Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
File: KNyB6jid1qrE77w01S13jrp6f8Q.mft (raw, json)
Hash identifier: uAEMewhr4tWeW4706Fl1aTwH/O3qj3bb6/QthFMQRvE=
Subject key identifier: 84:06:23:7C:5B:A4:8A:AA:48:CC:F7:53:32:7A:23:4A:31:78:5B:82
Authority key identifier: 28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
Certificate issuer: /CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Certificate serial: 01975C4A4A07C59F598BE1C2D4252F3A5CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
Manifest number: 1509
Signing time: Wed 11 Jun 2025 00:01:01 +0000
Manifest this update: Wed 11 Jun 2025 00:01:01 +0000
Manifest next update: Thu 12 Jun 2025 00:01:01 +0000
Files and hashes: 1: KNyB6jid1qrE77w01S13jrp6f8Q.crl (hash: ZHMF65Q5JH56clSouv4ppRlu5beKWTQIcMziS8aCTZQ=)
2: jzeNLpSr6ZsmMJ4zfkQyfVqA2rE.roa (hash: DE+RSjvcm7xMKntvmhh9CpWW/88iCje6f36L/NDszxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:4a:4a:07:c5:9f:59:8b:e1:c2:d4:25:2f:3a:5c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Validity
Not Before: Jun 11 00:01:01 2025 GMT
Not After : Jun 12 00:01:01 2025 GMT
Subject: CN=8406237c5ba48aaa48ccf753327a234a31785b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:f0:ba:b9:2a:19:08:b6:52:19:e5:98:84:
e2:60:4b:f7:2c:d2:33:cf:42:a7:d9:e8:66:f0:e9:
11:e0:40:4d:fd:c3:67:68:10:83:f4:08:8d:1a:53:
6a:1f:6c:d6:10:ab:91:ee:3e:fb:1a:64:fc:78:e5:
7a:85:a1:1c:70:cf:7c:23:f8:32:a1:e3:20:9d:c1:
f3:28:7f:30:1a:37:94:25:a5:59:77:c5:a2:de:69:
60:13:ae:53:7f:c9:8c:88:51:d3:29:5d:53:df:54:
b5:bd:dd:91:61:e3:94:e7:de:7b:1b:76:9e:b6:32:
03:b2:e3:df:91:22:f1:08:00:49:ff:0b:d8:01:d2:
99:a6:a5:da:2a:56:07:8b:63:41:20:05:13:82:0b:
45:4e:a3:a1:c8:71:87:e1:07:ea:dc:82:99:a4:38:
44:5f:b0:ae:ca:e6:70:cd:1f:3b:ad:ee:5b:6b:25:
2c:a6:81:2d:99:a1:01:be:70:91:77:6b:2b:88:6c:
49:e2:44:54:59:fa:78:bd:e7:cb:5e:14:d2:93:5d:
a6:63:27:06:d6:fc:c6:00:80:4a:7f:37:b9:3b:78:
01:90:ed:a3:c9:34:98:c9:c5:d4:da:70:f5:29:f2:
ed:54:ca:95:93:95:c5:85:c7:ae:fa:59:72:47:81:
35:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:06:23:7C:5B:A4:8A:AA:48:CC:F7:53:32:7A:23:4A:31:78:5B:82
X509v3 Authority Key Identifier:
keyid:28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0d:25:17:db:03:c3:d4:43:ad:07:ef:b2:5f:db:4b:55:95:
1b:0a:83:68:46:6d:85:c7:d4:f5:a9:66:a4:a4:e4:de:43:30:
05:bd:57:7f:8b:d7:8c:65:05:a6:af:96:7b:65:44:29:f9:89:
49:84:53:52:d2:ae:a4:4e:35:47:62:3b:b2:6f:ff:4d:19:27:
b6:61:6b:a4:3e:72:bc:d5:99:2a:11:0c:cf:20:a3:4e:09:27:
b4:76:64:11:2b:f6:12:5d:b5:5e:ce:5a:ad:95:46:ed:10:c5:
d7:19:fc:59:81:b9:1e:01:73:e5:8e:a4:53:b7:ec:74:e1:0d:
67:01:61:1f:e1:5c:16:75:76:c6:4a:04:0e:ce:94:be:d7:08:
fe:37:2e:53:a2:2e:8a:66:a3:58:21:2e:b3:ab:a9:1c:5d:d8:
b6:29:d0:ae:b1:8a:b9:56:13:9b:22:b5:d3:59:c2:8a:e8:cf:
d8:f0:c3:10:29:9d:39:89:c5:49:9e:d9:7c:7d:87:c1:f9:25:
d4:c6:0b:28:72:da:5e:6a:e2:e8:5f:86:11:17:95:8a:f2:74:
39:98:3f:14:d6:d5:ed:2a:6b:ec:0a:a4:dd:12:c3:0b:71:93:
96:b4:91:23:75:f3:73:92:db:ec:a7:75:e9:f1:5f:4b:4d:5d:
24:29:02:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdcSkoHxZ9Zi+HC1CUvOlykMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZGM4MWVhMzg5ZGQ2YWFjNGVmYmMzNGQ1MmQ3NzhlYmE3
YTdmYzQwHhcNMjUwNjExMDAwMTAxWhcNMjUwNjEyMDAwMTAxWjAzMTEwLwYDVQQD
Eyg4NDA2MjM3YzViYTQ4YWFhNDhjY2Y3NTMzMjdhMjM0YTMxNzg1YjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7fwurkqGQi2UhnlmITiYEv3LNIz
z0Kn2ehm8OkR4EBN/cNnaBCD9AiNGlNqH2zWEKuR7j77GmT8eOV6haEccM98I/gy
oeMgncHzKH8wGjeUJaVZd8Wi3mlgE65Tf8mMiFHTKV1T31S1vd2RYeOU5957G3ae
tjIDsuPfkSLxCABJ/wvYAdKZpqXaKlYHi2NBIAUTggtFTqOhyHGH4Qfq3IKZpDhE
X7CuyuZwzR87re5bayUspoEtmaEBvnCRd2sriGxJ4kRUWfp4vefLXhTSk12mYycG
1vzGAIBKfze5O3gBkO2jyTSYycXU2nD1KfLtVMqVk5XFhceu+llyR4E1MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQGI3xbpIqqSMz3UzJ6I0oxeFuCMB8GA1UdIwQY
MBaAFCjcgeo4ndaqxO+8NNUtd466en/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9iNjljNmEtYjc4OC00YTFmLTljNWQt
YzA3ZmZmNzQ2OTM4LzEvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9iNjljNmEtYjc4OC00YTFmLTljNWQtYzA3ZmZmNzQ2OTM4
LzEvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdg0lF9sD
w9RDrQfvsl/bS1WVGwqDaEZthcfU9almpKTk3kMwBb1Xf4vXjGUFpq+We2VEKfmJ
SYRTUtKupE41R2I7sm//TRkntmFrpD5yvNWZKhEMzyCjTgkntHZkESv2El21Xs5a
rZVG7RDF1xn8WYG5HgFz5Y6kU7fsdOENZwFhH+FcFnV2xkoEDs6UvtcI/jcuU6Iu
imajWCEus6upHF3YtinQrrGKuVYTmyK101nCiujP2PDDECmdOYnFSZ7ZfH2Hwfkl
1MYLKHLaXmri6F+GEReVivJ0OZg/FNbV7Spr7Aqk3RLDC3GTlrSRI3Xzc5Lb7Kd1
6fFfS01dJCkCpQ==
-----END CERTIFICATE-----
Generated at Wed Jun 11 06:45:51 2025 by rpki-client