Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
File: KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft (raw, json)
Hash identifier: Q73rksBLjNeWLWjbTgF7FktDLO8NPESMxRHrt5l4IJo=
Subject key identifier: FD:64:2B:06:7E:31:26:AD:31:63:57:16:D1:DF:B3:62:E5:FD:4E:D0
Authority key identifier: 28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
Certificate issuer: /CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Certificate serial: 0197B6D73A11780F8AB2BEAD76CFC53E70B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
Manifest number: 159B
Signing time: Sat 28 Jun 2025 14:00:47 +0000
Manifest this update: Sat 28 Jun 2025 14:00:47 +0000
Manifest next update: Sun 29 Jun 2025 14:00:47 +0000
Files and hashes: 1: KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl (hash: +8Wr1XkNodwzlgJ4CQPOkSuoh40/domsmUVk9JK8wXs=)
2: piJhKM_we331Drsk15cixPVEH_I.roa (hash: NHNPopSWAyph5Bx3EeKPWL7ZkR7orplnRo1YXxckaSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:3a:11:78:0f:8a:b2:be:ad:76:cf:c5:3e:70:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Validity
Not Before: Jun 28 14:00:47 2025 GMT
Not After : Jun 29 14:00:47 2025 GMT
Subject: CN=fd642b067e3126ad31635716d1dfb362e5fd4ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:6b:1a:72:e9:e3:47:76:98:46:26:70:09:
8c:4e:35:4d:32:44:43:e4:51:49:96:c8:2d:57:0f:
45:69:fd:b3:08:b0:c0:00:f0:5f:54:d2:a0:76:80:
1b:21:8e:67:41:7d:46:28:1f:e1:8d:81:77:06:e6:
1f:1e:ea:b7:c4:97:2a:7f:b0:00:d1:40:1d:d8:9d:
24:99:bd:7e:ef:b2:17:10:d7:50:18:10:83:3f:43:
19:b1:15:b8:a9:a5:a1:b3:1b:e1:ba:c7:8f:2f:9e:
9c:1c:e1:02:01:2d:5f:15:fa:97:90:59:19:74:35:
bf:49:dd:28:79:92:4f:05:76:d0:f3:c7:4d:02:a2:
25:83:e4:0f:b1:cb:ee:de:6e:cb:84:d9:ad:2a:f8:
48:33:00:f0:74:5b:fd:4d:f8:51:ba:6d:27:f1:06:
51:19:45:d5:38:f8:c1:65:5f:0d:bd:79:d0:df:36:
66:02:c6:83:da:b5:68:a2:88:8b:a8:ac:5e:60:0f:
76:4d:cc:37:f3:ba:a8:b8:f9:31:59:1a:d4:b0:a9:
8c:65:a3:fa:f6:c0:12:bc:4c:1e:d6:1c:74:10:23:
0a:9c:bd:55:c1:c8:4b:35:5c:c9:1e:11:74:ec:e6:
15:ac:8f:b2:07:31:6f:b3:fb:11:9c:72:ac:cb:2d:
80:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:64:2B:06:7E:31:26:AD:31:63:57:16:D1:DF:B3:62:E5:FD:4E:D0
X509v3 Authority Key Identifier:
keyid:28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:47:5a:0b:d7:70:c7:6d:f3:be:61:ce:06:f9:bd:4d:17:19:
29:37:29:da:ba:2b:6d:1e:a7:0c:1a:68:91:d1:3f:34:f8:42:
7f:2c:a7:82:89:f3:23:16:0a:40:a3:d9:c4:4b:02:ab:1c:ab:
53:b2:0a:d2:34:24:0d:88:6f:3f:49:42:64:7a:31:e1:90:c5:
cf:6b:46:39:b5:c5:e3:f0:cf:64:df:51:c0:1b:41:c4:bb:88:
a8:4d:2e:51:93:5c:94:96:84:ff:48:70:dc:2d:80:8b:0a:43:
77:c7:b3:b6:f5:b9:20:79:94:66:b8:cf:67:f1:ad:a9:3f:2d:
9f:77:0e:7d:4d:c9:72:db:0f:4b:c8:fd:43:9a:fa:4a:d2:b9:
86:d9:bf:c2:5c:aa:ec:44:86:a1:51:2c:29:ae:e3:3f:3d:15:
e1:ea:fe:c3:41:63:a7:bc:c5:b4:eb:30:c6:e6:a5:1d:0d:6c:
0c:af:03:db:a5:6d:41:c0:b8:97:73:45:2a:bb:c5:4f:b6:d6:
39:58:53:c3:ca:3b:65:3e:cb:a8:7c:e0:12:b2:c7:46:08:1d:
c7:92:6c:7a:31:d8:0b:09:49:e1:1c:c6:7c:cf:38:3f:77:1f:
ae:c9:36:e0:c5:16:32:2f:9f:9f:05:58:6b:eb:c0:28:f3:cf:
26:7b:07:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe21zoReA+Ksr6tds/FPnCyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MjA4YmE0ZTc1ZTI3YjA0NmY5ZTUyNzgyMjFiNDQ3Nzhi
NmFlOGQwHhcNMjUwNjI4MTQwMDQ3WhcNMjUwNjI5MTQwMDQ3WjAzMTEwLwYDVQQD
EyhmZDY0MmIwNjdlMzEyNmFkMzE2MzU3MTZkMWRmYjM2MmU1ZmQ0ZWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJZrGnLp40d2mEYmcAmMTjVNMkRD
5FFJlsgtVw9Faf2zCLDAAPBfVNKgdoAbIY5nQX1GKB/hjYF3BuYfHuq3xJcqf7AA
0UAd2J0kmb1+77IXENdQGBCDP0MZsRW4qaWhsxvhusePL56cHOECAS1fFfqXkFkZ
dDW/Sd0oeZJPBXbQ88dNAqIlg+QPscvu3m7LhNmtKvhIMwDwdFv9TfhRum0n8QZR
GUXVOPjBZV8NvXnQ3zZmAsaD2rVoooiLqKxeYA92Tcw387qouPkxWRrUsKmMZaP6
9sASvEwe1hx0ECMKnL1VwchLNVzJHhF07OYVrI+yBzFvs/sRnHKsyy2AYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1kKwZ+MSatMWNXFtHfs2Ll/U7QMB8GA1UdIwQY
MBaAFCggi6TnXiewRvnlJ4IhtEd4tq6NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0NDTHBPZGVKN0JHLWVVbmdpRzBSM2kycm8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wMmNjMDItYmZkOS00MDcwLWEzMWQt
YjdjZDliM2IyZTRmLzEvS0NDTHBPZGVKN0JHLWVVbmdpRzBSM2kycm8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8wMmNjMDItYmZkOS00MDcwLWEzMWQtYjdjZDliM2IyZTRm
LzEvS0NDTHBPZGVKN0JHLWVVbmdpRzBSM2kycm8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEdaC9dw
x23zvmHOBvm9TRcZKTcp2rorbR6nDBpokdE/NPhCfyyngonzIxYKQKPZxEsCqxyr
U7IK0jQkDYhvP0lCZHox4ZDFz2tGObXF4/DPZN9RwBtBxLuIqE0uUZNclJaE/0hw
3C2AiwpDd8eztvW5IHmUZrjPZ/GtqT8tn3cOfU3JctsPS8j9Q5r6StK5htm/wlyq
7ESGoVEsKa7jPz0V4er+w0Fjp7zFtOswxualHQ1sDK8D26VtQcC4l3NFKrvFT7bW
OVhTw8o7ZT7LqHzgErLHRggdx5JsejHYCwlJ4RzGfM84P3cfrsk24MUWMi+fnwVY
a+vAKPPPJnsHhw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:13:34 2025 by rpki-client