Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
File: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft (raw, json)
Hash identifier: xIXcN+Mk4KVtdUfSHme9fhj2s6t5Iyh2yu/BCGfFIkA=
Subject key identifier: B8:3B:7C:8D:7F:37:30:1B:3D:66:61:D3:09:B9:EF:26:71:6A:13:1C
Authority key identifier: 92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C
Certificate issuer: /CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
Certificate serial: 0197B7EA1BA173576462A9EAE7557176340B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
Manifest number: 0490
Signing time: Sat 28 Jun 2025 19:01:02 +0000
Manifest this update: Sat 28 Jun 2025 19:01:02 +0000
Manifest next update: Sun 29 Jun 2025 19:01:02 +0000
Files and hashes: 1: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl (hash: QeCHs7NB1fnGsLcIC4wHYs87i9g+0RHsLeQhSHbxYms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:1b:a1:73:57:64:62:a9:ea:e7:55:71:76:34:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
Validity
Not Before: Jun 28 19:01:02 2025 GMT
Not After : Jun 29 19:01:02 2025 GMT
Subject: CN=b83b7c8d7f37301b3d6661d309b9ef26716a131c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fe:67:cc:f7:2a:ac:7b:a2:bb:c9:08:14:d1:
60:56:03:6e:6e:92:9d:35:11:43:db:c5:da:2e:01:
df:26:99:d3:f5:62:44:72:70:a8:11:18:ec:aa:c6:
ff:18:5c:2b:12:7f:a6:0f:08:1b:5c:13:4d:35:75:
fa:9e:1a:cd:94:84:b8:30:58:aa:e0:e2:f9:45:ac:
dd:2f:2d:da:91:c4:38:28:b6:c5:da:ed:88:c8:59:
df:86:6f:14:06:f2:13:9c:fc:8c:fa:42:cd:f3:f0:
b1:09:5c:e4:9e:43:1d:8a:44:77:93:7d:2e:4e:1a:
d5:b5:96:fc:42:f4:03:ba:d2:d8:f9:86:06:f3:ee:
38:3f:e8:5d:da:6c:27:f7:b5:48:c2:1c:e7:f2:1a:
ba:cd:9e:0f:a5:e8:a1:a7:9a:c1:f1:84:38:f8:5f:
35:cf:53:0e:cd:54:84:8a:9c:a0:42:7b:4c:5f:79:
17:97:d1:ba:0c:db:87:e4:55:41:52:13:39:f3:e0:
20:aa:bf:c6:61:d8:d7:2f:d3:d9:09:e9:e4:ac:56:
9f:a3:3c:2d:c0:a6:74:a5:06:10:b6:04:7c:ab:cd:
83:d7:04:32:ff:ac:2e:e2:f2:71:44:41:d4:68:fb:
2f:36:f8:86:36:fb:8a:74:2c:11:62:d3:4f:de:8b:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3B:7C:8D:7F:37:30:1B:3D:66:61:D3:09:B9:EF:26:71:6A:13:1C
X509v3 Authority Key Identifier:
keyid:92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1c:41:c3:bd:19:a0:b5:a6:c1:84:d3:d5:53:ae:97:32:15:
f6:c7:1c:d6:e1:87:d5:52:5f:a2:a8:59:06:37:5b:26:f4:90:
58:b4:82:29:e6:08:e8:4e:4e:12:45:35:a0:9b:2b:04:4c:e8:
89:02:74:27:d3:1b:b4:df:c5:fc:75:e7:40:7b:c7:d3:57:b7:
d7:ad:fa:02:7e:f0:10:41:12:ba:52:41:15:1f:5a:6f:a3:cb:
f9:ac:ad:42:36:49:e5:00:d9:cd:d3:58:50:2f:35:a1:30:9d:
ea:b5:78:97:5f:42:24:1d:47:d6:16:5a:0c:5b:f5:52:b1:5b:
3f:69:99:b5:0f:78:92:34:1a:dd:54:b0:60:8f:41:69:4a:94:
c5:9e:51:c2:ea:de:d1:24:5d:45:d9:49:00:0c:17:26:c1:13:
43:cd:8a:36:6c:74:1f:b7:f2:b6:9d:83:3e:fb:57:2b:c1:54:
01:fd:a2:ff:ab:95:e2:80:ad:5f:ba:df:b8:8f:03:2a:dd:65:
30:4f:9d:dd:4e:74:8b:14:76:f8:10:8e:ed:e3:e6:61:84:fb:
6a:d6:c1:43:bb:97:d8:b1:98:20:69:35:e0:73:35:27:fc:b8:
d3:64:a2:48:53:a8:9e:cf:ad:10:48:22:c4:b8:92:89:78:dd:
a4:a0:66:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36huhc1dkYqnq51VxdjQLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZGY4YTkwZDQzYjAzNGE3MmE0Nzg4MjZlYzNkNGVhZTY4
MWRkMmMwHhcNMjUwNjI4MTkwMTAyWhcNMjUwNjI5MTkwMTAyWjAzMTEwLwYDVQQD
EyhiODNiN2M4ZDdmMzczMDFiM2Q2NjYxZDMwOWI5ZWYyNjcxNmExMzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P5nzPcqrHuiu8kIFNFgVgNubpKd
NRFD28XaLgHfJpnT9WJEcnCoERjsqsb/GFwrEn+mDwgbXBNNNXX6nhrNlIS4MFiq
4OL5RazdLy3akcQ4KLbF2u2IyFnfhm8UBvITnPyM+kLN8/CxCVzknkMdikR3k30u
ThrVtZb8QvQDutLY+YYG8+44P+hd2mwn97VIwhzn8hq6zZ4Ppeihp5rB8YQ4+F81
z1MOzVSEipygQntMX3kXl9G6DNuH5FVBUhM58+Agqr/GYdjXL9PZCenkrFafozwt
wKZ0pQYQtgR8q82D1wQy/6wu4vJxREHUaPsvNviGNvuKdCwRYtNP3os3IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLg7fI1/NzAbPWZh0wm57yZxahMcMB8GA1UdIwQY
MBaAFJLfipDUOwNKcqR4gm7D1Ormgd0sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3QtS2tOUTdBMHB5cEhpQ2JzUFU2dWFCM1N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83MTQwZDQtZmU3Ny00OWI0LWE2MmUt
NWJkZjA1OTZhYjRiLzEva3QtS2tOUTdBMHB5cEhpQ2JzUFU2dWFCM1N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83MTQwZDQtZmU3Ny00OWI0LWE2MmUtNWJkZjA1OTZhYjRi
LzEva3QtS2tOUTdBMHB5cEhpQ2JzUFU2dWFCM1N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBxBw70Z
oLWmwYTT1VOulzIV9scc1uGH1VJfoqhZBjdbJvSQWLSCKeYI6E5OEkU1oJsrBEzo
iQJ0J9MbtN/F/HXnQHvH01e31636An7wEEESulJBFR9ab6PL+aytQjZJ5QDZzdNY
UC81oTCd6rV4l19CJB1H1hZaDFv1UrFbP2mZtQ94kjQa3VSwYI9BaUqUxZ5Rwure
0SRdRdlJAAwXJsETQ82KNmx0H7fytp2DPvtXK8FUAf2i/6uV4oCtX7rfuI8DKt1l
ME+d3U50ixR2+BCO7ePmYYT7atbBQ7uX2LGYIGk14HM1J/y402SiSFOons+tEEgi
xLiSiXjdpKBmQw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:44 2025 by rpki-client