Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
File: KgV9tw5HTrSgd_oT875N17Y4C1Q.mft (raw, json)
Hash identifier: eZCC0zQdnrzc/4UDILJ2ziRl386V0PM8I8bvpcSYlXA=
Subject key identifier: 36:0C:03:D9:E5:F2:DA:4B:27:B8:93:79:B2:E0:2D:2D:31:4F:D9:B0
Authority key identifier: 2A:05:7D:B7:0E:47:4E:B4:A0:77:FA:13:F3:BE:4D:D7:B6:38:0B:54
Certificate issuer: /CN=2a057db70e474eb4a077fa13f3be4dd7b6380b54
Certificate serial: 01976D3E90B2FA022B8524F848CF13730C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
Manifest number: 0F87
Signing time: Sat 14 Jun 2025 07:01:46 +0000
Manifest this update: Sat 14 Jun 2025 07:01:46 +0000
Manifest next update: Sun 15 Jun 2025 07:01:46 +0000
Files and hashes: 1: KgV9tw5HTrSgd_oT875N17Y4C1Q.crl (hash: gLw12MIt8thP5ldk0eIdozEg5HrMDZmK3G5RS57siKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:90:b2:fa:02:2b:85:24:f8:48:cf:13:73:0c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a057db70e474eb4a077fa13f3be4dd7b6380b54
Validity
Not Before: Jun 14 07:01:46 2025 GMT
Not After : Jun 15 07:01:46 2025 GMT
Subject: CN=360c03d9e5f2da4b27b89379b2e02d2d314fd9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d6:9f:bf:98:20:8c:b0:9e:80:8a:3a:72:c6:
89:6c:90:67:2e:3b:4e:1b:b6:d9:85:87:17:75:b1:
ac:de:ae:00:7b:07:60:22:54:e0:3d:a3:03:89:cd:
29:0c:d2:e3:c7:9a:ea:ab:8b:c0:0a:86:f2:15:eb:
86:1f:75:8c:53:f5:1c:4a:46:33:89:f8:a7:28:6b:
8d:3e:20:3d:84:cd:2e:b0:21:d7:fa:f8:f9:3e:9a:
f1:23:79:5f:c5:bd:17:e3:d3:88:e4:08:f4:97:17:
d1:c5:12:26:e3:69:33:ad:79:84:31:fd:dc:a1:6e:
69:91:bb:54:57:59:bc:41:a9:aa:2c:60:f0:aa:31:
84:ba:29:e2:db:cc:84:14:be:20:13:ba:23:8e:a7:
0d:64:ff:74:d3:e8:4e:e6:75:a3:e0:51:d6:72:7a:
54:f3:0a:c3:42:8d:f4:86:f2:bf:2e:fe:9e:53:b7:
57:1f:d7:8c:4d:f4:26:31:87:ff:ec:6a:14:7c:1f:
ef:4a:54:99:1d:fd:2d:c3:2a:20:4f:69:87:f6:c7:
c4:db:b5:5e:24:47:d3:57:27:18:83:7d:0c:99:35:
1e:53:24:d8:49:6d:47:f5:b8:79:c3:e0:3f:69:53:
1d:85:75:24:e5:76:01:2d:88:d3:f9:44:73:58:c3:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0C:03:D9:E5:F2:DA:4B:27:B8:93:79:B2:E0:2D:2D:31:4F:D9:B0
X509v3 Authority Key Identifier:
keyid:2A:05:7D:B7:0E:47:4E:B4:A0:77:FA:13:F3:BE:4D:D7:B6:38:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d9:92:38:df:fa:1f:be:1a:39:e3:61:f9:eb:4c:b8:5a:49:
ce:2c:26:76:1b:12:ac:f8:35:08:c3:42:3b:34:8c:1f:53:ee:
