
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
File: Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft (raw, json)
Hash identifier: lqgDnUzYmJ88rb5RrMbbmqhS8Dms/Qf8dHN+IXqbnhQ=
Subject key identifier: F0:FB:BC:BC:C5:FB:E7:7F:2B:1F:62:B2:A5:DD:D0:F2:A0:AC:00:3D
Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
Certificate issuer: /CN=2a7df35d41b4062c10fc118189de47da27096db8
Certificate serial: 01976D742902DC130B44237821AAE9CE2A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
Manifest number: 0674
Signing time: Sat 14 Jun 2025 08:00:18 +0000
Manifest this update: Sat 14 Jun 2025 08:00:18 +0000
Manifest next update: Sun 15 Jun 2025 08:00:18 +0000
Files and hashes: 1: Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl (hash: OxnBEJ7zaHyGOdvpE79ZzVj8/haDGqIHczgyPBa/M/g=)
2: Wky7GIO48q5Am7lt9_maGgpqgJU.roa (hash: zVs1sI4WsKaD65jBAnhtkrYGwGsMw1WHVF/3i95RTn0=)
3: fEeq-E1sxHOFQUJWiqwG8VrB7mI.roa (hash: /r8rCHZ/j6Q+/dPG2IPSlLzNTFQayT8a7Qiqlbqm++I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:29:02:dc:13:0b:44:23:78:21:aa:e9:ce:2a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8
Validity
Not Before: Jun 14 08:00:18 2025 GMT
Not After : Jun 15 08:00:18 2025 GMT
Subject: CN=f0fbbcbcc5fbe77f2b1f62b2a5ddd0f2a0ac003d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:04:39:da:da:a6:e5:5b:23:99:e2:e1:2c:
02:af:1a:57:8b:a1:1c:90:4e:03:b5:ea:bd:c9:cd:
66:54:b9:98:62:eb:05:7a:32:52:db:b0:cf:bf:fa:
2c:b8:1b:dc:b3:db:d9:f6:fc:30:1a:83:7d:db:b5:
dc:68:db:37:c0:e8:1d:67:00:e1:c6:3b:05:fa:da:
7a:15:4d:0f:7f:50:05:69:6c:35:fe:ea:b2:75:8f:
d1:27:4f:aa:66:23:7f:4c:87:b2:16:49:c9:71:58:
0f:4f:1b:6e:9a:9e:e7:06:ce:78:b0:8f:41:2d:d0:
a2:28:57:fb:a7:69:df:e6:ab:93:6b:21:61:d9:0c:
da:86:b7:cd:a5:e1:dd:c1:30:46:b7:0b:91:df:91:
b1:dc:b4:c3:a8:2e:a3:d1:ad:a6:e1:13:eb:34:26:
11:51:f8:bb:ef:99:d1:b4:4f:1e:b8:47:ff:f1:3b:
0a:2d:33:df:b3:e6:63:dc:c3:00:cd:b9:af:32:fc:
0a:70:82:dd:c8:37:0c:97:bf:43:e0:88:a2:9f:d7:
25:43:0c:2b:fd:bc:46:ae:73:16:3a:2f:37:22:cd:
b0:85:5a:ae:79:79:52:21:4b:69:27:39:6e:42:a7:
8b:a3:dd:a4:bc:df:60:d2:e0:59:93:e6:42:ba:94:
3c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FB:BC:BC:C5:FB:E7:7F:2B:1F:62:B2:A5:DD:D0:F2:A0:AC:00:3D
X509v3 Authority Key Identifier:
keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b5:bb:b7:74:9d:c4:d5:7c:85:35:31:eb:c2:ff:e0:48:a4:
f6:e1:22:50:11:f6:f5:26:aa:d6:3c:3c:83:b8:c8:75:8b:7a:
96:2e:fe:b5:dd:5e:a2:23:45:d2:ea:7d:a7:f9:15:a3:ce:2f:
08:ae:f5:87:83:c4:4a:1d:1f:55:c7:24:62:c8:95:c5:58:90:
38:8d:58:2d:66:a8:58:05:82:fa:78:8c:6a:46:5f:4c:f5:59:
ab:94:fa:e2:af:d6:71:fb:4d:1c:36:b9:18:cb:12:26:fe:ff:
ca:a6:d7:51:54:66:f0:e2:1a:eb:1f:00:fb:84:57:cb:49:45:
07:f1:8c:cc:d6:65:b4:5c:69:81:61:43:33:fc:0e:ec:21:b5:
07:30:41:c3:a8:aa:df:48:09:10:89:15:14:77:ef:aa:ff:a9:
f5:ff:4c:ce:6f:3c:ce:2b:bf:82:86:b8:cc:6a:6a:43:0b:d0:
9c:48:e2:1a:c9:9b:d1:c1:6c:f9:19:58:e2:17:4e:c6:9d:5d:
ee:40:3a:fd:c7:e4:91:43:7f:49:d4:63:89:96:c9:f2:d9:cf:
4c:90:46:91:5c:49:9d:73:39:6c:77:76:b1:c2:ab:d9:96:8a:
f5:0d:bc:8e:80:a3:f2:43:74:61:d0:a7:21:c2:ea:dd:05:8e:
ee:d3:72:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtdCkC3BMLRCN4IarpzioMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhN2RmMzVkNDFiNDA2MmMxMGZjMTE4MTg5ZGU0N2RhMjcw
OTZkYjgwHhcNMjUwNjE0MDgwMDE4WhcNMjUwNjE1MDgwMDE4WjAzMTEwLwYDVQQD
EyhmMGZiYmNiY2M1ZmJlNzdmMmIxZjYyYjJhNWRkZDBmMmEwYWMwMDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuloEOdrapuVbI5ni4SwCrxpXi6Ec
kE4Dteq9yc1mVLmYYusFejJS27DPv/osuBvcs9vZ9vwwGoN927XcaNs3wOgdZwDh
xjsF+tp6FU0Pf1AFaWw1/uqydY/RJ0+qZiN/TIeyFknJcVgPTxtump7nBs54sI9B
LdCiKFf7p2nf5quTayFh2QzahrfNpeHdwTBGtwuR35Gx3LTDqC6j0a2m4RPrNCYR
Ufi775nRtE8euEf/8TsKLTPfs+Zj3MMAzbmvMvwKcILdyDcMl79D4Iiin9clQwwr
/bxGrnMWOi83Is2whVqueXlSIUtpJzluQqeLo92kvN9g0uBZk+ZCupQ8XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPD7vLzF++d/Kx9isqXd0PKgrAA9MB8GA1UdIwQY
MBaAFCp9811BtAYsEPwRgYneR9onCW24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS24zelhVRzBCaXdRX0JHQmlkNUgyaWNKYmJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lZDMzNGMtZDc5Ny00MjVhLTkzYTEt
YTljYzg5ZDQ0YjI1LzEvS24zelhVRzBCaXdRX0JHQmlkNUgyaWNKYmJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9lZDMzNGMtZDc5Ny00MjVhLTkzYTEtYTljYzg5ZDQ0YjI1
LzEvS24zelhVRzBCaXdRX0JHQmlkNUgyaWNKYmJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbW7t3Sd
xNV8hTUx68L/4Eik9uEiUBH29Saq1jw8g7jIdYt6li7+td1eoiNF0up9p/kVo84v
CK71h4PESh0fVcckYsiVxViQOI1YLWaoWAWC+niMakZfTPVZq5T64q/WcftNHDa5
GMsSJv7/yqbXUVRm8OIa6x8A+4RXy0lFB/GMzNZltFxpgWFDM/wO7CG1BzBBw6iq
30gJEIkVFHfvqv+p9f9Mzm88ziu/goa4zGpqQwvQnEjiGsmb0cFs+RlY4hdOxp1d
7kA6/cfkkUN/SdRjiZbJ8tnPTJBGkVxJnXM5bHd2scKr2ZaK9Q28joCj8kN0YdCn
IcLq3QWO7tNysA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:24:27 2025 by rpki-client