Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
File: kkQvHPx17REAE4d5MKKdhvieu7Y.mft (raw, json)
Hash identifier: j9v66S8tg+bBwe15LEh3oHvWpbW8i4zlUMNsmOvNZdQ=
Subject key identifier: D1:86:E6:D4:F0:C9:06:AF:9D:8C:62:C9:FC:F0:DF:47:98:C8:4D:DD
Authority key identifier: 92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
Certificate issuer: /CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Certificate serial: 0197BA7E1F11DA0629897D9E2F16271E47F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
Manifest number: 0C83
Signing time: Sun 29 Jun 2025 07:01:57 +0000
Manifest this update: Sun 29 Jun 2025 07:01:57 +0000
Manifest next update: Mon 30 Jun 2025 07:01:57 +0000
Files and hashes: 1: kkQvHPx17REAE4d5MKKdhvieu7Y.crl (hash: FIJ2/GEcPtgiVd0G88wZ1qbuMBIdq1OVX7lV+JAkiA8=)
2: qZc8LbpaDAe8YC_wNESeZVdptts.roa (hash: rHoCkpXeQIISTyOKdyHTZYhLfz5LjhLjx8VWRXWEabQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:1f:11:da:06:29:89:7d:9e:2f:16:27:1e:47:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Validity
Not Before: Jun 29 07:01:57 2025 GMT
Not After : Jun 30 07:01:57 2025 GMT
Subject: CN=d186e6d4f0c906af9d8c62c9fcf0df4798c84ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:a8:78:6b:69:f3:47:4c:d5:9e:1e:17:19:
5d:05:50:e2:6b:d5:dd:4e:73:0d:cc:8a:73:3e:84:
a1:09:e4:be:3e:6a:b6:6d:23:39:a3:77:99:fd:3d:
00:73:ec:4a:dd:5d:77:40:a9:2a:b0:33:ac:af:b3:
a6:26:2e:26:46:a4:18:bd:89:70:82:3c:ed:c8:3c:
db:33:1c:5d:b5:cb:91:06:f3:31:fa:44:ae:37:2b:
f7:d8:0f:75:60:10:fe:c3:c6:56:1e:b4:69:c3:92:
cb:c1:35:7f:49:3b:7f:92:6f:c4:ab:60:fd:0f:43:
7a:3b:95:bc:78:aa:d8:48:a9:7a:11:23:2d:73:10:
92:ff:bd:ad:6b:6c:07:85:ad:2e:c1:7d:92:eb:d0:
25:1d:cd:38:aa:5f:c1:4a:4d:5b:c3:10:86:17:a6:
9f:07:de:55:fd:df:fc:68:b8:92:08:a1:c7:5b:6d:
3b:97:fb:32:2b:eb:b3:1a:29:30:27:6c:5a:13:f5:
b5:de:3a:67:45:b2:33:b1:7f:cc:76:f9:b9:03:df:
91:e0:f5:b0:e0:b1:a9:72:6a:53:f5:5d:1f:cb:d7:
55:02:d2:15:c3:50:ed:17:32:58:1a:e5:fd:9f:08:
d2:1c:03:2d:31:68:59:45:27:f2:69:71:9c:d1:20:
7c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:86:E6:D4:F0:C9:06:AF:9D:8C:62:C9:FC:F0:DF:47:98:C8:4D:DD
X509v3 Authority Key Identifier:
keyid:92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:99:31:23:52:30:42:76:ac:a3:27:a2:d5:f9:27:fe:86:3a:
cf:f3:9d:e6:e8:a4:e6:f9:0d:8f:8e:6c:1e:60:2f:90:e8:c0:
