Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
File: Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft (raw, json)
Hash identifier: gRC2RbUT39sUF+zeRyFGIGUe2ahqX01AQJYHzRUYIaU=
Subject key identifier: FF:FD:78:57:B7:A6:53:D2:54:DA:6D:63:69:4D:11:4E:3A:55:F0:F9
Authority key identifier: 2A:FD:75:4F:30:77:CD:60:F0:09:BE:02:6C:90:84:E5:72:97:06:60
Certificate issuer: /CN=2afd754f3077cd60f009be026c9084e572970660
Certificate serial: 0197B74573146E99C260697BEEE9EFB5D4FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
Manifest number: 03A7
Signing time: Sat 28 Jun 2025 16:01:11 +0000
Manifest this update: Sat 28 Jun 2025 16:01:11 +0000
Manifest next update: Sun 29 Jun 2025 16:01:11 +0000
Files and hashes: 1: Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl (hash: SSfHLi6qxKJhHsZK++cyhOj1gPi2GMzqdWqIVXXVsr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:73:14:6e:99:c2:60:69:7b:ee:e9:ef:b5:d4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2afd754f3077cd60f009be026c9084e572970660
Validity
Not Before: Jun 28 16:01:11 2025 GMT
Not After : Jun 29 16:01:11 2025 GMT
Subject: CN=fffd7857b7a653d254da6d63694d114e3a55f0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:21:9d:00:d4:82:2f:5d:99:65:18:8f:75:
d7:5f:d8:e3:d0:b6:05:59:0e:3a:27:a4:7e:b4:c4:
16:95:56:16:df:ed:5d:5a:bd:31:c4:07:ae:c1:e4:
c6:9d:03:ff:35:13:04:e1:ee:12:45:f3:32:5e:4d:
f2:ae:9e:fe:2b:cd:da:44:09:9f:66:06:f9:2e:1c:
be:cf:b1:e2:e7:ce:d7:a2:d3:a5:fc:2c:73:02:19:
33:72:42:c8:59:93:eb:70:b6:c6:4a:c7:55:70:3c:
7f:2c:91:0d:be:0a:e1:47:85:2b:02:b7:f9:36:cc:
93:2d:62:f7:07:8c:c0:62:00:23:35:58:9f:02:8e:
7c:0c:dd:bd:46:01:7c:c1:7e:7b:f6:35:97:2c:ab:
c5:f5:3b:54:10:b4:96:ce:75:ef:21:b8:67:f5:89:
81:87:a9:e5:12:2c:74:37:8c:a0:f3:d3:b9:e2:d7:
46:21:ec:89:b0:12:36:1c:3b:a8:39:5a:7b:bb:f2:
f6:c5:03:a3:38:64:6f:4b:d0:d2:9b:5c:ba:9c:03:
5c:a4:ff:67:99:d6:14:ec:44:a9:2d:60:97:3e:6a:
e7:8a:ec:5a:ba:f5:37:a0:c3:f5:2a:fe:d6:4b:c3:
80:d4:dd:be:7f:fc:2b:65:57:28:37:86:2a:d1:9f:
1f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FD:78:57:B7:A6:53:D2:54:DA:6D:63:69:4D:11:4E:3A:55:F0:F9
X509v3 Authority Key Identifier:
keyid:2A:FD:75:4F:30:77:CD:60:F0:09:BE:02:6C:90:84:E5:72:97:06:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:47:79:91:e5:d1:0d:d6:f0:14:06:38:a1:87:47:78:bc:2e:
e2:78:a9:ce:77:47:9f:4e:b6:e1:46:0a:c3:d5:e8:e1:1c:e1:
00:3b:e5:90:68:08:d5:24:3a:c8:5a:0b:f8:34:bb:58:21:fb:
7e:01:45:45:61:d8:f0:99:9f:b7:fa:72:67:45:82:87:73:86:
1c:12:af:e5:47:8d:30:c0:c4:7a:ea:9e:af:ff:34:c8:c6:0d:
4b:0c:7b:57:fc:ed:7b:5d:e6:46:22:1c:d1:55:4f:82:33:b0:
21:1c:80:c7:c4:81:6e:36:cd:41:ff:99:fe:d5:5c:9c:d9:c0:
88:77:45:79:7b:83:af:35:14:d5:56:e4:86:e8:dc:de:48:95:
ab:55:0f:28:17:8d:cd:07:33:cc:2c:b9:dc:8f:ca:b6:a4:82:
05:d1:36:ec:ae:c3:32:e5:65:68:48:32:cd:66:b8:43:b0:11:
5d:fe:a4:25:0f:4f:4f:72:b1:2f:b2:23:09:61:7f:08:4e:d1:
cb:ab:fc:35:27:1c:22:42:d1:f0:f5:88:99:2e:50:1f:b5:06:
da:ea:f2:32:c1:c1:78:a4:a0:04:d9:17:c2:47:c9:6d:f0:8e:
20:91:66:17:9f:e6:84:15:10:94:ec:91:6a:89:b8:a1:53:5c:
07:9d:89:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RXMUbpnCYGl77unvtdT/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZmQ3NTRmMzA3N2NkNjBmMDA5YmUwMjZjOTA4NGU1NzI5
NzA2NjAwHhcNMjUwNjI4MTYwMTExWhcNMjUwNjI5MTYwMTExWjAzMTEwLwYDVQQD
EyhmZmZkNzg1N2I3YTY1M2QyNTRkYTZkNjM2OTRkMTE0ZTNhNTVmMGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGMhnQDUgi9dmWUYj3XXX9jj0LYF
WQ46J6R+tMQWlVYW3+1dWr0xxAeuweTGnQP/NRME4e4SRfMyXk3yrp7+K83aRAmf
Zgb5Lhy+z7Hi587XotOl/CxzAhkzckLIWZPrcLbGSsdVcDx/LJENvgrhR4UrArf5
NsyTLWL3B4zAYgAjNVifAo58DN29RgF8wX579jWXLKvF9TtUELSWznXvIbhn9YmB
h6nlEix0N4yg89O54tdGIeyJsBI2HDuoOVp7u/L2xQOjOGRvS9DSm1y6nANcpP9n
mdYU7ESpLWCXPmrniuxauvU3oMP1Kv7WS8OA1N2+f/wrZVcoN4Yq0Z8fGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/9eFe3plPSVNptY2lNEU46VfD5MB8GA1UdIwQY
MBaAFCr9dU8wd81g8Am+AmyQhOVylwZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3YxMVR6QjN6V0R3Q2I0Q2JKQ0U1WEtYQm1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xOTg2Y2MtZTM1MC00MTVhLWFkNzMt
YjQwMTNkYjhiN2MxLzEvS3YxMVR6QjN6V0R3Q2I0Q2JKQ0U1WEtYQm1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8xOTg2Y2MtZTM1MC00MTVhLWFkNzMtYjQwMTNkYjhiN2Mx
LzEvS3YxMVR6QjN6V0R3Q2I0Q2JKQ0U1WEtYQm1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Ud5keXR
DdbwFAY4oYdHeLwu4nipzndHn0624UYKw9Xo4RzhADvlkGgI1SQ6yFoL+DS7WCH7
fgFFRWHY8Jmft/pyZ0WCh3OGHBKv5UeNMMDEeuqer/80yMYNSwx7V/zte13mRiIc
0VVPgjOwIRyAx8SBbjbNQf+Z/tVcnNnAiHdFeXuDrzUU1Vbkhujc3kiVq1UPKBeN
zQczzCy53I/KtqSCBdE27K7DMuVlaEgyzWa4Q7ARXf6kJQ9PT3KxL7IjCWF/CE7R
y6v8NSccIkLR8PWImS5QH7UG2uryMsHBeKSgBNkXwkfJbfCOIJFmF5/mhBUQlOyR
aom4oVNcB52JuQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:30 2025 by rpki-client