Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
File: Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft (raw, json)
Hash identifier: EG/E0U1bMxOhOi2FA6RK1s29k3u6dtre2gYUJ7x0G8A=
Subject key identifier: F4:2A:17:9E:05:7A:64:4B:F4:20:89:AD:71:A4:07:8D:C6:42:F5:41
Authority key identifier: 2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
Certificate issuer: /CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Certificate serial: 019754908C4C806C31AE762B4348328D2910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
Manifest number: 05A7
Signing time: Mon 09 Jun 2025 12:00:48 +0000
Manifest this update: Mon 09 Jun 2025 12:00:48 +0000
Manifest next update: Tue 10 Jun 2025 12:00:48 +0000
Files and hashes: 1: E3Zl7hTQVNjV63pjgOsge1XkH0U.roa (hash: yrZmQZ4kTmjXpz++XtNl02KMrQY9DBIkid1grpWXuJM=)
2: Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl (hash: bZNV9dlU6Y+sv6mpVlkT9n+pyjbOTcxF9lrLeF0oibI=)
3: o0lO65ar-rW4jL4W8sebNaso080.roa (hash: WWdJYnb/d9BssaNMXrRC81WhzrjAYNXMX5FXKx6MRRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:90:8c:4c:80:6c:31:ae:76:2b:43:48:32:8d:29:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Validity
Not Before: Jun 9 12:00:48 2025 GMT
Not After : Jun 10 12:00:48 2025 GMT
Subject: CN=f42a179e057a644bf42089ad71a4078dc642f541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9c:aa:b8:26:72:bd:cd:4e:cb:94:02:72:ff:
53:80:a9:0b:f9:c3:7e:84:d3:52:97:a9:59:2d:32:
c8:e7:e7:78:e6:2e:93:b6:80:3e:ad:4c:37:e0:63:
ce:4b:36:ac:47:6b:3a:84:25:12:b9:17:81:ff:06:
78:f5:f4:cb:55:df:d4:f9:20:a5:e6:d5:7e:b0:c0:
f3:02:b5:7d:84:27:0a:61:7a:92:42:58:71:7e:0c:
92:93:85:12:90:76:2f:78:78:84:f4:f0:23:c1:35:
07:07:29:30:5d:60:84:af:79:59:fd:50:62:5b:89:
bc:75:2b:80:ae:33:58:e9:9b:8f:20:b1:6f:86:4d:
44:e7:42:26:e7:d4:61:69:7c:29:25:d3:88:0a:62:
80:d2:8e:03:6f:f1:b3:20:e5:fd:d9:d4:d5:de:2a:
dd:b0:42:94:97:cd:49:dc:e2:5e:24:83:a8:42:7b:
ed:85:8b:9e:a0:7e:6c:26:0c:08:67:8d:30:a0:30:
9e:c3:b3:0c:eb:2b:b8:63:04:aa:57:1d:d2:8c:12:
b8:1b:58:a7:62:47:28:df:90:fe:e3:7e:98:43:35:
11:74:ba:7c:c1:7b:2a:32:f8:bb:fd:09:d8:e2:ee:
28:42:66:04:e7:f1:84:06:c8:97:b5:fb:c0:f4:cc:
92:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2A:17:9E:05:7A:64:4B:F4:20:89:AD:71:A4:07:8D:C6:42:F5:41
X509v3 Authority Key Identifier:
keyid:2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b0:c4:86:20:d0:67:b6:df:8f:b4:8e:02:e7:6e:53:f6:6e:
a2:8e:a1:25:e9:3c:db:1c:22:4b:92:d2:31:3c:56:59:8f:23:
17:9a:f0:92:0e:e1:85:2f:01:b6:a3:e5:39:ee:02:b8:33:aa:
dc:4f:27:fe:ca:80:57:04:78:f2:3a:da:d4:49:49:eb:b1:57:
a4:8e:49:bf:54:5e:f2:2f:a9:b0:ab:f6:d0:67:53:2f:1c:c2:
e1:c5:c7:18:99:1c:0d:46:dc:ea:52:c6:cb:ff:54:0a:ad:f9:
33:73:63:ab:98:a2:9c:b3:a0:d1:95:ec:da:be:bd:7d:cd:d9:
7e:4d:58:a0:06:f4:bd:31:1b:62:52:b0:0d:25:5e:d5:b4:05:
e5:a4:ea:32:35:28:b5:06:d7:bd:02:62:a9:d1:05:02:54:1a:
14:b0:d1:0e:a9:f6:03:0c:a4:4a:f9:c1:8f:6b:ed:21:61:48:
f0:47:4b:e3:bb:ec:15:41:a2:86:7b:11:e8:2e:77:22:f1:8e:
78:76:6b:29:d4:5c:21:58:de:01:f5:77:d4:79:b6:b8:c1:ae:
02:5c:bf:7d:da:a6:fc:13:57:9e:5a:30:69:35:77:7c:d0:0a:
cc:a3:ec:b0:a4:09:b0:fd:c5:fb:d9:49:99:31:3a:05:be:70:
1c:9f:21:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUkIxMgGwxrnYrQ0gyjSkQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNmY4ZmZiZTA5ODkyMjA3MWYwYzljM2E2MGY1ZGZkY2Rl
NDZkYTQwHhcNMjUwNjA5MTIwMDQ4WhcNMjUwNjEwMTIwMDQ4WjAzMTEwLwYDVQQD
EyhmNDJhMTc5ZTA1N2E2NDRiZjQyMDg5YWQ3MWE0MDc4ZGM2NDJmNTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JyquCZyvc1Oy5QCcv9TgKkL+cN+
hNNSl6lZLTLI5+d45i6TtoA+rUw34GPOSzasR2s6hCUSuReB/wZ49fTLVd/U+SCl
5tV+sMDzArV9hCcKYXqSQlhxfgySk4USkHYveHiE9PAjwTUHBykwXWCEr3lZ/VBi
W4m8dSuArjNY6ZuPILFvhk1E50Im59RhaXwpJdOICmKA0o4Db/GzIOX92dTV3ird
sEKUl81J3OJeJIOoQnvthYueoH5sJgwIZ40woDCew7MM6yu4YwSqVx3SjBK4G1in
Ykco35D+436YQzURdLp8wXsqMvi7/QnY4u4oQmYE5/GEBsiXtfvA9MySYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQqF54FemRL9CCJrXGkB43GQvVBMB8GA1UdIwQY
MBaAFCpvj/vgmJIgcfDJw6YPXf3N5G2kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS20tUC0tQ1lraUJ4OE1uRHBnOWRfYzNrYmFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MzhkODgtNDk1Mi00OTYwLTg3NzQt
YzFjNGQ4Y2JmNDU5LzEvS20tUC0tQ1lraUJ4OE1uRHBnOWRfYzNrYmFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MzhkODgtNDk1Mi00OTYwLTg3NzQtYzFjNGQ4Y2JmNDU5
LzEvS20tUC0tQ1lraUJ4OE1uRHBnOWRfYzNrYmFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILDEhiDQ
Z7bfj7SOAuduU/Zuoo6hJek82xwiS5LSMTxWWY8jF5rwkg7hhS8BtqPlOe4CuDOq
3E8n/sqAVwR48jra1ElJ67FXpI5Jv1Re8i+psKv20GdTLxzC4cXHGJkcDUbc6lLG
y/9UCq35M3Njq5iinLOg0ZXs2r69fc3Zfk1YoAb0vTEbYlKwDSVe1bQF5aTqMjUo
tQbXvQJiqdEFAlQaFLDRDqn2AwykSvnBj2vtIWFI8EdL47vsFUGihnsR6C53IvGO
eHZrKdRcIVjeAfV31Hm2uMGuAly/fdqm/BNXnlowaTV3fNAKzKPssKQJsP3F+9lJ
mTE6Bb5wHJ8hqw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 16:18:16 2025 by rpki-client