Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft
File: KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft (raw, json)
Hash identifier: 1eKqS3b62A7SVh9LAhpfGmfGTcwGx931x/npSCjnYa0=
Subject key identifier: 4B:FC:94:DE:48:2F:A2:B5:BC:01:F8:94:47:65:A8:C2:64:B1:93:26
Authority key identifier: 28:C2:20:2A:44:35:37:FB:8F:B2:80:56:7A:17:48:5F:12:30:C4:11
Certificate issuer: /CN=28c2202a443537fb8fb280567a17485f1230c411
Certificate serial: 0197B6D73C45FECC88EF37731754581E8849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 14:00:48 +0000
Manifest this update: Sat 28 Jun 2025 14:00:48 +0000
Manifest next update: Sun 29 Jun 2025 14:00:48 +0000
Files and hashes: 1: KMIgKkQ1N_uPsoBWehdIXxIwxBE.crl (hash: SiJcwu+2tEIk9H+H9wVPCZAEXPn5eEonmP0bWwYQnp0=)
2: rzOkydR3EHFZXD3XEkRebB02-_4.roa (hash: df7jTqxQL8Sw059sbRTkyG9ltt5KtHFaW+BfP29wPTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:3c:45:fe:cc:88:ef:37:73:17:54:58:1e:88:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c2202a443537fb8fb280567a17485f1230c411
Validity
Not Before: Jun 28 14:00:48 2025 GMT
Not After : Jun 29 14:00:48 2025 GMT
Subject: CN=4bfc94de482fa2b5bc01f8944765a8c264b19326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:16:a3:7f:8b:43:d0:0a:b1:53:e1:6b:eb:7e:
7d:85:9d:8e:be:1a:4f:9a:7f:c2:90:65:da:05:0f:
2a:58:71:fe:dd:3b:ce:3c:2d:bf:6d:b6:5e:a2:bd:
7c:57:ce:e4:32:9a:ef:11:12:ce:46:71:8c:17:3d:
5f:ec:0e:31:d0:95:64:7c:c1:1d:2c:36:66:54:49:
6e:ec:6f:7d:6f:00:40:27:7a:98:11:01:8c:ff:ac:
b8:08:2e:40:7a:e9:b8:b9:c3:83:e1:46:3b:66:f8:
a6:1a:89:21:16:d5:9b:5b:d3:86:0c:5f:17:19:87:
59:c8:df:86:7c:2e:92:24:18:e9:6e:2e:64:80:e6:
13:d6:1b:6b:c5:cc:48:87:03:c4:c3:96:8b:7b:1f:
83:d9:3e:f8:1c:a1:70:a7:47:af:7a:ed:b6:31:80:
30:e0:10:06:08:f7:d0:5c:44:20:0d:64:bd:25:2b:
2e:99:11:7b:7f:34:ed:b0:6a:c5:02:00:90:ed:bf:
a4:5b:cf:46:3d:3d:53:dd:73:48:5f:17:fc:e4:35:
6b:b1:6e:99:bc:e6:14:b8:a2:ca:5c:c9:81:f3:e6:
14:05:06:3c:c2:dc:3c:0f:99:e6:16:03:cb:2c:06:
6f:fd:70:78:01:0f:34:44:67:5e:bb:1e:54:3a:a6:
56:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FC:94:DE:48:2F:A2:B5:BC:01:F8:94:47:65:A8:C2:64:B1:93:26
X509v3 Authority Key Identifier:
keyid:28:C2:20:2A:44:35:37:FB:8F:B2:80:56:7A:17:48:5F:12:30:C4:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:50:28:73:0b:8d:24:83:c0:2a:c7:30:8a:6c:4b:5b:1e:e6:
8d:ca:6f:a5:b2:cb:4c:3e:67:5c:ac:29:10:64:80:18:1d:bd:
e1:0c:bf:dc:9f:b1:19:27:5e:7a:48:c0:c0:52:66:ae:c5:12:
be:ed:94:97:13:65:d0:1d:4c:c3:a5:82:db:c1:b7:b6:05:be:
07:00:71:7b:2d:53:2f:87:b1:90:f0:c7:cb:f4:19:b0:e5:54:
7c:f3:10:c1:fb:d0:76:c2:09:a5:e6:d8:c7:2d:11:7c:aa:32:
38:a8:22:20:09:34:cf:fc:51:45:31:d3:f1:60:ca:bd:67:1d:
75:38:95:38:93:af:50:35:ef:f4:00:bb:40:89:28:7c:de:61:
75:81:2f:58:78:71:45:f8:1f:c3:65:72:24:06:52:cc:19:88:
08:93:97:c5:f1:da:15:d5:97:19:7a:9e:11:5d:c1:55:6f:d6:
f0:14:c5:67:74:81:71:95:b3:62:81:e4:0d:7a:d2:f3:b9:1e:
45:cb:7e:47:88:0c:e2:c6:93:46:02:c6:eb:62:b3:81:0b:64:
f2:95:79:c6:1a:4c:1f:b5:f6:e1:10:03:9b:90:62:9d:8e:4e:
92:a8:a8:a6:3d:3b:bd:8a:5b:9f:29:fd:45:68:00:88:33:e9:
97:f1:c3:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe21zxF/syI7zdzF1RYHohJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YzIyMDJhNDQzNTM3ZmI4ZmIyODA1NjdhMTc0ODVmMTIz
MGM0MTEwHhcNMjUwNjI4MTQwMDQ4WhcNMjUwNjI5MTQwMDQ4WjAzMTEwLwYDVQQD
Eyg0YmZjOTRkZTQ4MmZhMmI1YmMwMWY4OTQ0NzY1YThjMjY0YjE5MzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBajf4tD0AqxU+Fr6359hZ2OvhpP
mn/CkGXaBQ8qWHH+3TvOPC2/bbZeor18V87kMprvERLORnGMFz1f7A4x0JVkfMEd
LDZmVElu7G99bwBAJ3qYEQGM/6y4CC5Aeum4ucOD4UY7ZvimGokhFtWbW9OGDF8X
GYdZyN+GfC6SJBjpbi5kgOYT1htrxcxIhwPEw5aLex+D2T74HKFwp0eveu22MYAw
4BAGCPfQXEQgDWS9JSsumRF7fzTtsGrFAgCQ7b+kW89GPT1T3XNIXxf85DVrsW6Z
vOYUuKLKXMmB8+YUBQY8wtw8D5nmFgPLLAZv/XB4AQ80RGdeux5UOqZWwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEv8lN5IL6K1vAH4lEdlqMJksZMmMB8GA1UdIwQY
MBaAFCjCICpENTf7j7KAVnoXSF8SMMQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS01JZ0trUTFOX3VQc29CV2VoZElYeEl3eEJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hMmNlNjQtMzNhZi00NWZlLTkwZWIt
ODlkMjYxMWE5NWRiLzEvS01JZ0trUTFOX3VQc29CV2VoZElYeEl3eEJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hMmNlNjQtMzNhZi00NWZlLTkwZWItODlkMjYxMWE5NWRi
LzEvS01JZ0trUTFOX3VQc29CV2VoZElYeEl3eEJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtVAocwuN
JIPAKscwimxLWx7mjcpvpbLLTD5nXKwpEGSAGB294Qy/3J+xGSdeekjAwFJmrsUS
vu2UlxNl0B1Mw6WC28G3tgW+BwBxey1TL4exkPDHy/QZsOVUfPMQwfvQdsIJpebY
xy0RfKoyOKgiIAk0z/xRRTHT8WDKvWcddTiVOJOvUDXv9AC7QIkofN5hdYEvWHhx
Rfgfw2VyJAZSzBmICJOXxfHaFdWXGXqeEV3BVW/W8BTFZ3SBcZWzYoHkDXrS87ke
Rct+R4gM4saTRgLG62KzgQtk8pV5xhpMH7X24RADm5BinY5Okqiopj07vYpbnyn9
RWgAiDPpl/HDCQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:13 2025 by rpki-client