Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
File: KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft (raw, json)
Hash identifier: S8aUHja5COnc5rcVZnwAxF9WNPUIihDGz4JpkkTn/4U=
Subject key identifier: EB:6B:6B:A0:95:64:1E:EE:D8:0F:F4:56:5D:6E:9F:3B:01:2E:A3:5E
Authority key identifier: 29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
Certificate issuer: /CN=29081d68bddea8bebf26e61821978594f223bcbe
Certificate serial: 0197B70EE171F0209CB352A95AA1A91B442E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
Manifest number: 07B5
Signing time: Sat 28 Jun 2025 15:01:35 +0000
Manifest this update: Sat 28 Jun 2025 15:01:35 +0000
Manifest next update: Sun 29 Jun 2025 15:01:35 +0000
Files and hashes: 1: KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl (hash: A/T9jUTSN78KlGtbrRdzC74+JAJpRrlCrkaP/KtqnNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e1:71:f0:20:9c:b3:52:a9:5a:a1:a9:1b:44:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29081d68bddea8bebf26e61821978594f223bcbe
Validity
Not Before: Jun 28 15:01:35 2025 GMT
Not After : Jun 29 15:01:35 2025 GMT
Subject: CN=eb6b6ba095641eeed80ff4565d6e9f3b012ea35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:53:75:3c:63:e0:b7:4f:33:be:10:b0:40:
5f:76:2c:14:54:bf:80:4c:1e:77:78:3b:b1:9f:96:
71:a5:86:b0:16:59:02:9d:f4:07:e1:a2:66:15:80:
31:9a:d0:cb:ff:e2:ee:81:59:4b:e7:42:cd:31:2d:
cf:b6:b9:f9:35:ec:5c:2e:6b:84:f5:42:f5:95:6c:
7d:b1:83:50:8f:68:f6:6c:59:61:b1:20:51:13:72:
a8:1a:a0:be:c6:4f:1e:d0:f6:d8:86:6b:02:a6:38:
be:ae:f2:e5:22:a8:c4:e0:6e:6d:46:ef:ea:cf:56:
a6:f0:88:07:c2:76:c6:ca:f5:71:e9:0a:e2:4c:11:
48:13:76:ee:fa:c2:8e:85:50:b7:df:ac:0b:68:0a:
49:f6:96:0b:4e:56:64:82:0a:47:0c:9e:25:d3:b3:
1a:0e:f8:80:9d:cc:40:77:39:84:b2:f8:6d:6b:5f:
72:75:d8:98:c8:34:42:57:a1:5d:f0:04:4e:cb:89:
b9:a7:24:98:34:06:d5:99:6e:aa:48:3c:50:a4:64:
4a:1c:60:1f:98:db:68:6f:2a:77:06:6f:f0:8c:7f:
81:c4:61:e6:26:ae:14:e4:53:98:05:a6:b8:20:90:
d4:4e:5f:bf:aa:18:c3:37:67:f7:5e:24:f7:da:1b:
85:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6B:6B:A0:95:64:1E:EE:D8:0F:F4:56:5D:6E:9F:3B:01:2E:A3:5E
X509v3 Authority Key Identifier:
keyid:29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:54:8a:79:70:b3:15:fa:bd:a8:51:05:ea:6c:73:d6:b0:16:
bd:37:c1:43:07:0e:e2:51:c2:47:4c:36:5a:87:54:51:b0:ea:
6c:f2:96:99:d7:64:88:85:ce:1f:c4:46:28:7d:39:cf:06:4a:
3c:3c:34:c5:da:56:24:e3:86:e9:af:ca:e4:3d:30:37:b8:87:
28:ac:2d:22:36:7d:02:47:5c:ea:54:83:81:71:ca:b8:2c:f0:
68:07:40:e2:c2:b7:f5:a0:6c:61:58:89:08:51:d0:ec:d4:0a:
a5:b1:47:09:64:22:49:02:54:2f:38:db:97:e8:1d:a2:e8:7c:
67:e8:da:29:23:95:39:1c:07:4a:b7:5f:75:d9:ba:8d:45:04:
08:1d:6e:48:f2:92:69:bf:58:ef:5b:c3:a9:a2:a9:5a:58:db:
13:be:cc:0c:1d:c5:bb:e1:93:f5:fd:c5:a9:67:b0:f5:c9:c2:
52:01:fe:55:c8:52:41:b7:39:aa:d5:44:ff:ea:7a:0f:62:a1:
08:9d:2c:10:07:ff:ba:fd:13:ad:c4:1c:ec:40:61:49:11:32:
af:da:89:69:d5:03:50:fa:53:31:29:b2:92:1f:87:c2:43:5f:
b2:13:e5:39:95:04:b5:93:cb:b3:e9:7b:20:f6:ce:29:94:f7:
b2:a5:fb:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DuFx8CCcs1KpWqGpG0QuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDgxZDY4YmRkZWE4YmViZjI2ZTYxODIxOTc4NTk0ZjIy
M2JjYmUwHhcNMjUwNjI4MTUwMTM1WhcNMjUwNjI5MTUwMTM1WjAzMTEwLwYDVQQD
EyhlYjZiNmJhMDk1NjQxZWVlZDgwZmY0NTY1ZDZlOWYzYjAxMmVhMzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu51TdTxj4LdPM74QsEBfdiwUVL+A
TB53eDuxn5ZxpYawFlkCnfQH4aJmFYAxmtDL/+LugVlL50LNMS3Ptrn5NexcLmuE
9UL1lWx9sYNQj2j2bFlhsSBRE3KoGqC+xk8e0PbYhmsCpji+rvLlIqjE4G5tRu/q
z1am8IgHwnbGyvVx6QriTBFIE3bu+sKOhVC336wLaApJ9pYLTlZkggpHDJ4l07Ma
DviAncxAdzmEsvhta19yddiYyDRCV6Fd8AROy4m5pySYNAbVmW6qSDxQpGRKHGAf
mNtobyp3Bm/wjH+BxGHmJq4U5FOYBaa4IJDUTl+/qhjDN2f3XiT32huF/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtra6CVZB7u2A/0Vl1unzsBLqNeMB8GA1UdIwQY
MBaAFCkIHWi93qi+vybmGCGXhZTyI7y+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FnZGFMM2VxTDZfSnVZWUlaZUZsUElqdkw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iNjhmNmYtOTYwZC00ZTMzLTg3M2Yt
NzM2N2MwZjIwYmM5LzEvS1FnZGFMM2VxTDZfSnVZWUlaZUZsUElqdkw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9iNjhmNmYtOTYwZC00ZTMzLTg3M2YtNzM2N2MwZjIwYmM5
LzEvS1FnZGFMM2VxTDZfSnVZWUlaZUZsUElqdkw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVSKeXCz
Ffq9qFEF6mxz1rAWvTfBQwcO4lHCR0w2WodUUbDqbPKWmddkiIXOH8RGKH05zwZK
PDw0xdpWJOOG6a/K5D0wN7iHKKwtIjZ9Akdc6lSDgXHKuCzwaAdA4sK39aBsYViJ
CFHQ7NQKpbFHCWQiSQJULzjbl+gdouh8Z+jaKSOVORwHSrdfddm6jUUECB1uSPKS
ab9Y71vDqaKpWljbE77MDB3Fu+GT9f3FqWew9cnCUgH+VchSQbc5qtVE/+p6D2Kh
CJ0sEAf/uv0TrcQc7EBhSREyr9qJadUDUPpTMSmykh+HwkNfshPlOZUEtZPLs+l7
IPbOKZT3sqX73w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:38 2025 by rpki-client