Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
File: KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft (raw, json)
Hash identifier: 8zSFXYri2PxhXy0+9DqmdCeXssoLBw4a2BkuzTAYMUY=
Subject key identifier: 86:CD:F8:63:DF:A9:81:4E:B0:E7:19:EE:31:81:AD:F0:3C:6B:AC:A5
Authority key identifier: 29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
Certificate issuer: /CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Certificate serial: 01976DABE4950651BD9FA3CC644B35E6502B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 09:01:10 +0000
Manifest this update: Sat 14 Jun 2025 09:01:10 +0000
Manifest next update: Sun 15 Jun 2025 09:01:10 +0000
Files and hashes: 1: KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl (hash: nZ5N6V45VpfJchkxkZNIaGfS1H91QWbebHTv/BD42NI=)
2: iinwbjaCpK6V8_stsXvEKtBkl8w.roa (hash: M1V1vtHFjPXfduw3ijubEwFy3tYmjuQ7qndUwyTCfGk=)
3: uJWKugGWqtQl6VVyKAzx1i_N0aA.roa (hash: BJfTtZgXbkNAvLFFTKLvaiDNDprXBJ4/kR9lJ8wjqSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:e4:95:06:51:bd:9f:a3:cc:64:4b:35:e6:50:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Validity
Not Before: Jun 14 09:01:10 2025 GMT
Not After : Jun 15 09:01:10 2025 GMT
Subject: CN=86cdf863dfa9814eb0e719ee3181adf03c6baca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:76:de:a2:b9:8c:56:8b:18:26:6d:e7:4a:
56:57:f6:ac:66:83:5e:aa:87:2f:a1:38:a7:81:f1:
0e:8c:0e:cf:4e:0d:30:d9:20:9a:97:7e:35:eb:20:
09:95:41:50:7f:d3:d5:45:82:54:31:19:6a:0e:78:
b7:6a:a0:d0:7f:05:46:25:a2:b5:c8:64:47:72:ee:
2b:1f:7a:59:ee:61:f5:d3:70:3e:6e:42:61:63:12:
7a:2c:6f:bb:4b:87:dc:83:65:fc:74:ab:b2:3d:e4:
3f:59:f7:52:21:30:0b:cf:2c:8b:ad:82:a4:dc:f4:
63:33:29:cb:3f:96:15:b2:d7:4a:48:78:77:8b:cd:
13:82:7e:33:3f:43:2e:0d:7e:66:d8:3c:6a:94:50:
bf:10:9b:e4:ae:02:c5:57:57:1e:bd:6e:cb:72:4c:
29:56:88:80:7b:71:b6:f9:35:65:a2:1c:f9:e2:79:
15:c1:43:68:c0:f8:91:ac:db:75:01:61:b4:4f:45:
1a:dd:c6:7b:e1:d7:b3:d5:3a:af:30:1d:3b:e0:58:
4e:60:22:85:9e:77:42:02:d8:72:c4:00:f4:ba:a4:
5b:45:f8:1f:eb:70:15:81:b7:7b:d4:6a:81:95:8d:
94:6a:8c:dd:77:61:5d:57:73:f1:08:56:d5:8e:90:
7c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CD:F8:63:DF:A9:81:4E:B0:E7:19:EE:31:81:AD:F0:3C:6B:AC:A5
X509v3 Authority Key Identifier:
keyid:29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e0:1d:7d:17:b9:1b:65:ea:03:0a:8c:f3:21:1a:c4:de:c7:
ee:16:b6:15:89:5c:a0:e1:93:a2:07:75:1e:7b:2b:19:5c:17:
1c:81:80:d9:35:2e:e5:83:1c:9b:a6:07:ff:cd:88:93:39:84:
ab:5d:bd:46:68:de:5c:d3:07:a4:28:f6:b0:64:69:eb:be:d9:
44:65:b4:34:ff:dd:1f:40:b8:31:3d:c3:11:b5:ba:a9:20:ed:
19:5e:cf:cf:7d:42:5d:3e:84:12:d4:ef:1b:b2:31:73:f2:29:
f8:15:98:95:3f:f0:36:95:3f:89:3c:af:0f:97:e9:91:88:ee:
56:a5:e3:0e:62:0c:29:72:4f:6d:5b:43:fe:0d:d6:67:8b:a9:
81:15:d0:c0:0a:7f:17:5d:1a:cf:60:3c:fd:75:34:22:bd:be:
c6:35:0c:57:7b:aa:b3:4d:a2:99:5a:33:f3:02:8e:19:aa:e0:
4d:15:71:6f:10:47:72:0a:7e:7d:a5:d2:2e:53:22:ae:1c:76:
29:a0:64:ee:b5:50:88:00:b6:68:07:d7:2b:2b:57:de:96:49:
02:3c:66:5e:6a:a2:ff:ab:bd:1b:bb:e7:8b:7c:cb:fd:c4:5e:
23:96:ab:38:80:d2:a8:97:8b:5a:e2:20:eb:e7:8c:c2:70:86:
e3:8f:a3:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtq+SVBlG9n6PMZEs15lArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MTA5ZGE2NjJmOWQzMDJmZmYyYzVjNGI0YWZiOGY5NDdm
ZWMxYzAwHhcNMjUwNjE0MDkwMTEwWhcNMjUwNjE1MDkwMTEwWjAzMTEwLwYDVQQD
Eyg4NmNkZjg2M2RmYTk4MTRlYjBlNzE5ZWUzMTgxYWRmMDNjNmJhY2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMp23qK5jFaLGCZt50pWV/asZoNe
qocvoTingfEOjA7PTg0w2SCal3416yAJlUFQf9PVRYJUMRlqDni3aqDQfwVGJaK1
yGRHcu4rH3pZ7mH103A+bkJhYxJ6LG+7S4fcg2X8dKuyPeQ/WfdSITALzyyLrYKk
3PRjMynLP5YVstdKSHh3i80Tgn4zP0MuDX5m2DxqlFC/EJvkrgLFV1cevW7Lckwp
VoiAe3G2+TVlohz54nkVwUNowPiRrNt1AWG0T0Ua3cZ74dez1TqvMB074FhOYCKF
nndCAthyxAD0uqRbRfgf63AVgbd71GqBlY2Uaozdd2FdV3PxCFbVjpB8ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbN+GPfqYFOsOcZ7jGBrfA8a6ylMB8GA1UdIwQY
MBaAFCkQnaZi+dMC//LFxLSvuPlH/sHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1JDZHBtTDUwd0xfOHNYRXRLLTQtVWYtd2NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85MzAyNzktMzE4Ny00N2E1LTgxMzct
ZjRmYjVjODgwNTA5LzEvS1JDZHBtTDUwd0xfOHNYRXRLLTQtVWYtd2NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS85MzAyNzktMzE4Ny00N2E1LTgxMzctZjRmYjVjODgwNTA5
LzEvS1JDZHBtTDUwd0xfOHNYRXRLLTQtVWYtd2NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm+AdfRe5
G2XqAwqM8yEaxN7H7ha2FYlcoOGTogd1HnsrGVwXHIGA2TUu5YMcm6YH/82IkzmE
q129RmjeXNMHpCj2sGRp677ZRGW0NP/dH0C4MT3DEbW6qSDtGV7Pz31CXT6EEtTv
G7Ixc/Ip+BWYlT/wNpU/iTyvD5fpkYjuVqXjDmIMKXJPbVtD/g3WZ4upgRXQwAp/
F10az2A8/XU0Ir2+xjUMV3uqs02imVoz8wKOGargTRVxbxBHcgp+faXSLlMirhx2
KaBk7rVQiAC2aAfXKytX3pZJAjxmXmqi/6u9G7vni3zL/cReI5arOIDSqJeLWuIg
6+eMwnCG44+j5w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 20:01:07 2025 by rpki-client