Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
File: KUv7SsSIYBHwbZ3E79RVMyZO14g.mft (raw, json)
Hash identifier: JYKnp1w5U/PAm2jCyyNvLhExRulFmNIMYnsf4dJqbkM=
Subject key identifier: EE:51:EC:54:78:68:5D:E1:2E:F5:AC:6B:3A:EA:4D:E6:76:F3:53:88
Authority key identifier: 29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
Certificate issuer: /CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Certificate serial: 01976EBDE0CB5C284560EC53FE862B3CF42B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
Manifest number: 0F89
Signing time: Sat 14 Jun 2025 14:00:26 +0000
Manifest this update: Sat 14 Jun 2025 14:00:26 +0000
Manifest next update: Sun 15 Jun 2025 14:00:26 +0000
Files and hashes: 1: KUv7SsSIYBHwbZ3E79RVMyZO14g.crl (hash: rbbCUJTWrGRkxOpajR2YFgGKAVKb/ldhT2CGwECv18M=)
2: vUzTxQRZNE5WBxRpFY_1BvR6nb8.roa (hash: 4IGQdOA0rNIT3SYgWTgAAmM5+gTsF90wOn17b+OWr8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:e0:cb:5c:28:45:60:ec:53:fe:86:2b:3c:f4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Validity
Not Before: Jun 14 14:00:26 2025 GMT
Not After : Jun 15 14:00:26 2025 GMT
Subject: CN=ee51ec5478685de12ef5ac6b3aea4de676f35388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:7f:92:36:a0:dc:1b:93:c0:ee:61:1a:f2:
fe:6a:aa:5d:87:66:ff:da:55:bc:b3:0e:74:f0:e7:
ac:c0:81:9c:04:5a:35:9a:b6:cf:2f:96:e0:00:82:
de:c0:c3:2a:7d:ba:f6:31:f9:f1:de:13:1f:fb:47:
e6:8d:89:4c:01:ac:cc:ac:ff:91:3a:ac:85:d0:21:
80:12:1b:11:a3:51:84:48:33:9f:3e:56:e6:54:70:
6b:a5:18:42:6e:cd:d1:7e:8e:97:bf:be:ac:bb:4c:
08:34:f8:c0:6a:19:ec:c3:e5:59:a9:dd:31:8a:ac:
53:a7:ff:15:f2:7c:31:19:be:df:f6:a5:1f:38:d3:
02:c1:e7:63:ff:05:76:2f:50:4f:0b:bc:6c:ee:67:
8a:ba:fc:73:d3:3d:da:4a:71:95:ee:7f:f4:da:01:
8d:56:5f:4d:a9:1a:6b:2b:db:64:fc:75:6c:9e:cf:
d7:86:54:b0:96:da:a2:12:f6:6e:87:05:b8:63:69:
c6:fa:60:be:34:1d:f6:dc:96:1b:38:84:73:0e:e3:
83:55:c9:29:32:bc:f8:00:43:e4:a5:52:04:44:2c:
91:26:75:38:a5:84:2b:a5:d8:6f:bc:f8:8c:a1:f5:
9e:88:48:f5:ed:67:96:ae:dc:7b:80:22:b0:26:91:
be:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:51:EC:54:78:68:5D:E1:2E:F5:AC:6B:3A:EA:4D:E6:76:F3:53:88
X509v3 Authority Key Identifier:
keyid:29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:52:fc:06:e9:4a:a4:db:69:90:c2:38:b7:64:c0:da:14:ef:
85:fe:07:71:db:da:02:84:6f:e1:85:4b:34:d4:2d:63:f4:0b:
98:7d:24:3f:70:2d:2f:1b:13:c0:98:b7:01:2a:50:1a:3b:23:
37:68:ca:4c:1f:5e:2d:38:ad:95:ce:b8:2a:e9:f7:85:6a:ea:
27:2e:cc:e0:4b:f4:a9:a3:41:62:97:34:1f:7e:33:21:45:09:
a3:19:96:1f:e7:4f:47:d3:6d:4e:6a:2b:9f:c3:9e:74:3d:4b:
83:20:ec:c1:db:b3:21:2c:14:3f:45:4d:e1:27:80:b4:0e:44:
05:d8:e7:2d:cf:2a:e7:d5:c2:e3:6c:8d:8b:41:6e:09:5e:c7:
79:4c:c8:84:56:16:a8:8e:71:7d:da:8c:66:9a:f5:11:f4:0b:
ed:6e:18:21:22:59:11:e0:0b:1d:99:8c:1e:45:24:54:29:ee:
36:67:a1:c5:bb:2d:f6:07:4b:d1:f4:21:c6:30:0d:52:cf:af:
9c:3c:1e:c0:ec:be:72:49:e0:ec:46:d2:42:e5:fc:8c:16:ac:
08:16:46:15:62:87:81:2d:e5:0c:7d:c6:0b:14:81:0d:9d:0f:
b3:73:76:f0:33:ed:a9:0c:97:f1:fe:1d:f8:2b:fc:93:d6:b9:
b1:30:86:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduveDLXChFYOxT/oYrPPQrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NGJmYjRhYzQ4ODYwMTFmMDZkOWRjNGVmZDQ1NTMzMjY0
ZWQ3ODgwHhcNMjUwNjE0MTQwMDI2WhcNMjUwNjE1MTQwMDI2WjAzMTEwLwYDVQQD
EyhlZTUxZWM1NDc4Njg1ZGUxMmVmNWFjNmIzYWVhNGRlNjc2ZjM1Mzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue5/kjag3BuTwO5hGvL+aqpdh2b/
2lW8sw508OeswIGcBFo1mrbPL5bgAILewMMqfbr2Mfnx3hMf+0fmjYlMAazMrP+R
OqyF0CGAEhsRo1GESDOfPlbmVHBrpRhCbs3Rfo6Xv76su0wINPjAahnsw+VZqd0x
iqxTp/8V8nwxGb7f9qUfONMCwedj/wV2L1BPC7xs7meKuvxz0z3aSnGV7n/02gGN
Vl9NqRprK9tk/HVsns/XhlSwltqiEvZuhwW4Y2nG+mC+NB323JYbOIRzDuODVckp
Mrz4AEPkpVIERCyRJnU4pYQrpdhvvPiMofWeiEj17WeWrtx7gCKwJpG+ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5R7FR4aF3hLvWsazrqTeZ281OIMB8GA1UdIwQY
MBaAFClL+0rEiGAR8G2dxO/UVTMmTteIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1V2N1NzU0lZQkh3YlozRTc5UlZNeVpPMTRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iMGRhMDYtMWJhNy00OWYwLWE1Njkt
OTA5ZmU3YzgwZDk4LzEvS1V2N1NzU0lZQkh3YlozRTc5UlZNeVpPMTRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iMGRhMDYtMWJhNy00OWYwLWE1NjktOTA5ZmU3YzgwZDk4
LzEvS1V2N1NzU0lZQkh3YlozRTc5UlZNeVpPMTRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVL8BulK
pNtpkMI4t2TA2hTvhf4HcdvaAoRv4YVLNNQtY/QLmH0kP3AtLxsTwJi3ASpQGjsj
N2jKTB9eLTitlc64Kun3hWrqJy7M4Ev0qaNBYpc0H34zIUUJoxmWH+dPR9NtTmor
n8OedD1LgyDswduzISwUP0VN4SeAtA5EBdjnLc8q59XC42yNi0FuCV7HeUzIhFYW
qI5xfdqMZpr1EfQL7W4YISJZEeALHZmMHkUkVCnuNmehxbst9gdL0fQhxjANUs+v
nDwewOy+ckng7EbSQuX8jBasCBZGFWKHgS3lDH3GCxSBDZ0Ps3N28DPtqQyX8f4d
+Cv8k9a5sTCGyg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:33:33 2025 by rpki-client