Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
File: KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft (raw, json)
Hash identifier: apjY/SJJE9uESstPRY9WpOm89KlHfDriHuN5II1HiUs=
Subject key identifier: 05:5B:87:47:8F:32:00:8E:49:43:02:53:E6:7A:B2:A5:30:C5:C1:BE
Authority key identifier: 29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
Certificate issuer: /CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Certificate serial: 01974BFB7380CD3CFCC73BEF68A8F3F820C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 20:00:59 +0000
Manifest this update: Sat 07 Jun 2025 20:00:59 +0000
Manifest next update: Sun 08 Jun 2025 20:00:59 +0000
Files and hashes: 1: KRxKu_3sSaUePuuh1zhKvtRict0.roa (hash: +EX1LptbVJc4+7RpbLy829R4rw7CqCxrczXwQWpCdMc=)
2: KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl (hash: FrjsLeCP+yfWaEzrI9M4psb590IlK85bOAauTdj9DaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:73:80:cd:3c:fc:c7:3b:ef:68:a8:f3:f8:20:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Validity
Not Before: Jun 7 20:00:59 2025 GMT
Not After : Jun 8 20:00:59 2025 GMT
Subject: CN=055b87478f32008e49430253e67ab2a530c5c1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:a7:95:1b:12:d1:51:7c:0b:15:a6:32:a5:
e0:a7:ad:db:b2:78:0b:60:18:77:06:b2:78:30:b7:
79:49:51:08:d3:63:d0:fd:ab:a9:96:65:e0:a6:ed:
1b:40:0d:0c:4f:43:df:8e:db:3c:e6:b3:07:83:58:
71:17:f5:e9:1e:e9:df:67:b0:26:cb:c8:8b:d8:2e:
70:1e:7e:9b:5a:2c:4a:ed:bf:dd:dd:e7:64:db:0a:
dd:d7:3c:04:4e:8d:81:1e:c3:4b:5c:77:42:b2:3e:
4e:b9:b5:b5:8e:f5:45:0b:b8:2b:cb:93:de:ad:20:
87:1d:30:06:04:a5:e6:b5:58:f9:5e:ab:9f:c2:24:
c6:26:45:77:05:79:a0:e4:de:c7:5a:fb:e3:13:03:
24:84:5e:f8:a6:80:df:1e:c9:07:99:24:19:f1:d5:
dd:ba:4d:72:71:a6:f5:19:b9:97:f2:a0:c4:9f:b1:
34:52:a5:6f:99:87:04:3b:66:7a:ad:ef:33:fa:07:
8f:1f:3e:73:9b:17:f2:b6:6a:f3:6b:5e:59:4c:06:
f2:2f:d9:44:6c:12:64:d9:0b:67:86:f0:d2:6a:73:
ef:4f:40:f5:fb:b0:f7:87:62:1b:e8:a7:d6:f0:7e:
16:d6:cf:79:f6:5c:75:48:fa:a3:d7:55:17:1d:26:
3f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5B:87:47:8F:32:00:8E:49:43:02:53:E6:7A:B2:A5:30:C5:C1:BE
X509v3 Authority Key Identifier:
keyid:29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:44:c5:ff:c7:35:b4:c8:9c:51:af:1d:00:c9:7e:35:50:b0:
50:1b:da:39:b0:b4:4d:98:27:76:f1:c2:f6:32:4f:58:28:7f:
61:a1:cd:35:a8:29:a2:64:2c:86:cc:49:ee:17:5b:3d:30:b6:
d2:00:8a:e7:ba:fd:7d:25:77:3a:64:5b:c9:5e:ae:9c:51:e1:
95:3d:33:a0:2a:4a:1a:e8:3e:e5:44:06:9c:2e:7e:b1:91:ae:
6a:aa:26:8e:28:5c:69:ba:75:ba:91:90:41:54:10:85:ca:2c:
b4:72:cf:7c:e2:06:42:d9:15:bb:dc:d3:4e:45:7c:73:71:ae:
6e:5d:95:d9:32:8d:a9:1e:0e:ca:9d:4b:b4:0f:3c:b9:a9:7f:
64:47:bd:f2:5b:dc:38:0e:1f:7e:a4:9b:3e:a5:93:0d:3e:be:
71:3f:d1:f3:e8:9d:7a:5d:8a:26:b9:9f:b2:15:eb:91:8e:e9:
83:78:c5:9a:c1:50:5c:44:8b:9a:d5:88:3d:79:d8:5e:8a:fa:
9f:d5:60:58:98:94:34:27:2c:2b:7f:ce:af:d1:ad:b5:56:e0:
6c:15:ca:f1:06:86:05:f2:13:0f:89:f3:aa:99:2f:9f:0b:dd:
5f:4d:d7:f7:de:44:1d:4f:52:47:57:79:c5:c4:f2:44:c1:ba:
f6:55:13:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+3OAzTz8xzvvaKjz+CDJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5OTIxNTE4YzVkYTFiODRjNTk3MWE3OWJjNzRlOGFjMDc3
MGZkNDkwHhcNMjUwNjA3MjAwMDU5WhcNMjUwNjA4MjAwMDU5WjAzMTEwLwYDVQQD
EygwNTViODc0NzhmMzIwMDhlNDk0MzAyNTNlNjdhYjJhNTMwYzVjMWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOCnlRsS0VF8CxWmMqXgp63bsngL
YBh3BrJ4MLd5SVEI02PQ/auplmXgpu0bQA0MT0Pfjts85rMHg1hxF/XpHunfZ7Am
y8iL2C5wHn6bWixK7b/d3edk2wrd1zwETo2BHsNLXHdCsj5OubW1jvVFC7gry5Pe
rSCHHTAGBKXmtVj5XqufwiTGJkV3BXmg5N7HWvvjEwMkhF74poDfHskHmSQZ8dXd
uk1ycab1GbmX8qDEn7E0UqVvmYcEO2Z6re8z+gePHz5zmxfytmrza15ZTAbyL9lE
bBJk2QtnhvDSanPvT0D1+7D3h2Ib6KfW8H4W1s959lx1SPqj11UXHSY/WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVbh0ePMgCOSUMCU+Z6sqUwxcG+MB8GA1UdIwQY
MBaAFCmSFRjF2huExZcaebx06KwHcP1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1pJVkdNWGFHNFRGbHhwNXZIVG9yQWR3X1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83MTU4MzUtYmMxZC00Y2I4LTk2MTgt
NGVmMjgzY2U3ZmYxLzEvS1pJVkdNWGFHNFRGbHhwNXZIVG9yQWR3X1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83MTU4MzUtYmMxZC00Y2I4LTk2MTgtNGVmMjgzY2U3ZmYx
LzEvS1pJVkdNWGFHNFRGbHhwNXZIVG9yQWR3X1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUTF/8c1
tMicUa8dAMl+NVCwUBvaObC0TZgndvHC9jJPWCh/YaHNNagpomQshsxJ7hdbPTC2
0gCK57r9fSV3OmRbyV6unFHhlT0zoCpKGug+5UQGnC5+sZGuaqomjihcabp1upGQ
QVQQhcostHLPfOIGQtkVu9zTTkV8c3Gubl2V2TKNqR4Oyp1LtA88ual/ZEe98lvc
OA4ffqSbPqWTDT6+cT/R8+idel2KJrmfshXrkY7pg3jFmsFQXESLmtWIPXnYXor6
n9VgWJiUNCcsK3/Or9GttVbgbBXK8QaGBfITD4nzqpkvnwvdX03X995EHU9SR1d5
xcTyRMG69lUT1w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:36:21 2025 by rpki-client