Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
File: k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft (raw, json)
Hash identifier: wtCRkfg3vZR+8gmfpU8DMK5+8qx1q/b1fAmyzH0YNAo=
Subject key identifier: 12:22:48:E6:B7:6E:3A:0A:84:ED:D0:C1:DA:37:B7:96:DA:8A:6E:7C
Authority key identifier: 93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
Certificate issuer: /CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Certificate serial: 0197CB03495E97CA565B18463E28CFD4C033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
Manifest number: 0D5C
Signing time: Wed 02 Jul 2025 12:01:19 +0000
Manifest this update: Wed 02 Jul 2025 12:01:19 +0000
Manifest next update: Thu 03 Jul 2025 12:01:19 +0000
Files and hashes: 1: 2yeHS0iIkuHn83Pc5-EplLHcCYQ.roa (hash: kf8JlgWiWlnh6iS3QRDgrcCIPaCediQ682Z+VnmyMJ0=)
2: k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl (hash: IYQJ/UYxcNOhhIQpqcNFHHzE1euyIcSmWd3cPyStkXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:03:49:5e:97:ca:56:5b:18:46:3e:28:cf:d4:c0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Validity
Not Before: Jul 2 12:01:19 2025 GMT
Not After : Jul 3 12:01:19 2025 GMT
Subject: CN=122248e6b76e3a0a84edd0c1da37b796da8a6e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:68:69:c3:19:d3:b6:72:ec:70:f1:d5:7d:88:
65:e4:bf:e1:70:ae:08:95:62:30:ba:69:ae:c8:eb:
81:4e:7e:cf:dc:e8:b4:ec:de:99:a1:f3:15:40:d7:
f7:b8:20:58:71:bd:cf:fd:3a:e0:d8:9c:2b:f0:f6:
07:c1:fa:32:c0:b8:13:c7:4e:79:37:2b:98:90:f7:
66:ec:5e:07:df:4c:7a:51:a6:bc:07:18:11:ba:b2:
82:2c:bb:a5:1f:31:c6:a8:c6:b7:a4:3b:c6:ab:b9:
c6:06:97:2d:0a:27:91:ed:70:5e:a5:88:5b:78:a3:
32:f6:19:7c:7d:7c:a6:14:b1:ab:f8:af:6e:0a:b0:
85:e3:1d:95:72:06:20:bf:e8:c5:7b:9c:92:b6:c1:
80:6d:41:d7:7e:cf:c1:47:46:a5:2c:79:7f:42:2e:
56:a5:04:e8:d2:01:d4:02:47:93:bc:be:e9:cb:c9:
3e:e5:91:91:69:05:56:94:17:3d:bc:e6:c9:87:dd:
11:79:89:51:f4:d8:d7:dc:4f:a2:a1:15:a9:ba:0d:
e2:5f:4d:bb:ed:aa:c2:74:ce:15:eb:09:c3:fb:18:
b4:dc:06:f4:67:f0:f5:b1:5d:22:b4:fe:52:f3:70:
a2:9a:1c:43:b1:22:c6:3e:0c:8e:2b:8a:d8:38:87:
0c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:22:48:E6:B7:6E:3A:0A:84:ED:D0:C1:DA:37:B7:96:DA:8A:6E:7C
X509v3 Authority Key Identifier:
keyid:93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:be:b3:cf:60:69:25:70:e0:03:ac:3e:26:13:17:5b:58:6e:
a9:20:f5:bb:e0:b8:77:c4:cd:4f:d3:a3:97:6e:f1:1a:be:ff:
