Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
File: kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft (raw, json)
Hash identifier: LHk/YDGeZyH8kA1NjfwczQq6MW5oWnmLwg7S82MsE48=
Subject key identifier: A0:5B:EA:D2:A4:AB:D3:73:BD:6B:49:83:09:7D:D3:77:06:6E:1E:FF
Authority key identifier: 91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
Certificate issuer: /CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
Certificate serial: 0197C15B1FD3EEB65945BC3D7C0499A60BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
Manifest number: 113D
Signing time: Mon 30 Jun 2025 15:01:03 +0000
Manifest this update: Mon 30 Jun 2025 15:01:03 +0000
Manifest next update: Tue 01 Jul 2025 15:01:03 +0000
Files and hashes: 1: 7onO-XhdJCc_IRQIQVCJn8u-1wE.roa (hash: sTU2wUb7RHNn6n+c6UyiV4vOHD7amsQkLEZ6q5B98dM=)
2: kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl (hash: WjVam/Qg3effBeX+IbltO89p1SBkQBNg4vB23Kg5OZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:5b:1f:d3:ee:b6:59:45:bc:3d:7c:04:99:a6:0b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
Validity
Not Before: Jun 30 15:01:03 2025 GMT
Not After : Jul 1 15:01:03 2025 GMT
Subject: CN=a05bead2a4abd373bd6b4983097dd377066e1eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:65:fc:4c:76:cd:51:33:ff:98:bc:39:c1:b4:
60:6d:61:4e:36:34:d9:82:71:6a:91:7e:32:d4:98:
61:d5:4a:35:4a:69:c0:ea:95:ea:0c:40:79:4f:f6:
4a:6c:a5:ad:cd:9b:0c:15:a2:67:f4:9e:22:aa:3c:
98:27:8c:be:f4:1f:88:f0:a7:74:a3:2a:0d:37:2f:
31:56:c7:48:89:4f:d6:77:6e:c1:ad:ec:ee:19:67:
41:55:3d:64:b3:cf:0b:9d:63:b7:c4:bd:dd:6a:9b:
a4:30:c8:09:85:e1:36:c4:d3:1c:74:82:99:21:af:
72:d5:5d:7f:79:9a:cf:2f:0e:15:d1:7c:ae:8e:ed:
41:0a:a7:4a:0a:03:7d:f1:9e:e1:7e:f4:6d:68:b3:
3a:d6:f4:eb:d4:35:21:c3:6c:43:86:89:25:06:c6:
ca:85:b7:c4:5a:2e:49:28:29:09:9e:5d:71:05:9a:
77:55:24:a3:57:d5:23:0a:75:92:b5:c6:6e:53:cc:
aa:f1:00:5f:78:67:b2:e3:46:b4:02:86:06:7d:75:
a6:a7:21:80:ce:8f:af:cd:4a:78:6d:ca:2f:32:38:
b4:51:96:66:12:cc:b9:9e:dc:b1:f8:c3:6a:c3:47:
5c:af:2a:fa:fc:8c:93:5b:dc:12:bf:22:62:d8:03:
4c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5B:EA:D2:A4:AB:D3:73:BD:6B:49:83:09:7D:D3:77:06:6E:1E:FF
X509v3 Authority Key Identifier:
keyid:91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ba:40:71:bc:7e:9f:43:16:a6:74:f4:86:b6:fd:8c:ec:f7:
98:1f:39:9a:99:3a:30:55:f1:40:47:5d:2c:79:b0:12:e4:4e:
46:a1:3a:90:a7:89:aa:98:a6:8d:bf:e7:f4:c4:68:8b:e2:b0:
cc:0c:6a:81:92:2b:ff:b1:e8:c9:2a:00:a4:88:ff:fa:8b:e5:
01:53:c2:41:84:f0:28:a1:c6:82:24:f4:f3:cc:b2:38:2a:d8:
2d:6d:3d:26:b2:54:eb:51:23:0e:a0:2c:ec:82:34:77:46:6a:
c2:ef:b7:13:e9:b7:00:53:d5:33:b0:2f:91:41:99:cf:4c:b1:
d1:87:42:fa:39:b3:36:77:24:ae:2f:e4:fd:f6:b5:f6:05:41:
77:6f:37:66:05:05:05:88:9e:08:24:8a:6c:5b:94:5e:ff:fd:
40:a1:23:a4:37:ba:0b:4a:00:22:57:2b:d7:df:19:ca:9e:88:
b8:87:5b:e1:3a:f6:db:76:bc:e1:1b:9a:16:b5:27:6f:e4:7c:
b7:d3:b6:a4:a1:0b:41:d6:82:15:63:1d:ba:44:fc:71:e3:0c:
c3:2d:30:0d:15:2f:08:7c:b5:0f:df:fa:fd:e0:26:dc:fe:74:
14:ff:b3:b8:df:67:56:b7:ee:d9:a8:ac:3c:c2:80:06:5d:48:
42:e0:47:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfBWx/T7rZZRbw9fASZpgvtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxY2Q0YzZjMTI2MGZjOWE3Yzg5NGJmNmFiZTc3YTZlZWNm
ZWMwNmUwHhcNMjUwNjMwMTUwMTAzWhcNMjUwNzAxMTUwMTAzWjAzMTEwLwYDVQQD
EyhhMDViZWFkMmE0YWJkMzczYmQ2YjQ5ODMwOTdkZDM3NzA2NmUxZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mX8THbNUTP/mLw5wbRgbWFONjTZ
gnFqkX4y1Jhh1Uo1SmnA6pXqDEB5T/ZKbKWtzZsMFaJn9J4iqjyYJ4y+9B+I8Kd0
oyoNNy8xVsdIiU/Wd27BrezuGWdBVT1ks88LnWO3xL3dapukMMgJheE2xNMcdIKZ
Ia9y1V1/eZrPLw4V0Xyuju1BCqdKCgN98Z7hfvRtaLM61vTr1DUhw2xDhoklBsbK
hbfEWi5JKCkJnl1xBZp3VSSjV9UjCnWStcZuU8yq8QBfeGey40a0AoYGfXWmpyGA
zo+vzUp4bcovMji0UZZmEsy5ntyx+MNqw0dcryr6/IyTW9wSvyJi2ANMcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBb6tKkq9NzvWtJgwl903cGbh7/MB8GA1UdIwQY
MBaAFJHNTGwSYPyafIlL9qvnem7s/sBuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2MxTWJCSmdfSnA4aVV2MnEtZDZidXotd0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lNWIzMDEtMGMzMy00OGI0LTg0N2It
ZTk4ZWUyMzgxMTQ2LzEva2MxTWJCSmdfSnA4aVV2MnEtZDZidXotd0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9lNWIzMDEtMGMzMy00OGI0LTg0N2ItZTk4ZWUyMzgxMTQ2
LzEva2MxTWJCSmdfSnA4aVV2MnEtZDZidXotd0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLpAcbx+
n0MWpnT0hrb9jOz3mB85mpk6MFXxQEddLHmwEuRORqE6kKeJqpimjb/n9MRoi+Kw
zAxqgZIr/7HoySoApIj/+ovlAVPCQYTwKKHGgiT088yyOCrYLW09JrJU61EjDqAs
7II0d0Zqwu+3E+m3AFPVM7AvkUGZz0yx0YdC+jmzNnckri/k/fa19gVBd283ZgUF
BYieCCSKbFuUXv/9QKEjpDe6C0oAIlcr198Zyp6IuIdb4Tr223a84RuaFrUnb+R8
t9O2pKELQdaCFWMdukT8ceMMwy0wDRUvCHy1D9/6/eAm3P50FP+zuN9nVrfu2ais
PMKABl1IQuBHyw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 01:02:27 2025 by rpki-client