Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
File: KslDUX9eO3R-dTAyB4mgNES0ORI.mft (raw, json)
Hash identifier: nYPiWMIdO9pC3bUm79mQCM3I14bRe4WU+O0FhZVAnJw=
Subject key identifier: 97:94:75:D3:6B:DA:A7:B9:A9:94:BC:85:52:F6:AE:84:02:66:19:54
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 01977CE7ACC174ABAA53A27887DCDD86AC60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
Manifest number: 0E86
Signing time: Tue 17 Jun 2025 08:00:47 +0000
Manifest this update: Tue 17 Jun 2025 08:00:47 +0000
Manifest next update: Wed 18 Jun 2025 08:00:47 +0000
Files and hashes: 1: KslDUX9eO3R-dTAyB4mgNES0ORI.crl (hash: m5ykj370iudOBEORSdaAkcVWXCsT2MfUPfPanIYvAFI=)
2: hRopNkKlsL4OwqAqAiJ3QXD2oug.roa (hash: NMdRr2OaOIcyhizjr1sKy4ahHmQgfdQZAiHU+pJ6knM=)
3: wXKkmEzVnT6wH-e4RUZ5ISziflM.roa (hash: 0ibg6oISPGaXyJMIkBYpRfjFyr2Dyc5Kyu9O/zaq9rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:e7:ac:c1:74:ab:aa:53:a2:78:87:dc:dd:86:ac:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Jun 17 08:00:47 2025 GMT
Not After : Jun 18 08:00:47 2025 GMT
Subject: CN=979475d36bdaa7b9a994bc8552f6ae8402661954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bf:fe:7b:9f:67:14:fc:f5:25:34:e1:c3:55:
e3:ef:76:c6:9a:d0:c1:b8:88:41:39:6e:d2:96:d1:
22:fb:7c:cb:e5:52:cb:dc:c2:4f:3d:8a:52:94:5c:
2a:70:dd:f5:7f:09:12:a8:b5:a9:7c:b0:43:a6:86:
d7:5c:3c:45:f1:39:1b:7e:51:ba:57:b4:d5:e4:c1:
79:bf:26:8f:e8:c9:af:de:c4:c9:3f:de:ea:90:ad:
70:e4:00:3b:07:05:21:32:33:b4:11:4d:a1:00:7b:
ad:c3:d1:6a:cb:7c:20:42:55:2e:5b:1f:a2:da:c0:
1f:66:86:36:2d:1c:60:07:38:17:db:90:20:d4:66:
83:86:8e:52:30:47:b3:88:84:0c:76:2a:a0:4e:fb:
92:e3:ee:e4:49:b9:8f:13:85:7e:6b:84:2e:0d:46:
5a:15:1c:0c:1b:81:c6:0d:2d:3c:c0:55:79:55:70:
e1:0f:55:95:9b:5f:28:b3:80:99:a8:f6:1b:b2:21:
50:91:c3:69:0d:52:0c:66:79:50:5a:2c:09:0f:93:
e0:9b:86:6e:44:e7:8c:5b:70:77:8a:94:04:8b:8a:
b4:f4:29:0b:73:71:ab:85:8b:ec:88:5e:3c:01:82:
5a:cc:eb:30:28:8d:48:0a:ab:8c:36:7c:18:56:11:
15:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:94:75:D3:6B:DA:A7:B9:A9:94:BC:85:52:F6:AE:84:02:66:19:54
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:25:9d:86:5f:4b:06:4a:89:0a:c0:e9:3f:c0:83:41:e4:03:
f2:2f:46:2e:d0:3b:ae:08:74:6d:20:60:a7:77:5e:b5:9c:61:
78:22:60:82:0a:ff:9d:68:79:72:b4:22:1c:1c:13:38:8a:53:
da:90:3f:3b:ef:7f:bb:ab:20:18:5e:de:2e:2b:94:65:50:40:
f6:13:14:5b:b5:c1:71:10:2a:af:cc:8e:a6:55:d2:16:4f:03:
29:b9:54:b7:7c:bd:68:f3:57:fc:6e:20:7a:a0:f6:f3:7a:40:
6b:e9:ee:73:b3:b2:d4:c7:2e:e5:bc:af:d7:91:88:9b:94:81:
8a:cd:f4:fc:f9:c7:4d:7a:03:b7:9e:3f:b1:44:15:bc:f0:4e:
a5:a4:1c:47:4b:6c:b3:82:f1:c6:23:c5:d0:da:58:54:54:e9:
dc:b1:1a:e5:f0:4f:b7:c5:a0:f9:0c:aa:f7:61:ab:2b:81:e8:
64:78:04:6c:2c:6f:bf:2c:d3:e2:73:65:42:a1:cc:73:fa:99:
45:33:e2:e0:e2:c8:5e:5e:6b:5a:9e:ab:25:be:7c:72:50:2a:
41:93:bc:c9:7e:5f:17:47:c5:84:07:a5:24:c0:37:80:cd:93:
52:9a:3c:a2:86:e5:61:5c:af:de:ba:a3:71:39:9f:5f:6a:ee:
01:14:7b:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd856zBdKuqU6J4h9zdhqxgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzk0MzUxN2Y1ZTNiNzQ3ZTc1MzAzMjA3ODlhMDM0NDRi
NDM5MTIwHhcNMjUwNjE3MDgwMDQ3WhcNMjUwNjE4MDgwMDQ3WjAzMTEwLwYDVQQD
Eyg5Nzk0NzVkMzZiZGFhN2I5YTk5NGJjODU1MmY2YWU4NDAyNjYxOTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3b/+e59nFPz1JTThw1Xj73bGmtDB
uIhBOW7SltEi+3zL5VLL3MJPPYpSlFwqcN31fwkSqLWpfLBDpobXXDxF8TkbflG6
V7TV5MF5vyaP6Mmv3sTJP97qkK1w5AA7BwUhMjO0EU2hAHutw9Fqy3wgQlUuWx+i
2sAfZoY2LRxgBzgX25Ag1GaDho5SMEeziIQMdiqgTvuS4+7kSbmPE4V+a4QuDUZa
FRwMG4HGDS08wFV5VXDhD1WVm18os4CZqPYbsiFQkcNpDVIMZnlQWiwJD5Pgm4Zu
ROeMW3B3ipQEi4q09CkLc3GrhYvsiF48AYJazOswKI1ICquMNnwYVhEV7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJeUddNr2qe5qZS8hVL2roQCZhlUMB8GA1UdIwQY
MBaAFCrJQ1F/Xjt0fnUwMgeJoDREtDkSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xOTUxMWQtNTM3ZS00MjQxLWEwZDgt
MmQ5MWNmZDdhYWY0LzEvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xOTUxMWQtNTM3ZS00MjQxLWEwZDgtMmQ5MWNmZDdhYWY0
LzEvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvyWdhl9L
BkqJCsDpP8CDQeQD8i9GLtA7rgh0bSBgp3detZxheCJgggr/nWh5crQiHBwTOIpT
2pA/O+9/u6sgGF7eLiuUZVBA9hMUW7XBcRAqr8yOplXSFk8DKblUt3y9aPNX/G4g
eqD283pAa+nuc7Oy1Mcu5byv15GIm5SBis30/PnHTXoDt54/sUQVvPBOpaQcR0ts
s4LxxiPF0NpYVFTp3LEa5fBPt8Wg+Qyq92GrK4HoZHgEbCxvvyzT4nNlQqHMc/qZ
RTPi4OLIXl5rWp6rJb58clAqQZO8yX5fF0fFhAelJMA3gM2TUpo8ooblYVyv3rqj
cTmfX2ruARR7Hw==
-----END CERTIFICATE-----
Generated at Tue Jun 17 15:39:22 2025 by rpki-client