Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
File: kt2u3zcPNa-LXut_hubPr6zojU4.mft (raw, json)
Hash identifier: +OZutmY8eYerwvVpPb3OlW+eL7f2NHIbgNJFofhiVvM=
Subject key identifier: 54:D3:B3:44:2E:CD:06:7F:BE:A7:06:FD:DC:B9:6F:8A:A4:48:3B:05
Authority key identifier: 92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E
Certificate issuer: /CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e
Certificate serial: 0197B70F3EB958CDDBA340169E1F4C0ED826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
Manifest number: 0607
Signing time: Sat 28 Jun 2025 15:01:58 +0000
Manifest this update: Sat 28 Jun 2025 15:01:58 +0000
Manifest next update: Sun 29 Jun 2025 15:01:58 +0000
Files and hashes: 1: kt2u3zcPNa-LXut_hubPr6zojU4.crl (hash: q6aREf7HAf0J4oa1PM6gloqEfvFyowB04E26vlcstu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:3e:b9:58:cd:db:a3:40:16:9e:1f:4c:0e:d8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e
Validity
Not Before: Jun 28 15:01:58 2025 GMT
Not After : Jun 29 15:01:58 2025 GMT
Subject: CN=54d3b3442ecd067fbea706fddcb96f8aa4483b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:be:c8:cd:a4:b0:87:96:3d:d1:38:4c:d5:
32:43:7e:51:68:e8:a6:61:7d:2c:3c:d6:8b:aa:f8:
7c:e9:d3:24:b1:ad:f1:4d:68:1c:d3:af:d7:ca:c5:
4f:07:d4:b9:ee:fa:8f:76:f1:3a:1c:bd:cc:44:8a:
65:3a:dc:b5:88:3c:27:da:b8:bc:6a:d5:67:c1:ba:
03:84:08:d3:63:86:ba:a3:4b:c6:d1:8b:89:39:a2:
28:ff:1d:ac:e2:d1:78:4e:09:74:9c:dd:ea:69:5c:
a3:b9:f2:59:de:74:3c:bc:31:5f:f0:e7:b6:29:06:
a2:8e:9a:c9:65:0a:77:d9:0e:52:e1:28:62:ea:8a:
10:35:4b:7c:f7:de:91:05:55:f4:aa:65:40:5f:73:
03:da:92:c5:d7:48:0f:23:f6:af:2c:9e:54:fe:37:
66:01:19:2b:16:2c:b6:41:26:e8:05:12:97:5b:7f:
4b:16:b1:8f:1d:e3:0d:0b:14:3c:dc:2b:22:6f:d2:
9a:5a:f9:bb:99:41:ff:7f:d5:9f:af:55:b0:16:b7:
3f:5b:a1:30:5e:0f:1c:31:3a:59:ec:8c:dc:5c:72:
97:14:83:f1:04:00:31:04:a6:65:18:4f:62:8d:f3:
ab:46:5b:5a:bc:36:2d:e0:c4:3a:e4:fd:93:79:32:
7e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D3:B3:44:2E:CD:06:7F:BE:A7:06:FD:DC:B9:6F:8A:A4:48:3B:05
X509v3 Authority Key Identifier:
keyid:92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:4e:4c:92:dc:45:e7:01:d2:fe:c2:46:1d:ed:e3:1d:97:ce:
ef:4b:27:a9:a9:06:64:22:ad:86:f4:43:7b:4e:71:8f:8c:90:
79:f1:8b:ab:57:2d:ad:3f:c0:06:4b:a7:d4:ae:6e:56:ba:7a:
