Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
File: KslDUX9eO3R-dTAyB4mgNES0ORI.mft (raw, json)
Hash identifier: 0K/ALYdOV/APStsg11v/wy5imIEIyWzoCXgG0aFW2B0=
Subject key identifier: AD:56:79:8D:92:36:00:CA:47:3A:79:8A:9A:FB:29:D1:86:41:A8:22
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 01974AB147ED3A29CD86C15CB93BB98D9222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
Manifest number: 0E6C
Signing time: Sat 07 Jun 2025 14:00:21 +0000
Manifest this update: Sat 07 Jun 2025 14:00:21 +0000
Manifest next update: Sun 08 Jun 2025 14:00:21 +0000
Files and hashes: 1: KslDUX9eO3R-dTAyB4mgNES0ORI.crl (hash: BhQdvwm7HuuB83BB9TFyls11htlvU0OD3T/3D/i2KS4=)
2: hRopNkKlsL4OwqAqAiJ3QXD2oug.roa (hash: NMdRr2OaOIcyhizjr1sKy4ahHmQgfdQZAiHU+pJ6knM=)
3: wXKkmEzVnT6wH-e4RUZ5ISziflM.roa (hash: 0ibg6oISPGaXyJMIkBYpRfjFyr2Dyc5Kyu9O/zaq9rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:47:ed:3a:29:cd:86:c1:5c:b9:3b:b9:8d:92:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Jun 7 14:00:21 2025 GMT
Not After : Jun 8 14:00:21 2025 GMT
Subject: CN=ad56798d923600ca473a798a9afb29d18641a822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5c:35:4b:c4:d7:c2:29:6c:33:d4:57:c9:19:
35:a6:0c:8f:b6:f4:e0:5c:0b:78:88:42:26:51:a3:
17:69:47:57:00:ec:d8:36:86:e6:42:c0:ef:27:63:
59:36:ce:af:76:5f:32:90:c5:55:35:e8:1d:24:6e:
8d:96:1e:9e:5c:85:64:52:23:12:a1:87:fc:70:4f:
c8:1c:7a:73:70:84:7c:bc:f0:81:ca:ba:89:00:74:
c2:42:88:45:9e:a4:26:b8:36:06:69:c7:dd:17:af:
8a:3d:88:6a:2d:2d:aa:fa:93:aa:c6:22:d5:25:56:
a6:01:e9:81:e9:13:98:20:2f:42:53:3a:9a:43:05:
40:ae:ac:49:be:99:b5:aa:94:ff:de:1e:b6:d4:37:
84:05:0f:50:a4:98:e7:c2:c8:8e:80:2e:58:bf:61:
dd:d6:c2:a8:f4:9e:67:07:a6:0d:8a:be:36:c6:bd:
a4:a5:d6:a0:d2:57:42:38:f1:f1:3a:18:9e:8b:98:
4c:6d:b7:04:31:cc:30:6d:ee:ec:df:3f:11:1e:98:
74:2b:8a:1e:a1:1b:db:e1:82:10:fb:21:54:18:1d:
97:95:a3:dd:83:96:ad:ca:15:c1:d7:b6:f0:a6:10:
53:16:57:44:df:b4:6a:4e:c1:66:05:f4:d1:a8:29:
e7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:56:79:8D:92:36:00:CA:47:3A:79:8A:9A:FB:29:D1:86:41:A8:22
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:89:cb:db:a3:bd:aa:0d:f2:0f:37:85:72:83:49:58:1b:81:
ec:55:ab:8a:fa:dc:39:d3:45:0d:aa:0e:af:62:ac:04:db:7d:
15:a2:34:5a:7e:f0:dc:08:2b:46:b0:b5:ae:c9:d4:2a:68:6a:
fb:23:86:75:0a:4f:18:8c:80:48:eb:e7:67:a0:e6:db:83:ea:
b5:c6:9c:39:c4:7e:e1:39:a6:3c:4d:61:45:fa:7e:ab:36:60:
3f:9a:2f:0a:81:78:85:97:da:3b:12:54:29:f3:54:e9:a8:be:
58:2a:70:2d:6f:98:9b:4a:e3:c4:ff:dc:04:8d:13:2b:60:2c:
eb:34:b3:60:39:94:73:18:e0:24:59:83:d7:e1:79:43:ab:39:
78:47:2e:f5:8f:54:76:9c:25:b4:0d:fa:41:2a:11:f3:75:ea:
d3:f2:05:a7:c7:9d:6b:a1:28:7e:6e:9b:2e:dc:9e:a0:57:de:
0a:1f:5f:ce:a4:4c:79:5f:3c:36:2f:0b:77:83:18:7d:74:49:
df:fd:f8:31:a1:64:63:d5:11:82:b5:6c:b6:7e:58:0c:19:22:
e6:05:f3:cd:44:eb:04:db:da:b3:50:dc:2e:a1:95:17:67:70:
7a:53:89:cc:85:cb:e0:7b:10:60:08:3e:70:b0:33:b4:73:38:
20:13:28:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKsUftOinNhsFcuTu5jZIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzk0MzUxN2Y1ZTNiNzQ3ZTc1MzAzMjA3ODlhMDM0NDRi
NDM5MTIwHhcNMjUwNjA3MTQwMDIxWhcNMjUwNjA4MTQwMDIxWjAzMTEwLwYDVQQD
EyhhZDU2Nzk4ZDkyMzYwMGNhNDczYTc5OGE5YWZiMjlkMTg2NDFhODIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31w1S8TXwilsM9RXyRk1pgyPtvTg
XAt4iEImUaMXaUdXAOzYNobmQsDvJ2NZNs6vdl8ykMVVNegdJG6Nlh6eXIVkUiMS
oYf8cE/IHHpzcIR8vPCByrqJAHTCQohFnqQmuDYGacfdF6+KPYhqLS2q+pOqxiLV
JVamAemB6ROYIC9CUzqaQwVArqxJvpm1qpT/3h621DeEBQ9QpJjnwsiOgC5Yv2Hd
1sKo9J5nB6YNir42xr2kpdag0ldCOPHxOhiei5hMbbcEMcwwbe7s3z8RHph0K4oe
oRvb4YIQ+yFUGB2XlaPdg5atyhXB17bwphBTFldE37RqTsFmBfTRqCnnuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1WeY2SNgDKRzp5ipr7KdGGQagiMB8GA1UdIwQY
MBaAFCrJQ1F/Xjt0fnUwMgeJoDREtDkSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xOTUxMWQtNTM3ZS00MjQxLWEwZDgt
MmQ5MWNmZDdhYWY0LzEvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xOTUxMWQtNTM3ZS00MjQxLWEwZDgtMmQ5MWNmZDdhYWY0
LzEvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4nL26O9
qg3yDzeFcoNJWBuB7FWrivrcOdNFDaoOr2KsBNt9FaI0Wn7w3AgrRrC1rsnUKmhq
+yOGdQpPGIyASOvnZ6Dm24PqtcacOcR+4TmmPE1hRfp+qzZgP5ovCoF4hZfaOxJU
KfNU6ai+WCpwLW+Ym0rjxP/cBI0TK2As6zSzYDmUcxjgJFmD1+F5Q6s5eEcu9Y9U
dpwltA36QSoR83Xq0/IFp8eda6Eofm6bLtyeoFfeCh9fzqRMeV88Ni8Ld4MYfXRJ
3/34MaFkY9URgrVstn5YDBki5gXzzUTrBNvas1DcLqGVF2dwelOJzIXL4HsQYAg+
cLAztHM4IBMoFA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:41:54 2025 by rpki-client