Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json)
Hash identifier: otBQoinIxS3ga8J7VTHm9l/H+RrO7aPNHLmP2Be9/dU=
Subject key identifier: AD:C1:6C:06:BE:D2:69:28:82:14:D9:48:F3:42:57:CC:F7:52:ED:BC
Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Certificate serial: 0197B7B313FBEAE0C2CF00B6703F592D66CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
Manifest number: 06B3
Signing time: Sat 28 Jun 2025 18:00:55 +0000
Manifest this update: Sat 28 Jun 2025 18:00:55 +0000
Manifest next update: Sun 29 Jun 2025 18:00:55 +0000
Files and hashes: 1: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: UYaeDXENpf0xtP/LIZPAS+wM4mZ3rFbB8R8qbAvsFGc=)
2: cp4lFEUau2mk3J8khN5tWSq6-qA.roa (hash: D4rIJ31bhlRPk+jgypW/dYYRdpcgCFWhZ+etBWhqECE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:13:fb:ea:e0:c2:cf:00:b6:70:3f:59:2d:66:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Validity
Not Before: Jun 28 18:00:55 2025 GMT
Not After : Jun 29 18:00:55 2025 GMT
Subject: CN=adc16c06bed269288214d948f34257ccf752edbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c2:21:51:ab:82:1e:df:15:bd:22:99:21:a4:
bd:ae:0a:64:8d:bb:e4:41:2f:3d:0e:e9:af:aa:f5:
d9:22:a4:56:7d:1c:74:e7:29:ea:9b:7a:ae:e2:23:
c0:7f:69:02:21:60:b9:79:56:46:0b:b7:dc:be:ff:
33:1b:9c:21:93:b8:78:3d:48:a9:38:11:95:63:21:
0d:7a:5c:cb:56:7c:be:08:f5:41:f5:84:c0:96:3f:
37:5c:0c:ad:e0:b0:ef:3d:71:66:f1:71:45:79:2b:
c7:5e:7f:8a:4e:21:c1:ae:fa:55:c6:07:ba:a7:56:
31:e5:3e:d7:39:30:89:7c:27:9d:09:4d:d9:43:b3:
e1:40:43:84:c9:0e:a1:c1:38:e2:c8:71:ff:87:ca:
72:fa:f1:2c:04:73:84:92:27:8d:c6:18:fc:0b:b4:
88:1f:fc:d0:99:d1:43:6b:c5:73:fb:25:05:57:10:
a6:94:1c:5e:cf:fd:9c:7d:32:d3:21:f2:3a:6d:1a:
96:86:8b:28:64:f6:06:a7:85:c5:c1:ae:58:9f:7b:
0d:f7:93:ea:b8:b4:57:38:e5:07:ee:fc:12:f3:0a:
0e:f3:24:db:e8:da:ee:a3:12:77:36:3a:5f:ec:71:
a9:43:af:03:de:80:3b:0d:e8:2a:06:43:f5:68:14:
a9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C1:6C:06:BE:D2:69:28:82:14:D9:48:F3:42:57:CC:F7:52:ED:BC
X509v3 Authority Key Identifier:
keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6a:37:6d:81:fe:97:59:94:58:67:16:73:3f:98:c9:c5:27:
01:bb:30:b2:fb:f7:74:73:a2:72:d6:4b:7e:d4:3e:56:46:65:
8d:b3:c0:38:5e:7a:f7:a3:b1:ca:97:05:87:59:7e:8f:5c:f9:
f6:e5:20:b5:ff:a1:50:f9:fa:f8:17:09:8b:a5:e0:88:90:6e:
cd:35:30:e3:af:02:cc:89:9b:a6:23:26:f8:25:4a:68:c6:bf:
97:5d:41:45:f1:64:ba:19:56:d3:21:26:aa:47:6e:03:f5:77:
73:4a:59:7f:69:d3:94:bd:72:f6:2f:f3:28:70:81:fa:be:57:
e3:5f:ea:42:a0:25:5f:50:c3:0e:ff:43:8e:f4:2c:6d:63:4c:
0d:73:82:a0:c7:51:7d:18:dc:90:c0:b9:fd:26:10:7d:5f:0e:
f9:1a:58:f7:ed:c7:78:91:bf:87:77:d2:ab:c2:e1:22:2d:c3:
37:0f:a0:f6:f8:05:51:e6:16:50:9e:86:09:85:f4:51:bc:d3:
5f:a4:ba:ec:d1:47:92:6c:e6:fb:d4:ed:6c:a4:15:cc:25:53:
fd:a4:ec:87:ce:27:0a:3a:95:35:69:99:dd:ef:c8:9b:1b:08:
8a:17:19:6a:5e:72:b0:ac:57:37:9b:b8:f8:48:7c:8c:b0:9e:
22:22:4f:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3sxP76uDCzwC2cD9ZLWbPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZDU5OTk0ZjJhZjc5NTk5Y2ZiM2ZmMmUzZTk4ZTUxOGY5
MTRmYmEwHhcNMjUwNjI4MTgwMDU1WhcNMjUwNjI5MTgwMDU1WjAzMTEwLwYDVQQD
EyhhZGMxNmMwNmJlZDI2OTI4ODIxNGQ5NDhmMzQyNTdjY2Y3NTJlZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sIhUauCHt8VvSKZIaS9rgpkjbvk
QS89DumvqvXZIqRWfRx05ynqm3qu4iPAf2kCIWC5eVZGC7fcvv8zG5whk7h4PUip
OBGVYyENelzLVny+CPVB9YTAlj83XAyt4LDvPXFm8XFFeSvHXn+KTiHBrvpVxge6
p1Yx5T7XOTCJfCedCU3ZQ7PhQEOEyQ6hwTjiyHH/h8py+vEsBHOEkieNxhj8C7SI
H/zQmdFDa8Vz+yUFVxCmlBxez/2cfTLTIfI6bRqWhosoZPYGp4XFwa5Yn3sN95Pq
uLRXOOUH7vwS8woO8yTb6NruoxJ3Njpf7HGpQ68D3oA7DegqBkP1aBSprQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3BbAa+0mkoghTZSPNCV8z3Uu28MB8GA1UdIwQY
MBaAFCrVmZTyr3lZnPs/8uPpjlGPkU+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yYmNmMzEtNjI3Ny00ZTg3LWEwMDct
YmJlMmM0ZDg4YzJmLzEvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yYmNmMzEtNjI3Ny00ZTg3LWEwMDctYmJlMmM0ZDg4YzJm
LzEvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2o3bYH+
l1mUWGcWcz+YycUnAbswsvv3dHOictZLftQ+VkZljbPAOF5696OxypcFh1l+j1z5
9uUgtf+hUPn6+BcJi6XgiJBuzTUw468CzImbpiMm+CVKaMa/l11BRfFkuhlW0yEm
qkduA/V3c0pZf2nTlL1y9i/zKHCB+r5X41/qQqAlX1DDDv9DjvQsbWNMDXOCoMdR
fRjckMC5/SYQfV8O+RpY9+3HeJG/h3fSq8LhIi3DNw+g9vgFUeYWUJ6GCYX0UbzT
X6S67NFHkmzm+9TtbKQVzCVT/aTsh84nCjqVNWmZ3e/ImxsIihcZal5ysKxXN5u4
+Eh8jLCeIiJPvg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:18 2025 by rpki-client