Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
File: KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft (raw, json)
Hash identifier: 3KJmFamldZ+bOEY+yLaQ6aw2iVcqPuzPSREDbN8JbFU=
Subject key identifier: 42:0F:8E:71:E5:B7:CC:D4:F0:10:07:B3:CB:04:42:F4:D0:8B:BE:96
Authority key identifier: 29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
Certificate issuer: /CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Certificate serial: 01974D44FD72AD6EBF75160A1F1CB0CE6151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 02:00:56 +0000
Manifest this update: Sun 08 Jun 2025 02:00:56 +0000
Manifest next update: Mon 09 Jun 2025 02:00:56 +0000
Files and hashes: 1: KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl (hash: wOvjT+TvtQN3VPNPQY6R1vkslX2xEiRPdG+RnMBotXI=)
2: aI7Jkk0hKBc5FvPXNc087oh3O6I.roa (hash: NGQRZS/iBgx2LNEuUjWmKtWDne6hFeLh8g8pm9sOGIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:fd:72:ad:6e:bf:75:16:0a:1f:1c:b0:ce:61:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Validity
Not Before: Jun 8 02:00:56 2025 GMT
Not After : Jun 9 02:00:56 2025 GMT
Subject: CN=420f8e71e5b7ccd4f01007b3cb0442f4d08bbe96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:77:23:65:dc:49:27:bb:c5:3a:fb:34:33:50:
31:5b:fc:2d:83:3d:10:65:dc:76:76:8d:36:ed:06:
51:76:8f:55:89:9a:00:43:58:eb:1f:68:7b:1e:0a:
78:7d:e9:28:0e:f6:59:e4:b8:be:d5:f7:42:80:46:
19:3c:13:40:c4:66:b6:68:bc:29:a8:05:cd:23:fe:
70:80:c4:54:dd:d2:0d:0b:fb:0a:eb:1b:07:36:5c:
4a:6b:a7:83:0e:78:7a:28:89:37:cb:30:70:fb:e4:
a5:be:ac:00:1c:e7:43:71:6a:1e:fd:bf:e8:b6:9d:
db:ae:fc:7e:e1:6c:2b:a5:85:8e:4e:3b:d1:62:da:
7d:96:dd:97:88:ca:ab:f5:10:3a:f6:21:70:1d:13:
2f:74:ef:e7:29:9a:4a:0e:60:bb:7f:62:ab:c4:1e:
d1:c7:d0:cf:d5:8a:14:8d:71:9d:15:5c:80:fa:d7:
b8:fe:57:bf:52:c7:a5:1b:58:86:4c:24:3b:f8:bd:
16:ae:07:ae:fb:28:98:c1:ea:aa:f8:67:5b:33:39:
b5:ba:6f:9c:57:34:ad:32:6c:d0:b7:75:9c:e8:aa:
26:fb:21:52:ca:63:a8:8a:fb:8b:93:21:be:10:2e:
b0:50:23:a0:00:99:bc:48:80:c2:2b:8e:d6:48:d9:
5b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0F:8E:71:E5:B7:CC:D4:F0:10:07:B3:CB:04:42:F4:D0:8B:BE:96
X509v3 Authority Key Identifier:
keyid:29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f7:9c:e2:a4:3d:47:63:e3:d2:a4:30:4b:13:e1:d3:fa:f4:
af:81:d5:b4:4a:ca:e4:d2:37:d0:f7:ce:6a:e7:07:f4:ba:4c:
74:06:dc:11:3c:f8:cd:6f:66:df:b4:66:ab:54:70:10:99:fa:
80:93:ad:0f:75:e1:e6:65:12:b7:24:b6:19:6c:55:ff:c0:c7:
dc:b0:96:1c:d5:f9:3e:a9:15:e8:3c:d3:12:c7:40:d2:ad:7a:
36:c8:50:e2:87:fd:99:65:9e:b6:39:4d:df:e1:1c:d5:55:7f:
76:dd:4a:d0:89:9f:3d:c9:35:8d:fa:08:33:1f:1b:c3:b9:21:
79:d7:85:b9:c3:8c:f9:09:44:0b:eb:ba:91:e7:93:8f:c1:37:
07:ac:08:5f:eb:bb:9c:bf:e2:a7:86:03:de:a2:d5:db:b9:28:
ba:f1:cc:25:f2:42:54:db:28:8f:44:98:cb:80:2e:d3:a2:bb:
85:16:43:b2:3f:f3:a9:07:86:36:c9:ca:80:26:af:b4:65:03:
8e:2d:fb:bc:1d:55:03:05:a4:34:45:d8:d2:2d:94:0c:da:ef:
99:a8:d6:8e:11:ed:15:51:a4:ec:32:e6:c4:16:a1:ee:66:1b:
5d:b4:ee:48:16:48:a1:d5:51:6b:30:0b:8b:b1:ee:60:a3:70:
be:f5:93:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRP1yrW6/dRYKHxywzmFRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NWI2YTM0YTIxMDliYTdjNGQ5N2Y3NmM3NDQ2NmYxNGMz
MzMzZTAwHhcNMjUwNjA4MDIwMDU2WhcNMjUwNjA5MDIwMDU2WjAzMTEwLwYDVQQD
Eyg0MjBmOGU3MWU1YjdjY2Q0ZjAxMDA3YjNjYjA0NDJmNGQwOGJiZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ncjZdxJJ7vFOvs0M1AxW/wtgz0Q
Zdx2do027QZRdo9ViZoAQ1jrH2h7Hgp4fekoDvZZ5Li+1fdCgEYZPBNAxGa2aLwp
qAXNI/5wgMRU3dINC/sK6xsHNlxKa6eDDnh6KIk3yzBw++SlvqwAHOdDcWoe/b/o
tp3brvx+4WwrpYWOTjvRYtp9lt2XiMqr9RA69iFwHRMvdO/nKZpKDmC7f2KrxB7R
x9DP1YoUjXGdFVyA+te4/le/UselG1iGTCQ7+L0Wrgeu+yiYweqq+GdbMzm1um+c
VzStMmzQt3Wc6Kom+yFSymOoivuLkyG+EC6wUCOgAJm8SIDCK47WSNlbZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIPjnHlt8zU8BAHs8sEQvTQi76WMB8GA1UdIwQY
MBaAFClbajSiEJunxNl/dsdEZvFMMzPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1Z0cU5LSVFtNmZFMlg5MngwUm04VXd6TS1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lOWIxNzMtOTJiNi00MjEwLWE4ZTAt
Yjc5N2E0NDA2ZjMwLzEvS1Z0cU5LSVFtNmZFMlg5MngwUm04VXd6TS1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lOWIxNzMtOTJiNi00MjEwLWE4ZTAtYjc5N2E0NDA2ZjMw
LzEvS1Z0cU5LSVFtNmZFMlg5MngwUm04VXd6TS1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPec4qQ9
R2Pj0qQwSxPh0/r0r4HVtErK5NI30PfOaucH9LpMdAbcETz4zW9m37Rmq1RwEJn6
gJOtD3Xh5mUStyS2GWxV/8DH3LCWHNX5PqkV6DzTEsdA0q16NshQ4of9mWWetjlN
3+Ec1VV/dt1K0ImfPck1jfoIMx8bw7khedeFucOM+QlEC+u6keeTj8E3B6wIX+u7
nL/ip4YD3qLV27kouvHMJfJCVNsoj0SYy4Au06K7hRZDsj/zqQeGNsnKgCavtGUD
ji37vB1VAwWkNEXY0i2UDNrvmajWjhHtFVGk7DLmxBah7mYbXbTuSBZIodVRazAL
i7HuYKNwvvWTzg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:16:07 2025 by rpki-client