Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
File: K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft (raw, json)
Hash identifier: /telS5Bl+4ME/7VDkUAUMfE5df8KgNMbZkRkOPXp1xE=
Subject key identifier: D3:48:41:16:24:D7:35:03:5A:9E:33:56:52:95:5E:80:BA:77:34:BD
Authority key identifier: 2B:73:FE:15:C1:57:F0:6F:E9:AB:21:95:DC:C3:BD:7B:D0:71:68:A0
Certificate issuer: /CN=2b73fe15c157f06fe9ab2195dcc3bd7bd07168a0
Certificate serial: 0197493105B07F818216530D0BAAE92297DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
Manifest number: 0527
Signing time: Sat 07 Jun 2025 07:00:38 +0000
Manifest this update: Sat 07 Jun 2025 07:00:38 +0000
Manifest next update: Sun 08 Jun 2025 07:00:38 +0000
Files and hashes: 1: K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl (hash: mgqcnODzLL9VENa3DxUkdzAfkKoX1M32nE61Wbl4r7k=)
2: WGdEQE91EliXk0v4x3jIiAr2OTM.roa (hash: gEyRBLqxqp6b0VNBQfdpnj0lqDeqco4Wbi4LrUK1SDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:05:b0:7f:81:82:16:53:0d:0b:aa:e9:22:97:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b73fe15c157f06fe9ab2195dcc3bd7bd07168a0
Validity
Not Before: Jun 7 07:00:38 2025 GMT
Not After : Jun 8 07:00:38 2025 GMT
Subject: CN=d348411624d735035a9e335652955e80ba7734bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b0:b8:a2:d4:f7:bf:de:ea:e0:60:ff:d7:4a:
d3:46:ae:ba:ce:2d:2f:2a:db:6a:ec:25:ce:ff:08:
63:a6:e1:3f:6d:a2:c6:16:c6:50:4c:6d:6b:7e:81:
4a:e8:7f:28:2b:69:94:8c:ec:34:18:c1:47:07:39:
1c:8b:1c:4f:df:51:dd:6d:2d:c3:a7:e1:74:dc:24:
80:10:76:2e:64:40:83:f3:12:aa:08:9b:85:1e:a4:
dd:d5:1e:3e:b5:a8:ac:64:15:e4:a0:0e:d9:90:95:
36:d9:77:ce:ce:8b:c6:88:16:d9:71:e1:a9:c8:3e:
af:3b:aa:8b:49:c4:a9:55:c1:f8:63:31:b8:a2:ce:
fa:30:b9:2c:e6:17:2d:44:b9:49:cc:95:98:50:ac:
03:39:fb:b4:53:dd:96:47:2d:7f:d8:f6:45:e6:18:
6e:75:98:1f:d4:ca:25:94:89:54:a5:11:1a:7b:fa:
8c:59:ea:4b:68:51:d7:ff:87:46:61:3d:e8:ca:72:
53:8b:cf:54:fa:67:6b:81:67:6e:c5:05:65:a3:4a:
91:95:1b:34:06:fd:79:4c:c6:cc:7b:cd:6b:98:0d:
ba:59:5b:b9:8e:cf:f9:f2:6b:76:9c:c8:55:22:d7:
2a:d5:3f:17:30:cc:0a:89:d0:8b:c9:2d:32:55:6d:
0b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:48:41:16:24:D7:35:03:5A:9E:33:56:52:95:5E:80:BA:77:34:BD
X509v3 Authority Key Identifier:
keyid:2B:73:FE:15:C1:57:F0:6F:E9:AB:21:95:DC:C3:BD:7B:D0:71:68:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:08:b9:77:91:e5:d1:b8:fb:dc:19:ab:bc:7a:1f:94:d3:95:
