Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
File: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft (raw, json)
Hash identifier: gBjsm9x+8pHRHC5GQPEhy4RDSh+aqm+ZoYEcmAym0qY=
Subject key identifier: 89:91:2D:16:47:78:4B:D3:08:56:E9:84:8C:3A:F6:7B:5E:35:AD:51
Authority key identifier: 93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
Certificate issuer: /CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
Certificate serial: 0197B6A08CFAC1D34B37848E08ECC4815611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:01:04 +0000
Manifest this update: Sat 28 Jun 2025 13:01:04 +0000
Manifest next update: Sun 29 Jun 2025 13:01:04 +0000
Files and hashes: 1: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl (hash: ARkbcXO5bqS7L9KjSj+SkeaGPHmTTyXhk8iq6g2MPBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:8c:fa:c1:d3:4b:37:84:8e:08:ec:c4:81:56:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
Validity
Not Before: Jun 28 13:01:04 2025 GMT
Not After : Jun 29 13:01:04 2025 GMT
Subject: CN=89912d1647784bd30856e9848c3af67b5e35ad51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:5b:10:b4:26:c3:51:a2:c5:3b:70:14:38:
65:e9:80:66:0c:24:fe:87:2a:b1:b8:1c:ad:b8:67:
cb:8b:34:6e:b2:49:fa:6c:de:e9:fc:6b:55:cc:67:
5b:ba:5c:50:87:7c:8d:71:39:8a:af:12:35:15:a9:
1f:fc:e4:2d:86:58:fb:71:b4:e8:87:cc:67:00:54:
50:ad:34:a7:47:ea:f4:79:66:d0:0e:3e:34:64:4c:
c2:ee:42:8c:7c:60:9a:0b:a9:41:f2:95:b0:e9:6c:
ab:98:a7:49:f6:ce:73:8c:3a:3c:b4:4e:e4:cb:85:
48:65:9d:2f:e7:7e:0f:7a:dc:13:55:61:95:07:6b:
fb:16:7d:84:a8:89:73:79:7a:b5:b2:72:66:1a:d9:
af:b8:2a:e8:91:47:fe:47:42:b9:96:f6:12:0a:d5:
29:65:5f:cf:3c:91:43:ec:7b:4b:18:8b:5a:9c:65:
c7:8a:41:3e:0f:7d:af:bf:e8:b2:de:f3:0d:7a:cc:
ef:01:01:3c:e8:b4:71:33:57:ea:2e:67:af:83:59:
3b:a0:c1:16:75:e6:00:ce:ba:88:07:3c:1b:70:35:
5a:7b:92:44:f5:af:b6:d4:ad:5f:4c:5a:6f:4a:50:
34:b4:55:d5:d4:5e:a8:1a:df:47:cd:60:c8:4b:94:
3a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:91:2D:16:47:78:4B:D3:08:56:E9:84:8C:3A:F6:7B:5E:35:AD:51
X509v3 Authority Key Identifier:
keyid:93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b6:2f:69:62:3c:67:89:46:41:9a:39:ce:97:4b:f5:c8:50:
86:99:92:b0:6b:ab:c3:33:d4:09:60:35:45:4a:86:c5:a2:b9:
37:42:d2:f1:64:16:4a:3e:0f:11:0e:19:e7:66:76:af:87:78:
e0:28:5a:fd:a0:ec:bd:f5:52:d9:f5:46:7c:3f:b3:a2:58:b1:
5f:d1:5e:1a:81:2c:7a:08:20:ed:2f:81:4a:86:de:78:19:ec:
19:1a:41:00:55:9d:fc:cd:e8:f5:c6:10:03:cb:1e:2c:39:9d:
ab:01:37:42:1c:d2:40:c9:10:a4:ae:d4:64:6e:95:31:3f:06:
44:4f:2d:2d:65:d8:ad:7a:94:49:43:73:df:6a:6c:a8:e9:60:
68:d8:6e:e7:78:11:ee:b7:17:44:db:51:73:55:59:2e:53:6e:
00:dd:b5:32:f6:0c:0b:89:09:c2:78:c9:01:19:d4:b0:64:b0:
9f:17:2f:29:aa:ef:04:7a:cf:0b:e9:f7:d0:96:76:3c:d1:cd:
b6:9d:08:8c:ef:bf:b2:c9:e9:d5:29:4f:ba:3a:d9:c2:e0:b6:
9a:aa:b2:e1:f5:db:dd:ec:a0:2c:26:5a:c7:7c:78:e3:58:d1:
9d:0c:9f:00:9f:d7:69:85:89:fe:14:75:a9:d8:24:3d:b1:07:
b7:f4:ec:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oIz6wdNLN4SOCOzEgVYRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZmE3ZTAwOGVjNmIwMDIxMDNhMWJkMWVkNjk2YjE3NmY4
N2IzNTIwHhcNMjUwNjI4MTMwMTA0WhcNMjUwNjI5MTMwMTA0WjAzMTEwLwYDVQQD
Eyg4OTkxMmQxNjQ3Nzg0YmQzMDg1NmU5ODQ4YzNhZjY3YjVlMzVhZDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOxbELQmw1GixTtwFDhl6YBmDCT+
hyqxuBytuGfLizRuskn6bN7p/GtVzGdbulxQh3yNcTmKrxI1Fakf/OQthlj7cbTo
h8xnAFRQrTSnR+r0eWbQDj40ZEzC7kKMfGCaC6lB8pWw6WyrmKdJ9s5zjDo8tE7k
y4VIZZ0v534PetwTVWGVB2v7Fn2EqIlzeXq1snJmGtmvuCrokUf+R0K5lvYSCtUp
ZV/PPJFD7HtLGItanGXHikE+D32vv+iy3vMNeszvAQE86LRxM1fqLmevg1k7oMEW
deYAzrqIBzwbcDVae5JE9a+21K1fTFpvSlA0tFXV1F6oGt9HzWDIS5Q6OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImRLRZHeEvTCFbphIw69nteNa1RMB8GA1UdIwQY
MBaAFJP6fgCOxrACEDob0e1paxdvh7NSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva19wLUFJN0dzQUlRT2h2UjdXbHJGMi1IczFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZjY1OTctNmU5OS00ODBkLThlYTEt
ZjdlOTFhYzBmYWQ5LzEva19wLUFJN0dzQUlRT2h2UjdXbHJGMi1IczFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZjY1OTctNmU5OS00ODBkLThlYTEtZjdlOTFhYzBmYWQ5
LzEva19wLUFJN0dzQUlRT2h2UjdXbHJGMi1IczFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbYvaWI8
Z4lGQZo5zpdL9chQhpmSsGurwzPUCWA1RUqGxaK5N0LS8WQWSj4PEQ4Z52Z2r4d4
4Cha/aDsvfVS2fVGfD+zolixX9FeGoEseggg7S+BSobeeBnsGRpBAFWd/M3o9cYQ
A8seLDmdqwE3QhzSQMkQpK7UZG6VMT8GRE8tLWXYrXqUSUNz32psqOlgaNhu53gR
7rcXRNtRc1VZLlNuAN21MvYMC4kJwnjJARnUsGSwnxcvKarvBHrPC+n30JZ2PNHN
tp0IjO+/ssnp1SlPujrZwuC2mqqy4fXb3eygLCZax3x441jRnQyfAJ/XaYWJ/hR1
qdgkPbEHt/TsvA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:44 2025 by rpki-client