Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
File: Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json)
Hash identifier: Gv2TSOVbF9CZdDPqstlCP1zYlqT7bXE9xrY0yKKVAI0=
Subject key identifier: 33:30:A5:BB:3F:DE:21:EF:14:B9:77:40:8A:37:77:D5:A8:1D:1C:9A
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial: 01976884E677B5F7694949451B04781F55CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
Manifest number: 0DDA
Signing time: Fri 13 Jun 2025 09:00:29 +0000
Manifest this update: Fri 13 Jun 2025 09:00:29 +0000
Manifest next update: Sat 14 Jun 2025 09:00:29 +0000
Files and hashes: 1: BTmSI3bKDyEio_o8HAFd3DpA8rw.roa (hash: 3z5V5nlo98dCHrSvU7v+ci/JP55YJA4F6NU227fMQdg=)
2: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: pK6upso8+lUkQpl2H+6vl8eHdtd943KldD5xcjwAUHk=)
3: Vl-BUyW_4i4W1Wnxmf0KDGW6dVM.roa (hash: qrkRzr8LSzDpFIdLrS23zNSmVx5+NOPtSLZdcnXxt68=)
4: oxi_ya_EdBtJCrjY1pYIsNptA_Q.roa (hash: /Rw4xq/Rq6iapjKpArPGVtAk2zVGOyS/eMr3PI823Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:e6:77:b5:f7:69:49:49:45:1b:04:78:1f:55:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Validity
Not Before: Jun 13 09:00:29 2025 GMT
Not After : Jun 14 09:00:29 2025 GMT
Subject: CN=3330a5bb3fde21ef14b977408a3777d5a81d1c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:71:a4:05:a4:d0:05:eb:f6:b1:24:ac:c2:
01:ea:8d:ff:16:58:f5:2c:fd:bc:f9:ab:10:b3:61:
55:27:0e:7c:5f:e7:27:2b:6c:73:b9:75:d6:80:4e:
47:99:7e:b7:80:39:85:1e:be:ee:9a:4e:6e:9b:ea:
af:18:aa:d5:50:46:bd:21:d3:50:17:fa:6b:09:7d:
75:c8:62:bb:af:c6:d3:bc:30:7a:6d:6c:05:d9:08:
14:f5:53:13:38:3a:4f:7b:b9:f6:c6:79:03:fc:cf:
88:0a:68:b5:b2:d3:77:24:2f:1d:af:3d:e9:13:c2:
3e:a6:c3:bd:f9:ff:bd:6a:e1:49:68:d5:0b:11:5c:
b1:fd:1e:4b:55:83:73:18:45:05:ca:b1:6b:ee:e0:
38:da:44:0a:04:e4:8c:3a:fd:4f:b1:fd:8b:b1:0e:
d5:9a:6c:f5:16:6d:6b:57:b9:a6:d0:3c:2b:dd:2d:
a4:3c:2f:63:5f:01:f9:ce:87:b1:4d:a7:a9:5c:b8:
e9:8f:4c:dd:6a:06:40:2d:45:27:fb:b4:d4:bc:a6:
28:87:2d:bc:5f:fe:32:f6:09:8a:83:46:2d:45:94:
19:35:ef:d6:2a:8b:06:c4:ce:d1:1c:ef:e8:1e:13:
66:e9:f4:dc:1a:06:ef:a3:2d:20:3f:c6:28:5e:f9:
f3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:30:A5:BB:3F:DE:21:EF:14:B9:77:40:8A:37:77:D5:A8:1D:1C:9A
X509v3 Authority Key Identifier:
keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f6:a6:5f:89:48:14:0c:23:b7:4c:7b:6e:f6:db:0a:35:a4:
dc:f3:fc:d7:d2:43:14:f5:75:ed:11:c4:53:6e:91:ed:2e:c7:
a1:ba:89:89:7b:14:96:99:56:42:f7:3c:79:a9:37:52:98:86:
ac:1c:0a:ba:f4:af:75:83:bf:c7:d7:56:f9:0e:98:82:0c:68:
5d:d1:0d:4b:3f:5c:96:bb:b6:e6:d9:38:fa:a3:32:66:a9:56:
3e:3a:09:99:39:fa:9e:3d:ef:ae:ae:03:c7:0d:14:2e:e6:c2:
81:8c:f6:1b:59:c5:7e:7c:92:87:b5:98:43:83:d9:cb:16:21:
91:ae:aa:5e:99:1b:be:e3:0d:5a:ea:0f:88:d3:6c:07:68:8c:
7f:1f:ce:df:66:11:1b:32:70:1f:af:d5:da:d8:17:ba:80:e4:
2f:cd:38:f4:36:10:65:96:51:6d:e1:de:ff:b5:3e:09:d0:c7:
4e:1e:a2:33:1f:79:83:e2:e1:18:81:0b:e3:9b:60:01:22:8b:
5c:8a:94:c1:67:ae:0e:85:e5:fa:79:ce:b8:9b:bb:98:18:96:
26:25:bd:25:3d:04:2d:9c:b6:5f:c4:ea:4d:da:99:53:c2:3a:
35:2a:d7:a7:c1:5b:49:68:16:7d:a9:78:0f:c1:93:46:a9:f5:
79:50:07:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdohOZ3tfdpSUlFGwR4H1XNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZGQ0MzhhN2NlM2NiMzc5ZjI4Y2ZhMDUxY2Y2M2Q1YWQ4
ZmUzY2EwHhcNMjUwNjEzMDkwMDI5WhcNMjUwNjE0MDkwMDI5WjAzMTEwLwYDVQQD
EygzMzMwYTViYjNmZGUyMWVmMTRiOTc3NDA4YTM3NzdkNWE4MWQxYzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr09xpAWk0AXr9rEkrMIB6o3/Flj1
LP28+asQs2FVJw58X+cnK2xzuXXWgE5HmX63gDmFHr7umk5um+qvGKrVUEa9IdNQ
F/prCX11yGK7r8bTvDB6bWwF2QgU9VMTODpPe7n2xnkD/M+ICmi1stN3JC8drz3p
E8I+psO9+f+9auFJaNULEVyx/R5LVYNzGEUFyrFr7uA42kQKBOSMOv1Psf2LsQ7V
mmz1Fm1rV7mm0Dwr3S2kPC9jXwH5zoexTaepXLjpj0zdagZALUUn+7TUvKYohy28
X/4y9gmKg0YtRZQZNe/WKosGxM7RHO/oHhNm6fTcGgbvoy0gP8YoXvnzNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMwpbs/3iHvFLl3QIo3d9WoHRyaMB8GA1UdIwQY
MBaAFCrdQ4p848s3nyjPoFHPY9Wtj+PKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUt
MjBhMGQxMzBjNDU2LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUtMjBhMGQxMzBjNDU2
LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/amX4lI
FAwjt0x7bvbbCjWk3PP819JDFPV17RHEU26R7S7HobqJiXsUlplWQvc8eak3UpiG
rBwKuvSvdYO/x9dW+Q6YggxoXdENSz9clru25tk4+qMyZqlWPjoJmTn6nj3vrq4D
xw0ULubCgYz2G1nFfnySh7WYQ4PZyxYhka6qXpkbvuMNWuoPiNNsB2iMfx/O32YR
GzJwH6/V2tgXuoDkL8049DYQZZZRbeHe/7U+CdDHTh6iMx95g+LhGIEL45tgASKL
XIqUwWeuDoXl+nnOuJu7mBiWJiW9JT0ELZy2X8TqTdqZU8I6NSrXp8FbSWgWfal4
D8GTRqn1eVAH4Q==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:02:37 2025 by rpki-client