Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.mft
File: KgJUuuaZpsb8tn7kujsB0C8YCZ0.mft (raw, json)
Hash identifier: AfojnUU27SFgizqwA19vsAbh7Wupzi+X+Hyv7Sqf2xA=
Subject key identifier: 9F:DB:43:21:58:76:5D:E1:95:CB:02:B5:A8:14:37:E1:93:70:B9:32
Authority key identifier: 2A:02:54:BA:E6:99:A6:C6:FC:B6:7E:E4:BA:3B:01:D0:2F:18:09:9D
Certificate issuer: /CN=2a0254bae699a6c6fcb67ee4ba3b01d02f18099d
Certificate serial: 01974B8DB562D9DE3AD5692A34E4A69D45CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgJUuuaZpsb8tn7kujsB0C8YCZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.mft
Manifest number: 0BFE
Signing time: Sat 07 Jun 2025 18:01:07 +0000
Manifest this update: Sat 07 Jun 2025 18:01:07 +0000
Manifest next update: Sun 08 Jun 2025 18:01:07 +0000
Files and hashes: 1: KgJUuuaZpsb8tn7kujsB0C8YCZ0.crl (hash: iKjgh9tBtsx7EAAyD3ppB+LsliKRHEi6ZVrFlTEwaS0=)
2: ZRzKxy1zMBZAKlirnj9f4gr9p-8.roa (hash: jpk5x0LJxA24GS/spf+1miQnvaNt5hobGzGQml9l9aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgJUuuaZpsb8tn7kujsB0C8YCZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:b5:62:d9:de:3a:d5:69:2a:34:e4:a6:9d:45:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a0254bae699a6c6fcb67ee4ba3b01d02f18099d
Validity
Not Before: Jun 7 18:01:07 2025 GMT
Not After : Jun 8 18:01:07 2025 GMT
Subject: CN=9fdb432158765de195cb02b5a81437e19370b932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:a4:eb:9b:17:5e:26:05:bf:17:77:dc:c2:
7c:d0:ee:c6:07:9b:28:0c:4e:d6:2f:33:c8:ec:da:
89:09:da:e0:73:31:24:94:77:05:bc:7a:80:8f:2c:
a9:42:6b:7b:e4:7f:1b:ff:95:b9:4e:84:f3:95:5f:
34:40:5c:e0:42:fa:57:ef:50:76:39:e7:ba:f5:8f:
70:1b:73:b2:c3:f4:ed:90:4d:78:9c:d6:23:68:7f:
db:e0:44:24:6b:5f:31:95:97:71:0b:5a:4a:eb:eb:
81:a0:75:f5:90:72:f0:e8:a1:49:1a:b0:d7:28:dd:
e1:6e:54:d3:9e:25:64:35:d8:26:14:7a:6f:d7:63:
a1:73:65:98:8c:0d:04:9e:63:c2:63:09:68:21:9d:
76:9d:50:89:e6:50:c6:0a:98:39:94:27:e2:bc:d4:
16:26:75:f2:ac:52:b3:41:d6:0e:21:a5:83:b1:d7:
67:0e:9a:1f:77:93:c1:8a:1a:98:53:3b:00:ef:01:
83:f3:b2:62:71:cb:2f:43:bc:6a:5a:11:e5:23:13:
c3:0b:12:c2:2d:e0:1d:20:56:81:50:46:3b:43:07:
ab:1b:9e:6e:ef:14:a8:ca:e5:44:43:df:bf:6e:77:
2a:0a:e5:ea:da:ec:a8:78:ce:1e:dd:eb:26:40:49:
b1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DB:43:21:58:76:5D:E1:95:CB:02:B5:A8:14:37:E1:93:70:B9:32
X509v3 Authority Key Identifier:
keyid:2A:02:54:BA:E6:99:A6:C6:FC:B6:7E:E4:BA:3B:01:D0:2F:18:09:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgJUuuaZpsb8tn7kujsB0C8YCZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:fb:0b:42:4e:51:d7:e5:06:fc:86:4d:33:5d:e2:ec:a0:8b:
8e:cf:d7:d3:dd:b4:7f:91:5d:ba:41:ec:48:0c:d2:f4:da:e6:
0e:ca:59:d8:17:4e:f8:ef:72:fe:9a:3d:c5:bf:51:21:ee:35:
d3:8b:c1:d2:d9:67:35:44:8a:42:82:79:19:45:6c:c7:9e:da:
98:42:56:82:a0:a7:82:83:4e:6b:98:12:d2:18:93:d3:32:16:
95:9b:52:02:a6:cb:6a:6a:4d:6c:79:a6:ba:4c:94:de:22:6b:
fb:88:78:0a:53:6f:6b:cc:a8:f3:c7:66:a0:6d:6b:27:c9:9d:
dc:66:e0:a8:9d:89:15:8a:6d:c7:f5:bf:f4:ea:81:2c:bc:75:
f5:a0:1d:20:94:b3:80:04:55:c7:96:ca:6e:f2:99:08:74:6a:
69:56:81:a4:0f:d4:c8:95:8e:1f:98:6d:f7:2b:21:6d:bb:d0:
d2:76:71:31:1b:60:58:e6:dd:c9:57:81:be:32:1f:f3:65:21:
1a:ad:07:3b:c0:89:b8:80:bf:d3:27:db:89:7d:a0:08:96:42:
69:60:7e:12:f0:e1:28:74:68:65:22:de:56:a3:ca:1b:b0:b6:
e6:7f:e1:1f:c9:e1:29:bf:66:f1:63:68:07:c0:e0:6f:04:87:
e4:60:45:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjbVi2d461WkqNOSmnUXMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMDI1NGJhZTY5OWE2YzZmY2I2N2VlNGJhM2IwMWQwMmYx
ODA5OWQwHhcNMjUwNjA3MTgwMTA3WhcNMjUwNjA4MTgwMTA3WjAzMTEwLwYDVQQD
Eyg5ZmRiNDMyMTU4NzY1ZGUxOTVjYjAyYjVhODE0MzdlMTkzNzBiOTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0Gk65sXXiYFvxd33MJ80O7GB5so
DE7WLzPI7NqJCdrgczEklHcFvHqAjyypQmt75H8b/5W5ToTzlV80QFzgQvpX71B2
Oee69Y9wG3Oyw/TtkE14nNYjaH/b4EQka18xlZdxC1pK6+uBoHX1kHLw6KFJGrDX
KN3hblTTniVkNdgmFHpv12Ohc2WYjA0EnmPCYwloIZ12nVCJ5lDGCpg5lCfivNQW
JnXyrFKzQdYOIaWDsddnDpofd5PBihqYUzsA7wGD87JiccsvQ7xqWhHlIxPDCxLC
LeAdIFaBUEY7QwerG55u7xSoyuVEQ9+/bncqCuXq2uyoeM4e3esmQEmxIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/bQyFYdl3hlcsCtagUN+GTcLkyMB8GA1UdIwQY
MBaAFCoCVLrmmabG/LZ+5Lo7AdAvGAmdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2dKVXV1YVpwc2I4dG43a3Vqc0IwQzhZQ1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lNGM4YmMtNWJhMy00ZmMyLWJmNGEt
YTU1ODFiM2JlMGNlLzEvS2dKVXV1YVpwc2I4dG43a3Vqc0IwQzhZQ1owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9lNGM4YmMtNWJhMy00ZmMyLWJmNGEtYTU1ODFiM2JlMGNl
LzEvS2dKVXV1YVpwc2I4dG43a3Vqc0IwQzhZQ1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvsLQk5R
1+UG/IZNM13i7KCLjs/X0920f5FdukHsSAzS9NrmDspZ2BdO+O9y/po9xb9RIe41
04vB0tlnNUSKQoJ5GUVsx57amEJWgqCngoNOa5gS0hiT0zIWlZtSAqbLampNbHmm
ukyU3iJr+4h4ClNva8yo88dmoG1rJ8md3GbgqJ2JFYptx/W/9OqBLLx19aAdIJSz
gARVx5bKbvKZCHRqaVaBpA/UyJWOH5ht9yshbbvQ0nZxMRtgWObdyVeBvjIf82Uh
Gq0HO8CJuIC/0yfbiX2gCJZCaWB+EvDhKHRoZSLeVqPKG7C25n/hH8nhKb9m8WNo
B8DgbwSH5GBFoA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:33:53 2025 by rpki-client