Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
File: kzJxEXB2iVD92fne_mUfLVoTEr4.mft (raw, json)
Hash identifier: s6Ut1tykcnWFS9LKe46UlCpK4CdgFeG2TBsqIp8JbBY=
Subject key identifier: 34:69:DE:C5:2B:47:0F:52:6B:00:4D:44:1A:1E:49:35:54:2F:B8:26
Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
Certificate issuer: /CN=9332711170768950fdd9f9defe651f2d5a1312be
Certificate serial: 0197CB3A172EFB4A32D09A801A9D6C731283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
Manifest number: 09BF
Signing time: Wed 02 Jul 2025 13:01:11 +0000
Manifest this update: Wed 02 Jul 2025 13:01:11 +0000
Manifest next update: Thu 03 Jul 2025 13:01:11 +0000
Files and hashes: 1: kzJxEXB2iVD92fne_mUfLVoTEr4.crl (hash: FKgww6UAlvNaVydGwjoeHLKp58EujuCEhhK/2v1l16w=)
2: w9ZFhmeWl9P8oxUCmO0haW1uUVw.roa (hash: 4gJ+U4SX6C0kJ8fPc/SsSrnAYsThJp4UepZuuWBccp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:3a:17:2e:fb:4a:32:d0:9a:80:1a:9d:6c:73:12:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be
Validity
Not Before: Jul 2 13:01:11 2025 GMT
Not After : Jul 3 13:01:11 2025 GMT
Subject: CN=3469dec52b470f526b004d441a1e4935542fb826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9b:7e:4d:dc:c5:db:55:89:06:f8:5a:e4:c7:
b8:0e:fe:69:f4:b5:28:17:15:e0:e5:1f:5a:ed:89:
3f:e8:e6:04:0a:ca:fb:57:b0:a8:bb:4a:24:c1:56:
66:d2:27:cf:54:70:43:78:cb:ad:55:33:0c:a0:92:
ce:9a:70:ea:02:d2:41:45:5d:aa:d2:03:20:fe:8e:
6a:21:15:5f:a4:3b:c1:d5:7f:45:85:e2:84:85:78:
93:b4:bd:14:64:96:16:22:9c:61:ce:e5:b7:17:86:
9d:69:5c:13:7a:11:c9:9c:fd:9d:75:03:14:ce:a3:
16:9c:38:b2:82:48:aa:48:a1:a4:bc:24:ce:82:99:
bd:14:c0:5e:02:95:9d:85:24:b9:76:5d:18:53:3e:
e1:5a:f1:02:81:0d:ca:62:8c:60:e5:17:48:75:35:
fe:5c:a4:c9:7b:e9:6c:24:a5:1a:30:6e:52:b8:a7:
c8:16:33:13:2a:ac:41:0b:f3:2d:8d:bf:6a:fb:7b:
72:55:3a:5b:08:7b:e5:13:a2:8f:56:80:6a:c1:39:
c3:88:75:22:34:47:01:18:71:99:9e:04:e3:ab:23:
8e:f4:f8:bc:7b:fc:9e:45:49:a4:1e:fe:f3:03:07:
f1:72:71:ec:1d:a8:37:a2:8d:97:f8:4f:5b:f8:15:
a5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:69:DE:C5:2B:47:0F:52:6B:00:4D:44:1A:1E:49:35:54:2F:B8:26
X509v3 Authority Key Identifier:
keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ca:be:d8:3b:33:c9:29:c8:4d:1d:5c:e8:66:5b:77:34:6a:
23:cb:b4:19:a5:61:d4:a4:98:ae:bc:44:87:31:ba:0f:7c:33:
e3:be:80:aa:0a:99:dd:d8:cf:0e:7b:bd:d2:1e:2d:ae:85:57:
7b:a0:3d:c5:30:d9:31:3a:e1:a9:78:bb:b3:36:1f:6b:73:1b:
b2:f5:28:58:33:6b:03:79:13:98:f4:66:ab:31:2a:c7:68:ca:
98:1c:7e:bb:b6:5a:97:36:b3:3e:de:10:a1:60:c5:e5:c6:86:
7d:a3:f9:3a:ab:ed:66:70:a5:2d:4d:86:ca:82:d3:c5:65:46:
b3:25:07:a1:c3:d2:24:b6:f2:67:cc:0b:73:c0:26:ab:45:c8:
e0:63:76:f8:6b:24:78:88:a2:28:e3:e4:80:b4:d7:4a:fe:34:
6a:29:de:f7:08:8e:49:55:fe:5a:af:10:8b:25:86:ec:04:d1:
4b:a5:47:30:e2:09:41:9e:d1:b1:9d:be:b8:84:71:b5:36:dd:
2b:46:46:6e:3e:9a:51:81:cb:33:ec:d2:35:36:38:30:26:55:
12:35:ad:69:34:5f:42:0a:5f:17:61:d4:7c:a9:f4:87:43:3f:
41:4a:6c:c6:d6:19:83:dc:a0:cb:16:85:fb:ea:54:df:63:13:
d1:8f:42:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfLOhcu+0oy0JqAGp1scxKDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMzI3MTExNzA3Njg5NTBmZGQ5ZjlkZWZlNjUxZjJkNWEx
MzEyYmUwHhcNMjUwNzAyMTMwMTExWhcNMjUwNzAzMTMwMTExWjAzMTEwLwYDVQQD
EygzNDY5ZGVjNTJiNDcwZjUyNmIwMDRkNDQxYTFlNDkzNTU0MmZiODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Jt+TdzF21WJBvha5Me4Dv5p9LUo
FxXg5R9a7Yk/6OYECsr7V7Cou0okwVZm0ifPVHBDeMutVTMMoJLOmnDqAtJBRV2q
0gMg/o5qIRVfpDvB1X9FheKEhXiTtL0UZJYWIpxhzuW3F4adaVwTehHJnP2ddQMU
zqMWnDiygkiqSKGkvCTOgpm9FMBeApWdhSS5dl0YUz7hWvECgQ3KYoxg5RdIdTX+
XKTJe+lsJKUaMG5SuKfIFjMTKqxBC/Mtjb9q+3tyVTpbCHvlE6KPVoBqwTnDiHUi
NEcBGHGZngTjqyOO9Pi8e/yeRUmkHv7zAwfxcnHsHag3oo2X+E9b+BWlqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRp3sUrRw9SawBNRBoeSTVUL7gmMB8GA1UdIwQY
MBaAFJMycRFwdolQ/dn53v5lHy1aExK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hZmNkNDAtMmE1MC00YzExLWJhNDct
ZTExZmZlYzg5Y2Q0LzEva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hZmNkNDAtMmE1MC00YzExLWJhNDctZTExZmZlYzg5Y2Q0
LzEva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMq+2Dsz
ySnITR1c6GZbdzRqI8u0GaVh1KSYrrxEhzG6D3wz476AqgqZ3djPDnu90h4troVX
e6A9xTDZMTrhqXi7szYfa3MbsvUoWDNrA3kTmPRmqzEqx2jKmBx+u7ZalzazPt4Q
oWDF5caGfaP5OqvtZnClLU2GyoLTxWVGsyUHocPSJLbyZ8wLc8Amq0XI4GN2+Gsk
eIiiKOPkgLTXSv40aine9wiOSVX+Wq8QiyWG7ATRS6VHMOIJQZ7RsZ2+uIRxtTbd
K0ZGbj6aUYHLM+zSNTY4MCZVEjWtaTRfQgpfF2HUfKn0h0M/QUpsxtYZg9ygyxaF
++pU32MT0Y9Cjg==
-----END CERTIFICATE-----
Generated at Wed Jul 2 14:55:44 2025 by rpki-client