d1:85:ef:f8:68:c0:7d:96:00:8f:91:31:33:d7:af:c2:ed:9f:
7b:ef:41:c6:ef:46:40:d6:f6:80:08:a5:bd:46:19:f0:c9:dc:
9b:dd:91:ff:28:f2:39:1e:0c:29:fa:59:45:58:29:11:2b:74:
12:59:43:e4:43:f1:04:b7:0d:7c:28:dc:27:21:d6:89:21:04:
fa:19:5d:c3:11:c1:a2:a5:c2:82:3d:a0:db:42:3d:f9:cb:59:
15:b8:a2:53:2c:aa:d4:59:02:be:51:1f:92:ed:8d:52:51:34:
c2:ec:79:09:23:a9:24:0b:e5:f5:13:4d:15:20:03:8b:d5:ac:
6a:11:38:9f:00:20:7d:af:04:b9:48:e7:fa:75:f0:bc:9d:cf:
13:43:7d:75:81:20:21:bb:f6:d3:d6:68:51:47:09:4a:17:fa:
9d:20:74:82:f5:67:5d:df:7b:a6:2f:71:47:24:51:a1:6f:8c:
d6:d7:61:92:e9:91:d4:cd:98:f2:80:9d:5d:f0:5d:62:a4:3a:
4c:c6:75:2c:a3:d8:78:12:76:25:a8:4d:19:07:78:d6:12:69:
51:a6:56:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6fh8R2gYpiX2eLxYnHkf2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDQyZjFjZmM3NWVkMTEwMDEzODc3OTMwYTI5ZDg2Zjg5
ZWJiYjYwHhcNMjUwNjI5MDcwMTU3WhcNMjUwNjMwMDcwMTU3WjAzMTEwLwYDVQQD
EyhkMTg2ZTZkNGYwYzkwNmFmOWQ4YzYyYzlmY2YwZGY0Nzk4Yzg0ZGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodyoeGtp80dM1Z4eFxldBVDia9Xd
TnMNzIpzPoShCeS+Pmq2bSM5o3eZ/T0Ac+xK3V13QKkqsDOsr7OmJi4mRqQYvYlw
gjztyDzbMxxdtcuRBvMx+kSuNyv32A91YBD+w8ZWHrRpw5LLwTV/STt/km/Eq2D9
D0N6O5W8eKrYSKl6ESMtcxCS/72ta2wHha0uwX2S69AlHc04ql/BSk1bwxCGF6af
B95V/d/8aLiSCKHHW207l/syK+uzGikwJ2xaE/W13jpnRbIzsX/Mdvm5A9+R4PWw
4LGpcmpT9V0fy9dVAtIVw1DtFzJYGuX9nwjSHAMtMWhZRSfyaXGc0SB8dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGG5tTwyQavnYxiyfzw30eYyE3dMB8GA1UdIwQY
MBaAFJJELxz8de0RABOHeTCinYb4nru2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2tRdkhQeDE3UkVBRTRkNU1LS2RodmlldTdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85YWY4ODEtYmEwZC00NTFkLWE2OWIt
MDBmOTZmZmNmNzM0LzEva2tRdkhQeDE3UkVBRTRkNU1LS2RodmlldTdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85YWY4ODEtYmEwZC00NTFkLWE2OWItMDBmOTZmZmNmNzM0
LzEva2tRdkhQeDE3UkVBRTRkNU1LS2RodmlldTdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZkxI1Iw
Qnasoyei1fkn/oY6z/Od5uik5vkNj45sHmAvkOjA0YXv+GjAfZYAj5ExM9evwu2f
e+9Bxu9GQNb2gAilvUYZ8Mncm92R/yjyOR4MKfpZRVgpESt0EllD5EPxBLcNfCjc
JyHWiSEE+hldwxHBoqXCgj2g20I9+ctZFbiiUyyq1FkCvlEfku2NUlE0wux5CSOp
JAvl9RNNFSADi9WsahE4nwAgfa8EuUjn+nXwvJ3PE0N9dYEgIbv209ZoUUcJShf6
nSB0gvVnXd97pi9xRyRRoW+M1tdhkumR1M2Y8oCdXfBdYqQ6TMZ1LKPYeBJ2JahN
GQd41hJpUaZWcg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:03:35 2025 by rpki-client