Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
File: 67KkJVDl4rSqGkc7KzcbwoNBoWo.mft (raw, json)
Hash identifier: KqDoomWktiabHWYosm6RL6WL6WsH5qm7xpety0QO/00=
Subject key identifier: D9:6E:6C:0E:08:FD:2C:6D:AD:BB:20:50:9D:C6:40:B2:99:B1:27:B6
Authority key identifier: EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
Certificate issuer: /CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Certificate serial: 0197B82159DB7EA398D81C1D94CCF9036D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
Manifest number: 0D18
Signing time: Sat 28 Jun 2025 20:01:22 +0000
Manifest this update: Sat 28 Jun 2025 20:01:22 +0000
Manifest next update: Sun 29 Jun 2025 20:01:22 +0000
Files and hashes: 1: 67KkJVDl4rSqGkc7KzcbwoNBoWo.crl (hash: KqejPVRMCmV+1QCptvUym6G7AAa5Sxez0QEM2p1AZSI=)
2: UGLv7iIWQ-5niuk1r5Vedx_SrIM.roa (hash: +rlvmMS0hKnH04ERI3SbO3F5bnx5NVtVmXo36GJpU3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:59:db:7e:a3:98:d8:1c:1d:94:cc:f9:03:6d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Validity
Not Before: Jun 28 20:01:22 2025 GMT
Not After : Jun 29 20:01:22 2025 GMT
Subject: CN=d96e6c0e08fd2c6dadbb20509dc640b299b127b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:9d:a2:f9:b5:87:2f:19:bc:4d:33:98:65:
c7:5e:70:2a:e1:52:41:7e:43:9b:e1:d0:66:03:d3:
1d:0b:be:f4:e9:a0:37:b4:2a:9e:83:e3:93:e4:67:
f6:6e:dc:97:0c:cd:f1:08:ce:de:7e:1b:6d:6d:e1:
1e:b8:8f:a4:71:c6:e5:11:7d:a5:61:e3:6b:f3:41:
90:52:4b:39:08:d7:11:91:a6:aa:f4:e3:0b:e6:98:
9c:76:6e:21:06:89:be:41:a1:ff:cb:0d:ec:e1:7f:
8a:94:5b:4c:d8:5a:9a:88:21:e0:f4:1b:05:21:a1:
88:ff:e1:90:b9:2a:3b:66:f5:43:fc:ac:ed:24:a3:
07:14:ea:fc:4a:39:25:6c:0d:a4:c6:7e:77:01:b8:
38:13:75:4b:51:6c:6e:cc:d8:b8:ef:2a:3f:6d:9e:
1b:61:a5:5e:6e:aa:16:06:fc:fd:46:2e:9a:f5:8b:
09:e4:b4:a5:ed:75:e3:f6:eb:bf:35:b6:e0:fc:1a:
00:71:26:45:92:04:15:e0:a3:9c:f8:dc:21:36:83:
9a:67:2d:49:1b:0d:3d:5f:d5:e0:2a:b9:f7:e8:60:
62:c6:61:60:3f:37:a7:df:9c:78:04:40:a2:3e:9c:
fe:98:65:f9:24:1d:9b:99:5b:9b:2d:55:76:30:c5:
cc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6E:6C:0E:08:FD:2C:6D:AD:BB:20:50:9D:C6:40:B2:99:B1:27:B6
X509v3 Authority Key Identifier:
keyid:EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1e:db:04:56:61:50:70:05:1a:e9:56:8f:c9:89:4b:de:36:
ab:30:7d:83:60:cc:ca:36:28:a4:df:99:29:05:0a:4e:cd:89:
1e:23:88:87:5b:b8:fd:f3:87:b1:c9:11:6a:eb:6c:e8:12:b0:
ca:3b:f0:36:46:06:29:52:a0:a1:e8:6a:58:18:12:18:cb:0e:
d4:54:19:32:ee:b7:45:6a:4f:81:b2:1c:b1:76:30:c4:d7:8f:
3a:22:73:75:78:ea:3f:b9:62:15:23:75:b6:3e:6a:8e:09:33:
07:02:fb:0a:6b:d3:55:08:9d:58:af:1d:db:3b:89:ac:34:c4:
2d:59:22:05:d4:47:ac:ab:b1:fe:58:62:8b:b3:ad:f8:b4:a4:
a9:3f:f0:70:b3:ed:55:82:49:39:55:47:bd:a4:bc:e2:c9:23:
97:be:d3:bf:8a:ad:45:c0:53:a4:25:14:eb:0a:ef:3f:da:20:
49:3a:74:c8:e5:e5:ec:55:eb:3f:10:be:7a:bb:35:42:31:89:
ff:19:72:8b:c3:3a:24:84:69:4a:4a:a1:a3:43:a2:48:a0:7f:
6a:fb:bf:35:34:20:84:6f:9f:d3:78:c8:0f:b9:4c:c7:bd:81:
a0:57:0a:53:39:8a:3e:92:c2:de:f1:bb:76:27:d6:ca:4f:84:
20:9f:dd:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IVnbfqOY2BwdlMz5A22BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYjJhNDI1NTBlNWUyYjRhYTFhNDczYjJiMzcxYmMyODM0
MWExNmEwHhcNMjUwNjI4MjAwMTIyWhcNMjUwNjI5MjAwMTIyWjAzMTEwLwYDVQQD
EyhkOTZlNmMwZTA4ZmQyYzZkYWRiYjIwNTA5ZGM2NDBiMjk5YjEyN2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8Kdovm1hy8ZvE0zmGXHXnAq4VJB
fkOb4dBmA9MdC7706aA3tCqeg+OT5Gf2btyXDM3xCM7efhttbeEeuI+kccblEX2l
YeNr80GQUks5CNcRkaaq9OML5picdm4hBom+QaH/yw3s4X+KlFtM2FqaiCHg9BsF
IaGI/+GQuSo7ZvVD/KztJKMHFOr8SjklbA2kxn53Abg4E3VLUWxuzNi47yo/bZ4b
YaVebqoWBvz9Ri6a9YsJ5LSl7XXj9uu/Nbbg/BoAcSZFkgQV4KOc+NwhNoOaZy1J
Gw09X9XgKrn36GBixmFgPzen35x4BECiPpz+mGX5JB2bmVubLVV2MMXMwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlubA4I/SxtrbsgUJ3GQLKZsSe2MB8GA1UdIwQY
MBaAFOuypCVQ5eK0qhpHOys3G8KDQaFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lNThiNDAtZGRlNi00ODQwLTgxMGMt
MzFmOTI5NDVkZmZkLzEvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9lNThiNDAtZGRlNi00ODQwLTgxMGMtMzFmOTI5NDVkZmZk
LzEvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbh7bBFZh
UHAFGulWj8mJS942qzB9g2DMyjYopN+ZKQUKTs2JHiOIh1u4/fOHsckRauts6BKw
yjvwNkYGKVKgoehqWBgSGMsO1FQZMu63RWpPgbIcsXYwxNePOiJzdXjqP7liFSN1
tj5qjgkzBwL7CmvTVQidWK8d2zuJrDTELVkiBdRHrKux/lhii7Ot+LSkqT/wcLPt
VYJJOVVHvaS84skjl77Tv4qtRcBTpCUU6wrvP9ogSTp0yOXl7FXrPxC+ers1QjGJ
/xlyi8M6JIRpSkqho0OiSKB/avu/NTQghG+f03jID7lMx72BoFcKUzmKPpLC3vG7
difWyk+EIJ/dCg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:04 2025 by rpki-client