Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
File: KR2Dw_S4d899CEy1MMSp42_PetA.mft (raw, json)
Hash identifier: 4grmvdPrfzZ060haXasIt8Di5cUS3hnDKeOtosUH160=
Subject key identifier: EF:4C:4C:B2:7A:5D:9C:3D:B2:9D:03:C2:0A:37:23:13:5F:4F:B2:9D
Authority key identifier: 29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
Certificate issuer: /CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Certificate serial: 0197B70F2CCE0B0C87FA7D9AC708814D7E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
Manifest number: 12C3
Signing time: Sat 28 Jun 2025 15:01:54 +0000
Manifest this update: Sat 28 Jun 2025 15:01:54 +0000
Manifest next update: Sun 29 Jun 2025 15:01:54 +0000
Files and hashes: 1: KR2Dw_S4d899CEy1MMSp42_PetA.crl (hash: Tgktp9ziaIW6WRcN9RmEZto6QTR9oiwWALXzyljQwRQ=)
2: UtENKEhEm8aI0Ou7bKpM_GJZgfw.roa (hash: uJUKEvtya4FeDlxGJPwjMFWIfPRKUsKW7PNJHjdDHAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:2c:ce:0b:0c:87:fa:7d:9a:c7:08:81:4d:7e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Validity
Not Before: Jun 28 15:01:54 2025 GMT
Not After : Jun 29 15:01:54 2025 GMT
Subject: CN=ef4c4cb27a5d9c3db29d03c20a3723135f4fb29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:e0:18:f1:3e:da:90:bd:b9:27:a7:72:9c:
d3:f4:14:61:56:73:09:b4:c3:c9:52:ad:00:19:12:
65:a2:69:ba:36:be:d1:a0:a9:36:5d:4e:d8:d5:95:
31:ae:71:84:a9:2b:62:86:cf:e2:67:db:61:5a:b6:
e9:0c:bb:c1:84:a9:49:af:5c:77:17:32:c1:51:0a:
34:d4:52:32:ad:73:52:19:20:ea:bb:09:cc:51:d4:
fe:46:b1:06:51:82:b8:1b:d3:7c:cd:cb:03:69:71:
b4:bf:01:68:2a:80:41:7e:11:31:45:31:d5:0b:2d:
76:09:f1:65:17:5f:19:6e:f9:f9:d6:91:85:46:91:
35:3b:32:ee:a9:f6:bb:38:bc:ac:f0:fb:77:17:6f:
be:19:d7:79:33:6b:38:2c:1c:f7:2d:f2:82:7e:ab:
14:01:c2:30:7d:3c:0f:0b:5b:ea:59:6e:e4:81:e2:
25:9d:40:cd:fa:f0:4c:11:bd:b5:ae:b5:b9:ea:0d:
23:af:bb:80:eb:49:3d:27:79:8a:91:48:55:d0:68:
2f:8b:25:35:61:29:52:ea:75:18:5a:73:7f:6a:4d:
dd:a1:03:bc:9b:a5:f5:0d:4f:2b:f3:aa:73:cc:24:
b8:7f:f7:a7:8b:8c:14:ee:89:7d:f5:b1:53:72:ab:
7c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4C:4C:B2:7A:5D:9C:3D:B2:9D:03:C2:0A:37:23:13:5F:4F:B2:9D
X509v3 Authority Key Identifier:
keyid:29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9c:ef:12:51:6b:87:2c:9f:07:fd:8b:6d:0d:c5:4f:e1:8b:
97:05:7f:f1:b6:c4:f5:91:7a:e7:72:47:f2:33:cc:2f:d2:27:
60:fd:d6:41:45:42:29:34:25:b0:70:eb:84:d2:8f:cb:ae:f0:
ea:8c:97:02:ea:d2:5e:ec:16:6e:03:aa:0e:e3:ba:81:34:d5:
43:e3:6d:b5:e6:e5:a3:08:ea:17:74:03:b8:02:e6:72:99:a8:
33:81:4f:b6:6e:80:59:f5:f5:b0:7a:fb:d6:a0:f2:cc:55:68:
b6:ba:ff:c9:41:74:e7:01:29:58:dd:9f:92:ae:a2:e5:8f:1b:
f4:c1:86:7f:21:bc:3c:48:1a:1f:7d:ec:33:dd:a7:0f:27:d5:
13:f5:42:b3:66:df:f4:30:8d:19:80:2d:f8:bf:42:2a:5a:fe:
a7:95:8c:76:7f:03:57:c4:27:35:07:1e:38:ae:c8:88:21:5a:
5d:87:2e:73:fc:a6:5f:4b:4b:b1:94:b8:2b:d6:61:df:d5:f5:
d3:16:b1:5e:c2:ca:3f:fb:57:87:b1:8c:b8:6e:06:bd:b9:f9:
1a:9d:5f:fc:e6:35:a2:ac:be:d2:c6:7c:3e:aa:3b:de:78:3d:
16:53:7e:d8:79:02:41:ce:e7:78:75:51:fa:2d:02:ad:63:6e:
e0:95:e5:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DyzOCwyH+n2axwiBTX5eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MWQ4M2MzZjRiODc3Y2Y3ZDA4NGNiNTMwYzRhOWUzNmZj
ZjdhZDAwHhcNMjUwNjI4MTUwMTU0WhcNMjUwNjI5MTUwMTU0WjAzMTEwLwYDVQQD
EyhlZjRjNGNiMjdhNWQ5YzNkYjI5ZDAzYzIwYTM3MjMxMzVmNGZiMjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7PgGPE+2pC9uSencpzT9BRhVnMJ
tMPJUq0AGRJlomm6Nr7RoKk2XU7Y1ZUxrnGEqStihs/iZ9thWrbpDLvBhKlJr1x3
FzLBUQo01FIyrXNSGSDquwnMUdT+RrEGUYK4G9N8zcsDaXG0vwFoKoBBfhExRTHV
Cy12CfFlF18Zbvn51pGFRpE1OzLuqfa7OLys8Pt3F2++Gdd5M2s4LBz3LfKCfqsU
AcIwfTwPC1vqWW7kgeIlnUDN+vBMEb21rrW56g0jr7uA60k9J3mKkUhV0GgviyU1
YSlS6nUYWnN/ak3doQO8m6X1DU8r86pzzCS4f/eni4wU7ol99bFTcqt8kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9MTLJ6XZw9sp0Dwgo3IxNfT7KdMB8GA1UdIwQY
MBaAFCkdg8P0uHfPfQhMtTDEqeNvz3rQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81OTQ1NjktNmYxOC00NjBhLWExOTYt
ZmZjZDQ3NzM0OWZjLzEvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS81OTQ1NjktNmYxOC00NjBhLWExOTYtZmZjZDQ3NzM0OWZj
LzEvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbpzvElFr
hyyfB/2LbQ3FT+GLlwV/8bbE9ZF653JH8jPML9InYP3WQUVCKTQlsHDrhNKPy67w
6oyXAurSXuwWbgOqDuO6gTTVQ+NtteblowjqF3QDuALmcpmoM4FPtm6AWfX1sHr7
1qDyzFVotrr/yUF05wEpWN2fkq6i5Y8b9MGGfyG8PEgaH33sM92nDyfVE/VCs2bf
9DCNGYAt+L9CKlr+p5WMdn8DV8QnNQceOK7IiCFaXYcuc/ymX0tLsZS4K9Zh39X1
0xaxXsLKP/tXh7GMuG4Gvbn5Gp1f/OY1oqy+0sZ8Pqo73ng9FlN+2HkCQc7neHVR
+i0CrWNu4JXlSg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:51 2025 by rpki-client