25:b8:2c:f9:30:e3:f0:c5:56:66:47:62:79:cb:51:53:27:6b:
71:fa:78:71:ce:7e:ee:8e:7a:66:b0:8d:5e:68:f3:b8:86:a1:
2c:2d:4e:46:34:52:98:93:bf:44:37:c8:04:1f:c3:16:3b:2c:
4a:04:d2:ca:83:6f:f0:49:8c:6f:0d:ce:8e:76:96:4f:a4:1e:
5b:72:e9:31:89:81:9d:e8:5e:04:41:a2:91:d2:50:98:f5:d6:
63:d8:6a:e2:98:98:4a:15:e1:02:86:b8:43:8b:f2:6f:61:a5:
f1:64:98:24:4a:4c:32:1e:91:ea:08:19:c4:c4:97:db:f4:10:
27:c1:b8:87:ab:3e:68:20:c1:8b:1c:d7:2a:63:ea:5d:98:cc:
64:3a:9f:b9:5c:fc:1e:70:40:3b:ca:bf:1f:d8:63:0f:c0:d0:
1e:f2:eb:5c:20:fc:a6:6e:9e:50:24:3a:5c:3d:3c:3c:32:e4:
e0:43:40:b8:0f:2c:9a:6e:f6:13:37:9d:76:32:39:22:cb:b2:
75:d1:4c:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dz65WM3bo0AWnh9MDtgmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZGRhZWRmMzcwZjM1YWY4YjVlZWI3Zjg2ZTZjZmFmYWNl
ODhkNGUwHhcNMjUwNjI4MTUwMTU4WhcNMjUwNjI5MTUwMTU4WjAzMTEwLwYDVQQD
Eyg1NGQzYjM0NDJlY2QwNjdmYmVhNzA2ZmRkY2I5NmY4YWE0NDgzYjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZW+yM2ksIeWPdE4TNUyQ35RaOim
YX0sPNaLqvh86dMksa3xTWgc06/XysVPB9S57vqPdvE6HL3MRIplOty1iDwn2ri8
atVnwboDhAjTY4a6o0vG0YuJOaIo/x2s4tF4Tgl0nN3qaVyjufJZ3nQ8vDFf8Oe2
KQaijprJZQp32Q5S4Shi6ooQNUt8996RBVX0qmVAX3MD2pLF10gPI/avLJ5U/jdm
ARkrFiy2QSboBRKXW39LFrGPHeMNCxQ83Csib9KaWvm7mUH/f9Wfr1WwFrc/W6Ew
Xg8cMTpZ7IzcXHKXFIPxBAAxBKZlGE9ijfOrRltavDYt4MQ65P2TeTJ+nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTTs0QuzQZ/vqcG/dy5b4qkSDsFMB8GA1UdIwQY
MBaAFJLdrt83DzWvi17rf4bmz6+s6I1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3QydTN6Y1BOYS1MWHV0X2h1YlByNnpvalU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84NGMzZDUtOGFiMi00NGFjLTk0MmIt
YzRiOWM1Mzk0MDdiLzEva3QydTN6Y1BOYS1MWHV0X2h1YlByNnpvalU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84NGMzZDUtOGFiMi00NGFjLTk0MmItYzRiOWM1Mzk0MDdi
LzEva3QydTN6Y1BOYS1MWHV0X2h1YlByNnpvalU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANE5MktxF
5wHS/sJGHe3jHZfO70snqakGZCKthvRDe05xj4yQefGLq1ctrT/ABkun1K5uVrp6
Jbgs+TDj8MVWZkdiectRUydrcfp4cc5+7o56ZrCNXmjzuIahLC1ORjRSmJO/RDfI
BB/DFjssSgTSyoNv8EmMbw3OjnaWT6QeW3LpMYmBneheBEGikdJQmPXWY9hq4piY
ShXhAoa4Q4vyb2Gl8WSYJEpMMh6R6ggZxMSX2/QQJ8G4h6s+aCDBixzXKmPqXZjM
ZDqfuVz8HnBAO8q/H9hjD8DQHvLrXCD8pm6eUCQ6XD08PDLk4ENAuA8smm72Ezed
djI5IsuyddFMgg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:28 2025 by rpki-client