26:2f:41:28:29:10:1c:ab:fb:4a:6f:c4:c1:52:d7:ff:ff:b7:
f6:29:59:4c:d8:c3:21:9f:d7:39:dd:89:f8:b7:62:13:05:97:
2d:7a:a4:8e:61:16:c5:e1:ca:9a:f1:40:36:fd:44:3f:92:81:
c2:52:1c:88:2b:9b:b1:bb:89:04:e5:f8:b8:79:04:0d:aa:ca:
a2:3e:d4:03:40:8c:19:02:18:11:31:73:a4:e5:a4:25:3d:a5:
30:4a:12:39:ca:f8:26:92:e8:27:5c:a1:f8:86:fd:0d:f0:74:
c3:16:4a:f3:31:e8:dc:e1:a0:94:99:35:27:2a:4c:dd:27:f9:
d5:f9:30:e7:49:af:2b:15:b0:71:ce:bd:de:63:52:04:33:fc:
7a:e6:ee:08:af:1e:2c:b7:9a:1e:6b:fb:0c:7d:0d:fa:92:59:
f4:21:c0:a2:4a:28:80:79:95:dd:13:ff:e9:17:fc:ba:04:d0:
c2:5d:7d:dd:0b:ae:a2:e2:35:75:3b:cc:17:62:d6:41:03:e7:
39:a7:ce:b2:fd:f6:bd:6f:b7:3f:14:8c:df:0b:e4:2f:d0:a7:
de:42:e4:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPpCy+gIrhST4SM8TcwxsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMDU3ZGI3MGU0NzRlYjRhMDc3ZmExM2YzYmU0ZGQ3YjYz
ODBiNTQwHhcNMjUwNjE0MDcwMTQ2WhcNMjUwNjE1MDcwMTQ2WjAzMTEwLwYDVQQD
EygzNjBjMDNkOWU1ZjJkYTRiMjdiODkzNzliMmUwMmQyZDMxNGZkOWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tafv5ggjLCegIo6csaJbJBnLjtO
G7bZhYcXdbGs3q4AewdgIlTgPaMDic0pDNLjx5rqq4vACobyFeuGH3WMU/UcSkYz
ifinKGuNPiA9hM0usCHX+vj5PprxI3lfxb0X49OI5Aj0lxfRxRIm42kzrXmEMf3c
oW5pkbtUV1m8QamqLGDwqjGEuini28yEFL4gE7ojjqcNZP900+hO5nWj4FHWcnpU
8wrDQo30hvK/Lv6eU7dXH9eMTfQmMYf/7GoUfB/vSlSZHf0twyogT2mH9sfE27Ve
JEfTVycYg30MmTUeUyTYSW1H9bh5w+A/aVMdhXUk5XYBLYjT+URzWMOZZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYMA9nl8tpLJ7iTebLgLS0xT9mwMB8GA1UdIwQY
MBaAFCoFfbcOR060oHf6E/O+Tde2OAtUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2dWOXR3NUhUclNnZF9vVDg3NU4xN1k0QzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kOTc4ZmYtNzRhMS00OTE1LTk1OWEt
YzAzNTY4ZGMwOGIzLzEvS2dWOXR3NUhUclNnZF9vVDg3NU4xN1k0QzFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kOTc4ZmYtNzRhMS00OTE1LTk1OWEtYzAzNTY4ZGMwOGIz
LzEvS2dWOXR3NUhUclNnZF9vVDg3NU4xN1k0QzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9mSON/6
H74aOeNh+etMuFpJziwmdhsSrPg1CMNCOzSMH1PuJi9BKCkQHKv7Sm/EwVLX//+3
9ilZTNjDIZ/XOd2J+LdiEwWXLXqkjmEWxeHKmvFANv1EP5KBwlIciCubsbuJBOX4
uHkEDarKoj7UA0CMGQIYETFzpOWkJT2lMEoSOcr4JpLoJ1yh+Ib9DfB0wxZK8zHo
3OGglJk1JypM3Sf51fkw50mvKxWwcc693mNSBDP8eubuCK8eLLeaHmv7DH0N+pJZ
9CHAokoogHmV3RP/6Rf8ugTQwl193QuuouI1dTvMF2LWQQPnOafOsv32vW+3PxSM
3wvkL9Cn3kLk6w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:53:48 2025 by rpki-client