Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
File: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft (raw, json)
Hash identifier: awVAWfHzBSFL7UxX3AB+B7yutPHHR6bC7PYK1Lko4ew=
Subject key identifier: 73:97:ED:E5:4D:AC:59:F8:FE:52:55:51:D8:D2:88:8E:07:F8:C8:96
Authority key identifier: 29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
Certificate issuer: /CN=29851f7ae610b1d0061500b343a4868f3256066e
Certificate serial: 01974EC5C984C59593EBD7633E058326D4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
Manifest number: 061A
Signing time: Sun 08 Jun 2025 09:01:14 +0000
Manifest this update: Sun 08 Jun 2025 09:01:14 +0000
Manifest next update: Mon 09 Jun 2025 09:01:14 +0000
Files and hashes: 1: JCxOuTIjLujlao5I9hrb5gQegGo.roa (hash: SDv0FBjSKSZUTMpJ38YSkos63s4YQ/vsV3WiI+cz/dg=)
2: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl (hash: Aspb9Yzj35d6kTSAm6Nd6ZIYWbfDJ8rhdDfKZXoXoJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:c9:84:c5:95:93:eb:d7:63:3e:05:83:26:d4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29851f7ae610b1d0061500b343a4868f3256066e
Validity
Not Before: Jun 8 09:01:14 2025 GMT
Not After : Jun 9 09:01:14 2025 GMT
Subject: CN=7397ede54dac59f8fe525551d8d2888e07f8c896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:f1:77:61:71:4c:d9:8c:12:be:66:d5:22:
19:89:dc:52:28:90:58:b6:14:80:b5:85:80:12:8b:
08:ef:22:c5:17:55:c2:dc:08:d0:60:13:b7:a8:2a:
2d:24:38:a8:70:15:2d:40:e7:7f:4e:b5:6e:ad:ef:
d1:2e:b7:97:80:6b:9d:c8:30:c6:53:ce:c3:25:b2:
74:54:f6:e7:58:8e:0f:00:71:ed:da:17:cd:8c:28:
04:39:77:0e:e3:e7:43:94:aa:c2:c8:2c:fb:50:a4:
b0:32:09:2c:a6:34:54:36:ae:5a:67:b5:2c:03:d2:
53:ca:66:40:c4:33:16:d0:f5:69:50:f6:47:d9:a2:
12:5c:3c:0b:ca:5a:6e:44:fb:01:49:4b:40:3f:97:
d2:03:ac:e9:88:58:a8:cb:a8:ba:e3:91:2c:0f:55:
f7:61:fe:25:2e:ee:ae:7f:dd:cc:80:56:c9:77:e9:
2b:3d:05:8e:83:25:41:86:b2:50:a5:f8:42:26:d4:
90:02:b1:5f:09:81:c4:0a:b1:d1:d0:22:94:5f:a9:
dd:ad:ae:f1:46:35:16:96:92:60:a9:76:35:5f:74:
19:43:ab:75:b7:46:8f:06:25:43:ff:62:77:3f:6b:
9a:e5:2a:ce:67:d9:6a:fb:77:65:59:a5:28:ec:ad:
7f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:97:ED:E5:4D:AC:59:F8:FE:52:55:51:D8:D2:88:8E:07:F8:C8:96
X509v3 Authority Key Identifier:
keyid:29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b9:4c:17:6d:2a:4b:8d:71:51:c2:15:5a:0d:ec:58:f1:a1:
9b:b8:51:1f:08:e3:27:49:60:47:5f:2e:a1:98:22:06:b5:ce:
ae:d8:27:80:cf:40:11:20:f6:34:cf:69:ce:7a:cd:a9:a5:e3:
3e:55:5f:24:4b:17:5c:e6:9b:8b:6b:71:f3:98:d7:b7:89:db:
3a:6f:3b:e9:70:2a:2a:02:25:21:65:cf:3b:be:fb:f9:e9:0a:
51:68:e5:e3:d2:7e:59:a4:ae:12:f8:ae:61:71:0b:5c:1f:3c:
26:60:15:03:df:88:5e:3f:84:67:bd:bd:c9:ca:e2:1f:5f:1c:
44:aa:3a:db:c1:ca:a7:d6:22:34:35:e9:3b:b2:c4:9b:d9:c8:
3c:0b:09:1e:a0:8a:bb:30:05:e9:bd:71:41:66:d9:9d:66:7f:
0b:bc:ca:af:04:07:c5:84:f8:b1:2a:cb:71:96:cd:1d:98:96:
ea:be:1b:6c:61:f6:cf:2c:36:75:b9:31:c1:6d:ba:1a:b4:64:
2f:66:24:27:f8:be:87:22:2b:fb:c2:01:fe:59:64:d4:17:59:
3d:c7:f6:2a:7b:07:96:ea:f7:ea:f9:f8:85:fe:fb:53:47:4a:
79:d5:18:cf:54:a2:8b:4b:ff:ef:81:78:a2:5e:08:9c:19:7e:
8e:e1:ed:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOxcmExZWT69djPgWDJtThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODUxZjdhZTYxMGIxZDAwNjE1MDBiMzQzYTQ4NjhmMzI1
NjA2NmUwHhcNMjUwNjA4MDkwMTE0WhcNMjUwNjA5MDkwMTE0WjAzMTEwLwYDVQQD
Eyg3Mzk3ZWRlNTRkYWM1OWY4ZmU1MjU1NTFkOGQyODg4ZTA3ZjhjODk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9fxd2FxTNmMEr5m1SIZidxSKJBY
thSAtYWAEosI7yLFF1XC3AjQYBO3qCotJDiocBUtQOd/TrVure/RLreXgGudyDDG
U87DJbJ0VPbnWI4PAHHt2hfNjCgEOXcO4+dDlKrCyCz7UKSwMgkspjRUNq5aZ7Us
A9JTymZAxDMW0PVpUPZH2aISXDwLylpuRPsBSUtAP5fSA6zpiFioy6i645EsD1X3
Yf4lLu6uf93MgFbJd+krPQWOgyVBhrJQpfhCJtSQArFfCYHECrHR0CKUX6ndra7x
RjUWlpJgqXY1X3QZQ6t1t0aPBiVD/2J3P2ua5SrOZ9lq+3dlWaUo7K1/EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOX7eVNrFn4/lJVUdjSiI4H+MiWMB8GA1UdIwQY
MBaAFCmFH3rmELHQBhUAs0Okho8yVgZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lVZmV1WVFzZEFHRlFDelE2U0dqekpXQm00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84MjQ2NTItNTZlNC00YmU1LTliZTMt
ZDA0ZGVkN2RlZDAwLzEvS1lVZmV1WVFzZEFHRlFDelE2U0dqekpXQm00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84MjQ2NTItNTZlNC00YmU1LTliZTMtZDA0ZGVkN2RlZDAw
LzEvS1lVZmV1WVFzZEFHRlFDelE2U0dqekpXQm00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoblMF20q
S41xUcIVWg3sWPGhm7hRHwjjJ0lgR18uoZgiBrXOrtgngM9AESD2NM9pznrNqaXj
PlVfJEsXXOabi2tx85jXt4nbOm876XAqKgIlIWXPO777+ekKUWjl49J+WaSuEviu
YXELXB88JmAVA9+IXj+EZ729ycriH18cRKo628HKp9YiNDXpO7LEm9nIPAsJHqCK
uzAF6b1xQWbZnWZ/C7zKrwQHxYT4sSrLcZbNHZiW6r4bbGH2zyw2dbkxwW26GrRk
L2YkJ/i+hyIr+8IB/llk1BdZPcf2KnsHlur36vn4hf77U0dKedUYz1Sii0v/74F4
ol4InBl+juHtlQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:40:42 2025 by rpki-client