Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
File: KCyT0maFJ4jkmYLZ96Yg222fWI0.mft (raw, json)
Hash identifier: FQh4sVeNUcplwoA5smA4Sz4t3PJEt6ioygZgEpp7/So=
Subject key identifier: E4:76:5E:F5:70:58:90:50:E1:D5:7F:CE:E7:4E:CE:3D:13:E0:3C:2D
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial: 01974441A23AE9CB7897BED2D782472EB4A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
Manifest number: 0A96
Signing time: Fri 06 Jun 2025 08:00:41 +0000
Manifest this update: Fri 06 Jun 2025 08:00:41 +0000
Manifest next update: Sat 07 Jun 2025 08:00:41 +0000
Files and hashes: 1: FCRIl5Vt1LPdQ6IrZpaUR6T2zRk.roa (hash: dI7TXuZLS0+y6udtXa2yol0ikupwyIZAlaHrmt/VDI0=)
2: KCyT0maFJ4jkmYLZ96Yg222fWI0.crl (hash: 9nhZvPFMLFoV4CGQWnYrrBm70CdTNZFLWYCrB+XlJZM=)
3: z3-dsZKj9j7nCKXS-M2vtq4aJrk.roa (hash: 28apFTsYy4v/YWMNME9MOhYcWfL7kBuIz5Y1C6vARJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:41:a2:3a:e9:cb:78:97:be:d2:d7:82:47:2e:b4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
Validity
Not Before: Jun 6 08:00:41 2025 GMT
Not After : Jun 7 08:00:41 2025 GMT
Subject: CN=e4765ef570589050e1d57fcee74ece3d13e03c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:1f:9d:dc:f7:27:5a:a3:12:8d:b5:d2:2f:
85:6b:4f:d8:99:59:88:fd:fd:73:73:57:d9:53:ea:
92:c0:9b:0d:27:03:a7:66:b0:36:68:3e:e0:5a:62:
bd:a0:26:ca:7c:11:f6:26:0e:49:a8:aa:6c:a3:5f:
cf:11:c9:02:71:48:dd:33:5b:f3:f8:10:06:9e:35:
5b:44:b1:b1:05:3f:bf:ed:f4:6b:26:4c:ff:3c:86:
5e:b4:67:00:2f:3e:19:44:70:c3:7c:30:10:a9:19:
b7:1d:c8:44:d3:81:c6:d4:87:bc:3d:ef:1a:51:95:
b2:11:e4:b3:db:0a:18:86:46:b2:69:5d:3f:d0:4b:
15:3a:c3:6d:77:fc:56:be:0e:1a:98:bc:ac:4c:35:
c7:3f:6c:25:bb:81:c2:d6:f2:e0:d3:37:e7:d2:00:
9c:8c:28:9f:83:fe:7c:a0:36:4e:14:77:13:4b:ac:
22:6c:c5:a0:83:14:0e:39:49:78:81:3d:a5:a4:09:
31:da:c5:f6:cd:8e:4d:de:20:32:b0:5c:df:85:6e:
c7:4e:45:51:dd:70:93:dd:19:f9:8e:80:d9:21:6a:
b9:ab:c8:68:e2:a4:d4:04:8b:7c:b7:b5:b6:ef:21:
12:01:f9:a2:48:42:77:d6:14:67:2d:4f:d6:db:d2:
c2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:76:5E:F5:70:58:90:50:E1:D5:7F:CE:E7:4E:CE:3D:13:E0:3C:2D
X509v3 Authority Key Identifier:
keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d9:a1:d0:6e:b1:10:e8:6d:99:fb:32:89:eb:b3:2c:40:9b:
