
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
File: PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft (raw, json)
Hash identifier: 0VOOaA47qjAcrxx8r5bMPgn1aPUPopmnim24hpWrFI0=
Subject key identifier: 6B:06:20:CE:CB:06:89:63:88:AD:58:68:5E:52:79:5A:DC:DC:FB:F2
Authority key identifier: 3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30
Certificate issuer: /CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830
Certificate serial: 01988FFE99D5BEB63AE0ED8D50F7B96B0FCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
Manifest number: 133F
Signing time: Sat 09 Aug 2025 18:01:23 +0000
Manifest this update: Sat 09 Aug 2025 18:01:23 +0000
Manifest next update: Sun 10 Aug 2025 18:01:23 +0000
Files and hashes: 1: PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl (hash: xOeG+V0LC2lqgV3DlYZed17T/4VjBc4ANgvN1RQR9nU=)
2: WUGlCtJw6cpU2FG2Edk0WX6jTy8.roa (hash: JBmFXCHcBO6dIcBHrxlCuuoBtse/nvSs/yMZuy61tLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:99:d5:be:b6:3a:e0:ed:8d:50:f7:b9:6b:0f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830
Validity
Not Before: Aug 9 18:01:23 2025 GMT
Not After : Aug 10 18:01:23 2025 GMT
Subject: CN=6b0620cecb06896388ad58685e52795adcdcfbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:02:ec:cc:d2:31:18:ef:c3:a8:21:90:df:
85:f1:27:b4:a8:d9:04:a3:bc:9e:5f:71:ee:db:7f:
2d:63:ce:a0:39:7d:44:9d:24:75:f7:a7:91:60:31:
45:c6:e4:01:7c:5b:d5:1f:ac:61:87:24:be:7b:f6:
92:e0:82:73:a3:cc:32:22:df:a4:8d:a1:69:5b:2c:
b8:cc:a3:ca:5f:c5:aa:c8:c0:83:9a:dc:96:2d:26:
76:43:06:47:a2:0b:b9:54:1b:d2:54:34:0b:fe:da:
37:c4:aa:00:a8:9f:e8:04:56:7f:d2:40:e4:05:f3:
f5:89:9f:d0:66:77:e2:40:86:5e:3e:36:96:ce:e9:
4f:d9:1c:f3:38:bf:5c:51:29:1e:db:43:9d:7a:2d:
32:0e:91:5c:2c:c1:3a:15:fd:cc:2f:fb:04:6a:e5:
d4:db:43:7a:0b:55:fb:af:86:b8:69:c1:93:8a:7a:
4d:87:ab:54:28:b1:67:41:24:37:ae:0b:5c:2f:bb:
7b:20:ab:a7:bf:0f:08:e7:95:e0:4e:60:05:61:20:
3c:b5:cf:81:b3:72:97:ae:8d:5e:d8:0e:28:9e:7a:
16:eb:73:b1:c6:e9:63:b6:64:b5:c0:a7:9c:8f:e2:
96:bd:5b:ff:b3:31:53:ac:96:e8:d5:d3:97:52:06:
da:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:06:20:CE:CB:06:89:63:88:AD:58:68:5E:52:79:5A:DC:DC:FB:F2
X509v3 Authority Key Identifier:
keyid:3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f9:52:7f:b3:a1:40:b5:1e:ce:ec:3b:27:14:4b:59:6f:ff:
f6:12:bb:47:65:55:f8:a1:56:cf:a2:e0:29:48:42:83:90:8d:
d4:c0:4a:fb:12:99:8c:f7:86:c4:c3:aa:86:1c:35:36:60:8e:
a9:c5:da:3b:ff:fa:83:41:b6:fa:3a:23:c7:a1:06:7f:0b:ea:
d2:b5:2c:83:db:df:16:ef:31:0e:43:5e:d5:46:5c:85:73:71:
09:ad:41:cd:56:f6:8a:da:88:78:c6:66:e3:ea:8d:fc:d0:ad:
92:e4:d0:57:43:26:24:70:34:09:80:f0:71:03:82:3b:9d:dd:
f2:23:cd:02:06:f8:40:e4:9b:53:93:61:3c:4b:f9:a8:28:d6:
60:ec:87:50:e0:db:73:17:e9:81:bc:5e:d4:d7:0d:5f:76:c8:
d4:7d:4e:4f:1e:2c:a1:1d:8d:2f:3f:ba:fa:fa:58:10:e3:12:
ae:29:bb:f2:c3:2a:82:37:81:c6:df:3f:06:ee:f2:9c:31:7e:
02:9f:df:a6:52:09:67:d4:69:6e:ce:6e:2e:4f:bb:da:26:fc:
ce:9a:55:43:cd:a4:d6:e4:26:f3:68:64:f9:7a:7e:0b:9e:55:
35:d5:d1:a6:aa:ea:99:4f:75:1a:4e:e7:b5:83:e9:d0:19:e2:
bc:0a:04:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiP/pnVvrY64O2NUPe5aw/PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNGM4MTMwY2NhMzBhM2ZmOTJjOWI5OWRiNTQzOGRjN2Yz
ZTI4MzAwHhcNMjUwODA5MTgwMTIzWhcNMjUwODEwMTgwMTIzWjAzMTEwLwYDVQQD
Eyg2YjA2MjBjZWNiMDY4OTYzODhhZDU4Njg1ZTUyNzk1YWRjZGNmYmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l4C7MzSMRjvw6ghkN+F8Se0qNkE
o7yeX3Hu238tY86gOX1EnSR196eRYDFFxuQBfFvVH6xhhyS+e/aS4IJzo8wyIt+k
jaFpWyy4zKPKX8WqyMCDmtyWLSZ2QwZHogu5VBvSVDQL/to3xKoAqJ/oBFZ/0kDk
BfP1iZ/QZnfiQIZePjaWzulP2RzzOL9cUSke20Odei0yDpFcLME6Ff3ML/sEauXU
20N6C1X7r4a4acGTinpNh6tUKLFnQSQ3rgtcL7t7IKunvw8I55XgTmAFYSA8tc+B
s3KXro1e2A4onnoW63OxxuljtmS1wKecj+KWvVv/szFTrJbo1dOXUgbaTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsGIM7LBoljiK1YaF5SeVrc3PvyMB8GA1UdIwQY
MBaAFD5MgTDMowo/+SybmdtUONx/PigwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGt5Qk1NeWpDal81TEp1WjIxUTQzSDgtS0RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS82YjA1MGYtYzI4Mi00YzUzLWIxNTEt
ODNhZGIyMGFmMDBmLzEvUGt5Qk1NeWpDal81TEp1WjIxUTQzSDgtS0RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS82YjA1MGYtYzI4Mi00YzUzLWIxNTEtODNhZGIyMGFmMDBm
LzEvUGt5Qk1NeWpDal81TEp1WjIxUTQzSDgtS0RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACflSf7Oh
QLUezuw7JxRLWW//9hK7R2VV+KFWz6LgKUhCg5CN1MBK+xKZjPeGxMOqhhw1NmCO
qcXaO//6g0G2+jojx6EGfwvq0rUsg9vfFu8xDkNe1UZchXNxCa1BzVb2itqIeMZm
4+qN/NCtkuTQV0MmJHA0CYDwcQOCO53d8iPNAgb4QOSbU5NhPEv5qCjWYOyHUODb
cxfpgbxe1NcNX3bI1H1OTx4soR2NLz+6+vpYEOMSrim78sMqgjeBxt8/Bu7ynDF+
Ap/fplIJZ9Rpbs5uLk+72ib8zppVQ82k1uQm82hk+Xp+C55VNdXRpqrqmU91Gk7n
tYPp0BnivAoE8w==
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:09:35 2025 by rpki-client