Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
File: kkQvHPx17REAE4d5MKKdhvieu7Y.mft (raw, json)
Hash identifier: r4Z+J57TaZGZq2dibvGK+VmOYELrtnF+qyeaZ7i/6BQ=
Subject key identifier: CB:A1:B5:CD:30:35:B6:C0:58:9E:DF:C7:F4:1B:65:3A:37:D6:4E:ED
Authority key identifier: 92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
Certificate issuer: /CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Certificate serial: 01984966C4E15695966AE6203E2EB64B80DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
Manifest number: 0CCD
Signing time: Sun 27 Jul 2025 01:02:08 +0000
Manifest this update: Sun 27 Jul 2025 01:02:08 +0000
Manifest next update: Mon 28 Jul 2025 01:02:08 +0000
Files and hashes: 1: kkQvHPx17REAE4d5MKKdhvieu7Y.crl (hash: RztW1EpKv/j7MMC15Q2BOYwlnYdcX9LEoxvpWhnkrpE=)
2: qZc8LbpaDAe8YC_wNESeZVdptts.roa (hash: rHoCkpXeQIISTyOKdyHTZYhLfz5LjhLjx8VWRXWEabQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:c4:e1:56:95:96:6a:e6:20:3e:2e:b6:4b:80:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Validity
Not Before: Jul 27 01:02:08 2025 GMT
Not After : Jul 28 01:02:08 2025 GMT
Subject: CN=cba1b5cd3035b6c0589edfc7f41b653a37d64eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:92:36:21:40:28:84:73:11:51:40:d8:29:
51:b8:02:95:fd:fb:28:83:84:48:64:43:4b:72:24:
93:f2:b9:8e:10:2b:10:9b:ab:74:16:92:28:7b:f2:
b2:c9:40:a7:6f:35:22:5a:38:74:14:46:77:14:e0:
39:33:91:bf:5b:d2:bb:d5:a8:ae:45:7a:50:57:00:
88:08:63:7a:88:0c:cf:c7:26:32:65:b1:ab:47:e2:
a4:1f:26:59:45:dd:e6:ba:8e:a6:a6:ff:37:58:51:
0e:e6:73:5d:de:e7:29:fd:1b:ee:07:da:52:d9:b4:
ce:3d:c5:ec:47:27:85:18:b0:02:07:0d:6b:da:cc:
53:75:cd:72:aa:fb:7a:1d:18:2f:bb:90:3b:af:83:
3d:c3:52:4f:c7:d8:1c:16:3b:14:0b:5c:1d:53:d8:
5e:a2:0a:75:a1:f2:71:b6:90:40:cc:03:32:b2:2f:
0c:16:fb:c7:7a:89:50:0d:38:df:78:7e:ce:d3:3f:
11:b3:6e:65:a5:80:2c:db:23:ea:ea:0a:1a:7d:b5:
76:3e:19:d6:69:73:8c:c4:be:db:ff:00:4c:b3:c5:
f0:3c:b1:b4:96:24:84:d6:c9:93:a7:98:a8:89:d7:
7c:25:40:0a:7c:ec:28:9e:8b:1c:3c:d7:91:90:a1:
5f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A1:B5:CD:30:35:B6:C0:58:9E:DF:C7:F4:1B:65:3A:37:D6:4E:ED
X509v3 Authority Key Identifier:
keyid:92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:61:3b:31:06:14:c1:b3:b8:f8:06:35:e1:ed:72:2a:85:f4:
f5:51:1f:c9:5c:11:bf:8b:4f:8e:a2:83:53:67:26:f4:7e:97:
94:43:84:e4:b0:eb:92:b7:94:78:20:bd:06:8e:96:fd:ef:3a:
98:d6:6b:8b:c8:22:36:9f:f3:68:bb:19:36:d7:9b:75:b3:cf:
da:f8:19:31:1f:8b:22:37:50:18:37:64:86:04:46:44:9f:0d:
49:1d:5b:ca:6c:c5:d8:35:8a:2b:df:e0:c8:47:d7:6d:0f:09:
1f:5f:02:84:8b:b7:a6:dc:b2:25:22:ec:c3:22:c5:19:a2:91:
81:1d:5a:9f:5a:fb:8e:1b:71:7d:96:b2:97:41:dc:a8:e0:ac:
fa:8b:34:f9:1e:e4:82:a7:38:79:92:33:6c:6a:3d:49:1c:bf:
ed:6e:2e:86:97:ef:97:c3:75:f9:22:96:37:e8:4b:d5:91:68:
05:82:df:37:09:93:e5:40:ed:a1:90:09:e6:ce:09:4e:15:a7:
b3:87:45:0b:41:a0:0b:2f:20:4c:20:d5:a3:93:10:48:b5:a5:
8e:d6:4c:b4:ba:45:cf:37:b7:af:33:ac:bf:f6:2c:86:aa:65:
4d:63:94:65:e8:24:04:ca:fb:15:68:f1:6e:69:68:0f:eb:60:
7e:e2:a9:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZsThVpWWauYgPi62S4DeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDQyZjFjZmM3NWVkMTEwMDEzODc3OTMwYTI5ZDg2Zjg5
ZWJiYjYwHhcNMjUwNzI3MDEwMjA4WhcNMjUwNzI4MDEwMjA4WjAzMTEwLwYDVQQD
EyhjYmExYjVjZDMwMzViNmMwNTg5ZWRmYzdmNDFiNjUzYTM3ZDY0ZWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthqSNiFAKIRzEVFA2ClRuAKV/fso
g4RIZENLciST8rmOECsQm6t0FpIoe/KyyUCnbzUiWjh0FEZ3FOA5M5G/W9K71aiu
RXpQVwCICGN6iAzPxyYyZbGrR+KkHyZZRd3muo6mpv83WFEO5nNd3ucp/RvuB9pS
2bTOPcXsRyeFGLACBw1r2sxTdc1yqvt6HRgvu5A7r4M9w1JPx9gcFjsUC1wdU9he
ogp1ofJxtpBAzAMysi8MFvvHeolQDTjfeH7O0z8Rs25lpYAs2yPq6goafbV2PhnW
aXOMxL7b/wBMs8XwPLG0liSE1smTp5ioidd8JUAKfOwonoscPNeRkKFfiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuhtc0wNbbAWJ7fx/QbZTo31k7tMB8GA1UdIwQY
MBaAFJJELxz8de0RABOHeTCinYb4nru2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2tRdkhQeDE3UkVBRTRkNU1LS2RodmlldTdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85YWY4ODEtYmEwZC00NTFkLWE2OWIt
MDBmOTZmZmNmNzM0LzEva2tRdkhQeDE3UkVBRTRkNU1LS2RodmlldTdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85YWY4ODEtYmEwZC00NTFkLWE2OWItMDBmOTZmZmNmNzM0
LzEva2tRdkhQeDE3UkVBRTRkNU1LS2RodmlldTdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu2E7MQYU
wbO4+AY14e1yKoX09VEfyVwRv4tPjqKDU2cm9H6XlEOE5LDrkreUeCC9Bo6W/e86
mNZri8giNp/zaLsZNtebdbPP2vgZMR+LIjdQGDdkhgRGRJ8NSR1bymzF2DWKK9/g
yEfXbQ8JH18ChIu3ptyyJSLswyLFGaKRgR1an1r7jhtxfZayl0HcqOCs+os0+R7k
gqc4eZIzbGo9SRy/7W4uhpfvl8N1+SKWN+hL1ZFoBYLfNwmT5UDtoZAJ5s4JThWn
s4dFC0GgCy8gTCDVo5MQSLWljtZMtLpFzze3rzOsv/YshqplTWOUZegkBMr7FWjx
bmloD+tgfuKpVA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:30:19 2025 by rpki-client