn
HUWzCMmfFuxY8Xc8ju3850FBGZxgXe62l+22IlRlnXG1ilST1hiPyajG2aQq0mKb
ONIh8wsZ0k1TEw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:00:07 2025 by rpki-client