1e:35:04:15:1a:6c:6f:96:1c:0f:1e:83:b0:b9:b6:d9:e2:55:
a4:da:00:73:f1:4f:96:84:a9:97:e9:e3:6a:99:f5:7e:2c:3a:
7b:95:96:1f:0c:55:66:77:a5:99:8f:09:56:64:a0:8d:2e:83:
61:86:4f:99:2c:f5:68:21:9a:fa:c1:bf:0d:0d:8b:99:93:65:
f5:6e:a7:c5:d8:2a:55:09:e2:65:be:f0:36:f8:0a:a8:21:59:
3d:1d:11:a5:14:55:70:22:28:28:b9:ff:95:16:5d:89:87:12:
9c:11:78:1b:39:2c:72:49:4a:00:43:0c:02:9d:60:e1:ad:e6:
06:a2:aa:16:11:e2:d7:4d:6d:65:83:1d:ba:2f:68:d7:31:9d:
1a:1d:ca:3f:3b:50:70:1b:18:4b:3e:43:e0:1b:2d:ae:22:5b:
9c:76:39:33:e2:8a:e8:cf:d0:9a:46:12:2a:c4:2d:ce:73:67:
86:e5:68:02:76:97:b9:a3:88:e7:54:88:25:dc:6c:25:cf:96:
d1:65:7c:cc:f6:24:b0:5e:f0:9c:35:d6:d9:20:d7:8d:41:56:
49:7a:64:73:2b:a6:1c:38:a6:5f:48:f6:c8:5c:ec:be:9f:f0:
81:25:70:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMQWwf4GCFlMNC6rpIpfcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNzNmZTE1YzE1N2YwNmZlOWFiMjE5NWRjYzNiZDdiZDA3
MTY4YTAwHhcNMjUwNjA3MDcwMDM4WhcNMjUwNjA4MDcwMDM4WjAzMTEwLwYDVQQD
EyhkMzQ4NDExNjI0ZDczNTAzNWE5ZTMzNTY1Mjk1NWU4MGJhNzczNGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLC4otT3v97q4GD/10rTRq66zi0v
Kttq7CXO/whjpuE/baLGFsZQTG1rfoFK6H8oK2mUjOw0GMFHBzkcixxP31HdbS3D
p+F03CSAEHYuZECD8xKqCJuFHqTd1R4+taisZBXkoA7ZkJU22XfOzovGiBbZceGp
yD6vO6qLScSpVcH4YzG4os76MLks5hctRLlJzJWYUKwDOfu0U92WRy1/2PZF5hhu
dZgf1MollIlUpREae/qMWepLaFHX/4dGYT3oynJTi89U+mdrgWduxQVlo0qRlRs0
Bv15TMbMe81rmA26WVu5js/58mt2nMhVItcq1T8XMMwKidCLyS0yVW0LtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNIQRYk1zUDWp4zVlKVXoC6dzS9MB8GA1UdIwQY
MBaAFCtz/hXBV/Bv6ashldzDvXvQcWigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzNQLUZjRlg4R19wcXlHVjNNTzllOUJ4YUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82ZGQxMGEtNGY1Zi00OTMyLWExNjAt
MDUxNzFiMWIwZWZkLzEvSzNQLUZjRlg4R19wcXlHVjNNTzllOUJ4YUtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi82ZGQxMGEtNGY1Zi00OTMyLWExNjAtMDUxNzFiMWIwZWZk
LzEvSzNQLUZjRlg4R19wcXlHVjNNTzllOUJ4YUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgi5d5Hl
0bj73BmrvHoflNOVHjUEFRpsb5YcDx6DsLm22eJVpNoAc/FPloSpl+njapn1fiw6
e5WWHwxVZnelmY8JVmSgjS6DYYZPmSz1aCGa+sG/DQ2LmZNl9W6nxdgqVQniZb7w
NvgKqCFZPR0RpRRVcCIoKLn/lRZdiYcSnBF4GzkscklKAEMMAp1g4a3mBqKqFhHi
101tZYMdui9o1zGdGh3KPztQcBsYSz5D4BstriJbnHY5M+KK6M/QmkYSKsQtznNn
huVoAnaXuaOI51SIJdxsJc+W0WV8zPYksF7wnDXW2SDXjUFWSXpkcyumHDimX0j2
yFzsvp/wgSVwlQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:20:22 2025 by rpki-client