Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
File: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft (raw, json)
Hash identifier: MljmnT68CPC60l7710P+dQatRgXmi/zkuJQWkyMTdxY=
Subject key identifier: 48:70:B6:59:FF:A0:D6:74:5D:BA:96:49:4B:C4:C7:D1:08:B4:6A:08
Authority key identifier: 93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
Certificate issuer: /CN=936cb336c1beb71d4fbbaae243b23352c6270061
Certificate serial: 01974DE973869299FE285EFE60110DD4ED84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
Manifest number: 0DD9
Signing time: Sun 08 Jun 2025 05:00:34 +0000
Manifest this update: Sun 08 Jun 2025 05:00:34 +0000
Manifest next update: Mon 09 Jun 2025 05:00:34 +0000
Files and hashes: 1: 77Da0cUu_C8djIEncMxzodElOpE.roa (hash: O6xd7yyxwxYfy10toui/N1cFeV/zSXBxnL9OigcdZr0=)
2: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl (hash: V9JiRiItrZyhI3FE89aYygpSKsFlaxaCKG10JACTZ/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:73:86:92:99:fe:28:5e:fe:60:11:0d:d4:ed:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=936cb336c1beb71d4fbbaae243b23352c6270061
Validity
Not Before: Jun 8 05:00:34 2025 GMT
Not After : Jun 9 05:00:34 2025 GMT
Subject: CN=4870b659ffa0d6745dba96494bc4c7d108b46a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7e:31:e9:84:79:66:c1:81:82:7f:2b:b6:97:
c4:6b:77:27:c4:ee:ca:3c:ac:b1:3d:15:c1:42:93:
43:18:4c:5e:ad:d9:85:ec:9e:22:0f:dd:8a:c1:55:
2f:9d:81:6b:cc:51:54:2e:f9:d6:42:b5:01:16:0d:
f9:fb:eb:54:09:67:3b:72:93:8d:bf:4a:9c:8d:d8:
86:ad:16:19:5e:b5:6b:f7:01:57:b2:ae:08:db:5e:
64:36:c9:f5:b0:f4:38:23:5e:5f:40:30:05:84:aa:
a4:78:cf:8c:13:2d:6e:87:bc:84:c7:8f:44:1a:c5:
75:ff:88:f4:d4:fa:26:bb:8b:f9:d1:b7:82:1b:3d:
55:ed:6b:ca:33:c9:a4:ea:7c:c7:40:1a:d3:e3:c9:
ab:b8:f8:67:a4:f0:53:5c:91:c1:b6:d2:b5:c2:92:
34:d5:7f:e1:a3:f7:31:d3:0b:58:92:c9:dd:13:46:
1d:ff:41:60:3e:5e:f7:94:ae:8b:13:6f:57:13:c0:
ed:27:af:9d:ad:18:ca:21:fb:30:5f:9c:43:f4:4e:
e5:d1:99:b9:c3:48:0e:72:fb:41:a9:2d:78:5e:8e:
58:0f:82:75:50:92:4f:2b:38:eb:0e:2d:72:1a:8c:
77:f4:b1:e4:99:86:c7:7b:13:90:54:03:79:b6:62:
f9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:70:B6:59:FF:A0:D6:74:5D:BA:96:49:4B:C4:C7:D1:08:B4:6A:08
X509v3 Authority Key Identifier:
keyid:93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:54:6b:22:e7:b7:c5:cc:35:84:09:c0:8f:40:ea:eb:3c:56:
