Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
File: ks_7H6VV_DWhSvymELOBBf1cZFw.mft (raw, json)
Hash identifier: JL23jA6iqJXKCJtMNX9P24h4XQobjlvZBs129T1OVB0=
Subject key identifier: 55:6A:9E:4E:24:F5:EC:54:E2:54:76:68:48:14:74:E6:04:AC:25:0D
Authority key identifier: 92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C
Certificate issuer: /CN=92cffb1fa555fc35a14afca610b38105fd5c645c
Certificate serial: 0197B6A1D4794B8E68E0CAC5063284CECFB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
Manifest number: 0DB2
Signing time: Sat 28 Jun 2025 13:02:28 +0000
Manifest this update: Sat 28 Jun 2025 13:02:28 +0000
Manifest next update: Sun 29 Jun 2025 13:02:28 +0000
Files and hashes: 1: ks_7H6VV_DWhSvymELOBBf1cZFw.crl (hash: j9eXDnX3ktT7wkhiGyPiH1+j6mvLhjmsWtUqwGl87HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:d4:79:4b:8e:68:e0:ca:c5:06:32:84:ce:cf:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cffb1fa555fc35a14afca610b38105fd5c645c
Validity
Not Before: Jun 28 13:02:28 2025 GMT
Not After : Jun 29 13:02:28 2025 GMT
Subject: CN=556a9e4e24f5ec54e2547668481474e604ac250d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b8:5e:2c:9b:4f:df:99:08:3b:97:ee:21:5d:
35:08:20:ea:f0:4f:fb:1c:70:b7:72:20:21:60:12:
e1:64:9a:e4:ed:01:03:c3:ad:7f:3b:a1:97:49:6f:
be:f1:4d:73:66:06:2b:58:a4:6f:3a:4e:a5:74:db:
2e:c4:38:4b:0b:2f:f8:a1:39:d6:36:86:18:d6:44:
b5:93:f4:4e:f5:db:23:c3:12:71:8f:e1:dc:ac:44:
26:cb:7a:0b:0c:5f:fb:95:93:94:68:0c:45:16:ae:
71:e0:0d:3f:c8:78:7d:0d:33:cd:a0:d4:2f:8b:04:
67:f1:67:05:e0:83:94:28:4e:d7:c3:8b:0b:8a:de:
ea:74:49:c1:86:b6:36:0b:dc:c0:c0:1d:f3:9d:9c:
06:37:b6:0e:7b:f2:78:5a:ed:fb:f6:45:43:a4:f8:
68:c9:91:a9:52:43:7f:aa:f5:de:3c:05:1a:43:88:
0a:96:d3:14:76:88:08:d9:21:73:38:1c:5f:80:e3:
32:7c:bf:3b:71:0a:66:87:ef:e6:f0:d1:4e:db:5f:
75:9b:92:2a:28:e1:05:71:7d:2c:9d:8d:33:8c:b2:
9d:e8:7a:ff:6d:42:9b:9e:57:9d:a2:e3:46:9d:ee:
48:c2:7e:aa:2f:a8:bb:7b:90:01:30:0a:f3:4a:4f:
40:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6A:9E:4E:24:F5:EC:54:E2:54:76:68:48:14:74:E6:04:AC:25:0D
X509v3 Authority Key Identifier:
keyid:92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f4:52:34:5d:53:89:c8:15:a2:27:61:bc:14:51:3b:41:2c:
d3:54:98:0a:b7:fa:85:26:6f:1b:7d:aa:47:0a:c7:1e:98:e0:
7b:fc:f4:a4:3a:38:09:ac:aa:50:0a:2b:0f:f2:c2:cf:a0:85:
