Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: 3mM2wmn7BOpodXj8lzscFHiVQE2exi+RATK391VMvBg=
Subject key identifier: E3:FB:20:40:E8:26:2C:BB:F1:C7:7E:61:61:07:6C:19:79:B0:E1:A5
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 019736860C0B8C322D772DB547B095F82513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 1574
Signing time: Tue 03 Jun 2025 16:00:43 +0000
Manifest this update: Tue 03 Jun 2025 16:00:43 +0000
Manifest next update: Wed 04 Jun 2025 16:00:43 +0000
Files and hashes: 1: GLETZPGAzgEdqr3_Ju2Hw5dfeCc.roa (hash: 1ZSMTZbayji0IpT4/tlfR8iOgQX8cgSQ3hZYI5R5pYA=)
2: JVzuM8B6ofXxJRTwKSOh4uQnHZ8.roa (hash: 6kzBk5+13Ftt6UqtqHrn3x6NbCUjc2KzWe2+5j/AkQM=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: tXDaJ1aznXl99jWH2MRh6NNom4VqWN1no7GPKo2DneA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 15:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:36:86:0c:0b:8c:32:2d:77:2d:b5:47:b0:95:f8:25:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Jun 3 16:00:43 2025 GMT
Not After : Jun 4 16:00:43 2025 GMT
Subject: CN=e3fb2040e8262cbbf1c77e6161076c1979b0e1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:e7:c1:ab:08:81:38:57:2c:7f:96:60:1b:
ef:1e:5c:bf:cb:f1:19:af:88:53:e3:a9:6f:9e:01:
dc:ef:4b:5d:cd:cf:7e:fa:95:73:af:c5:e7:37:ed:
7a:90:83:8e:28:a8:32:f6:4e:98:24:ca:15:d0:bb:
4a:7f:9a:67:82:40:78:1a:4b:65:a5:0b:3c:21:54:
2a:e3:ef:4f:a2:e4:14:b9:29:b8:85:cb:a4:8c:7b:
84:cb:5c:6c:e8:07:d2:82:d9:0c:c0:28:7f:d4:fe:
04:51:dd:35:b6:5d:28:cb:e2:1e:51:d2:14:d1:ab:
20:ef:03:2f:48:b3:1a:56:f6:f0:ec:04:66:2c:95:
4e:20:d8:2e:05:92:1e:bd:78:2a:94:73:e0:e2:00:
2b:2c:09:1b:2d:b0:be:97:a8:28:79:a2:f3:bd:6c:
50:99:5b:78:68:a5:39:0d:0b:91:d6:3c:22:15:ae:
cc:a5:62:29:22:dd:18:9b:16:19:34:40:3e:a8:f3:
a2:1c:97:d2:d9:58:c6:2d:f1:48:42:23:45:82:6d:
c4:0c:ca:d1:17:c8:cc:82:58:13:2f:5f:06:c7:29:
a7:e4:99:51:ea:5d:d0:55:cd:44:36:d9:3a:6c:b8:
27:6d:fa:19:9d:cb:5d:87:bd:1c:2f:cf:34:8e:12:
8f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FB:20:40:E8:26:2C:BB:F1:C7:7E:61:61:07:6C:19:79:B0:E1:A5
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8c:32:0c:83:ea:1a:95:79:02:e1:f8:9e:1b:ee:a8:b5:96:
54:1a:d3:4e:e2:1f:80:ae:4d:8b:40:68:ba:57:16:6c:fa:38:
3d:4e:6c:a8:b6:3a:ea:04:95:9a:d8:65:19:85:bd:6d:fe:f5:
14:5b:63:28:1e:14:46:14:25:45:32:0e:0b:3a:01:7b:04:0b:
14:f8:64:f6:fd:b3:89:52:96:40:13:36:0d:84:51:44:14:a3:
3f:db:08:d5:67:2b:3c:c5:57:1f:dd:5f:a4:f3:a3:76:3f:29:
cd:52:e4:5c:7a:d6:71:f3:d3:f2:4d:4b:e8:46:a8:2d:b3:6d:
39:3e:7d:46:e1:b7:e4:d4:35:80:c0:46:aa:d4:be:af:34:df:
24:86:3b:f0:c8:6a:d9:54:d5:97:ab:64:bd:c7:c2:88:a2:0b:
d7:3b:9c:45:75:ec:99:9d:db:46:fb:f1:c8:98:5f:03:a6:a5:
4f:62:7a:59:39:2d:26:0e:18:34:8b:ef:78:e5:1c:84:3f:a3:
ac:dd:b9:c3:47:80:47:c1:28:91:26:09:d1:a1:b9:35:ad:15:
be:4d:e5:fe:d6:e0:90:6d:2b:16:eb:6c:5f:12:6d:12:53:1c:
d9:fd:c4:f1:8a:2d:71:05:46:f0:9e:07:d9:57:12:12:d9:b9:
bc:13:cc:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc2hgwLjDItdy21R7CV+CUTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NTU3OWY1YjY3M2RiZTJlYmJhMzQ4Y2ZiMGY1NjEyNGNk
ZTcwNDgwHhcNMjUwNjAzMTYwMDQzWhcNMjUwNjA0MTYwMDQzWjAzMTEwLwYDVQQD
EyhlM2ZiMjA0MGU4MjYyY2JiZjFjNzdlNjE2MTA3NmMxOTc5YjBlMWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfbnwasIgThXLH+WYBvvHly/y/EZ
r4hT46lvngHc70tdzc9++pVzr8XnN+16kIOOKKgy9k6YJMoV0LtKf5pngkB4Gktl
pQs8IVQq4+9PouQUuSm4hcukjHuEy1xs6AfSgtkMwCh/1P4EUd01tl0oy+IeUdIU
0asg7wMvSLMaVvbw7ARmLJVOINguBZIevXgqlHPg4gArLAkbLbC+l6goeaLzvWxQ
mVt4aKU5DQuR1jwiFa7MpWIpIt0YmxYZNEA+qPOiHJfS2VjGLfFIQiNFgm3EDMrR
F8jMglgTL18Gxymn5JlR6l3QVc1ENtk6bLgnbfoZnctdh70cL880jhKPPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOP7IEDoJiy78cd+YWEHbBl5sOGlMB8GA1UdIwQY
MBaAFClVefW2c9vi67o0jPsPVhJM3nBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8xNTc0YzktMDFkNS00OGZkLTk4MGYt
MzQzYzRkMjRjMjNiLzEvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8xNTc0YzktMDFkNS00OGZkLTk4MGYtMzQzYzRkMjRjMjNi
LzEvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4wyDIPq
GpV5AuH4nhvuqLWWVBrTTuIfgK5Ni0BoulcWbPo4PU5sqLY66gSVmthlGYW9bf71
FFtjKB4URhQlRTIOCzoBewQLFPhk9v2ziVKWQBM2DYRRRBSjP9sI1WcrPMVXH91f
pPOjdj8pzVLkXHrWcfPT8k1L6EaoLbNtOT59RuG35NQ1gMBGqtS+rzTfJIY78Mhq
2VTVl6tkvcfCiKIL1zucRXXsmZ3bRvvxyJhfA6alT2J6WTktJg4YNIvveOUchD+j
rN25w0eAR8EokSYJ0aG5Na0Vvk3l/tbgkG0rFutsXxJtElMc2f3E8YotcQVG8J4H
2VcSEtm5vBPMhA==
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:17:52 2025 by rpki-client