Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
File: kmQM5yWUCOpddlb_wCE_IGiNr9w.mft (raw, json)
Hash identifier: C1jzNsYkivXLPLPrY8FtyVRdRoW+KTCmiDXVKkYtLU4=
Subject key identifier: 31:51:6E:40:F3:60:C7:70:FE:49:7B:A3:64:AD:F6:F9:A2:D0:AB:D2
Authority key identifier: 92:64:0C:E7:25:94:08:EA:5D:76:56:FF:C0:21:3F:20:68:8D:AF:DC
Certificate issuer: /CN=92640ce7259408ea5d7656ffc0213f20688dafdc
Certificate serial: 019771514B0939178AB0C1FBA9FFEACA59A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
Manifest number: 0311
Signing time: Sun 15 Jun 2025 02:00:42 +0000
Manifest this update: Sun 15 Jun 2025 02:00:42 +0000
Manifest next update: Mon 16 Jun 2025 02:00:42 +0000
Files and hashes: 1: kmQM5yWUCOpddlb_wCE_IGiNr9w.crl (hash: +OBeZibL0tRgJNU2ZUklp0Lnhx34YQcvD0QRcCl8vzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:4b:09:39:17:8a:b0:c1:fb:a9:ff:ea:ca:59:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92640ce7259408ea5d7656ffc0213f20688dafdc
Validity
Not Before: Jun 15 02:00:42 2025 GMT
Not After : Jun 16 02:00:42 2025 GMT
Subject: CN=31516e40f360c770fe497ba364adf6f9a2d0abd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fb:b5:79:95:51:57:03:da:de:3c:bd:f5:69:
ce:1c:9b:7c:bc:6f:22:2b:f4:50:3c:14:6e:a1:6b:
a9:9d:b8:5c:02:fb:7f:c2:e4:02:bd:7f:56:df:47:
82:98:13:78:f4:1f:aa:b0:a2:72:c6:9b:d1:b8:83:
0f:88:84:ed:01:52:29:c3:6d:48:d4:1d:e1:14:09:
da:43:00:7a:1f:7e:92:dc:1d:23:a0:38:8f:19:0d:
6b:9a:15:de:39:00:f7:ba:9d:ea:77:0d:09:66:4f:
df:21:0f:17:b2:2a:90:f7:5d:6c:23:46:f7:66:eb:
d0:36:9e:37:bd:27:77:65:1e:2e:3b:62:d0:56:09:
af:ba:44:13:17:46:1c:a0:55:c0:2f:95:1f:ea:c5:
f5:4e:d1:ee:e7:9b:29:b0:30:24:ac:b3:42:13:ce:
b8:b9:53:cf:a2:10:0c:66:cf:99:53:ba:9a:e5:fa:
2e:00:6f:83:e9:bd:85:8c:47:b4:14:8e:22:61:16:
d6:64:ac:29:04:15:76:f5:c6:4a:4d:3f:35:23:0b:
2d:89:4b:fc:47:74:32:aa:f7:f8:f3:db:26:e5:2b:
ea:11:e2:01:45:9b:87:d0:dc:97:99:82:25:29:46:
34:94:cd:54:ea:2f:4d:3e:60:9f:44:eb:ef:7d:fc:
9e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:51:6E:40:F3:60:C7:70:FE:49:7B:A3:64:AD:F6:F9:A2:D0:AB:D2
X509v3 Authority Key Identifier:
keyid:92:64:0C:E7:25:94:08:EA:5D:76:56:FF:C0:21:3F:20:68:8D:AF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:21:64:77:a3:21:33:86:c4:2f:48:20:96:e7:c5:6d:0e:f9:
f0:f6:8c:33:2e:06:a0:37:b9:5a:b8:71:33:f3:a5:1c:8d:73:
db:6f:f9:b6:d0:52:82:eb:bb:a6:c0:2a:5c:c3:76:72:35:54:
03:43:e3:a3:5a:6b:09:00:14:73:8c:f6:36:c2:59:e9:f2:b0:
f5:87:cc:d0:b7:5c:31:9f:38:d3:10:6f:f1:c6:c4:1b:17:9a:
b6:4b:06:d0:a4:af:9a:88:4d:85:da:eb:39:73:80:c6:a8:6a:
83:dd:47:b0:35:7f:0b:98:5a:7c:3c:e3:fb:d7:d5:24:30:b9:
76:24:10:45:f8:d9:00:98:2f:bb:95:2d:53:f6:55:98:43:d7:
b9:68:ff:4a:81:2e:6d:16:ab:9e:b3:d2:61:31:91:89:ce:dc:
4c:93:71:41:b8:60:b6:62:af:9f:78:1b:a3:bc:0c:86:b5:00:
f5:73:c6:3f:d0:37:5d:9b:1d:dc:92:21:01:8a:e6:e2:e3:bc:
44:d2:f0:b2:67:a5:36:15:b5:55:31:4d:4d:67:5e:eb:d9:e7:
66:d8:16:0d:93:6e:a1:ca:af:5e:79:18:98:e1:27:99:85:0e:
8a:7d:40:7d:bc:a1:f5:af:ab:28:ed:44:de:cd:22:1b:f6:57:
40:95:45:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxUUsJOReKsMH7qf/qylmiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNjQwY2U3MjU5NDA4ZWE1ZDc2NTZmZmMwMjEzZjIwNjg4
ZGFmZGMwHhcNMjUwNjE1MDIwMDQyWhcNMjUwNjE2MDIwMDQyWjAzMTEwLwYDVQQD
EygzMTUxNmU0MGYzNjBjNzcwZmU0OTdiYTM2NGFkZjZmOWEyZDBhYmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/u1eZVRVwPa3jy99WnOHJt8vG8i
K/RQPBRuoWupnbhcAvt/wuQCvX9W30eCmBN49B+qsKJyxpvRuIMPiITtAVIpw21I
1B3hFAnaQwB6H36S3B0joDiPGQ1rmhXeOQD3up3qdw0JZk/fIQ8XsiqQ911sI0b3
ZuvQNp43vSd3ZR4uO2LQVgmvukQTF0YcoFXAL5Uf6sX1TtHu55spsDAkrLNCE864
uVPPohAMZs+ZU7qa5fouAG+D6b2FjEe0FI4iYRbWZKwpBBV29cZKTT81IwstiUv8
R3Qyqvf489sm5SvqEeIBRZuH0NyXmYIlKUY0lM1U6i9NPmCfROvvffyetwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFRbkDzYMdw/kl7o2St9vmi0KvSMB8GA1UdIwQY
MBaAFJJkDOcllAjqXXZW/8AhPyBoja/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva21RTTV5V1VDT3BkZGxiX3dDRV9JR2lOcjl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hYzQ5NmMtYzkxYi00OGIzLWFmNTct
NzlmNTE1ZGMyZjk3LzEva21RTTV5V1VDT3BkZGxiX3dDRV9JR2lOcjl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hYzQ5NmMtYzkxYi00OGIzLWFmNTctNzlmNTE1ZGMyZjk3
LzEva21RTTV5V1VDT3BkZGxiX3dDRV9JR2lOcjl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSFkd6Mh
M4bEL0gglufFbQ758PaMMy4GoDe5WrhxM/OlHI1z22/5ttBSguu7psAqXMN2cjVU
A0Pjo1prCQAUc4z2NsJZ6fKw9YfM0LdcMZ840xBv8cbEGxeatksG0KSvmohNhdrr
OXOAxqhqg91HsDV/C5hafDzj+9fVJDC5diQQRfjZAJgvu5UtU/ZVmEPXuWj/SoEu
bRarnrPSYTGRic7cTJNxQbhgtmKvn3gbo7wMhrUA9XPGP9A3XZsd3JIhAYrm4uO8
RNLwsmelNhW1VTFNTWde69nnZtgWDZNuocqvXnkYmOEnmYUOin1Afbyh9a+rKO1E
3s0iG/ZXQJVFWg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:00:01 2025 by rpki-client