ef:ab:54:eb:36:df:73:2a:2f:b9:39:29:07:be:b7:28:be:8d:
57:07:4d:fb:23:3b:93:a9:32:de:39:0e:ff:16:3d:70:c5:4f:
87:7f:cd:42:7b:49:e5:69:7d:68:c1:1e:8f:cd:08:be:94:f4:
b5:9a:62:4f:f0:e7:f7:98:73:d7:cb:73:fe:28:3e:00:fc:a8:
db:5e:32:1c:5f:fa:b8:a2:a2:63:b2:7b:fc:a6:05:c0:48:46:
d4:7d:08:3c:4f:84:c4:5c:0c:05:3e:c1:87:79:e8:11:d0:7d:
47:cf:42:91:bb:0f:75:92:ca:11:de:4e:3a:3c:2c:b7:a5:6f:
b9:63:cb:e0:e7:9a:13:ff:41:88:ec:21:df:19:98:fc:46:02:
42:11:53:23:3a:35:25:5a:f0:21:03:8f:f2:97:fb:00:79:02:
39:42:c5:a6:6d:9c:f8:21:11:6b:8f:f8:16:65:18:ae:38:47:
1a:1a:14:b3:3c:b4:aa:af:6c:00:3f:03:17:94:86:5c:68:c6:
b2:8b:c1:7b:8c:e9:9e:fe:d5:35:12:8f:93:bb:2c:85:ff:bd:
4c:18:9a:5c:7d:b0:0f:39:1e:46:c5:e0:af:c7:54:e1:c2:13:
cf:69:44:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdEQaI66ct4l77S14JHLrSoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MmM5M2QyNjY4NTI3ODhlNDk5ODJkOWY3YTYyMGRiNmQ5
ZjU4OGQwHhcNMjUwNjA2MDgwMDQxWhcNMjUwNjA3MDgwMDQxWjAzMTEwLwYDVQQD
EyhlNDc2NWVmNTcwNTg5MDUwZTFkNTdmY2VlNzRlY2UzZDEzZTAzYzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+gfndz3J1qjEo210i+Fa0/YmVmI
/f1zc1fZU+qSwJsNJwOnZrA2aD7gWmK9oCbKfBH2Jg5JqKpso1/PEckCcUjdM1vz
+BAGnjVbRLGxBT+/7fRrJkz/PIZetGcALz4ZRHDDfDAQqRm3HchE04HG1Ie8Pe8a
UZWyEeSz2woYhkayaV0/0EsVOsNtd/xWvg4amLysTDXHP2wlu4HC1vLg0zfn0gCc
jCifg/58oDZOFHcTS6wibMWggxQOOUl4gT2lpAkx2sX2zY5N3iAysFzfhW7HTkVR
3XCT3Rn5joDZIWq5q8ho4qTUBIt8t7W27yESAfmiSEJ31hRnLU/W29LCxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOR2XvVwWJBQ4dV/zudOzj0T4DwtMB8GA1UdIwQY
MBaAFCgsk9JmhSeI5JmC2femINttn1iNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8zODJmZjQtNGZjMi00MzAyLWFmOTAt
OTZhZGZmZTJlODZhLzEvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8zODJmZjQtNGZjMi00MzAyLWFmOTAtOTZhZGZmZTJlODZh
LzEvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtmh0G6x
EOhtmfsyieuzLECb76tU6zbfcyovuTkpB763KL6NVwdN+yM7k6ky3jkO/xY9cMVP
h3/NQntJ5Wl9aMEej80IvpT0tZpiT/Dn95hz18tz/ig+APyo214yHF/6uKKiY7J7
/KYFwEhG1H0IPE+ExFwMBT7Bh3noEdB9R89CkbsPdZLKEd5OOjwst6VvuWPL4Oea
E/9BiOwh3xmY/EYCQhFTIzo1JVrwIQOP8pf7AHkCOULFpm2c+CERa4/4FmUYrjhH
GhoUszy0qq9sAD8DF5SGXGjGsovBe4zpnv7VNRKPk7sshf+9TBiaXH2wDzkeRsXg
r8dU4cITz2lEBQ==
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:13:10 2025 by rpki-client