Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
File: KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft (raw, json)
Hash identifier: hk+8rB2isJ5OKuMg+Ts0TCWU/Z/hHef7fOPNOAFkSCQ=
Subject key identifier: 6C:BB:53:DB:90:7A:06:93:92:54:8B:1A:58:BB:E6:15:CC:D5:BC:D8
Authority key identifier: 2A:71:48:C4:61:F5:E7:7E:10:7A:F7:35:66:A2:7E:34:35:61:DC:1D
Certificate issuer: /CN=2a7148c461f5e77e107af73566a27e343561dc1d
Certificate serial: 0197B6A1249B0E7AD5EE10F3E89F564825E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:01:43 +0000
Manifest this update: Sat 28 Jun 2025 13:01:43 +0000
Manifest next update: Sun 29 Jun 2025 13:01:43 +0000
Files and hashes: 1: KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl (hash: oYD5qQbgImPECTaHbKVRWxFZzlm9uisRsUuZGEQU0SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:24:9b:0e:7a:d5:ee:10:f3:e8:9f:56:48:25:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7148c461f5e77e107af73566a27e343561dc1d
Validity
Not Before: Jun 28 13:01:43 2025 GMT
Not After : Jun 29 13:01:43 2025 GMT
Subject: CN=6cbb53db907a069392548b1a58bbe615ccd5bcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2d:05:39:33:1e:29:39:2b:b8:90:ba:95:3b:
9b:79:4d:c9:b3:9c:0d:bb:dc:76:d2:1e:47:d3:05:
80:55:fb:fb:84:11:4c:95:b4:50:65:87:1a:33:e0:
4f:2b:43:15:84:ac:75:51:26:ad:69:3c:47:8f:1f:
03:5e:6d:44:f4:de:87:b3:ab:6d:43:58:b6:05:e5:
37:bd:d5:c0:f4:f7:6e:49:fa:6c:b9:eb:49:64:61:
3e:8a:6f:df:8a:c9:2c:a8:85:b7:e9:ed:c2:ab:9d:
19:15:68:6f:f2:d1:37:d1:ed:28:f6:5c:fa:61:e4:
2f:b5:1a:f7:d5:cd:a5:65:b7:01:92:71:cd:0f:be:
6f:0c:3a:04:74:d3:79:45:e5:01:82:43:63:25:13:
a6:86:76:d5:a1:f4:69:7d:d6:c2:73:0c:df:7e:29:
7e:27:9b:92:9b:ab:b0:ad:32:a3:46:1b:f6:4a:0b:
07:a9:0e:f9:1c:10:e2:0e:74:42:a9:17:ab:95:8e:
ab:de:6a:54:37:5b:ac:50:b4:95:52:88:b0:7d:00:
42:12:72:1a:75:ef:a9:f4:9c:62:96:7b:8b:55:b3:
44:37:ca:5b:02:75:1c:9e:bd:fc:b1:0d:1f:72:8e:
7a:d2:3b:c9:56:04:f2:84:88:97:21:59:0a:b9:3b:
3f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BB:53:DB:90:7A:06:93:92:54:8B:1A:58:BB:E6:15:CC:D5:BC:D8
X509v3 Authority Key Identifier:
keyid:2A:71:48:C4:61:F5:E7:7E:10:7A:F7:35:66:A2:7E:34:35:61:DC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e8:46:60:5d:03:56:6a:dd:fa:7a:b8:b4:cb:95:47:63:b9:
ac:05:7b:af:05:16:cf:72:0a:46:fb:5c:4a:d8:36:41:ef:6c:
30:be:7c:e4:b3:a6:fa:48:ea:a0:9f:cc:21:d6:9a:6b:65:b1:
b9:91:4d:51:13:ad:34:6a:ae:94:84:42:ad:0f:d1:6d:73:36:
9a:41:42:ce:90:6a:6d:ad:4c:2e:32:d9:02:92:31:79:ad:14:
93:8c:fc:43:0b:46:e0:af:b0:ee:d7:a3:bc:b9:9b:29:40:17:
03:87:9d:f6:b3:c1:17:77:88:8b:7f:a8:ed:c0:23:e8:c5:82:
d5:7b:e9:0a:84:1b:81:a4:6d:0a:1e:31:2a:f0:e0:e2:87:07:
df:06:02:26:b2:53:65:55:cb:04:0f:d3:58:f9:d7:54:5b:16:
1f:62:e2:21:f9:b8:01:b1:b3:e1:2c:18:56:cc:fe:a2:6d:ea:
2f:ed:d3:18:ef:45:39:44:e8:1e:36:98:1a:c3:f4:63:e2:60:
f8:b3:cc:f9:d2:39:d6:3f:25:3d:0d:1a:3a:b4:cb:86:d5:a0:
55:ae:9e:99:2c:43:df:04:db:58:53:aa:b3:17:04:e1:40:d7:
9e:f2:f9:34:8f:58:fd:86:f2:69:bc:85:3c:6e:e7:0c:f6:3b:
a3:30:af:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oSSbDnrV7hDz6J9WSCXpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNzE0OGM0NjFmNWU3N2UxMDdhZjczNTY2YTI3ZTM0MzU2
MWRjMWQwHhcNMjUwNjI4MTMwMTQzWhcNMjUwNjI5MTMwMTQzWjAzMTEwLwYDVQQD
Eyg2Y2JiNTNkYjkwN2EwNjkzOTI1NDhiMWE1OGJiZTYxNWNjZDViY2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC0FOTMeKTkruJC6lTubeU3Js5wN
u9x20h5H0wWAVfv7hBFMlbRQZYcaM+BPK0MVhKx1USataTxHjx8DXm1E9N6Hs6tt
Q1i2BeU3vdXA9PduSfpsuetJZGE+im/fisksqIW36e3Cq50ZFWhv8tE30e0o9lz6
YeQvtRr31c2lZbcBknHND75vDDoEdNN5ReUBgkNjJROmhnbVofRpfdbCcwzffil+
J5uSm6uwrTKjRhv2SgsHqQ75HBDiDnRCqRerlY6r3mpUN1usULSVUoiwfQBCEnIa
de+p9JxilnuLVbNEN8pbAnUcnr38sQ0fco560jvJVgTyhIiXIVkKuTs/EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGy7U9uQegaTklSLGli75hXM1bzYMB8GA1UdIwQY
MBaAFCpxSMRh9ed+EHr3NWaifjQ1YdwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS25GSXhHSDE1MzRRZXZjMVpxSi1ORFZoM0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85YWZhZjUtZTY5Ni00ODNlLTgzNjUt
MzRlZmQ1YjllOWNkLzEvS25GSXhHSDE1MzRRZXZjMVpxSi1ORFZoM0IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS85YWZhZjUtZTY5Ni00ODNlLTgzNjUtMzRlZmQ1YjllOWNk
LzEvS25GSXhHSDE1MzRRZXZjMVpxSi1ORFZoM0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVehGYF0D
Vmrd+nq4tMuVR2O5rAV7rwUWz3IKRvtcStg2Qe9sML585LOm+kjqoJ/MIdaaa2Wx
uZFNUROtNGqulIRCrQ/RbXM2mkFCzpBqba1MLjLZApIxea0Uk4z8QwtG4K+w7tej
vLmbKUAXA4ed9rPBF3eIi3+o7cAj6MWC1XvpCoQbgaRtCh4xKvDg4ocH3wYCJrJT
ZVXLBA/TWPnXVFsWH2LiIfm4AbGz4SwYVsz+om3qL+3TGO9FOUToHjaYGsP0Y+Jg
+LPM+dI51j8lPQ0aOrTLhtWgVa6emSxD3wTbWFOqsxcE4UDXnvL5NI9Y/YbyabyF
PG7nDPY7ozCvRg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:35:54 2025 by rpki-client