71:37:47:bf:bc:af:67:70:e5:29:10:8c:56:c7:a1:b3:b8:15:
ef:34:e0:fa:74:3e:45:ce:bc:fa:69:3e:d0:45:f0:4f:c1:54:
36:0b:3f:dd:29:10:e4:0e:8e:f9:78:8a:06:c4:79:8d:05:97:
fc:78:61:09:f1:05:29:85:10:06:f0:e8:4a:e1:7a:fe:58:4c:
a6:a6:fe:7a:aa:d9:84:b0:de:af:4d:d1:17:87:8e:27:93:8b:
b6:a9:b3:4f:0e:3f:09:ae:3e:69:9d:00:08:a3:50:68:14:62:
31:01:e1:e3:fe:57:01:83:d0:78:0c:af:6f:9f:9e:d9:4a:b8:
5e:04:4d:d4:d1:be:ed:2e:e1:35:ae:9d:04:cd:c7:f1:f1:9b:
50:6b:aa:32:74:de:26:ea:bf:eb:5c:fe:06:f8:2d:d7:c1:92:
b1:86:08:2e:1d:fb:9a:b1:f9:d6:9e:d3:28:f8:37:a2:5e:fb:
49:ca:54:bd:17:a3:21:52:1a:a6:92:85:fb:eb:15:ad:3f:5c:
45:d9:77:2b:8c:3a:88:40:d0:a4:6a:5f:ba:06:ed:5c:cf:7d:
d9:0e:99:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfLA0lel8pWWxhGPijP1MAzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjA4YTBjZGEwMTMzZjg3NmFiOWFkODNmYTM3YmNlZjYy
ZGYyZGYwHhcNMjUwNzAyMTIwMTE5WhcNMjUwNzAzMTIwMTE5WjAzMTEwLwYDVQQD
EygxMjIyNDhlNmI3NmUzYTBhODRlZGQwYzFkYTM3Yjc5NmRhOGE2ZTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWhpwxnTtnLscPHVfYhl5L/hcK4I
lWIwummuyOuBTn7P3Oi07N6ZofMVQNf3uCBYcb3P/Trg2Jwr8PYHwfoywLgTx055
NyuYkPdm7F4H30x6Uaa8BxgRurKCLLulHzHGqMa3pDvGq7nGBpctCieR7XBepYhb
eKMy9hl8fXymFLGr+K9uCrCF4x2VcgYgv+jFe5yStsGAbUHXfs/BR0alLHl/Qi5W
pQTo0gHUAkeTvL7py8k+5ZGRaQVWlBc9vObJh90ReYlR9NjX3E+ioRWpug3iX027
7arCdM4V6wnD+xi03Ab0Z/D1sV0itP5S83CimhxDsSLGPgyOK4rYOIcMEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIiSOa3bjoKhO3Qwdo3t5baim58MB8GA1UdIwQY
MBaAFJNgigzaATP4dqua2D+je872LfLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJDS0ROb0JNX2gycTVyWVA2Tjd6dll0OHQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wOGNiMmEtMDM0Yi00N2I2LWIxMzIt
N2Y4YmE5NmY1ZTQ5LzEvazJDS0ROb0JNX2gycTVyWVA2Tjd6dll0OHQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8wOGNiMmEtMDM0Yi00N2I2LWIxMzItN2Y4YmE5NmY1ZTQ5
LzEvazJDS0ROb0JNX2gycTVyWVA2Tjd6dll0OHQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOb6zz2Bp
JXDgA6w+JhMXW1huqSD1u+C4d8TNT9Ojl27xGr7/cTdHv7yvZ3DlKRCMVsehs7gV
7zTg+nQ+Rc68+mk+0EXwT8FUNgs/3SkQ5A6O+XiKBsR5jQWX/HhhCfEFKYUQBvDo
SuF6/lhMpqb+eqrZhLDer03RF4eOJ5OLtqmzTw4/Ca4+aZ0ACKNQaBRiMQHh4/5X
AYPQeAyvb5+e2Uq4XgRN1NG+7S7hNa6dBM3H8fGbUGuqMnTeJuq/61z+Bvgt18GS
sYYILh37mrH51p7TKPg3ol77ScpUvRejIVIappKF++sVrT9cRdl3K4w6iEDQpGpf
ugbtXM992Q6Z2Q==
-----END CERTIFICATE-----
Generated at Wed Jul 2 15:35:53 2025 by rpki-client