Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
File: kt2u3zcPNa-LXut_hubPr6zojU4.mft (raw, json)
Hash identifier: bRL4NpmrjcHlejq66SZtjYvDEDFH7BVVP358MNRZquA=
Subject key identifier: A8:76:11:B0:A6:02:7F:E7:CE:74:E7:30:2F:1D:51:EC:97:D3:3E:5F
Authority key identifier: 92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E
Certificate issuer: /CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e
Certificate serial: 01976DAB4C144AC94F9E2D06191314C33A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
Manifest number: 05E1
Signing time: Sat 14 Jun 2025 09:00:32 +0000
Manifest this update: Sat 14 Jun 2025 09:00:32 +0000
Manifest next update: Sun 15 Jun 2025 09:00:32 +0000
Files and hashes: 1: kt2u3zcPNa-LXut_hubPr6zojU4.crl (hash: KL+hUXdN0GJ4ow+4fhlvIsIwhmP3rNyczo0/PJ70UYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:4c:14:4a:c9:4f:9e:2d:06:19:13:14:c3:3a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e
Validity
Not Before: Jun 14 09:00:32 2025 GMT
Not After : Jun 15 09:00:32 2025 GMT
Subject: CN=a87611b0a6027fe7ce74e7302f1d51ec97d33e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:41:42:9c:54:7d:33:70:45:db:82:3b:58:
73:3c:5d:4b:41:28:b8:e6:c4:fa:39:82:aa:67:16:
1c:fc:85:7d:88:59:a9:65:ee:94:18:e6:de:cc:a9:
4b:a6:84:73:c5:db:58:3e:32:0e:1f:aa:57:26:00:
88:8c:46:c6:b1:10:7d:27:48:e6:d5:d9:e0:2d:ad:
b0:99:1a:09:cf:e8:e1:c6:ca:b0:d9:12:1b:77:ad:
90:5d:5c:46:03:14:31:f4:11:73:41:6d:7b:0c:c6:
3c:4d:e7:e8:a9:40:93:ab:48:c0:ee:e5:7e:50:50:
9c:48:09:ac:0b:6a:9b:9d:82:83:04:e5:c1:4f:d9:
59:3c:86:0f:d6:cc:02:09:fd:5b:ba:31:27:66:9d:
f4:c4:16:f6:5f:9a:ac:31:e3:7b:06:bf:01:46:0b:
99:27:0a:82:a5:f5:8f:82:f5:71:20:9c:4f:c6:82:
88:bb:65:8b:d9:79:12:73:68:fd:3b:51:c8:a3:99:
a4:ac:46:25:ee:45:09:d4:17:d9:b6:0d:c8:21:02:
84:63:dc:29:cc:f3:cd:d1:21:fc:3d:b8:7a:06:a1:
b1:45:74:2f:e8:a3:85:72:0a:bd:52:1e:61:64:ee:
5a:c2:c1:f2:c6:9d:3f:e2:00:48:0a:90:41:58:df:
08:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:76:11:B0:A6:02:7F:E7:CE:74:E7:30:2F:1D:51:EC:97:D3:3E:5F
X509v3 Authority Key Identifier:
keyid:92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:86:9c:35:7c:20:73:63:72:a4:aa:ef:db:c7:b6:55:c6:c4:
c4:98:c6:0c:1d:54:5c:96:af:24:97:2b:d9:5c:e7:1f:56:a8:
b3:02:15:e9:3b:90:3e:d9:64:85:52:f6:c0:ac:a2:1d:3b:71:
cc:d9:00:bb:4e:99:3a:2b:65:9b:ef:84:cc:90:45:f5:2d:cc:
d6:67:35:1d:72:60:50:8d:5d:c9:f4:e7:ee:4e:fc:cf:54:f7:
4a:42:75:8a:5c:f2:14:ab:46:55:48:ce:df:2e:c0:db:fc:c8:
4e:42:e2:81:3a:e1:ae:dc:ec:ae:a0:07:d8:58:0b:28:9d:ed:
ab:57:ca:4c:fa:3b:d0:5a:7e:25:e9:42:ac:94:0a:20:a3:2f:
cc:5d:6e:cb:4b:40:f5:d6:62:3d:da:08:63:f1:ec:3a:26:5b:
82:74:9a:f9:c2:98:50:6a:88:69:18:91:57:49:08:92:fb:d5:
63:f2:c6:a5:f8:95:26:5e:12:0d:e5:1f:cd:c9:a0:06:30:95:
b4:e4:4b:0f:fa:2d:b9:13:b6:fc:3f:c4:b6:31:0d:34:20:ed:
2d:85:eb:30:a5:09:26:34:67:62:dc:dd:25:f9:ab:a8:6c:47:
7b:a4:4c:68:13:95:de:35:f2:e3:26:30:40:80:bb:7f:b7:b2:
70:23:51:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtq0wUSslPni0GGRMUwzqJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZGRhZWRmMzcwZjM1YWY4YjVlZWI3Zjg2ZTZjZmFmYWNl
ODhkNGUwHhcNMjUwNjE0MDkwMDMyWhcNMjUwNjE1MDkwMDMyWjAzMTEwLwYDVQQD
EyhhODc2MTFiMGE2MDI3ZmU3Y2U3NGU3MzAyZjFkNTFlYzk3ZDMzZTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj5BQpxUfTNwRduCO1hzPF1LQSi4
5sT6OYKqZxYc/IV9iFmpZe6UGObezKlLpoRzxdtYPjIOH6pXJgCIjEbGsRB9J0jm
1dngLa2wmRoJz+jhxsqw2RIbd62QXVxGAxQx9BFzQW17DMY8TefoqUCTq0jA7uV+
UFCcSAmsC2qbnYKDBOXBT9lZPIYP1swCCf1bujEnZp30xBb2X5qsMeN7Br8BRguZ
JwqCpfWPgvVxIJxPxoKIu2WL2XkSc2j9O1HIo5mkrEYl7kUJ1BfZtg3IIQKEY9wp
zPPN0SH8Pbh6BqGxRXQv6KOFcgq9Uh5hZO5awsHyxp0/4gBICpBBWN8I7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKh2EbCmAn/nznTnMC8dUeyX0z5fMB8GA1UdIwQY
MBaAFJLdrt83DzWvi17rf4bmz6+s6I1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3QydTN6Y1BOYS1MWHV0X2h1YlByNnpvalU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84NGMzZDUtOGFiMi00NGFjLTk0MmIt
YzRiOWM1Mzk0MDdiLzEva3QydTN6Y1BOYS1MWHV0X2h1YlByNnpvalU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84NGMzZDUtOGFiMi00NGFjLTk0MmItYzRiOWM1Mzk0MDdi
LzEva3QydTN6Y1BOYS1MWHV0X2h1YlByNnpvalU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIacNXwg
c2NypKrv28e2VcbExJjGDB1UXJavJJcr2VznH1aoswIV6TuQPtlkhVL2wKyiHTtx
zNkAu06ZOitlm++EzJBF9S3M1mc1HXJgUI1dyfTn7k78z1T3SkJ1ilzyFKtGVUjO
3y7A2/zITkLigTrhrtzsrqAH2FgLKJ3tq1fKTPo70Fp+JelCrJQKIKMvzF1uy0tA
9dZiPdoIY/HsOiZbgnSa+cKYUGqIaRiRV0kIkvvVY/LGpfiVJl4SDeUfzcmgBjCV
tORLD/otuRO2/D/EtjENNCDtLYXrMKUJJjRnYtzdJfmrqGxHe6RMaBOV3jXy4yYw
QIC7f7eycCNRew==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:09:11 2025 by rpki-client