Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
File: k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft (raw, json)
Hash identifier: 7onYwc0JOiG+ISouRKnICiSQjJeA8xJLeED6soEqFCc=
Subject key identifier: 72:7F:7B:7A:51:9A:AF:A2:FB:F5:A9:A3:23:E8:28:82:60:70:D1:09
Authority key identifier: 93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
Certificate issuer: /CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Certificate serial: 0197838E6CA7E9DCC7A9AFB019B9B587E7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
Manifest number: 0D37
Signing time: Wed 18 Jun 2025 15:00:38 +0000
Manifest this update: Wed 18 Jun 2025 15:00:38 +0000
Manifest next update: Thu 19 Jun 2025 15:00:38 +0000
Files and hashes: 1: 2yeHS0iIkuHn83Pc5-EplLHcCYQ.roa (hash: kf8JlgWiWlnh6iS3QRDgrcCIPaCediQ682Z+VnmyMJ0=)
2: k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl (hash: yRo1z82oM9dKVAgFixq22a+R5q6l0fsri3eq3L3fY4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:8e:6c:a7:e9:dc:c7:a9:af:b0:19:b9:b5:87:e7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Validity
Not Before: Jun 18 15:00:38 2025 GMT
Not After : Jun 19 15:00:38 2025 GMT
Subject: CN=727f7b7a519aafa2fbf5a9a323e828826070d109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:26:d1:a0:15:7b:92:70:76:10:dc:13:fd:
11:98:c0:ef:82:de:ec:53:31:1d:ba:f3:06:92:17:
ba:c9:40:22:d1:0a:d1:99:8b:8e:cc:0e:41:30:7b:
f5:c1:b5:7c:3a:50:73:dc:be:fa:83:26:27:8d:1b:
e9:82:37:db:29:2b:51:41:1a:d3:0d:46:b0:5f:87:
d3:8c:9b:9f:41:4d:ba:30:e7:f4:9c:75:c6:68:35:
28:95:4d:41:ab:06:0f:5c:0f:db:b8:f6:96:ee:67:
6b:9c:44:72:ac:ef:85:90:2c:37:75:80:a6:80:96:
23:79:29:a3:9d:ed:67:b4:1f:5b:64:17:ed:cf:88:
8a:b5:97:c4:be:fa:62:ba:40:36:d0:e9:bd:41:10:
92:5e:56:ae:86:11:94:8a:b9:9c:27:78:fa:e8:87:
e7:fa:54:aa:24:bc:05:0f:9a:1c:1f:3f:7a:55:b4:
4a:b7:cb:69:03:78:5b:d7:93:01:8b:6e:d9:b7:43:
cc:a0:3c:90:06:05:f4:2e:5e:ee:66:82:d3:00:5f:
a1:54:25:b5:47:b3:b3:79:ce:5b:ee:0f:87:8a:2a:
da:fc:da:14:68:9a:0e:75:11:bf:0a:df:4f:2d:cc:
5e:8d:c5:55:c9:34:ca:f2:47:f4:9c:5d:da:31:f9:
49:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7F:7B:7A:51:9A:AF:A2:FB:F5:A9:A3:23:E8:28:82:60:70:D1:09
X509v3 Authority Key Identifier:
keyid:93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:01:6f:33:99:95:c3:81:7f:84:7d:e9:db:50:b8:3c:3d:43:
bf:44:34:83:1f:ea:b9:4d:eb:55:8e:55:41:0f:2e:85:ef:50:
62:ba:85:8d:8e:7e:8f:ca:73:b4:a2:9b:5e:4f:bf:9b:7e:2e:
4e:2b:39:be:ec:df:45:ef:3f:be:05:83:a1:89:c6:35:b6:89:
c9:f0:22:9d:59:b8:f4:d9:4a:ca:55:71:f8:77:3e:93:2d:30:
57:a8:64:d7:2f:c2:87:9f:d4:b1:e4:6b:bb:bc:53:06:09:8d:
e3:85:13:31:42:31:be:c3:e5:33:79:88:b2:33:79:e9:3d:76:
49:85:59:42:ab:19:60:29:d6:bb:ee:13:e5:9a:a7:07:c2:24:
f1:31:60:75:e6:0e:d6:59:89:45:23:78:dd:90:63:c9:87:25:
fd:14:46:70:6e:90:ea:33:b3:65:5d:cc:08:8b:72:a9:5d:51:
97:37:78:58:e6:77:b5:15:24:46:21:b2:1d:75:b3:01:3f:4d:
66:ff:8c:4c:be:65:df:bd:9d:f2:5a:5c:97:73:40:e0:ed:dd:
3f:71:66:87:8c:e8:c1:26:a5:dc:3f:ef:aa:b6:2e:ff:62:73:
60:28:17:8d:ad:60:d7:3e:4d:62:d2:7f:b6:78:3a:89:44:6c:
41:ca:da:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeDjmyn6dzHqa+wGbm1h+erMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjA4YTBjZGEwMTMzZjg3NmFiOWFkODNmYTM3YmNlZjYy
ZGYyZGYwHhcNMjUwNjE4MTUwMDM4WhcNMjUwNjE5MTUwMDM4WjAzMTEwLwYDVQQD
Eyg3MjdmN2I3YTUxOWFhZmEyZmJmNWE5YTMyM2U4Mjg4MjYwNzBkMTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG8m0aAVe5JwdhDcE/0RmMDvgt7s
UzEduvMGkhe6yUAi0QrRmYuOzA5BMHv1wbV8OlBz3L76gyYnjRvpgjfbKStRQRrT
DUawX4fTjJufQU26MOf0nHXGaDUolU1BqwYPXA/buPaW7mdrnERyrO+FkCw3dYCm
gJYjeSmjne1ntB9bZBftz4iKtZfEvvpiukA20Om9QRCSXlauhhGUirmcJ3j66Ifn
+lSqJLwFD5ocHz96VbRKt8tpA3hb15MBi27Zt0PMoDyQBgX0Ll7uZoLTAF+hVCW1
R7Ozec5b7g+Hiira/NoUaJoOdRG/Ct9PLcxejcVVyTTK8kf0nF3aMflJfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJ/e3pRmq+i+/WpoyPoKIJgcNEJMB8GA1UdIwQY
MBaAFJNgigzaATP4dqua2D+je872LfLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJDS0ROb0JNX2gycTVyWVA2Tjd6dll0OHQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wOGNiMmEtMDM0Yi00N2I2LWIxMzIt
N2Y4YmE5NmY1ZTQ5LzEvazJDS0ROb0JNX2gycTVyWVA2Tjd6dll0OHQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8wOGNiMmEtMDM0Yi00N2I2LWIxMzItN2Y4YmE5NmY1ZTQ5
LzEvazJDS0ROb0JNX2gycTVyWVA2Tjd6dll0OHQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtgFvM5mV
w4F/hH3p21C4PD1Dv0Q0gx/quU3rVY5VQQ8uhe9QYrqFjY5+j8pztKKbXk+/m34u
Tis5vuzfRe8/vgWDoYnGNbaJyfAinVm49NlKylVx+Hc+ky0wV6hk1y/Ch5/UseRr
u7xTBgmN44UTMUIxvsPlM3mIsjN56T12SYVZQqsZYCnWu+4T5ZqnB8Ik8TFgdeYO
1lmJRSN43ZBjyYcl/RRGcG6Q6jOzZV3MCItyqV1Rlzd4WOZ3tRUkRiGyHXWzAT9N
Zv+MTL5l372d8lpcl3NA4O3dP3Fmh4zowSal3D/vqrYu/2JzYCgXja1g1z5NYtJ/
tng6iURsQcramw==
-----END CERTIFICATE-----
Generated at Wed Jun 18 23:22:54 2025 by rpki-client