Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
File: KkRyM2ydAqSIzdd1NNZfsUZewJo.mft (raw, json)
Hash identifier: FICA9Mu0Obwnca2dAorj9nLiqROF9r+5EDc5Bc6HRTw=
Subject key identifier: 0D:D1:40:04:85:BD:E2:75:AD:19:07:C8:3F:AC:20:91:75:A4:D5:92
Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
Certificate issuer: /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Certificate serial: 019776E61A6732B59DB1CEB853922DEBFF48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
Manifest number: 1593
Signing time: Mon 16 Jun 2025 04:01:20 +0000
Manifest this update: Mon 16 Jun 2025 04:01:20 +0000
Manifest next update: Tue 17 Jun 2025 04:01:20 +0000
Files and hashes: 1: KkRyM2ydAqSIzdd1NNZfsUZewJo.crl (hash: LbVs0jmSA+QJYZ438aF5rWjjHXdmNq7BQf+2MAK5Oi8=)
2: _x206HZGagtA6dAvfxStsmKc3n4.roa (hash: b78aj5rvx2Xy9g+pAEN4tSwQJDBl/+csOAL8uop4FGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e6:1a:67:32:b5:9d:b1:ce:b8:53:92:2d:eb:ff:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Validity
Not Before: Jun 16 04:01:20 2025 GMT
Not After : Jun 17 04:01:20 2025 GMT
Subject: CN=0dd1400485bde275ad1907c83fac209175a4d592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cf:e3:4f:b1:23:bc:95:14:c0:ad:7d:12:3a:
f9:eb:8c:c8:75:29:85:87:fc:11:91:cb:a7:80:7a:
56:b6:f4:88:14:9b:a0:36:ca:d8:0e:53:63:9f:86:
ac:3f:bc:cf:41:12:64:22:c0:91:8e:ed:65:57:15:
91:5b:bb:bf:83:41:46:5c:80:b7:6b:83:2d:7f:5b:
f9:11:22:a8:8a:16:53:0a:f4:91:46:59:a7:27:24:
df:65:4a:aa:5c:4b:38:fa:b9:d4:fd:01:c1:df:09:
c1:8d:05:b9:f5:a8:dd:fc:0a:39:25:bc:e5:45:9f:
e3:79:16:8d:57:a8:e5:70:5c:69:1e:78:91:1a:7b:
a3:d4:01:03:dd:18:48:08:75:7c:5e:0a:b1:96:08:
9f:3d:29:af:00:a5:18:e1:5e:15:2d:97:42:1b:f5:
59:ca:43:01:d1:92:50:dc:25:77:e1:bc:72:2c:42:
b2:ff:c3:73:43:c7:0a:32:97:9a:49:71:82:4b:dd:
3d:dd:76:18:a6:f9:1d:7d:26:30:88:c2:6e:5e:f1:
f4:9e:27:ae:9e:16:d7:e2:0a:9f:40:50:50:23:67:
d1:4f:de:70:4b:ed:38:7d:d4:54:7b:b4:05:7d:69:
27:54:97:12:4f:35:ec:c7:45:16:f8:e5:12:bc:b2:
e3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D1:40:04:85:BD:E2:75:AD:19:07:C8:3F:AC:20:91:75:A4:D5:92
X509v3 Authority Key Identifier:
keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1b:50:22:6b:f8:15:ce:1e:96:2e:81:e9:74:ed:5b:5b:4a:
ea:ba:0c:5f:fb:9b:65:1c:9d:e7:bd:9a:43:67:39:eb:59:10:
40:3f:c3:b3:f7:70:f3:bb:8e:81:1a:b0:13:b3:03:06:cd:9c:
39:49:88:b8:d4:19:1d:c7:fe:74:ec:de:81:70:93:83:e8:3e:
27:51:14:ab:a0:5b:db:46:6a:85:3c:6d:58:cb:e3:34:df:8d:
8a:95:5e:91:fa:50:76:22:18:fd:a1:3f:df:b0:a7:6e:75:9b:
af:21:9a:71:fe:8f:43:47:6e:a4:32:fd:5d:2b:6f:50:77:ed:
49:bb:1c:f9:b8:01:76:d4:95:68:eb:e1:f9:41:82:2e:a6:c3:
fb:db:d7:10:5b:9a:a2:ea:e8:5c:68:72:30:d3:77:9d:04:44:
99:c8:fc:9f:e9:aa:3b:3c:0a:f8:2e:87:07:ee:65:47:41:ba:
c5:33:fd:ab:f2:e0:85:18:5a:b1:18:c0:4f:6f:73:85:76:51:
22:e2:f6:3d:b2:3a:9c:e5:ff:3f:43:59:fa:85:98:c8:11:78:
68:85:f2:d2:b6:9d:4b:57:eb:b3:e9:3f:1f:72:b4:4b:29:8c:
31:97:2a:95:e4:b5:96:58:bb:4a:08:84:44:e7:2e:e4:ec:9a:
47:ad:04:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd25hpnMrWdsc64U5It6/9IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNDQ3MjMzNmM5ZDAyYTQ4OGNkZDc3NTM0ZDY1ZmIxNDY1
ZWMwOWEwHhcNMjUwNjE2MDQwMTIwWhcNMjUwNjE3MDQwMTIwWjAzMTEwLwYDVQQD
EygwZGQxNDAwNDg1YmRlMjc1YWQxOTA3YzgzZmFjMjA5MTc1YTRkNTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM/jT7EjvJUUwK19Ejr564zIdSmF
h/wRkcungHpWtvSIFJugNsrYDlNjn4asP7zPQRJkIsCRju1lVxWRW7u/g0FGXIC3
a4Mtf1v5ESKoihZTCvSRRlmnJyTfZUqqXEs4+rnU/QHB3wnBjQW59ajd/Ao5Jbzl
RZ/jeRaNV6jlcFxpHniRGnuj1AED3RhICHV8XgqxlgifPSmvAKUY4V4VLZdCG/VZ
ykMB0ZJQ3CV34bxyLEKy/8NzQ8cKMpeaSXGCS9093XYYpvkdfSYwiMJuXvH0nieu
nhbX4gqfQFBQI2fRT95wS+04fdRUe7QFfWknVJcSTzXsx0UW+OUSvLLjlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3RQASFveJ1rRkHyD+sIJF1pNWSMB8GA1UdIwQY
MBaAFCpEcjNsnQKkiM3XdTTWX7FGXsCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wMWRiODItNDE3Mi00NDA1LWFiNTUt
MDA4NmQwMjM4NWQ2LzEvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wMWRiODItNDE3Mi00NDA1LWFiNTUtMDA4NmQwMjM4NWQ2
LzEvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRtQImv4
Fc4eli6B6XTtW1tK6roMX/ubZRyd572aQ2c561kQQD/Ds/dw87uOgRqwE7MDBs2c
OUmIuNQZHcf+dOzegXCTg+g+J1EUq6Bb20ZqhTxtWMvjNN+NipVekfpQdiIY/aE/
37CnbnWbryGacf6PQ0dupDL9XStvUHftSbsc+bgBdtSVaOvh+UGCLqbD+9vXEFua
ouroXGhyMNN3nQREmcj8n+mqOzwK+C6HB+5lR0G6xTP9q/LghRhasRjAT29zhXZR
IuL2PbI6nOX/P0NZ+oWYyBF4aIXy0radS1frs+k/H3K0SymMMZcqleS1lli7SgiE
ROcu5OyaR60EJw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 06:21:05 2025 by rpki-client