Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
File: KT0QRM1I1hcW11ngIN29qoFNXNU.mft (raw, json)
Hash identifier: Nskc7GGMLNmc4Q0IF3a8ukLdVpWmn1ImCR7RrHWYo/k=
Subject key identifier: 7E:89:5D:7E:9E:4F:FA:AE:FD:C3:31:67:C6:1A:48:E1:D0:35:34:3B
Authority key identifier: 29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
Certificate issuer: /CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Certificate serial: 0197B70EAE207695DA5C7A8CF610AADCD032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
Manifest number: 0DBC
Signing time: Sat 28 Jun 2025 15:01:21 +0000
Manifest this update: Sat 28 Jun 2025 15:01:21 +0000
Manifest next update: Sun 29 Jun 2025 15:01:21 +0000
Files and hashes: 1: KT0QRM1I1hcW11ngIN29qoFNXNU.crl (hash: ZffsqSTDOp7MfhW3irFu75JgtS5OZZctUERtr7y2kSA=)
2: dJ6Z6uHBiaScsgFwBNYwQYgTmkk.roa (hash: A47IWxTys6UPyaxxT7KgUDJag9HKcyHJ4nrmIQJOjaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ae:20:76:95:da:5c:7a:8c:f6:10:aa:dc:d0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Validity
Not Before: Jun 28 15:01:21 2025 GMT
Not After : Jun 29 15:01:21 2025 GMT
Subject: CN=7e895d7e9e4ffaaefdc33167c61a48e1d035343b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:76:c6:8c:eb:bd:18:e7:78:a1:86:b0:0d:a1:
20:ba:52:dc:1d:2b:09:e2:fc:81:6e:33:41:fc:22:
86:8e:6b:64:29:65:67:b4:8d:29:42:83:a3:7c:da:
64:9b:f0:1d:d4:f0:d8:14:3c:b8:d0:78:55:c7:3a:
b0:da:a0:81:a3:39:be:d1:02:c2:e0:02:73:37:18:
b1:1f:dd:21:4c:6a:21:a3:89:cb:33:b7:10:15:61:
38:f4:c6:91:91:1b:ce:79:b6:54:80:0d:e7:d8:c2:
bd:3a:81:ad:a9:24:b8:9b:32:a2:c6:c8:4a:6b:44:
62:38:2f:9e:e6:72:21:81:89:01:0f:f4:7b:c3:c3:
1f:ac:86:2d:3c:29:c6:ad:8f:d7:47:b8:a8:f8:f9:
73:ef:39:41:66:99:a0:27:0a:9c:4e:5e:34:bb:73:
c0:31:52:28:f2:56:54:a9:e5:cb:fd:c1:4e:99:9b:
b2:ec:e0:c5:f1:ae:f4:9f:d2:b8:04:44:e2:8f:1f:
7b:4b:52:e1:b8:b5:e9:de:9b:38:84:d7:26:ad:af:
9f:06:6b:80:45:a6:5f:58:bd:f5:94:b9:67:3f:fa:
7f:1e:e6:de:4a:ec:a4:bc:06:e8:52:70:cf:23:46:
5c:01:d7:4f:fe:c7:79:3a:d4:84:48:e3:05:45:d5:
bd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:89:5D:7E:9E:4F:FA:AE:FD:C3:31:67:C6:1A:48:E1:D0:35:34:3B
X509v3 Authority Key Identifier:
keyid:29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e6:b3:5a:02:91:4a:96:cf:2d:6d:3f:b6:a3:35:4f:b8:7b:
69:87:22:81:07:3d:42:2f:e9:a7:4c:54:d3:13:03:fb:2b:3e:
c9:ab:05:2a:11:a1:2d:8f:82:eb:bc:99:95:ba:50:0d:37:18:
d4:ab:0d:0e:75:fe:37:ac:ea:32:98:ba:4d:7a:6d:b6:f5:bb:
dc:64:5e:c4:3b:bd:c9:45:c4:eb:cd:05:0b:7b:cb:16:90:75:
5c:d6:13:e9:29:06:44:01:aa:b0:35:2b:dc:f0:6d:1d:fc:f3:
a7:56:41:6c:81:a8:2e:81:eb:86:b7:7a:11:66:38:9d:67:03:
b3:82:77:19:aa:e6:8b:fc:10:ae:c5:d3:12:80:8a:b9:17:78:
94:48:57:23:4a:f2:15:56:ce:f8:30:09:a7:1c:55:db:4a:c6:
3b:d1:bd:45:ce:8a:bd:5a:b5:22:3a:6a:57:f6:b9:4e:75:ea:
d0:51:5c:91:3e:6a:b6:58:ad:29:d6:03:e3:60:7d:5a:af:23:
40:ed:45:8f:54:76:c1:d8:75:7b:a3:43:6f:be:d3:1f:fa:48:
89:ea:e4:48:91:31:1a:0f:b7:4e:a0:26:e6:fa:20:06:28:d7:
1c:19:5e:f1:4e:72:78:c7:53:9a:dd:59:c3:0d:56:9b:83:78:
b2:b3:83:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dq4gdpXaXHqM9hCq3NAyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5M2QxMDQ0Y2Q0OGQ2MTcxNmQ3NTllMDIwZGRiZGFhODE0
ZDVjZDUwHhcNMjUwNjI4MTUwMTIxWhcNMjUwNjI5MTUwMTIxWjAzMTEwLwYDVQQD
Eyg3ZTg5NWQ3ZTllNGZmYWFlZmRjMzMxNjdjNjFhNDhlMWQwMzUzNDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53bGjOu9GOd4oYawDaEgulLcHSsJ
4vyBbjNB/CKGjmtkKWVntI0pQoOjfNpkm/Ad1PDYFDy40HhVxzqw2qCBozm+0QLC
4AJzNxixH90hTGoho4nLM7cQFWE49MaRkRvOebZUgA3n2MK9OoGtqSS4mzKixshK
a0RiOC+e5nIhgYkBD/R7w8MfrIYtPCnGrY/XR7io+Plz7zlBZpmgJwqcTl40u3PA
MVIo8lZUqeXL/cFOmZuy7ODF8a70n9K4BETijx97S1LhuLXp3ps4hNcmra+fBmuA
RaZfWL31lLlnP/p/HubeSuykvAboUnDPI0ZcAddP/sd5OtSESOMFRdW9SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6JXX6eT/qu/cMxZ8YaSOHQNTQ7MB8GA1UdIwQY
MBaAFCk9EETNSNYXFtdZ4CDdvaqBTVzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1QwUVJNMUkxaGNXMTFuZ0lOMjlxb0ZOWE5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9kZWYwOTUtMDU2Yi00ZGQzLWJmMWUt
ZTcxYmVkYTFmMjk5LzEvS1QwUVJNMUkxaGNXMTFuZ0lOMjlxb0ZOWE5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9kZWYwOTUtMDU2Yi00ZGQzLWJmMWUtZTcxYmVkYTFmMjk5
LzEvS1QwUVJNMUkxaGNXMTFuZ0lOMjlxb0ZOWE5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAleazWgKR
SpbPLW0/tqM1T7h7aYcigQc9Qi/pp0xU0xMD+ys+yasFKhGhLY+C67yZlbpQDTcY
1KsNDnX+N6zqMpi6TXpttvW73GRexDu9yUXE680FC3vLFpB1XNYT6SkGRAGqsDUr
3PBtHfzzp1ZBbIGoLoHrhrd6EWY4nWcDs4J3Garmi/wQrsXTEoCKuRd4lEhXI0ry
FVbO+DAJpxxV20rGO9G9Rc6KvVq1IjpqV/a5TnXq0FFckT5qtlitKdYD42B9Wq8j
QO1Fj1R2wdh1e6NDb77TH/pIierkSJExGg+3TqAm5vogBijXHBle8U5yeMdTmt1Z
ww1Wm4N4srODEw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:10 2025 by rpki-client