Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
File: KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft (raw, json)
Hash identifier: vsx8Ldmn2eZ3FkuMpWNoTk3TOhgD+7oYyeEVjON/8Kg=
Subject key identifier: FF:41:A3:1B:EA:40:35:E2:85:07:DB:D1:50:25:93:1E:B0:AB:7F:73
Authority key identifier: 29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
Certificate issuer: /CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Certificate serial: 0197B7EA203589F0F01C427D234E5046D5ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
Manifest number: 12EB
Signing time: Sat 28 Jun 2025 19:01:03 +0000
Manifest this update: Sat 28 Jun 2025 19:01:03 +0000
Manifest next update: Sun 29 Jun 2025 19:01:03 +0000
Files and hashes: 1: KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl (hash: qQEHS8kzy1qMhKL1IxLGQV9akGWqS4nUp5cVz0VyVOA=)
2: Lc2MOeHrhJYACH3DTtJSFK-up5U.roa (hash: jsqmE6guApHIEUr5xOYbDvIqn7++Rg1hChyQTZ/F2xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:20:35:89:f0:f0:1c:42:7d:23:4e:50:46:d5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Validity
Not Before: Jun 28 19:01:03 2025 GMT
Not After : Jun 29 19:01:03 2025 GMT
Subject: CN=ff41a31bea4035e28507dbd15025931eb0ab7f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ec:d0:4a:0f:00:06:2c:85:aa:70:2f:8a:82:
0b:a8:87:a3:4d:94:ec:26:bd:0b:19:dd:66:94:18:
8a:b5:99:b8:51:9f:b3:5b:c5:6a:87:24:3a:df:51:
4b:8f:43:2a:0e:6f:db:f2:32:40:df:e2:9d:87:b4:
21:b5:a0:7d:e1:d9:62:6a:90:bf:28:bb:e1:32:81:
5e:2f:43:80:d0:59:a8:c6:5d:8f:8d:bf:e4:b5:3f:
9b:44:8a:69:a5:e6:36:76:90:72:94:54:54:c7:ce:
56:0f:5c:cb:64:af:92:db:a2:03:f5:45:9c:3b:23:
9a:d8:96:38:c3:7a:52:81:f0:b8:d4:50:79:e9:86:
61:da:3c:3a:9b:16:ad:92:81:9c:5d:d6:ce:2d:1d:
07:77:74:12:f5:41:ca:c2:e1:76:65:00:18:ed:12:
79:d4:23:02:a0:58:3c:ea:75:c3:8b:23:25:f1:10:
04:ad:7f:1d:ec:e7:6d:2c:7c:dc:b7:bc:ec:a4:4e:
c0:0b:df:22:ab:9a:3d:a8:63:e2:50:fb:7d:72:fa:
bf:4e:df:ae:c5:ef:ce:62:78:1c:90:08:66:4d:7f:
a2:52:0a:81:4a:43:ba:49:ac:8c:63:e1:24:cb:a7:
0b:f3:c8:05:26:b5:87:c8:b4:1f:89:7f:a1:f9:e8:
18:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:41:A3:1B:EA:40:35:E2:85:07:DB:D1:50:25:93:1E:B0:AB:7F:73
X509v3 Authority Key Identifier:
keyid:29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:61:fd:e1:03:eb:36:31:0b:ce:15:1e:42:66:56:44:74:8b:
e1:24:48:15:20:d3:39:8a:29:68:a1:f1:76:06:cb:a6:56:c4:
06:dc:c9:5c:42:26:2a:e7:f3:00:ca:51:42:74:87:c3:ca:10:
70:7b:77:a7:1d:af:85:d1:c9:76:84:01:28:4a:83:cd:71:c5:
29:59:da:b0:6c:c8:38:63:c3:f0:b1:34:d4:85:63:e3:76:52:
7c:ab:d2:a7:e5:46:f6:c5:c2:85:06:63:24:a8:c0:7e:65:06:
0f:99:17:eb:6e:43:2a:f9:f9:b2:20:1a:f3:ab:e5:5d:01:9a:
89:7b:dc:98:a7:cb:94:56:80:02:f0:c6:35:8a:48:e2:fd:0f:
bb:5e:25:79:f5:53:9b:14:a2:98:54:3e:69:2e:b6:9d:dc:c7:
4d:6d:1d:f9:09:58:79:ce:66:c7:47:cb:a6:0b:a0:40:ed:56:
ec:8e:93:1b:91:43:7a:8a:c7:5b:3d:e7:16:7d:d3:56:eb:e6:
13:e0:96:45:59:08:fd:cd:24:85:ec:54:c3:5c:9d:aa:08:cb:
cc:52:c0:91:e8:13:b5:1b:fc:0d:0d:af:b3:57:7e:91:9d:6d:
80:ca:e4:ad:2e:3a:34:47:bc:f7:84:0e:0e:5b:58:2b:5b:44:
a8:90:09:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36iA1ifDwHEJ9I05QRtXtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5M2YyZWM3NGI0MDY2YWM2N2E4NzY4ZDhlMzg2MDZlZmNk
NjQwMTMwHhcNMjUwNjI4MTkwMTAzWhcNMjUwNjI5MTkwMTAzWjAzMTEwLwYDVQQD
EyhmZjQxYTMxYmVhNDAzNWUyODUwN2RiZDE1MDI1OTMxZWIwYWI3ZjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouzQSg8ABiyFqnAvioILqIejTZTs
Jr0LGd1mlBiKtZm4UZ+zW8VqhyQ631FLj0MqDm/b8jJA3+Kdh7QhtaB94dliapC/
KLvhMoFeL0OA0Fmoxl2Pjb/ktT+bRIpppeY2dpBylFRUx85WD1zLZK+S26ID9UWc
OyOa2JY4w3pSgfC41FB56YZh2jw6mxatkoGcXdbOLR0Hd3QS9UHKwuF2ZQAY7RJ5
1CMCoFg86nXDiyMl8RAErX8d7OdtLHzct7zspE7AC98iq5o9qGPiUPt9cvq/Tt+u
xe/OYngckAhmTX+iUgqBSkO6SayMY+Eky6cL88gFJrWHyLQfiX+h+egYLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9BoxvqQDXihQfb0VAlkx6wq39zMB8GA1UdIwQY
MBaAFCk/LsdLQGasZ6h2jY44YG781kATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OTA0NWEtYTViMS00ZTU5LTk3MTct
MjNmMjI2M2I5YmQyLzEvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC82OTA0NWEtYTViMS00ZTU5LTk3MTctMjNmMjI2M2I5YmQy
LzEvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGH94QPr
NjELzhUeQmZWRHSL4SRIFSDTOYopaKHxdgbLplbEBtzJXEImKufzAMpRQnSHw8oQ
cHt3px2vhdHJdoQBKEqDzXHFKVnasGzIOGPD8LE01IVj43ZSfKvSp+VG9sXChQZj
JKjAfmUGD5kX625DKvn5siAa86vlXQGaiXvcmKfLlFaAAvDGNYpI4v0Pu14lefVT
mxSimFQ+aS62ndzHTW0d+QlYec5mx0fLpgugQO1W7I6TG5FDeorHWz3nFn3TVuvm
E+CWRVkI/c0khexUw1ydqgjLzFLAkegTtRv8DQ2vs1d+kZ1tgMrkrS46NEe894QO
DltYK1tEqJAJzg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:15 2025 by rpki-client