Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
File: Kz1duQDggbIT6h8HHsXAA0em_ZU.mft (raw, json)
Hash identifier: hm4XhV1XqeTdZ9MfaF/RfRG+5eLkilZbmVCDE8zFFWc=
Subject key identifier: F8:F0:FB:9F:EB:A8:BD:29:D2:15:DA:7E:02:E2:C9:FF:72:F9:10:DF
Authority key identifier: 2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
Certificate issuer: /CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Certificate serial: 0197B7EAD411CFD4E98A404B36B0306C51F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
Manifest number: 148D
Signing time: Sat 28 Jun 2025 19:01:49 +0000
Manifest this update: Sat 28 Jun 2025 19:01:49 +0000
Manifest next update: Sun 29 Jun 2025 19:01:49 +0000
Files and hashes: 1: Kz1duQDggbIT6h8HHsXAA0em_ZU.crl (hash: C35BiIb9QYMS+YYAKeVCzl7VCncpIpv+nhusaGmJMwU=)
2: NEgXAX_wlUMaQy2Alio_tXjqDko.roa (hash: AzGPeergn3UOGKBGdY9DWg2cAqJA+mog0I2Sf6Bpi0g=)
3: piNzw1TtbP-p8HWhuy6SBF8spgg.roa (hash: wNEUGiASiQTLAx7gOGoQvQVkZK49FM62Tev24iu4h1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:d4:11:cf:d4:e9:8a:40:4b:36:b0:30:6c:51:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Validity
Not Before: Jun 28 19:01:49 2025 GMT
Not After : Jun 29 19:01:49 2025 GMT
Subject: CN=f8f0fb9feba8bd29d215da7e02e2c9ff72f910df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:e3:4c:b3:f4:3d:d2:c0:f4:fd:e5:3d:3e:
07:e7:05:de:4b:c9:dd:d3:ef:c3:6f:13:8c:43:af:
50:de:05:5c:f7:f8:72:a0:1b:1b:da:74:f2:db:bb:
36:52:67:d0:af:82:b2:bb:11:3f:24:91:e5:47:26:
5f:37:d1:ed:00:f5:6f:ab:2c:02:ce:83:ee:32:b9:
3f:20:d5:c3:c7:4d:80:6a:de:e2:c1:80:74:12:83:
7d:ab:bb:45:64:bf:48:ec:e4:b4:44:ac:7f:28:55:
77:ed:8c:b7:9c:c4:ad:76:2a:f6:81:7b:1f:be:00:
c8:6f:09:ae:44:d5:7b:f5:3c:58:bb:06:75:2b:4e:
6a:1a:20:83:dc:ae:fe:1c:6c:87:18:17:59:1a:b0:
72:76:b1:f4:d4:f0:bf:b4:50:8d:59:46:a6:b2:b2:
39:88:42:33:9c:06:57:d9:19:a4:4c:9c:27:6b:5a:
98:f7:2e:ab:d5:28:12:86:c1:aa:cb:af:a6:d9:78:
db:7a:6d:a1:77:e3:99:02:02:20:5b:d5:8e:ca:fa:
73:e9:f9:05:a6:30:41:ba:08:db:ba:35:d1:76:4e:
70:5a:64:d4:37:19:cc:af:1d:32:b7:a8:a0:60:5b:
61:20:d6:1f:ce:8f:a1:62:e9:ef:0b:c7:51:1f:36:
81:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F0:FB:9F:EB:A8:BD:29:D2:15:DA:7E:02:E2:C9:FF:72:F9:10:DF
X509v3 Authority Key Identifier:
keyid:2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:13:04:43:a4:61:98:f9:2d:99:2d:80:14:aa:34:e6:a9:f8:
39:25:19:e9:6f:ae:39:2c:50:a9:0f:e0:a8:a3:7e:bc:53:9f:
2f:b6:cd:52:ee:19:d0:1e:13:47:af:e7:32:0e:bb:0f:fa:26:
3f:37:ea:e4:e3:0b:4b:b5:1c:2f:45:e1:24:11:d6:8a:84:76:
46:8a:ac:d5:35:e5:83:8e:3e:0a:34:15:4e:f4:f0:5d:52:43:
c2:38:62:07:5e:94:42:46:9a:b0:eb:7c:f3:c9:c6:d5:82:5d:
7a:f1:30:af:5c:db:36:5b:a7:13:d2:dd:3a:40:f0:64:e2:be:
93:db:30:e6:31:ef:b5:8d:85:8f:24:64:96:9f:88:03:8c:ac:
f9:3c:df:6d:5e:02:6c:3b:00:fa:bf:88:ca:d3:d6:29:33:7c:
03:a4:f1:ad:b9:57:8f:b3:c7:0a:37:dc:37:00:b0:4a:ec:9b:
40:78:7c:ef:64:24:8b:24:c1:bf:e9:9a:e6:f4:a1:17:fb:47:
43:7c:39:77:d2:86:2c:94:4c:e8:6a:d5:24:8a:b8:59:22:ba:
34:f7:5c:ec:bf:fb:1f:77:f0:5d:51:19:f8:82:85:8f:15:6b:
38:8e:df:93:b0:3f:ff:4a:85:47:b2:f6:0f:0a:84:35:59:01:
1f:08:3c:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36tQRz9TpikBLNrAwbFHwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiM2Q1ZGI5MDBlMDgxYjIxM2VhMWYwNzFlYzVjMDAzNDdh
NmZkOTUwHhcNMjUwNjI4MTkwMTQ5WhcNMjUwNjI5MTkwMTQ5WjAzMTEwLwYDVQQD
EyhmOGYwZmI5ZmViYThiZDI5ZDIxNWRhN2UwMmUyYzlmZjcyZjkxMGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSXjTLP0PdLA9P3lPT4H5wXeS8nd
0+/DbxOMQ69Q3gVc9/hyoBsb2nTy27s2UmfQr4KyuxE/JJHlRyZfN9HtAPVvqywC
zoPuMrk/INXDx02Aat7iwYB0EoN9q7tFZL9I7OS0RKx/KFV37Yy3nMStdir2gXsf
vgDIbwmuRNV79TxYuwZ1K05qGiCD3K7+HGyHGBdZGrBydrH01PC/tFCNWUamsrI5
iEIznAZX2RmkTJwna1qY9y6r1SgShsGqy6+m2Xjbem2hd+OZAgIgW9WOyvpz6fkF
pjBBugjbujXRdk5wWmTUNxnMrx0yt6igYFthINYfzo+hYunvC8dRHzaBtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjw+5/rqL0p0hXafgLiyf9y+RDfMB8GA1UdIwQY
MBaAFCs9XbkA4IGyE+ofBx7FwANHpv2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3oxZHVRRGdnYklUNmg4SEhzWEFBMGVtX1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS82NWY4ZTItZjRlZC00MjRkLTliOTEt
NDdkZDBjMDRiNTUwLzEvS3oxZHVRRGdnYklUNmg4SEhzWEFBMGVtX1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS82NWY4ZTItZjRlZC00MjRkLTliOTEtNDdkZDBjMDRiNTUw
LzEvS3oxZHVRRGdnYklUNmg4SEhzWEFBMGVtX1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxMEQ6Rh
mPktmS2AFKo05qn4OSUZ6W+uOSxQqQ/gqKN+vFOfL7bNUu4Z0B4TR6/nMg67D/om
Pzfq5OMLS7UcL0XhJBHWioR2Roqs1TXlg44+CjQVTvTwXVJDwjhiB16UQkaasOt8
88nG1YJdevEwr1zbNlunE9LdOkDwZOK+k9sw5jHvtY2FjyRklp+IA4ys+TzfbV4C
bDsA+r+IytPWKTN8A6TxrblXj7PHCjfcNwCwSuybQHh872QkiyTBv+ma5vShF/tH
Q3w5d9KGLJRM6GrVJIq4WSK6NPdc7L/7H3fwXVEZ+IKFjxVrOI7fk7A//0qFR7L2
DwqENVkBHwg86Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:43 2025 by rpki-client