Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
File: Kt_vhCTbu4eonZOJhODis-2aq4s.mft (raw, json)
Hash identifier: UgOWP0BHTL5xK63nGeoRAcRtBQBsszZFPvKDqulkRvk=
Subject key identifier: F0:C3:FB:22:8C:53:21:39:11:D9:F6:73:C5:93:A9:33:C8:DF:8F:2A
Authority key identifier: 2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B
Certificate issuer: /CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b
Certificate serial: 01976961739956F7356ED4528F6C780879A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
Manifest number: 0571
Signing time: Fri 13 Jun 2025 13:01:23 +0000
Manifest this update: Fri 13 Jun 2025 13:01:23 +0000
Manifest next update: Sat 14 Jun 2025 13:01:23 +0000
Files and hashes: 1: Kt_vhCTbu4eonZOJhODis-2aq4s.crl (hash: JdUyReqFqasNBPJ587oEgX6HNirwxHTyL5QwSwQ8z2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:73:99:56:f7:35:6e:d4:52:8f:6c:78:08:79:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b
Validity
Not Before: Jun 13 13:01:23 2025 GMT
Not After : Jun 14 13:01:23 2025 GMT
Subject: CN=f0c3fb228c53213911d9f673c593a933c8df8f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1f:5a:b2:ff:27:f4:d4:a2:0f:e0:f5:65:40:
95:54:be:d8:2f:ba:c6:d7:3b:5a:6c:78:e5:71:4f:
d8:33:cf:f9:fb:f3:ec:01:85:d9:24:86:75:fb:79:
4b:03:4e:f3:83:36:c1:65:d2:e5:f1:fd:94:90:b8:
eb:13:59:a3:2c:90:4c:4f:9b:d6:94:10:09:57:8b:
38:77:30:70:5a:66:78:98:04:e9:30:89:7b:27:e5:
11:0a:d9:2d:2d:75:97:cf:17:55:b5:a5:e8:8f:bd:
79:ef:0f:01:34:0b:38:44:71:2a:39:34:a6:1c:a8:
93:0e:45:81:4d:9d:86:7d:3d:03:41:d0:be:f2:40:
db:7a:7e:37:6c:0c:50:09:77:a4:7b:c1:d0:12:1e:
c5:6c:93:9d:8b:02:c3:32:90:a4:65:b4:00:fc:42:
a7:47:a9:e2:20:77:f2:37:28:cd:1d:ec:52:42:4e:
e7:2e:be:40:9b:7a:0d:a4:b4:98:bd:e1:49:04:3a:
52:58:3f:e6:c0:4d:e3:5b:f4:07:b5:a5:44:69:3e:
cf:20:ef:d9:27:ed:e2:16:6c:74:af:17:6e:45:28:
60:30:b1:db:df:10:68:f9:4b:6c:c9:f3:37:0d:52:
d5:dd:e0:af:24:c1:3e:48:08:d5:42:cb:e8:95:4a:
b8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C3:FB:22:8C:53:21:39:11:D9:F6:73:C5:93:A9:33:C8:DF:8F:2A
X509v3 Authority Key Identifier:
keyid:2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f5:54:c3:e9:58:53:69:1e:3e:a3:0f:4b:9f:48:5e:07:e4:
ca:d5:5c:f0:7e:87:9e:13:36:e5:63:e2:08:49:c3:0a:1d:97:
c1:e5:b0:8b:54:6d:cd:ac:bf:4e:13:ed:5a:fc:0d:c3:66:e8:
18:ec:22:b3:2f:31:22:65:4f:80:22:17:0a:2e:83:48:8f:a0:
35:80:b0:a8:09:c2:fc:ac:80:60:d2:6e:5b:84:68:65:d8:c2:
b5:7c:8a:fa:ec:ad:d4:6c:a7:6a:b0:50:1f:ea:bb:e3:86:b1:
5f:92:52:3c:69:30:36:51:78:5b:fb:88:6f:57:4f:b6:7a:f6:
72:1f:af:64:93:1f:0a:8e:f0:6a:71:5d:89:8f:8d:55:ed:e7:
0e:9c:cb:b9:a4:32:85:03:e6:db:58:6f:ba:1c:ec:4f:87:95:
f2:d6:21:61:84:6e:50:a2:fc:fa:e1:0c:21:8a:e1:c6:2a:50:
96:3e:b2:86:e9:4b:50:b8:ef:06:70:8f:ab:fa:78:1d:d5:ed:
f4:9e:93:a0:19:1e:e4:97:d6:a0:6c:5e:20:67:49:d4:e0:f2:
6d:13:c6:da:14:c8:00:23:90:c7:78:91:f5:55:83:70:b1:b1:
53:db:e6:42:42:65:1d:c2:cb:fb:2f:14:6e:81:d4:23:ee:8c:
f3:92:1e:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYXOZVvc1btRSj2x4CHmkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZGZlZjg0MjRkYmJiODdhODlkOTM4OTg0ZTBlMmIzZWQ5
YWFiOGIwHhcNMjUwNjEzMTMwMTIzWhcNMjUwNjE0MTMwMTIzWjAzMTEwLwYDVQQD
EyhmMGMzZmIyMjhjNTMyMTM5MTFkOWY2NzNjNTkzYTkzM2M4ZGY4ZjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR9asv8n9NSiD+D1ZUCVVL7YL7rG
1ztabHjlcU/YM8/5+/PsAYXZJIZ1+3lLA07zgzbBZdLl8f2UkLjrE1mjLJBMT5vW
lBAJV4s4dzBwWmZ4mATpMIl7J+URCtktLXWXzxdVtaXoj7157w8BNAs4RHEqOTSm
HKiTDkWBTZ2GfT0DQdC+8kDben43bAxQCXeke8HQEh7FbJOdiwLDMpCkZbQA/EKn
R6niIHfyNyjNHexSQk7nLr5Am3oNpLSYveFJBDpSWD/mwE3jW/QHtaVEaT7PIO/Z
J+3iFmx0rxduRShgMLHb3xBo+UtsyfM3DVLV3eCvJME+SAjVQsvolUq4VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDD+yKMUyE5Edn2c8WTqTPI348qMB8GA1UdIwQY
MBaAFCrf74Qk27uHqJ2TiYTg4rPtmquLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3RfdmhDVGJ1NGVvblpPSmhPRGlzLTJhcTRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mOGQxMTEtN2VjYi00YmE2LWJlZWUt
MTFhYTExMTNlOGQ2LzEvS3RfdmhDVGJ1NGVvblpPSmhPRGlzLTJhcTRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9mOGQxMTEtN2VjYi00YmE2LWJlZWUtMTFhYTExMTNlOGQ2
LzEvS3RfdmhDVGJ1NGVvblpPSmhPRGlzLTJhcTRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/VUw+lY
U2kePqMPS59IXgfkytVc8H6HnhM25WPiCEnDCh2XweWwi1Rtzay/ThPtWvwNw2bo
GOwisy8xImVPgCIXCi6DSI+gNYCwqAnC/KyAYNJuW4RoZdjCtXyK+uyt1GynarBQ
H+q744axX5JSPGkwNlF4W/uIb1dPtnr2ch+vZJMfCo7wanFdiY+NVe3nDpzLuaQy
hQPm21hvuhzsT4eV8tYhYYRuUKL8+uEMIYrhxipQlj6yhulLULjvBnCPq/p4HdXt
9J6ToBke5JfWoGxeIGdJ1ODybRPG2hTIACOQx3iR9VWDcLGxU9vmQkJlHcLL+y8U
boHUI+6M85Iehg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:52 2025 by rpki-client