
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
File: KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft (raw, json)
Hash identifier: TTGr8rOudaNPn3l36+ASitBec6TnV9D9FS8fT+YyKps=
Subject key identifier: CB:36:7C:1A:1A:EA:CE:17:1F:0E:FD:D4:5D:B8:53:DA:DC:8D:B9:6A
Authority key identifier: 29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
Certificate issuer: /CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Certificate serial: 019770AC7B95F5B94A963B70EEF816113DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 23:00:41 +0000
Manifest this update: Sat 14 Jun 2025 23:00:41 +0000
Manifest next update: Sun 15 Jun 2025 23:00:41 +0000
Files and hashes: 1: KRxKu_3sSaUePuuh1zhKvtRict0.roa (hash: +EX1LptbVJc4+7RpbLy829R4rw7CqCxrczXwQWpCdMc=)
2: KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl (hash: ZHdXnothsyDll4yT/Zjq+11ornuxK6Qv/AvcwaYEHbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:7b:95:f5:b9:4a:96:3b:70:ee:f8:16:11:3d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Validity
Not Before: Jun 14 23:00:41 2025 GMT
Not After : Jun 15 23:00:41 2025 GMT
Subject: CN=cb367c1a1aeace171f0efdd45db853dadc8db96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:ad:cb:54:3a:52:09:6d:cc:73:bf:eb:58:
b1:ff:b1:1a:84:55:c9:76:26:c9:f9:6b:39:ed:a6:
a7:57:5c:44:d6:df:a8:5b:76:46:c4:5e:7a:a3:27:
e7:31:4c:92:a2:f9:79:65:71:cc:47:84:97:3c:a1:
9d:3c:a9:2a:ed:bb:57:85:37:99:aa:a9:bc:26:a0:
b0:e8:b7:34:35:9c:e4:50:82:ef:93:1d:52:48:d8:
e7:6b:42:aa:ce:95:0d:57:8e:51:ba:1a:fb:81:c0:
d6:0d:ed:a5:9e:b6:3d:c4:41:06:7a:c3:0b:f0:ec:
c2:84:05:bb:6f:39:20:5f:b9:f0:80:ea:f8:4b:15:
c7:f0:d0:29:bf:00:d8:be:cf:de:02:c8:80:f3:c9:
cf:2a:d3:2b:2b:64:b7:48:4d:6f:dd:58:69:ec:54:
4f:1f:ae:fb:72:f8:2c:fb:5c:46:0d:4f:5c:cc:48:
d9:14:f3:5a:a3:bf:d7:69:d3:62:f5:3c:6f:7f:9c:
f0:15:31:a0:d0:50:91:01:7b:69:9b:e5:72:ee:28:
06:9e:54:a6:25:f5:4d:02:3c:20:5b:d4:a7:c2:f7:
1d:11:89:e5:6d:e6:be:b8:5c:6a:9d:c8:e1:6e:88:
54:bb:bf:7c:df:f9:93:fe:02:b6:4f:ef:87:49:3c:
39:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:36:7C:1A:1A:EA:CE:17:1F:0E:FD:D4:5D:B8:53:DA:DC:8D:B9:6A
X509v3 Authority Key Identifier:
keyid:29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:36:b0:12:a0:b2:23:c0:b6:91:98:fc:f8:6a:9d:03:81:10:
ea:87:32:53:23:df:e9:c5:29:35:e5:c9:18:b1:af:94:60:2f:
4a:f7:95:f4:4c:13:2a:5e:0f:e8:1b:57:33:4a:21:38:d8:43:
fa:ce:b7:0c:1a:49:c0:1c:8f:8f:26:e2:eb:66:91:77:72:ab:
d5:9b:f3:a6:7d:51:ec:9d:cd:b9:4a:e8:e9:99:b7:88:aa:0b:
fc:ec:fd:18:21:80:c5:6e:f0:a7:84:73:98:32:fe:4d:c5:88:
ba:56:2b:8b:6f:6e:2d:e9:28:85:7b:e9:30:b1:58:7b:dc:e3:
4f:ca:9a:4d:ea:8b:94:49:b4:23:fc:d9:25:2f:97:4f:ce:35:
cd:63:9b:ff:5d:d6:19:5b:52:1c:53:d8:dd:fa:75:a2:b0:c7:
24:95:9e:19:0e:d5:04:16:18:a7:0f:de:8f:3a:cd:3a:6e:49:
69:c0:0d:8e:f7:65:7f:b8:08:32:8a:86:f4:0b:c4:20:a9:1b:
73:18:c3:7c:7c:bc:df:24:d2:cc:8e:10:9b:da:1f:5c:fa:a3:
42:bc:af:2f:bc:9f:7c:d6:ae:f7:62:b8:70:b5:d4:94:b2:11:
6f:94:e9:37:ed:d7:45:59:c3:ee:79:31:3f:65:d3:2a:64:6c:
98:71:14:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwrHuV9blKljtw7vgWET30MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5OTIxNTE4YzVkYTFiODRjNTk3MWE3OWJjNzRlOGFjMDc3
MGZkNDkwHhcNMjUwNjE0MjMwMDQxWhcNMjUwNjE1MjMwMDQxWjAzMTEwLwYDVQQD
EyhjYjM2N2MxYTFhZWFjZTE3MWYwZWZkZDQ1ZGI4NTNkYWRjOGRiOTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov6ty1Q6UgltzHO/61ix/7EahFXJ
dibJ+Ws57aanV1xE1t+oW3ZGxF56oyfnMUySovl5ZXHMR4SXPKGdPKkq7btXhTeZ
qqm8JqCw6Lc0NZzkUILvkx1SSNjna0KqzpUNV45Ruhr7gcDWDe2lnrY9xEEGesML
8OzChAW7bzkgX7nwgOr4SxXH8NApvwDYvs/eAsiA88nPKtMrK2S3SE1v3Vhp7FRP
H677cvgs+1xGDU9czEjZFPNao7/XadNi9Txvf5zwFTGg0FCRAXtpm+Vy7igGnlSm
JfVNAjwgW9SnwvcdEYnlbea+uFxqncjhbohUu7983/mT/gK2T++HSTw5vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMs2fBoa6s4XHw791F24U9rcjblqMB8GA1UdIwQY
MBaAFCmSFRjF2huExZcaebx06KwHcP1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1pJVkdNWGFHNFRGbHhwNXZIVG9yQWR3X1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83MTU4MzUtYmMxZC00Y2I4LTk2MTgt
NGVmMjgzY2U3ZmYxLzEvS1pJVkdNWGFHNFRGbHhwNXZIVG9yQWR3X1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83MTU4MzUtYmMxZC00Y2I4LTk2MTgtNGVmMjgzY2U3ZmYx
LzEvS1pJVkdNWGFHNFRGbHhwNXZIVG9yQWR3X1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijawEqCy
I8C2kZj8+GqdA4EQ6ocyUyPf6cUpNeXJGLGvlGAvSveV9EwTKl4P6BtXM0ohONhD
+s63DBpJwByPjybi62aRd3Kr1Zvzpn1R7J3NuUro6Zm3iKoL/Oz9GCGAxW7wp4Rz
mDL+TcWIulYri29uLekohXvpMLFYe9zjT8qaTeqLlEm0I/zZJS+XT841zWOb/13W
GVtSHFPY3fp1orDHJJWeGQ7VBBYYpw/ejzrNOm5JacANjvdlf7gIMoqG9AvEIKkb
cxjDfHy83yTSzI4Qm9ofXPqjQryvL7yffNau92K4cLXUlLIRb5TpN+3XRVnD7nkx
P2XTKmRsmHEUBQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:16:28 2025 by rpki-client