Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
File: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft (raw, json)
Hash identifier: HGGjpjlE9nAFD7Ltk9y+eMstYyXgSwsCni1qG1QjAew=
Subject key identifier: 86:CE:ED:F0:BC:3C:85:53:24:36:BA:A4:AE:6B:E1:07:8A:2E:16:AF
Authority key identifier: 93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
Certificate issuer: /CN=936cb336c1beb71d4fbbaae243b23352c6270061
Certificate serial: 0197C3B76880F9509A83DE79BF098201507C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
Manifest number: 0E16
Signing time: Tue 01 Jul 2025 02:01:06 +0000
Manifest this update: Tue 01 Jul 2025 02:01:06 +0000
Manifest next update: Wed 02 Jul 2025 02:01:06 +0000
Files and hashes: 1: 77Da0cUu_C8djIEncMxzodElOpE.roa (hash: O6xd7yyxwxYfy10toui/N1cFeV/zSXBxnL9OigcdZr0=)
2: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl (hash: pmxY8TLHGKdy54KaTFNr34qFOTVug6oUo9XCgtbu4Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:b7:68:80:f9:50:9a:83:de:79:bf:09:82:01:50:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=936cb336c1beb71d4fbbaae243b23352c6270061
Validity
Not Before: Jul 1 02:01:06 2025 GMT
Not After : Jul 2 02:01:06 2025 GMT
Subject: CN=86ceedf0bc3c85532436baa4ae6be1078a2e16af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e7:8b:e2:ba:4c:fe:26:00:4f:8c:b1:bd:26:
35:97:44:3c:4c:9e:e2:d7:20:0f:fe:71:6c:57:05:
08:83:fc:3c:a6:31:92:c0:83:2a:51:51:7c:9c:c2:
6c:93:12:0d:e5:2a:26:05:0c:16:47:e9:87:ec:a0:
9b:af:d6:55:ac:96:c7:0f:fa:06:80:30:37:2d:03:
1b:86:7f:a3:21:de:d3:c5:64:3b:6c:1e:df:0a:6c:
47:4c:91:1d:e0:60:8a:b8:fd:90:43:5e:d7:f5:5e:
e4:f9:6f:2b:42:88:8e:17:b4:2c:4b:69:86:31:36:
7c:3f:b0:f8:8a:48:3a:08:7f:d8:0e:85:d4:62:f7:
fa:49:22:24:f0:b0:da:e0:19:98:d8:f8:56:55:de:
97:1d:df:fc:91:31:e0:f6:8d:e4:51:da:6d:3c:ee:
f3:66:e7:7b:72:5e:eb:27:ef:61:d6:87:89:a0:55:
77:7d:a7:cf:10:90:0c:9d:51:91:8a:f9:57:49:f5:
19:2d:fd:79:88:2e:f5:c0:df:26:6d:fc:ba:77:34:
c6:3d:62:28:b8:43:c8:d9:7f:25:11:c6:a4:cc:79:
be:55:0a:1e:8a:63:69:47:bd:81:5e:e7:91:aa:bc:
d8:89:4b:3e:9c:2b:87:db:37:63:a9:bc:e9:21:ee:
1b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CE:ED:F0:BC:3C:85:53:24:36:BA:A4:AE:6B:E1:07:8A:2E:16:AF
X509v3 Authority Key Identifier:
keyid:93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6f:2e:71:58:97:de:6f:1e:ea:12:b5:e6:eb:ff:8e:bb:67:
a7:5e:0d:22:fe:62:f9:fe:ec:39:77:84:1c:a1:46:44:85:b9:
a4:9c:83:d2:fe:4f:c5:2a:78:7e:b8:5f:eb:50:f1:a7:db:b6:
65:4e:a5:98:6c:9a:48:7a:b2:84:a0:56:e9:e9:6d:66:0e:09:
bb:59:94:aa:1b:b1:61:cf:a5:26:50:29:10:83:01:ba:d2:43:
04:ee:e4:0d:b3:97:ad:0b:0e:9b:01:03:b6:03:ee:95:29:21:
11:6c:b8:56:4c:d9:ec:1a:f0:6f:d4:95:e7:2d:80:41:a2:f3:
73:00:6b:66:98:46:24:62:5a:e7:50:50:9f:93:9a:3d:54:3c:
c8:a5:65:f3:23:4a:18:ec:25:11:38:a1:17:5d:4d:56:76:ae:
8a:70:5e:49:a2:d1:95:d3:89:61:d9:4f:bd:cf:9e:91:bb:75:
e7:23:a2:fa:ac:c4:87:a9:41:54:fc:38:df:cd:14:61:63:69:
6a:a3:78:3a:4b:7f:0c:ca:23:7a:79:10:4b:2c:f8:1e:10:8e:
53:dc:6a:52:0a:b2:23:13:f4:f9:77:18:d7:09:7d:aa:5e:23:
8a:ad:ce:ea:ae:9d:84:61:d0:35:da:c3:19:81:1b:87:f8:02:
5e:3f:6c:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfDt2iA+VCag955vwmCAVB8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNmNiMzM2YzFiZWI3MWQ0ZmJiYWFlMjQzYjIzMzUyYzYy
NzAwNjEwHhcNMjUwNzAxMDIwMTA2WhcNMjUwNzAyMDIwMTA2WjAzMTEwLwYDVQQD
Eyg4NmNlZWRmMGJjM2M4NTUzMjQzNmJhYTRhZTZiZTEwNzhhMmUxNmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+eL4rpM/iYAT4yxvSY1l0Q8TJ7i
1yAP/nFsVwUIg/w8pjGSwIMqUVF8nMJskxIN5SomBQwWR+mH7KCbr9ZVrJbHD/oG
gDA3LQMbhn+jId7TxWQ7bB7fCmxHTJEd4GCKuP2QQ17X9V7k+W8rQoiOF7QsS2mG
MTZ8P7D4ikg6CH/YDoXUYvf6SSIk8LDa4BmY2PhWVd6XHd/8kTHg9o3kUdptPO7z
Zud7cl7rJ+9h1oeJoFV3fafPEJAMnVGRivlXSfUZLf15iC71wN8mbfy6dzTGPWIo
uEPI2X8lEcakzHm+VQoeimNpR72BXueRqrzYiUs+nCuH2zdjqbzpIe4blwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbO7fC8PIVTJDa6pK5r4QeKLhavMB8GA1UdIwQY
MBaAFJNsszbBvrcdT7uq4kOyM1LGJwBhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJ5ek5zRy10eDFQdTZyaVE3SXpVc1luQUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kMWRkOWEtOThmNC00NWI4LTkwOTUt
NTlkNjBiZmYyMDVmLzEvazJ5ek5zRy10eDFQdTZyaVE3SXpVc1luQUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kMWRkOWEtOThmNC00NWI4LTkwOTUtNTlkNjBiZmYyMDVm
LzEvazJ5ek5zRy10eDFQdTZyaVE3SXpVc1luQUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl28ucViX
3m8e6hK15uv/jrtnp14NIv5i+f7sOXeEHKFGRIW5pJyD0v5PxSp4frhf61Dxp9u2
ZU6lmGyaSHqyhKBW6eltZg4Ju1mUqhuxYc+lJlApEIMButJDBO7kDbOXrQsOmwED
tgPulSkhEWy4VkzZ7Brwb9SV5y2AQaLzcwBrZphGJGJa51BQn5OaPVQ8yKVl8yNK
GOwlETihF11NVnauinBeSaLRldOJYdlPvc+ekbt15yOi+qzEh6lBVPw4380UYWNp
aqN4Okt/DMojenkQSyz4HhCOU9xqUgqyIxP0+XcY1wl9ql4jiq3O6q6dhGHQNdrD
GYEbh/gCXj9shA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 09:20:52 2025 by rpki-client