Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
File: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft (raw, json)
Hash identifier: iTsveBq2biyDOyytSp6Cwyp+vTyijH23vs6NRmiuwXo=
Subject key identifier: EA:0C:E8:A9:8D:40:44:E3:84:36:52:D5:CB:8A:D9:91:2E:A7:C7:88
Authority key identifier: 29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
Certificate issuer: /CN=29851f7ae610b1d0061500b343a4868f3256066e
Certificate serial: 019777540A822FF85B903BCFD870DFD114FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
Manifest number: 062F
Signing time: Mon 16 Jun 2025 06:01:25 +0000
Manifest this update: Mon 16 Jun 2025 06:01:25 +0000
Manifest next update: Tue 17 Jun 2025 06:01:25 +0000
Files and hashes: 1: JCxOuTIjLujlao5I9hrb5gQegGo.roa (hash: SDv0FBjSKSZUTMpJ38YSkos63s4YQ/vsV3WiI+cz/dg=)
2: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl (hash: eAWyU2C9VbRdiJG+Rjpn0Zlgo5Fhn+a6p6FlCfsgyd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:54:0a:82:2f:f8:5b:90:3b:cf:d8:70:df:d1:14:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29851f7ae610b1d0061500b343a4868f3256066e
Validity
Not Before: Jun 16 06:01:25 2025 GMT
Not After : Jun 17 06:01:25 2025 GMT
Subject: CN=ea0ce8a98d4044e3843652d5cb8ad9912ea7c788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e9:28:86:94:8a:0a:c4:42:9a:1b:1b:b4:a2:
74:58:ce:d4:0f:8a:3e:48:86:b4:28:3f:c0:cb:69:
9b:2b:cf:5f:6e:80:5f:f6:9e:59:a9:e9:e8:f8:93:
a2:a3:9b:f9:70:c9:67:3b:dc:4e:c3:34:3f:e7:c4:
81:14:bb:fe:1f:2e:61:27:89:5f:37:d7:ef:f8:c6:
9b:bb:86:40:00:83:ec:28:bd:d5:58:70:97:e8:24:
13:84:b6:1f:03:44:c2:e6:5a:c6:50:64:78:e9:78:
14:c0:25:30:92:74:a2:8c:99:be:9e:85:e8:2b:29:
67:18:b4:55:8c:ec:08:1c:eb:3a:0a:43:cc:08:7b:
2e:d2:12:1a:b5:a0:26:54:3a:61:9e:89:1e:1c:ba:
03:fd:95:b9:35:d5:43:16:31:d0:41:96:b8:28:87:
09:e4:66:33:b9:78:c7:21:07:38:8f:a5:88:7c:d6:
c3:7f:27:9e:fc:a6:46:ad:60:c6:6e:e8:60:c3:72:
71:10:c0:69:c0:ae:52:dc:c5:09:7d:54:88:24:24:
e5:f8:68:4c:77:7d:00:4b:83:37:36:15:e5:ad:19:
51:a0:f1:67:12:3e:c5:bc:f6:83:7e:d1:da:56:df:
cc:06:6e:4f:eb:ed:5c:6d:5d:20:b4:89:4d:8d:50:
cb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0C:E8:A9:8D:40:44:E3:84:36:52:D5:CB:8A:D9:91:2E:A7:C7:88
X509v3 Authority Key Identifier:
keyid:29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:79:34:e9:b9:e9:68:4c:ce:1a:7e:57:62:1a:a5:cc:c1:d4:
00:7a:6f:41:3f:a5:8e:bb:03:41:70:d7:2e:db:8a:65:0b:67:
3a:30:88:89:8f:9b:92:28:9a:82:96:17:db:5f:9e:83:d7:6d:
92:33:1c:81:38:c1:8c:21:d2:95:c2:b6:58:0c:a1:2a:68:65:
a5:a8:23:d5:3f:ac:34:58:cc:48:77:7f:c8:e8:6f:63:ba:46:
0f:f8:90:a8:ed:51:a6:17:04:96:71:90:05:2a:30:de:95:1b:
63:f6:ef:0f:7c:ae:74:52:af:69:2c:5a:64:76:da:e7:31:dd:
93:bb:66:26:db:5a:98:93:0e:2e:16:7e:81:fd:c9:a4:ca:24:
69:48:f7:a0:0f:c2:3a:50:79:ac:56:99:c0:9a:d2:53:71:85:
65:33:1c:2e:30:b4:86:cd:ae:0f:a1:a2:b6:98:aa:9b:b3:3b:
9f:29:e2:21:d6:f6:79:68:2e:7d:4f:29:58:c7:73:46:da:62:
09:7d:fe:32:30:2d:fe:ed:2b:d8:fb:de:3d:10:cb:30:6c:46:
8f:d8:9a:4d:59:94:ce:02:1e:f6:92:cb:61:86:e8:01:35:08:
2d:18:66:2c:20:77:64:35:d5:c1:66:27:71:a4:62:be:b9:51:
29:13:8e:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3VAqCL/hbkDvP2HDf0RT8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODUxZjdhZTYxMGIxZDAwNjE1MDBiMzQzYTQ4NjhmMzI1
NjA2NmUwHhcNMjUwNjE2MDYwMTI1WhcNMjUwNjE3MDYwMTI1WjAzMTEwLwYDVQQD
EyhlYTBjZThhOThkNDA0NGUzODQzNjUyZDVjYjhhZDk5MTJlYTdjNzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OkohpSKCsRCmhsbtKJ0WM7UD4o+
SIa0KD/Ay2mbK89fboBf9p5Zqeno+JOio5v5cMlnO9xOwzQ/58SBFLv+Hy5hJ4lf
N9fv+Mabu4ZAAIPsKL3VWHCX6CQThLYfA0TC5lrGUGR46XgUwCUwknSijJm+noXo
KylnGLRVjOwIHOs6CkPMCHsu0hIataAmVDphnokeHLoD/ZW5NdVDFjHQQZa4KIcJ
5GYzuXjHIQc4j6WIfNbDfyee/KZGrWDGbuhgw3JxEMBpwK5S3MUJfVSIJCTl+GhM
d30AS4M3NhXlrRlRoPFnEj7FvPaDftHaVt/MBm5P6+1cbV0gtIlNjVDL5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoM6KmNQETjhDZS1cuK2ZEup8eIMB8GA1UdIwQY
MBaAFCmFH3rmELHQBhUAs0Okho8yVgZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lVZmV1WVFzZEFHRlFDelE2U0dqekpXQm00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84MjQ2NTItNTZlNC00YmU1LTliZTMt
ZDA0ZGVkN2RlZDAwLzEvS1lVZmV1WVFzZEFHRlFDelE2U0dqekpXQm00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84MjQ2NTItNTZlNC00YmU1LTliZTMtZDA0ZGVkN2RlZDAw
LzEvS1lVZmV1WVFzZEFHRlFDelE2U0dqekpXQm00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3k06bnp
aEzOGn5XYhqlzMHUAHpvQT+ljrsDQXDXLtuKZQtnOjCIiY+bkiiagpYX21+eg9dt
kjMcgTjBjCHSlcK2WAyhKmhlpagj1T+sNFjMSHd/yOhvY7pGD/iQqO1RphcElnGQ
BSow3pUbY/bvD3yudFKvaSxaZHba5zHdk7tmJttamJMOLhZ+gf3JpMokaUj3oA/C
OlB5rFaZwJrSU3GFZTMcLjC0hs2uD6Gitpiqm7M7nyniIdb2eWgufU8pWMdzRtpi
CX3+MjAt/u0r2PvePRDLMGxGj9iaTVmUzgIe9pLLYYboATUILRhmLCB3ZDXVwWYn
caRivrlRKROOdg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:14:42 2025 by rpki-client