Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
File: Kw51nA6mfY_3IqrIh8fszs3tPsc.mft (raw, json)
Hash identifier: TpGrZYSwGEdNApcK7M6rUs28rdxBbixMbVBcXmtN2Dc=
Subject key identifier: B5:6B:79:94:28:AC:67:33:BD:68:D2:16:73:D8:D9:CD:93:0C:3D:33
Authority key identifier: 2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
Certificate issuer: /CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Certificate serial: 01975E38959084B46D88A61865F11E50874C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
Manifest number: 1135
Signing time: Wed 11 Jun 2025 09:00:55 +0000
Manifest this update: Wed 11 Jun 2025 09:00:55 +0000
Manifest next update: Thu 12 Jun 2025 09:00:55 +0000
Files and hashes: 1: Kw51nA6mfY_3IqrIh8fszs3tPsc.crl (hash: POTcOleHCFulCeTVF8lg7mCAGL060Hj1JVoxgpJXGN8=)
2: gK2aqLyacYNLut1v3SVo1JeIzsU.roa (hash: jw6ne3V3i5hc0TYypnVPI2Vg7jRiBa/IR1Y/Jp3Wy/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:95:90:84:b4:6d:88:a6:18:65:f1:1e:50:87:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Validity
Not Before: Jun 11 09:00:55 2025 GMT
Not After : Jun 12 09:00:55 2025 GMT
Subject: CN=b56b799428ac6733bd68d21673d8d9cd930c3d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:31:c6:df:6a:d5:d5:1c:68:63:97:a6:7f:37:
61:47:06:61:75:b8:c3:79:96:2a:75:93:99:5f:49:
9c:c8:58:b4:b7:b9:9d:7e:28:4d:74:60:66:d6:c4:
4c:3a:43:50:af:a8:ec:2e:6f:ab:00:9b:cb:da:14:
27:18:24:9c:25:9f:d6:6f:5e:53:a7:0e:2b:21:73:
d6:db:c5:9d:98:4d:8c:37:8c:d6:99:8b:65:72:5b:
b3:e5:e7:d4:f1:0a:18:a8:56:96:f4:ee:79:5d:5c:
fd:1c:fe:1f:82:66:97:b1:c1:d9:61:fa:db:4e:c4:
53:fc:de:58:49:aa:d0:99:ef:1a:bb:b7:e7:29:83:
62:f4:24:cf:84:58:84:2b:a6:a9:61:ce:3e:2c:3b:
70:70:9f:1c:94:ea:7d:e0:9a:bb:1c:25:69:66:ed:
9f:3c:fc:33:74:19:0d:b5:d8:cb:75:6c:f4:bd:ff:
40:e7:ea:80:8e:28:b5:ff:3b:ca:4d:7f:b6:87:8c:
3a:e5:ea:eb:09:be:24:77:50:a2:32:e0:ff:35:f3:
d0:07:47:d8:85:fd:85:30:8e:7b:df:4d:da:46:a5:
18:0b:bf:37:a3:10:a6:a7:0f:a4:5f:37:d0:2c:be:
1c:43:65:e4:46:60:0f:b2:10:c6:1c:2d:dc:86:9a:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6B:79:94:28:AC:67:33:BD:68:D2:16:73:D8:D9:CD:93:0C:3D:33
X509v3 Authority Key Identifier:
keyid:2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:09:3c:cb:43:43:4f:e7:69:eb:26:91:11:bc:94:96:72:b1:
1d:08:65:cb:5b:30:cf:7a:a2:9f:a9:36:f6:78:ce:f7:3c:53:
b9:a3:9f:6c:6b:ce:85:f9:5b:06:d3:4d:ea:0a:c1:db:05:5d:
65:1a:a9:27:26:b3:e5:11:36:12:d2:17:6f:fe:b3:2d:a6:36:
69:86:e4:ff:78:64:81:95:5a:e0:65:7f:ac:eb:5a:de:25:8e:
fc:bc:a3:33:b2:16:af:63:cf:51:6d:82:be:46:4d:82:7b:9e:
12:0d:5f:cf:d0:fa:3e:5c:c9:8e:3a:f2:f2:97:cb:fa:8d:40:
8d:4b:70:b1:86:2a:43:ca:e7:12:1a:25:a6:9f:48:f6:f6:b9:
67:80:9c:e8:37:43:7a:95:75:5f:48:0f:21:2e:3e:9f:6b:82:
88:dc:3d:fc:46:3e:a6:6d:5f:d7:9a:8b:ca:f6:78:26:94:19:
c9:33:7c:27:25:a1:69:a3:a3:10:f8:8c:19:7b:da:d6:b5:4f:
76:09:ea:19:d5:d5:02:4e:8b:2c:9f:f1:43:2e:6c:d6:c3:e4:
83:eb:7f:2a:b9:b5:18:7b:27:51:30:5e:1b:6f:f6:8d:5a:cb:
2b:cf:6d:6a:86:f5:47:56:60:f0:00:8d:d4:8d:81:16:56:52:
76:0f:1f:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdeOJWQhLRtiKYYZfEeUIdMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMGU3NTljMGVhNjdkOGZmNzIyYWFjODg3YzdlY2NlY2Rl
ZDNlYzcwHhcNMjUwNjExMDkwMDU1WhcNMjUwNjEyMDkwMDU1WjAzMTEwLwYDVQQD
EyhiNTZiNzk5NDI4YWM2NzMzYmQ2OGQyMTY3M2Q4ZDljZDkzMGMzZDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjHG32rV1RxoY5emfzdhRwZhdbjD
eZYqdZOZX0mcyFi0t7mdfihNdGBm1sRMOkNQr6jsLm+rAJvL2hQnGCScJZ/Wb15T
pw4rIXPW28WdmE2MN4zWmYtlcluz5efU8QoYqFaW9O55XVz9HP4fgmaXscHZYfrb
TsRT/N5YSarQme8au7fnKYNi9CTPhFiEK6apYc4+LDtwcJ8clOp94Jq7HCVpZu2f
PPwzdBkNtdjLdWz0vf9A5+qAjii1/zvKTX+2h4w65errCb4kd1CiMuD/NfPQB0fY
hf2FMI57303aRqUYC783oxCmpw+kXzfQLL4cQ2XkRmAPshDGHC3chpp+WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVreZQorGczvWjSFnPY2c2TDD0zMB8GA1UdIwQY
MBaAFCsOdZwOpn2P9yKqyIfH7M7N7T7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kNGRiMDMtZThhZC00MDI3LTljZTgt
NTVlMWZmN2YzMmY5LzEvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kNGRiMDMtZThhZC00MDI3LTljZTgtNTVlMWZmN2YzMmY5
LzEvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfwk8y0ND
T+dp6yaREbyUlnKxHQhly1swz3qin6k29njO9zxTuaOfbGvOhflbBtNN6grB2wVd
ZRqpJyaz5RE2EtIXb/6zLaY2aYbk/3hkgZVa4GV/rOta3iWO/LyjM7IWr2PPUW2C
vkZNgnueEg1fz9D6PlzJjjry8pfL+o1AjUtwsYYqQ8rnEholpp9I9va5Z4Cc6DdD
epV1X0gPIS4+n2uCiNw9/EY+pm1f15qLyvZ4JpQZyTN8JyWhaaOjEPiMGXva1rVP
dgnqGdXVAk6LLJ/xQy5s1sPkg+t/Krm1GHsnUTBeG2/2jVrLK89taob1R1Zg8ACN
1I2BFlZSdg8fxA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 12:34:31 2025 by rpki-client