Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
File: KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft (raw, json)
Hash identifier: DN2b0uGmGS+Evsn/lAlSTdDTr12t1a7Le/+WjIY91yA=
Subject key identifier: 37:69:75:C4:D4:09:35:0C:CF:46:01:05:20:64:48:E9:32:CA:CC:1C
Authority key identifier: 29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
Certificate issuer: /CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Certificate serial: 0197B6A04A599485BEF259805DCE75701877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:00:47 +0000
Manifest this update: Sat 28 Jun 2025 13:00:47 +0000
Manifest next update: Sun 29 Jun 2025 13:00:47 +0000
Files and hashes: 1: 023NXf0NRLbsgezphpzZHNxZ3e4.roa (hash: 5Oh3BvS9337aAFlKHkUHIB4jGr7DBQIIdxMScBWVcOU=)
2: KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl (hash: SVaee+McrndLofOLfTYgCJB181sGoGnT36Plg7NDHYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:4a:59:94:85:be:f2:59:80:5d:ce:75:70:18:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Validity
Not Before: Jun 28 13:00:47 2025 GMT
Not After : Jun 29 13:00:47 2025 GMT
Subject: CN=376975c4d409350ccf460105206448e932cacc1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3e:a3:50:78:44:d9:87:59:c9:97:6c:e9:7e:
a1:98:62:09:36:4a:ca:c3:18:47:9e:91:79:35:aa:
3f:b9:4e:50:9f:ab:5c:1d:80:b1:08:1c:cd:a7:17:
bc:fb:39:0f:3e:93:9d:69:3d:3e:20:63:37:93:12:
3a:7e:66:2b:3f:fa:d5:64:5f:57:73:a4:9c:09:42:
58:ac:93:94:12:6c:8e:67:a2:62:68:eb:51:da:1c:
18:a6:e8:5d:3d:23:c2:7c:49:f7:21:b5:88:ff:4e:
f8:13:dd:f2:96:dc:83:8a:ae:03:f6:c5:bc:92:63:
00:d8:38:09:5b:51:b2:05:40:0e:7e:74:e1:c3:b1:
22:fa:53:4c:07:99:e7:3c:98:0a:9e:eb:74:ae:c0:
96:6d:bf:41:77:2f:f6:db:49:fd:1a:d0:1f:ee:14:
c9:fd:99:8c:15:75:29:15:9f:b3:0a:c8:fe:4d:d2:
42:5d:63:f1:34:9c:22:2e:bb:66:3d:1e:2a:31:94:
7e:07:5b:eb:26:6a:93:da:55:6d:6f:60:75:58:e8:
a8:03:b8:64:d7:98:f7:95:4d:ac:18:7f:df:dc:6e:
a9:eb:e2:1b:bf:d0:65:5c:1a:6b:77:87:ca:73:f2:
5b:8a:3a:2e:51:b4:f2:23:da:4c:28:f9:58:b7:ba:
03:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:69:75:C4:D4:09:35:0C:CF:46:01:05:20:64:48:E9:32:CA:CC:1C
X509v3 Authority Key Identifier:
keyid:29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:27:37:ef:88:07:4d:6d:16:85:1d:75:18:8b:57:7d:15:d1:
a3:02:0b:39:2a:87:a6:9b:76:34:4b:7e:92:f9:de:6d:d7:b8:
23:3b:e6:ea:37:e0:e7:7c:c7:47:63:49:08:d8:ac:7d:a3:42:
30:fc:3e:9e:a0:c8:a9:44:ae:79:93:00:a8:52:f5:d6:ec:89:
dd:3f:43:09:9f:36:17:84:48:d3:a1:bc:b5:cb:e4:bc:3d:62:
87:59:72:ee:22:fb:28:93:45:f2:b2:68:a9:2e:d4:27:59:18:
54:93:cd:40:86:33:ac:90:84:3c:76:a6:1c:97:e8:84:a8:52:
82:45:3b:13:56:00:01:df:99:75:da:b8:06:71:83:32:45:ee:
39:3a:b7:38:9c:1e:11:78:94:8a:b0:05:23:58:e2:f4:6d:ad:
3b:62:b2:f5:2b:dc:d6:dc:3f:0c:d1:88:f5:8d:03:25:a9:6e:
37:4b:57:22:5c:5f:7c:55:08:45:55:b7:9f:70:6f:0c:ee:a3:
38:6a:0e:48:57:e3:0a:13:fb:ed:58:73:3a:bc:31:db:ef:e1:
b0:16:82:15:2f:80:ba:d8:0e:85:a2:ef:37:92:d4:23:24:43:
bf:a5:28:f8:7e:c2:9c:31:ef:78:44:e1:a6:e6:9b:ba:59:84:
7a:e1:0b:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oEpZlIW+8lmAXc51cBh3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YTM5ZWJiNGU1N2ZmMzQ4NTNjNzZiMGY1ODc3YWU4YWIz
YzdjZjYwHhcNMjUwNjI4MTMwMDQ3WhcNMjUwNjI5MTMwMDQ3WjAzMTEwLwYDVQQD
EygzNzY5NzVjNGQ0MDkzNTBjY2Y0NjAxMDUyMDY0NDhlOTMyY2FjYzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz6jUHhE2YdZyZds6X6hmGIJNkrK
wxhHnpF5Nao/uU5Qn6tcHYCxCBzNpxe8+zkPPpOdaT0+IGM3kxI6fmYrP/rVZF9X
c6ScCUJYrJOUEmyOZ6JiaOtR2hwYpuhdPSPCfEn3IbWI/074E93yltyDiq4D9sW8
kmMA2DgJW1GyBUAOfnThw7Ei+lNMB5nnPJgKnut0rsCWbb9Bdy/220n9GtAf7hTJ
/ZmMFXUpFZ+zCsj+TdJCXWPxNJwiLrtmPR4qMZR+B1vrJmqT2lVtb2B1WOioA7hk
15j3lU2sGH/f3G6p6+Ibv9BlXBprd4fKc/JbijouUbTyI9pMKPlYt7oDzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdpdcTUCTUMz0YBBSBkSOkyyswcMB8GA1UdIwQY
MBaAFCmjnrtOV/80hTx2sPWHeuirPHz2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2FPZXUwNVhfelNGUEhhdzlZZDY2S3M4ZlBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZjk3ZmMtNWZhMy00MDgzLTk1MTUt
Y2Q5ZGEyZDkyZThkLzEvS2FPZXUwNVhfelNGUEhhdzlZZDY2S3M4ZlBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yZjk3ZmMtNWZhMy00MDgzLTk1MTUtY2Q5ZGEyZDkyZThk
LzEvS2FPZXUwNVhfelNGUEhhdzlZZDY2S3M4ZlBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAyc374gH
TW0WhR11GItXfRXRowILOSqHppt2NEt+kvnebde4Izvm6jfg53zHR2NJCNisfaNC
MPw+nqDIqUSueZMAqFL11uyJ3T9DCZ82F4RI06G8tcvkvD1ih1ly7iL7KJNF8rJo
qS7UJ1kYVJPNQIYzrJCEPHamHJfohKhSgkU7E1YAAd+Zddq4BnGDMkXuOTq3OJwe
EXiUirAFI1ji9G2tO2Ky9Svc1tw/DNGI9Y0DJaluN0tXIlxffFUIRVW3n3BvDO6j
OGoOSFfjChP77VhzOrwx2+/hsBaCFS+AutgOhaLvN5LUIyRDv6Uo+H7CnDHveETh
puabulmEeuELZQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:39 2025 by rpki-client