a0:97:bc:bf:97:6a:7d:1e:28:80:e4:cd:b1:20:74:a2:2d:be:
54:d3:76:42:77:c3:2e:d4:bf:54:9a:bd:14:1b:3d:01:16:e5:
98:97:ad:51:56:11:6b:fe:2b:2b:ce:e0:85:af:88:3e:c4:40:
40:c2:a4:ca:d1:1a:cb:94:69:62:7b:35:9d:78:75:d9:f3:e6:
97:ca:92:cf:86:23:be:b4:19:bd:0b:57:8b:2b:ed:0b:ba:e0:
81:d4:f2:43:56:c2:3a:85:77:cc:8e:ec:8b:c3:83:d0:77:22:
8c:61:dd:10:dc:83:8d:06:3d:d7:88:0b:1a:7d:9b:72:d0:0e:
d5:48:29:2e:53:18:b7:4c:f7:92:45:d7:f6:3c:f2:50:7f:55:
1c:27:f0:dd:2b:f5:4c:5e:ae:16:32:e1:12:15:18:e8:ec:f9:
41:8f:eb:4a:fd:40:85:1c:be:e4:d0:66:67:54:b5:ce:ad:a3:
a2:a0:f0:39:db:5d:69:ec:f6:73:29:e9:8a:14:5e:64:cf:46:
86:3b:ff:ba:9a:77:ff:4f:ad:f1:ec:45:62:f0:ce:f8:2e:8c:
17:42:b3:2e:57:32:91:ce:ff:69:0b:27:01:4b:f9:42:15:80:
49:79:c5:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdN6XOGkpn+KF7+YBEN1O2EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNmNiMzM2YzFiZWI3MWQ0ZmJiYWFlMjQzYjIzMzUyYzYy
NzAwNjEwHhcNMjUwNjA4MDUwMDM0WhcNMjUwNjA5MDUwMDM0WjAzMTEwLwYDVQQD
Eyg0ODcwYjY1OWZmYTBkNjc0NWRiYTk2NDk0YmM0YzdkMTA4YjQ2YTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg34x6YR5ZsGBgn8rtpfEa3cnxO7K
PKyxPRXBQpNDGExerdmF7J4iD92KwVUvnYFrzFFULvnWQrUBFg35++tUCWc7cpON
v0qcjdiGrRYZXrVr9wFXsq4I215kNsn1sPQ4I15fQDAFhKqkeM+MEy1uh7yEx49E
GsV1/4j01Pomu4v50beCGz1V7WvKM8mk6nzHQBrT48mruPhnpPBTXJHBttK1wpI0
1X/ho/cx0wtYksndE0Yd/0FgPl73lK6LE29XE8DtJ6+drRjKIfswX5xD9E7l0Zm5
w0gOcvtBqS14Xo5YD4J1UJJPKzjrDi1yGox39LHkmYbHexOQVAN5tmL5fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhwtln/oNZ0XbqWSUvEx9EItGoIMB8GA1UdIwQY
MBaAFJNsszbBvrcdT7uq4kOyM1LGJwBhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJ5ek5zRy10eDFQdTZyaVE3SXpVc1luQUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kMWRkOWEtOThmNC00NWI4LTkwOTUt
NTlkNjBiZmYyMDVmLzEvazJ5ek5zRy10eDFQdTZyaVE3SXpVc1luQUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kMWRkOWEtOThmNC00NWI4LTkwOTUtNTlkNjBiZmYyMDVm
LzEvazJ5ek5zRy10eDFQdTZyaVE3SXpVc1luQUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFRrIue3
xcw1hAnAj0Dq6zxWoJe8v5dqfR4ogOTNsSB0oi2+VNN2QnfDLtS/VJq9FBs9ARbl
mJetUVYRa/4rK87gha+IPsRAQMKkytEay5RpYns1nXh12fPml8qSz4YjvrQZvQtX
iyvtC7rggdTyQ1bCOoV3zI7si8OD0HcijGHdENyDjQY914gLGn2bctAO1UgpLlMY
t0z3kkXX9jzyUH9VHCfw3Sv1TF6uFjLhEhUY6Oz5QY/rSv1AhRy+5NBmZ1S1zq2j
oqDwOdtdaez2cynpihReZM9Ghjv/upp3/0+t8exFYvDO+C6MF0KzLlcykc7/aQsn
AUv5QhWASXnFcQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:13:37 2025 by rpki-client