Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
File: KoxYiVEmChGj771tgWvVb4Ly_DQ.mft (raw, json)
Hash identifier: 2S2TojAIvgESXa5923scNSydaUXqHnlfxtIS+LwpX6U=
Subject key identifier: E4:35:A8:95:19:FA:52:B3:15:5E:B8:FA:0E:9D:1F:83:B3:DB:81:05
Authority key identifier: 2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34
Certificate issuer: /CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34
Certificate serial: 01974D0DE6CD35BABECD7B7FE6939145C9E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
Manifest number: 0D2A
Signing time: Sun 08 Jun 2025 01:00:46 +0000
Manifest this update: Sun 08 Jun 2025 01:00:46 +0000
Manifest next update: Mon 09 Jun 2025 01:00:46 +0000
Files and hashes: 1: KoxYiVEmChGj771tgWvVb4Ly_DQ.crl (hash: n9iWakkI6cZ1hBkU9qMiaL6fTlpLxGPTdojJoYMZk40=)
2: bEf44I_katxftzRhRoOcb5k7xJw.roa (hash: B4D2C0R7a4GwUSt6VcyTIkYPBhevJsFHyCCfjO/vPIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:e6:cd:35:ba:be:cd:7b:7f:e6:93:91:45:c9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34
Validity
Not Before: Jun 8 01:00:46 2025 GMT
Not After : Jun 9 01:00:46 2025 GMT
Subject: CN=e435a89519fa52b3155eb8fa0e9d1f83b3db8105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:09:66:a8:d8:7f:11:89:18:ed:6c:83:bf:
14:e2:d6:6f:b7:0b:68:40:3e:52:1d:78:40:5c:bf:
fd:a8:7b:1a:ab:3c:d0:9e:79:f2:87:7a:78:53:b3:
05:9e:15:31:1b:27:93:a9:46:58:ff:47:cf:36:21:
50:f1:e5:b2:2f:01:e3:db:e7:61:5e:bb:a0:f4:7b:
6b:6f:cd:ec:8c:d2:33:b8:02:44:63:77:41:11:15:
b8:d1:b0:d2:4a:8b:a4:e1:fe:1f:bf:43:b6:09:c9:
53:d2:12:b2:63:c2:e6:52:81:e9:71:9d:cd:c4:bd:
ee:65:47:e5:f8:27:eb:73:47:ac:4f:f4:02:59:95:
a2:b4:fc:c7:4d:76:ec:e5:3f:02:a2:75:f1:4f:b7:
d3:90:7d:eb:da:e5:72:6c:43:04:ae:18:35:36:91:
1c:86:bf:92:58:ee:b4:c4:ad:48:70:74:72:ed:72:
17:26:0f:8d:ff:4a:db:35:17:46:6c:4f:98:1d:24:
4b:11:65:a2:45:23:db:20:97:78:bb:44:17:33:c3:
fd:08:5d:b4:39:49:81:dc:54:a3:e7:dd:3e:47:51:
db:46:3e:3b:8a:3b:e8:f7:00:b9:42:ea:34:a0:d0:
39:65:9f:92:2c:2a:e3:21:c4:e0:02:35:73:a1:60:
46:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:35:A8:95:19:FA:52:B3:15:5E:B8:FA:0E:9D:1F:83:B3:DB:81:05
X509v3 Authority Key Identifier:
keyid:2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:32:dd:63:28:d6:28:ea:ea:e0:57:d4:81:1a:86:46:34:50:
2e:09:46:d5:0e:e5:15:f7:a9:17:6a:e8:c8:68:b1:50:f5:27:
22:5c:d7:ef:c4:42:c5:1f:f9:a0:8f:43:0b:14:39:86:67:44:
1b:9a:42:28:f0:71:4d:cf:32:bf:3b:17:5d:d6:68:33:0a:18:
68:a0:5d:11:e2:15:8f:a3:2a:4a:bd:c5:d1:e3:a9:0d:7f:64:
fe:e2:9b:58:e4:fc:29:d5:da:25:ca:18:e2:c5:b8:1b:04:ca:
6e:50:fe:8b:8a:90:71:3e:cd:a2:6a:e8:01:71:a4:2d:70:29:
86:8c:bd:51:f2:06:ee:21:c6:f7:81:e7:c2:47:5a:4f:2d:43:
90:ba:7b:a5:35:a2:a9:89:87:d5:26:89:46:73:e4:08:24:ea:
2b:39:85:58:0a:f9:0d:9d:5d:b7:c5:af:d8:f1:c1:a2:99:51:
27:ac:e8:58:8c:91:06:f6:ee:de:0d:00:c7:80:02:d2:fa:07:
96:b8:1a:cb:4a:e0:34:26:db:49:68:0b:b4:a9:dd:98:a9:bf:
20:ce:a6:23:8b:22:b4:d0:8e:0c:d5:55:ad:c0:5b:f3:9a:f6:
d1:b2:ba:fe:86:ed:68:7e:65:bd:bf:1c:72:86:34:d4:0f:53:
37:f3:77:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDebNNbq+zXt/5pORRcnjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOGM1ODg5NTEyNjBhMTFhM2VmYmQ2ZDgxNmJkNTZmODJm
MmZjMzQwHhcNMjUwNjA4MDEwMDQ2WhcNMjUwNjA5MDEwMDQ2WjAzMTEwLwYDVQQD
EyhlNDM1YTg5NTE5ZmE1MmIzMTU1ZWI4ZmEwZTlkMWY4M2IzZGI4MTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhgJZqjYfxGJGO1sg78U4tZvtwto
QD5SHXhAXL/9qHsaqzzQnnnyh3p4U7MFnhUxGyeTqUZY/0fPNiFQ8eWyLwHj2+dh
Xrug9Htrb83sjNIzuAJEY3dBERW40bDSSouk4f4fv0O2CclT0hKyY8LmUoHpcZ3N
xL3uZUfl+Cfrc0esT/QCWZWitPzHTXbs5T8ConXxT7fTkH3r2uVybEMErhg1NpEc
hr+SWO60xK1IcHRy7XIXJg+N/0rbNRdGbE+YHSRLEWWiRSPbIJd4u0QXM8P9CF20
OUmB3FSj590+R1HbRj47ijvo9wC5Quo0oNA5ZZ+SLCrjIcTgAjVzoWBGiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQ1qJUZ+lKzFV64+g6dH4Oz24EFMB8GA1UdIwQY
MBaAFCqMWIlRJgoRo++9bYFr1W+C8vw0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS294WWlWRW1DaEdqNzcxdGdXdlZiNEx5X0RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80ZGU0OWMtYWE1OC00NGFmLWIwMmEt
MWU4ZDIxOWY4N2FmLzEvS294WWlWRW1DaEdqNzcxdGdXdlZiNEx5X0RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi80ZGU0OWMtYWE1OC00NGFmLWIwMmEtMWU4ZDIxOWY4N2Fm
LzEvS294WWlWRW1DaEdqNzcxdGdXdlZiNEx5X0RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzLdYyjW
KOrq4FfUgRqGRjRQLglG1Q7lFfepF2royGixUPUnIlzX78RCxR/5oI9DCxQ5hmdE
G5pCKPBxTc8yvzsXXdZoMwoYaKBdEeIVj6MqSr3F0eOpDX9k/uKbWOT8KdXaJcoY
4sW4GwTKblD+i4qQcT7NomroAXGkLXAphoy9UfIG7iHG94HnwkdaTy1DkLp7pTWi
qYmH1SaJRnPkCCTqKzmFWAr5DZ1dt8Wv2PHBoplRJ6zoWIyRBvbu3g0Ax4AC0voH
lrgay0rgNCbbSWgLtKndmKm/IM6mI4sitNCODNVVrcBb85r20bK6/obtaH5lvb8c
coY01A9TN/N36Q==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:29:43 2025 by rpki-client