Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
File: KTdcnACxUp1VHufijGBwq0Oi_nY.mft (raw, json)
Hash identifier: kfg+hKwCq18U804AVJLtzzemvnhFxrA+CKxDgRNVHK8=
Subject key identifier: 72:8F:54:EB:9D:DC:04:02:58:EE:4F:C4:92:92:93:C1:92:ED:ED:2A
Authority key identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
Certificate issuer: /CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Certificate serial: 019757C851166FD31AA6CA57606DB3CD53AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
Manifest number: 0D4A
Signing time: Tue 10 Jun 2025 03:00:35 +0000
Manifest this update: Tue 10 Jun 2025 03:00:35 +0000
Manifest next update: Wed 11 Jun 2025 03:00:35 +0000
Files and hashes: 1: 2muVnH1_oI_9ztpeyJIqq88lM1c.roa (hash: UznFOVn685h5ihMi8FItxWdR/wWRBKXy+8YPxE2cn9c=)
2: KTdcnACxUp1VHufijGBwq0Oi_nY.crl (hash: spTV8FpLz1Ee9J2s7ZUf/r1hji80hujHdKWX+wxvKps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 19:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:c8:51:16:6f:d3:1a:a6:ca:57:60:6d:b3:cd:53:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Validity
Not Before: Jun 10 03:00:35 2025 GMT
Not After : Jun 11 03:00:35 2025 GMT
Subject: CN=728f54eb9ddc040258ee4fc4929293c192eded2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b9:e0:52:fa:d8:9f:bc:5c:c6:19:ef:39:df:
10:6d:7e:1b:e1:8f:4a:f9:b1:94:70:c9:bd:21:d5:
7d:5f:04:23:54:09:d7:a8:6c:c5:53:1d:b7:1d:9d:
cc:a2:cd:41:27:bd:bb:e0:64:1e:7b:19:a6:20:b4:
d1:1e:8d:ab:7f:b7:26:63:73:5f:e0:d6:c0:88:2a:
c9:aa:de:54:e3:f7:24:3e:2c:75:2a:f8:a9:b8:e1:
0c:7b:6d:dd:79:2d:c9:0e:94:4b:59:7b:88:a0:cd:
eb:82:32:c8:18:b5:c5:66:40:40:29:71:98:c5:63:
f4:52:29:76:c3:fa:cb:4d:46:85:b0:ed:8c:2e:c5:
d1:d8:d7:4c:f6:5c:0f:70:95:a4:b1:05:ab:b3:15:
77:dc:73:37:f8:c3:92:d6:c2:d0:c1:fd:fb:6e:79:
e0:90:1b:d1:53:4b:ae:35:78:08:5c:37:95:e1:9d:
51:66:5a:98:e3:c3:cf:ad:b3:7a:70:9a:50:dc:52:
b4:06:4d:4d:09:bd:c3:49:50:f1:06:f5:af:21:2e:
8a:f9:13:13:76:6a:c4:88:22:9b:4d:98:72:81:ed:
c3:c6:e8:29:2f:8d:7d:13:03:79:ec:c7:70:56:bb:
3d:2d:16:38:1d:00:95:38:e8:15:0d:4f:e3:18:02:
67:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8F:54:EB:9D:DC:04:02:58:EE:4F:C4:92:92:93:C1:92:ED:ED:2A
X509v3 Authority Key Identifier:
keyid:29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:dc:c9:15:0e:ee:0f:9f:f5:f2:63:af:a4:a9:a9:66:91:3e:
18:c1:07:07:62:bb:9c:73:a0:21:ac:48:cf:7d:38:6c:41:fb:
2d:15:be:2c:16:30:6d:36:03:b7:4c:8a:36:1b:5b:93:db:08:
d1:35:d7:b7:39:37:7b:16:74:c9:a6:35:cf:b8:f1:2f:88:ba:
95:d3:6d:f3:5d:db:94:21:cb:61:13:eb:7d:cf:97:28:0f:9d:
e9:22:e6:c3:8c:7d:8f:74:b5:99:c7:79:80:25:99:77:ad:75:
17:86:51:32:f9:e7:c0:0a:6d:00:c2:cc:79:c9:fb:ab:bc:33:
08:8f:42:b1:12:d6:39:0d:8c:02:ef:11:f2:59:5d:5d:2d:e1:
77:46:93:f1:4d:78:b1:94:05:3a:aa:40:65:78:d6:63:8a:0a:
6d:2e:d2:53:60:c0:b8:8e:13:da:99:ec:d8:97:31:43:1d:50:
b3:00:dc:c5:84:ce:74:4d:3a:fb:db:f7:04:1e:b1:79:2f:c7:
16:28:e4:26:56:70:fc:c5:4f:3e:cb:2a:16:73:f5:b1:8b:a1:
ad:26:63:51:e8:66:8d:e3:80:02:0b:d6:78:bf:60:bf:3a:eb:
36:86:91:b0:c8:85:6d:8f:53:f6:d7:51:b4:1e:b3:5d:cd:b0:
14:28:1e:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdXyFEWb9MapspXYG2zzVOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5Mzc1YzljMDBiMTUyOWQ1NTFlZTdlMjhjNjA3MGFiNDNh
MmZlNzYwHhcNMjUwNjEwMDMwMDM1WhcNMjUwNjExMDMwMDM1WjAzMTEwLwYDVQQD
Eyg3MjhmNTRlYjlkZGMwNDAyNThlZTRmYzQ5MjkyOTNjMTkyZWRlZDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LngUvrYn7xcxhnvOd8QbX4b4Y9K
+bGUcMm9IdV9XwQjVAnXqGzFUx23HZ3Mos1BJ7274GQeexmmILTRHo2rf7cmY3Nf
4NbAiCrJqt5U4/ckPix1KvipuOEMe23deS3JDpRLWXuIoM3rgjLIGLXFZkBAKXGY
xWP0Uil2w/rLTUaFsO2MLsXR2NdM9lwPcJWksQWrsxV33HM3+MOS1sLQwf37bnng
kBvRU0uuNXgIXDeV4Z1RZlqY48PPrbN6cJpQ3FK0Bk1NCb3DSVDxBvWvIS6K+RMT
dmrEiCKbTZhyge3DxugpL419EwN57MdwVrs9LRY4HQCVOOgVDU/jGAJn3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKPVOud3AQCWO5PxJKSk8GS7e0qMB8GA1UdIwQY
MBaAFCk3XJwAsVKdVR7n4oxgcKtDov52MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83N2Y5NzctMDE1Yi00Y2FmLTg5M2Yt
MDUwNGUxMTFhM2I4LzEvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy83N2Y5NzctMDE1Yi00Y2FmLTg5M2YtMDUwNGUxMTFhM2I4
LzEvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtzJFQ7u
D5/18mOvpKmpZpE+GMEHB2K7nHOgIaxIz304bEH7LRW+LBYwbTYDt0yKNhtbk9sI
0TXXtzk3exZ0yaY1z7jxL4i6ldNt813blCHLYRPrfc+XKA+d6SLmw4x9j3S1mcd5
gCWZd611F4ZRMvnnwAptAMLMecn7q7wzCI9CsRLWOQ2MAu8R8lldXS3hd0aT8U14
sZQFOqpAZXjWY4oKbS7SU2DAuI4T2pns2JcxQx1QswDcxYTOdE06+9v3BB6xeS/H
FijkJlZw/MVPPssqFnP1sYuhrSZjUehmjeOAAgvWeL9gvzrrNoaRsMiFbY9T9tdR
tB6zXc2wFCgeag==
-----END CERTIFICATE-----
Generated at Tue Jun 10 06:01:30 2025 by rpki-client