79:71:d5:96:0c:67:53:61:63:34:09:a4:fe:b4:78:15:2e:25:
1d:eb:46:3e:30:5a:18:e0:e7:46:8e:e6:b2:84:ad:68:bb:d4:
d9:32:17:1c:10:38:b1:7a:fe:b9:a6:43:3b:a8:23:1e:68:b3:
bc:b1:5c:d8:4c:b8:bb:db:36:83:12:cb:21:c3:42:42:0f:30:
33:fa:40:cc:f7:9c:e7:09:fd:26:c5:87:62:a5:4c:b6:0d:81:
60:69:6f:62:3a:f9:77:88:ae:2c:35:17:b5:87:72:57:8d:bc:
60:29:24:c3:49:c3:76:4d:ca:44:ae:0b:63:72:8c:25:c2:49:
7c:83:61:5e:c7:e0:a7:ba:d1:74:ee:29:00:1e:a5:e2:8c:d6:
a7:a4:92:38:c9:30:9f:a8:90:a4:bc:4d:62:42:d3:2c:a3:b5:
08:5c:08:cf:42:bb:1d:a4:d3:43:d5:56:84:fa:1c:8c:06:e3:
67:39:5e:d8:f5:67:9b:7c:22:70:c0:62:19:b5:5d:1c:6b:db:
20:52:a0:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2odR5S45o4MrFBjKEzs+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyY2ZmYjFmYTU1NWZjMzVhMTRhZmNhNjEwYjM4MTA1ZmQ1
YzY0NWMwHhcNMjUwNjI4MTMwMjI4WhcNMjUwNjI5MTMwMjI4WjAzMTEwLwYDVQQD
Eyg1NTZhOWU0ZTI0ZjVlYzU0ZTI1NDc2Njg0ODE0NzRlNjA0YWMyNTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67heLJtP35kIO5fuIV01CCDq8E/7
HHC3ciAhYBLhZJrk7QEDw61/O6GXSW++8U1zZgYrWKRvOk6ldNsuxDhLCy/4oTnW
NoYY1kS1k/RO9dsjwxJxj+HcrEQmy3oLDF/7lZOUaAxFFq5x4A0/yHh9DTPNoNQv
iwRn8WcF4IOUKE7Xw4sLit7qdEnBhrY2C9zAwB3znZwGN7YOe/J4Wu379kVDpPho
yZGpUkN/qvXePAUaQ4gKltMUdogI2SFzOBxfgOMyfL87cQpmh+/m8NFO2191m5Iq
KOEFcX0snY0zjLKd6Hr/bUKbnledouNGne5Iwn6qL6i7e5ABMArzSk9AUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVqnk4k9exU4lR2aEgUdOYErCUNMB8GA1UdIwQY
MBaAFJLP+x+lVfw1oUr8phCzgQX9XGRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3NfN0g2VlZfRFdoU3Z5bUVMT0JCZjFjWkZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9mZjUxYTAtYTFiMS00MTliLTg1MTgt
NmJiNWQ0ZDJlNTM5LzEva3NfN0g2VlZfRFdoU3Z5bUVMT0JCZjFjWkZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9mZjUxYTAtYTFiMS00MTliLTg1MTgtNmJiNWQ0ZDJlNTM5
LzEva3NfN0g2VlZfRFdoU3Z5bUVMT0JCZjFjWkZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/RSNF1T
icgVoidhvBRRO0Es01SYCrf6hSZvG32qRwrHHpjge/z0pDo4CayqUAorD/LCz6CF
eXHVlgxnU2FjNAmk/rR4FS4lHetGPjBaGODnRo7msoStaLvU2TIXHBA4sXr+uaZD
O6gjHmizvLFc2Ey4u9s2gxLLIcNCQg8wM/pAzPec5wn9JsWHYqVMtg2BYGlvYjr5
d4iuLDUXtYdyV428YCkkw0nDdk3KRK4LY3KMJcJJfINhXsfgp7rRdO4pAB6l4ozW
p6SSOMkwn6iQpLxNYkLTLKO1CFwIz0K7HaTTQ9VWhPocjAbjZzle2PVnm3wicMBi
GbVdHGvbIFKgZQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:15 2025 by rpki-client