Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
File: K76x-Fza0UW9L5et3QlB0y11jec.mft (raw, json)
Hash identifier: 9OR6pody5u3/yqzyaq4Vu9sS+V6RWibIr6U6FcyfyZs=
Subject key identifier: 6D:AB:34:C3:CD:95:7F:9B:89:0D:85:9C:9D:08:B5:D8:31:7C:25:7D
Authority key identifier: 2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
Certificate issuer: /CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Certificate serial: 019746D487D9B172F4DC627A16F1398EC061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
Manifest number: 02E1
Signing time: Fri 06 Jun 2025 20:00:22 +0000
Manifest this update: Fri 06 Jun 2025 20:00:22 +0000
Manifest next update: Sat 07 Jun 2025 20:00:22 +0000
Files and hashes: 1: 8Zt8UHUusx_XQrfwEnBO0zgttVQ.roa (hash: 99GtToN6lghv1t5UehgYXJgLt9TbyulNLZ07g/FzqO4=)
2: K76x-Fza0UW9L5et3QlB0y11jec.crl (hash: P1Q9Fy8oPsxibZ2ir8awwVzjDVGATXQnLIkGn858ysE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:87:d9:b1:72:f4:dc:62:7a:16:f1:39:8e:c0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Validity
Not Before: Jun 6 20:00:22 2025 GMT
Not After : Jun 7 20:00:22 2025 GMT
Subject: CN=6dab34c3cd957f9b890d859c9d08b5d8317c257d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:e0:8a:b3:99:4a:fa:1c:60:fc:5a:27:36:
4a:27:ff:eb:9f:99:92:2f:7e:60:2a:be:c8:0b:09:
7d:bf:c1:dc:6a:9e:91:43:23:16:c7:93:15:9e:06:
79:8e:5f:a2:c1:34:79:73:55:02:ca:22:f7:51:c3:
12:cf:b0:b0:fb:7a:68:d8:57:4a:55:16:0e:e6:d3:
96:49:92:5c:0e:70:44:22:68:14:fa:38:ff:6a:cc:
6c:3c:be:b8:92:6d:77:3d:5c:6b:43:06:ac:9e:b7:
a5:37:4f:d5:18:29:20:89:e1:46:ac:39:54:aa:b8:
fa:98:95:c1:48:c4:fd:83:1d:1f:e5:73:66:67:2a:
2c:56:af:31:fe:4f:e2:74:15:73:bf:04:b1:90:f8:
18:27:4f:37:56:92:92:84:90:0c:55:72:d2:7c:46:
1d:84:75:f1:d4:4d:18:12:27:4f:15:0f:4d:ef:45:
4e:79:ef:d6:c2:4f:f0:61:96:b5:db:b8:7e:0f:c2:
e0:e4:6d:c4:e3:77:bf:6d:57:5d:41:8a:30:6c:ca:
55:4b:ef:52:86:6e:b9:2b:86:87:7e:f4:2e:4a:c0:
a0:5d:dc:2e:2f:c5:b0:54:ab:cf:e8:23:64:c2:48:
27:fd:39:d3:9b:c6:fa:b8:39:97:bd:ec:ea:b4:5e:
a1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AB:34:C3:CD:95:7F:9B:89:0D:85:9C:9D:08:B5:D8:31:7C:25:7D
X509v3 Authority Key Identifier:
keyid:2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:22:a1:de:4e:5c:c7:33:c4:30:f1:e3:3d:66:50:c3:74:e0:
a7:09:a1:80:d9:86:59:05:1e:44:9f:6a:15:d4:fa:d2:f2:83:
c5:91:48:eb:73:4b:be:ff:6d:a1:63:3f:89:bd:26:2e:86:58:
cd:36:2f:af:68:1f:2d:42:fb:71:fb:fc:c9:25:eb:14:2f:d0:
57:d3:43:d1:26:95:28:a6:81:85:dd:34:c4:dd:a2:2b:ef:c0:
0d:14:3c:1c:31:2c:a8:95:3c:8e:2c:dc:7b:d7:b9:1a:8f:b1:
2f:5b:2a:34:aa:9e:13:7f:64:85:86:78:2f:36:34:13:19:b2:
e6:57:98:fc:03:47:4c:b5:98:9a:51:7f:d3:02:09:70:11:cc:
67:6b:09:d7:e4:ce:a1:55:56:94:ac:5f:98:f2:c6:1a:20:0b:
a3:07:21:57:ab:ff:f4:a4:5b:b0:ee:11:81:e7:15:36:34:79:
45:ef:a7:4f:86:bd:be:42:54:80:8a:17:af:24:83:05:58:92:
22:6f:5b:bd:2e:a8:94:6b:0a:74:79:6e:5f:8d:5d:d7:a1:1c:
d7:69:5e:cc:d0:27:86:d3:c1:54:db:3a:b1:0b:6b:2c:68:47:
82:2e:37:6d:c7:e7:f1:de:ac:3d:d0:13:e4:67:11:1d:a3:7e:
97:09:37:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdG1IfZsXL03GJ6FvE5jsBhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYmViMWY4NWNkYWQxNDViZDJmOTdhZGRkMDk0MWQzMmQ3
NThkZTcwHhcNMjUwNjA2MjAwMDIyWhcNMjUwNjA3MjAwMDIyWjAzMTEwLwYDVQQD
Eyg2ZGFiMzRjM2NkOTU3ZjliODkwZDg1OWM5ZDA4YjVkODMxN2MyNTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkHgirOZSvocYPxaJzZKJ//rn5mS
L35gKr7ICwl9v8Hcap6RQyMWx5MVngZ5jl+iwTR5c1UCyiL3UcMSz7Cw+3po2FdK
VRYO5tOWSZJcDnBEImgU+jj/asxsPL64km13PVxrQwasnrelN0/VGCkgieFGrDlU
qrj6mJXBSMT9gx0f5XNmZyosVq8x/k/idBVzvwSxkPgYJ083VpKShJAMVXLSfEYd
hHXx1E0YEidPFQ9N70VOee/Wwk/wYZa127h+D8Lg5G3E43e/bVddQYowbMpVS+9S
hm65K4aHfvQuSsCgXdwuL8WwVKvP6CNkwkgn/TnTm8b6uDmXvezqtF6hYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2rNMPNlX+biQ2FnJ0ItdgxfCV9MB8GA1UdIwQY
MBaAFCu+sfhc2tFFvS+Xrd0JQdMtdY3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9hNWYyYmEtMzI2ZC00ODQ1LWI3YTMt
MDJmZDhlOTliZmUxLzEvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9hNWYyYmEtMzI2ZC00ODQ1LWI3YTMtMDJmZDhlOTliZmUx
LzEvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCKh3k5c
xzPEMPHjPWZQw3TgpwmhgNmGWQUeRJ9qFdT60vKDxZFI63NLvv9toWM/ib0mLoZY
zTYvr2gfLUL7cfv8ySXrFC/QV9ND0SaVKKaBhd00xN2iK+/ADRQ8HDEsqJU8jizc
e9e5Go+xL1sqNKqeE39khYZ4LzY0Exmy5leY/ANHTLWYmlF/0wIJcBHMZ2sJ1+TO
oVVWlKxfmPLGGiALowchV6v/9KRbsO4RgecVNjR5Re+nT4a9vkJUgIoXrySDBViS
Im9bvS6olGsKdHluX41d16Ec12lezNAnhtPBVNs6sQtrLGhHgi43bcfn8d6sPdAT
5GcRHaN+lwk3Zw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:30:53 2025 by rpki-client