Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
File: K6OJMzWM9mz_O2zj97wlF_3UdCE.mft (raw, json)
Hash identifier: VznXG0AEVI3xCNjKaK/Hu+s69uKcRrJ888qRO6gyenw=
Subject key identifier: 85:F0:AA:9D:CB:95:29:BA:E4:8B:FB:AD:6C:CF:EE:E6:C6:FC:FC:1A
Authority key identifier: 2B:A3:89:33:35:8C:F6:6C:FF:3B:6C:E3:F7:BC:25:17:FD:D4:74:21
Certificate issuer: /CN=2ba38933358cf66cff3b6ce3f7bc2517fdd47421
Certificate serial: 0197B5FBBA9BADBF4542FC1947F0EF7B92F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
Manifest number: 072A
Signing time: Sat 28 Jun 2025 10:01:02 +0000
Manifest this update: Sat 28 Jun 2025 10:01:02 +0000
Manifest next update: Sun 29 Jun 2025 10:01:02 +0000
Files and hashes: 1: K6OJMzWM9mz_O2zj97wlF_3UdCE.crl (hash: suD/KKwLONToV1sZj+izZ5HWv/gSii3wLjhaw4FCC6I=)
2: P79z5YTtoWEv9LCPfIAUkH_6t6o.roa (hash: bkjECat6qqt16K0V047quWng6+v1DMCdWPWmzkArqVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:ba:9b:ad:bf:45:42:fc:19:47:f0:ef:7b:92:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba38933358cf66cff3b6ce3f7bc2517fdd47421
Validity
Not Before: Jun 28 10:01:02 2025 GMT
Not After : Jun 29 10:01:02 2025 GMT
Subject: CN=85f0aa9dcb9529bae48bfbad6ccfeee6c6fcfc1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:36:56:df:0f:2f:b6:77:6a:a5:5a:0f:fd:
4b:61:5a:98:83:47:52:5b:58:63:af:d2:90:29:99:
4a:d8:69:a5:3d:e3:fa:ea:00:88:d5:f3:6a:ff:ef:
24:74:47:06:95:10:d9:1b:8c:c3:53:fd:4f:e2:5a:
ae:dc:07:21:be:b6:cf:e8:89:89:ff:11:33:82:d7:
52:b1:5b:b6:4d:0f:a7:4f:2d:ec:48:e4:6c:d1:8c:
13:8e:0a:73:89:01:fa:1b:9c:7a:16:ab:24:64:b5:
65:4f:d8:5a:ed:a5:79:e0:af:28:20:3a:2f:e4:aa:
14:43:90:57:0e:79:16:84:4f:75:87:38:6a:2d:17:
20:66:81:4a:00:3e:36:90:ad:f7:64:9f:14:e3:10:
2d:a5:9c:5c:0d:b2:34:03:8d:c7:b5:9a:ee:85:e6:
76:68:b8:fe:8d:56:fd:9c:c8:26:88:e5:86:cc:76:
e0:cf:f0:d2:57:fe:4c:c4:cd:ef:95:cb:9c:04:7b:
d7:f8:3f:80:af:70:79:e1:3d:72:b3:97:f4:38:b3:
c8:f3:0d:59:bf:29:b7:1f:ed:bb:28:5a:b2:1f:49:
86:e3:63:fd:76:83:53:5a:c0:b7:a4:60:b6:4b:7a:
e2:14:47:78:21:c8:da:c5:01:1c:b3:45:94:6a:2d:
f9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F0:AA:9D:CB:95:29:BA:E4:8B:FB:AD:6C:CF:EE:E6:C6:FC:FC:1A
X509v3 Authority Key Identifier:
keyid:2B:A3:89:33:35:8C:F6:6C:FF:3B:6C:E3:F7:BC:25:17:FD:D4:74:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b6:74:e1:07:70:63:23:d3:21:5f:6e:e0:1a:e5:0a:35:36:
c6:dc:2f:d4:4d:97:30:f9:9e:1f:00:0a:ba:b5:e9:d6:3a:f6:
d8:0c:6a:88:1e:ed:ad:f5:77:41:62:72:a4:17:14:00:6d:fe:
bc:00:9a:04:5e:3b:e2:fd:6a:89:10:27:20:c3:d7:6e:43:2b:
8f:1f:c1:58:b4:88:87:18:9a:d5:04:dd:ec:59:fa:69:87:59:
74:d8:27:88:58:05:60:87:df:06:4b:31:0f:ce:0c:c6:d4:0d:
5f:12:4e:29:54:3e:26:66:52:9f:5e:4d:4d:44:4f:4b:63:01:
72:e0:93:8f:a4:76:fd:49:e4:7d:ac:1a:47:dc:5c:79:e0:5e:
69:e4:79:50:79:fd:79:6a:2d:be:bf:6b:8f:3b:f2:a9:c8:72:
eb:7d:99:2b:87:71:db:30:be:07:fe:15:2b:cf:68:00:0b:ad:
fa:96:2d:cc:2d:30:e9:d4:c7:27:83:b0:c7:b6:ad:43:d0:01:
aa:73:18:27:2b:fb:7b:b4:99:98:c0:2c:9a:ea:94:50:6f:62:
1f:9c:68:1f:a4:82:06:a0:2c:a3:2d:4b:e9:39:29:1b:b5:3c:
21:bb:f3:7e:e3:45:db:ba:71:ee:eb:7c:99:b3:c9:81:32:56:
54:67:dc:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1+7qbrb9FQvwZR/Dve5L4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYTM4OTMzMzU4Y2Y2NmNmZjNiNmNlM2Y3YmMyNTE3ZmRk
NDc0MjEwHhcNMjUwNjI4MTAwMTAyWhcNMjUwNjI5MTAwMTAyWjAzMTEwLwYDVQQD
Eyg4NWYwYWE5ZGNiOTUyOWJhZTQ4YmZiYWQ2Y2NmZWVlNmM2ZmNmYzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl82Vt8PL7Z3aqVaD/1LYVqYg0dS
W1hjr9KQKZlK2GmlPeP66gCI1fNq/+8kdEcGlRDZG4zDU/1P4lqu3AchvrbP6ImJ
/xEzgtdSsVu2TQ+nTy3sSORs0YwTjgpziQH6G5x6FqskZLVlT9ha7aV54K8oIDov
5KoUQ5BXDnkWhE91hzhqLRcgZoFKAD42kK33ZJ8U4xAtpZxcDbI0A43HtZruheZ2
aLj+jVb9nMgmiOWGzHbgz/DSV/5MxM3vlcucBHvX+D+Ar3B54T1ys5f0OLPI8w1Z
vym3H+27KFqyH0mG42P9doNTWsC3pGC2S3riFEd4IcjaxQEcs0WUai35QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXwqp3LlSm65Iv7rWzP7ubG/PwaMB8GA1UdIwQY
MBaAFCujiTM1jPZs/zts4/e8JRf91HQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzZPSk16V005bXpfTzJ6ajk3d2xGXzNVZENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC85ODU2ZWUtNjk5Zi00ZmVkLWJiOTgt
ZTA2ZmQwY2QzYjc3LzEvSzZPSk16V005bXpfTzJ6ajk3d2xGXzNVZENFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC85ODU2ZWUtNjk5Zi00ZmVkLWJiOTgtZTA2ZmQwY2QzYjc3
LzEvSzZPSk16V005bXpfTzJ6ajk3d2xGXzNVZENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7Z04Qdw
YyPTIV9u4BrlCjU2xtwv1E2XMPmeHwAKurXp1jr22AxqiB7trfV3QWJypBcUAG3+
vACaBF474v1qiRAnIMPXbkMrjx/BWLSIhxia1QTd7Fn6aYdZdNgniFgFYIffBksx
D84MxtQNXxJOKVQ+JmZSn15NTURPS2MBcuCTj6R2/UnkfawaR9xceeBeaeR5UHn9
eWotvr9rjzvyqchy632ZK4dx2zC+B/4VK89oAAut+pYtzC0w6dTHJ4Owx7atQ9AB
qnMYJyv7e7SZmMAsmuqUUG9iH5xoH6SCBqAsoy1L6TkpG7U8IbvzfuNF27px7ut8
mbPJgTJWVGfcxQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:29 2025 by rpki-client