Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
File: K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft (raw, json)
Hash identifier: BbsefN6BYIJC6u2Ja/Y9FA748vu1AOw5Iw36L2C+hwU=
Subject key identifier: 2B:6C:57:D4:FD:AF:4A:7C:01:B1:4C:FD:52:6C:7D:88:EB:74:D7:57
Authority key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
Certificate issuer: /CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Certificate serial: 0197B6D79BE67890E78FB9D8427C181BCC68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
Manifest number: 0226
Signing time: Sat 28 Jun 2025 14:01:12 +0000
Manifest this update: Sat 28 Jun 2025 14:01:12 +0000
Manifest next update: Sun 29 Jun 2025 14:01:12 +0000
Files and hashes: 1: K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl (hash: WVHLQDKGudfQoDgH1Ou9JRCnKA+JrVXC/zhtiiCbjrQ=)
2: cRNU9mqjTuLyrs64AbQG-Q8lS_M.roa (hash: gATqx8bTowXwaPkDc2Os+EOXUJAixbB51eSVdjtnNog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:9b:e6:78:90:e7:8f:b9:d8:42:7c:18:1b:cc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Validity
Not Before: Jun 28 14:01:12 2025 GMT
Not After : Jun 29 14:01:12 2025 GMT
Subject: CN=2b6c57d4fdaf4a7c01b14cfd526c7d88eb74d757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9d:6d:d3:0a:ed:9b:ed:10:06:7f:3f:9f:ee:
36:b9:a5:81:e0:f3:9c:bb:93:24:aa:11:04:cf:53:
43:9f:10:df:10:52:d3:0b:81:4a:32:ea:80:6f:76:
02:37:19:c5:2f:fc:1e:1c:01:d8:1c:7f:88:1f:c5:
ae:d9:9c:e0:9d:91:eb:ce:90:e4:04:65:9c:73:54:
f5:93:3e:9a:2c:3d:3d:cc:58:4f:f4:79:09:fc:26:
0f:75:a4:ea:ce:bc:17:92:a0:8d:70:1b:2d:77:37:
bb:5e:c6:e2:68:b2:6d:93:b6:fd:cc:3e:a8:36:32:
1c:b4:6e:a5:86:bd:3a:e5:9a:b6:19:63:96:c9:33:
98:94:e4:03:9c:21:7f:51:ca:1c:e7:22:d9:3d:30:
59:6b:6a:d7:de:83:40:f5:d3:27:00:ba:f2:e7:bb:
4c:f4:93:ab:ff:b9:cb:a0:3e:b5:f0:54:eb:90:45:
ab:d9:7d:77:0f:7e:04:7b:74:20:78:4f:6f:1f:12:
41:50:e7:84:26:7f:4e:14:6b:31:a6:31:85:90:50:
74:06:fb:d1:a6:80:bf:ce:f7:b4:e4:b4:33:28:37:
1b:23:bc:8f:c9:4e:d8:df:68:d6:b3:c2:51:ed:96:
96:c7:cc:c2:d2:a1:ee:b5:d5:c1:58:1f:77:81:8d:
c6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6C:57:D4:FD:AF:4A:7C:01:B1:4C:FD:52:6C:7D:88:EB:74:D7:57
X509v3 Authority Key Identifier:
keyid:2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7d:69:f0:cd:28:74:a5:ee:26:7e:08:9a:09:10:21:ed:44:
d2:09:c5:37:a5:36:27:40:15:59:aa:0c:2a:6b:d4:ab:43:cd:
81:39:df:73:9f:4a:b4:d9:86:88:65:ea:6b:25:81:81:7d:07:
24:9b:4d:6f:bb:7b:f4:59:ec:d6:06:6a:7e:fa:d8:e0:c6:84:
cf:43:7a:b8:3c:d5:fb:4c:a1:a1:ea:d2:23:dc:97:b3:42:e9:
41:b3:77:79:2a:00:20:f4:ab:0f:8b:c8:49:0d:48:6b:8c:77:
66:82:9c:a3:38:8e:cd:b5:ac:9d:ac:66:12:98:c9:02:cf:22:
ba:07:96:45:8d:a2:ec:a9:1c:47:8c:18:67:6a:25:6c:a3:d9:
d3:fa:2e:f0:77:cc:d8:8d:53:28:46:41:49:f4:3b:a0:2f:6b:
f3:57:f1:f6:3a:66:bc:54:1c:eb:c3:e4:2d:b6:d5:2f:54:25:
34:b5:7b:69:10:78:20:fc:b6:b4:d1:71:ce:71:0d:e9:a2:a8:
75:f9:f5:b4:a9:17:51:76:ff:57:a3:d3:b9:0e:4c:25:8c:66:
00:dd:e8:11:07:fe:68:ad:06:37:85:39:7d:c8:e3:3f:22:29:
0f:55:df:c1:1e:f0:83:84:8e:4e:aa:36:3c:74:52:12:a3:e0:
2d:65:91:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe215vmeJDnj7nYQnwYG8xoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNzhjZGNhMTYxNmMzYzZiNWYxOTFmYzMzYTkzNDc4OWIx
MmMwNjkwHhcNMjUwNjI4MTQwMTEyWhcNMjUwNjI5MTQwMTEyWjAzMTEwLwYDVQQD
EygyYjZjNTdkNGZkYWY0YTdjMDFiMTRjZmQ1MjZjN2Q4OGViNzRkNzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6J1t0wrtm+0QBn8/n+42uaWB4POc
u5MkqhEEz1NDnxDfEFLTC4FKMuqAb3YCNxnFL/weHAHYHH+IH8Wu2ZzgnZHrzpDk
BGWcc1T1kz6aLD09zFhP9HkJ/CYPdaTqzrwXkqCNcBstdze7XsbiaLJtk7b9zD6o
NjIctG6lhr065Zq2GWOWyTOYlOQDnCF/Ucoc5yLZPTBZa2rX3oNA9dMnALry57tM
9JOr/7nLoD618FTrkEWr2X13D34Ee3QgeE9vHxJBUOeEJn9OFGsxpjGFkFB0BvvR
poC/zve05LQzKDcbI7yPyU7Y32jWs8JR7ZaWx8zC0qHutdXBWB93gY3GTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtsV9T9r0p8AbFM/VJsfYjrdNdXMB8GA1UdIwQY
MBaAFCt4zcoWFsPGtfGR/DOpNHibEsBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzNqTnloWVd3OGExOFpIOE02azBlSnNTd0drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lN2M0OWMtYjZkMC00NWRlLWJmYmEt
M2VhYTAzNGE4OTc4LzEvSzNqTnloWVd3OGExOFpIOE02azBlSnNTd0drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9lN2M0OWMtYjZkMC00NWRlLWJmYmEtM2VhYTAzNGE4OTc4
LzEvSzNqTnloWVd3OGExOFpIOE02azBlSnNTd0drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL31p8M0o
dKXuJn4ImgkQIe1E0gnFN6U2J0AVWaoMKmvUq0PNgTnfc59KtNmGiGXqayWBgX0H
JJtNb7t79Fns1gZqfvrY4MaEz0N6uDzV+0yhoerSI9yXs0LpQbN3eSoAIPSrD4vI
SQ1Ia4x3ZoKcoziOzbWsnaxmEpjJAs8iugeWRY2i7KkcR4wYZ2olbKPZ0/ou8HfM
2I1TKEZBSfQ7oC9r81fx9jpmvFQc68PkLbbVL1QlNLV7aRB4IPy2tNFxznEN6aKo
dfn1tKkXUXb/V6PTuQ5MJYxmAN3oEQf+aK0GN4U5fcjjPyIpD1XfwR7wg4SOTqo2
PHRSEqPgLWWRrQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:36 2025 by rpki-client