Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
File: KUoc22jxVM-VQYowjILY2lB3UQk.mft (raw, json)
Hash identifier: gftY38M9zmy8WeLyQcgR0L8/4dCZX4mclr8FUMVnyNE=
Subject key identifier: 6E:24:56:2B:F7:2C:F5:F8:72:6E:F5:93:50:F0:D3:E8:A5:15:33:DC
Authority key identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
Certificate issuer: /CN=294a1cdb68f154cf95418a308c82d8da50775109
Certificate serial: 0197B77C2C99DFA18417C11238547DE20DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
Manifest number: 124A
Signing time: Sat 28 Jun 2025 17:00:57 +0000
Manifest this update: Sat 28 Jun 2025 17:00:57 +0000
Manifest next update: Sun 29 Jun 2025 17:00:57 +0000
Files and hashes: 1: KUoc22jxVM-VQYowjILY2lB3UQk.crl (hash: Tyw+wgxwcp072qlwRUwNbm0eY7s0V9qT4btNI6A/Gk8=)
2: KZGod_BqVRdmwfNvBiSAHniE4gQ.roa (hash: 6XoOJiv494XxgxSZpKNQsumj729QUswWc6xs9n2QuB0=)
3: M1t61zFriLUhV6w-rpKhVc5pbtI.roa (hash: SMrR4aeWQHwd+VhRNHme2dIKoEpbr73IPaO3PrfJOhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:2c:99:df:a1:84:17:c1:12:38:54:7d:e2:0d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294a1cdb68f154cf95418a308c82d8da50775109
Validity
Not Before: Jun 28 17:00:57 2025 GMT
Not After : Jun 29 17:00:57 2025 GMT
Subject: CN=6e24562bf72cf5f8726ef59350f0d3e8a51533dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:21:7e:2c:3d:bf:2e:2a:49:5e:38:fd:43:f9:
b8:8b:53:c8:ee:ab:f5:48:3f:3f:85:fb:33:77:d3:
e0:d8:1e:fa:ef:8e:fb:f8:40:4f:b4:56:46:b5:e6:
96:bc:11:f0:84:b4:68:99:1b:17:aa:5a:37:1f:95:
73:60:2c:48:57:53:dc:00:3c:9a:e9:2f:72:51:6d:
ba:76:62:85:16:5a:9d:f0:3d:bc:d1:4c:6b:4e:8b:
c8:e6:59:a4:82:25:d6:f2:c8:d7:64:ea:46:13:34:
19:6d:90:11:5b:2f:f5:ad:0e:32:ee:fc:ca:2e:d4:
75:5b:75:72:59:79:8b:55:30:3f:9c:b9:e2:ed:89:
17:8d:bc:0b:c3:96:12:89:75:ae:e5:54:3c:ae:70:
aa:22:33:33:c9:23:2d:e3:35:d6:ac:39:29:c8:c9:
ac:ca:08:58:cb:f5:8c:b8:09:b1:e9:7d:59:63:59:
b4:66:86:61:66:23:cc:bd:fa:e5:e7:cf:22:c3:de:
1f:02:ae:83:95:37:8a:ba:cf:ab:73:65:87:7f:d6:
54:0c:bd:bc:21:10:df:ab:84:24:76:02:7b:68:6d:
59:ad:92:b7:04:4d:49:38:c3:75:89:2d:06:35:18:
fa:a5:ab:6e:91:d5:04:81:cb:fc:2d:ab:4c:11:a4:
43:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:24:56:2B:F7:2C:F5:F8:72:6E:F5:93:50:F0:D3:E8:A5:15:33:DC
X509v3 Authority Key Identifier:
keyid:29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:40:91:88:4a:46:91:ec:66:74:1d:0e:ac:3c:4c:d4:ab:4a:
b1:d8:a9:1a:b5:23:34:49:50:45:7f:21:38:05:c6:ba:0d:25:
94:93:54:03:09:37:09:3d:94:24:59:e0:ee:02:bf:11:33:2f:
dc:09:03:0b:81:54:d3:2e:57:64:cd:c3:cf:49:8a:8a:7a:ee:
82:18:1c:8f:1e:86:e7:ef:b7:76:28:3e:d4:90:02:72:14:18:
93:c2:b6:cf:5d:cf:85:7f:3d:6d:08:6f:5a:31:60:fc:70:55:
2a:96:f0:45:1d:26:83:eb:c8:9d:eb:01:84:0a:00:3e:e8:48:
72:d5:57:2c:44:92:91:c8:42:50:ba:35:d5:d4:96:61:2a:97:
a0:e3:18:98:90:84:c8:a3:bc:d8:7b:b9:6c:db:99:af:6d:05:
10:34:47:10:3c:1c:52:17:77:1f:ab:18:39:72:cb:fd:3c:ec:
a8:83:be:fb:66:2c:a2:38:40:39:42:9e:8a:e3:66:7e:07:4d:
90:fd:55:46:bc:62:eb:6e:93:46:1e:3e:ed:73:59:ca:a8:cf:
cf:29:2a:ab:aa:12:c3:38:f3:07:71:79:6f:ea:c5:5c:ff:b8:
22:10:39:37:30:e7:23:c8:d7:19:dd:d9:61:e0:b9:da:ff:71:
1c:b5:01:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fCyZ36GEF8ESOFR94g3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NGExY2RiNjhmMTU0Y2Y5NTQxOGEzMDhjODJkOGRhNTA3
NzUxMDkwHhcNMjUwNjI4MTcwMDU3WhcNMjUwNjI5MTcwMDU3WjAzMTEwLwYDVQQD
Eyg2ZTI0NTYyYmY3MmNmNWY4NzI2ZWY1OTM1MGYwZDNlOGE1MTUzM2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSF+LD2/LipJXjj9Q/m4i1PI7qv1
SD8/hfszd9Pg2B767477+EBPtFZGteaWvBHwhLRomRsXqlo3H5VzYCxIV1PcADya
6S9yUW26dmKFFlqd8D280UxrTovI5lmkgiXW8sjXZOpGEzQZbZARWy/1rQ4y7vzK
LtR1W3VyWXmLVTA/nLni7YkXjbwLw5YSiXWu5VQ8rnCqIjMzySMt4zXWrDkpyMms
yghYy/WMuAmx6X1ZY1m0ZoZhZiPMvfrl588iw94fAq6DlTeKus+rc2WHf9ZUDL28
IRDfq4QkdgJ7aG1ZrZK3BE1JOMN1iS0GNRj6patukdUEgcv8LatMEaRDBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4kViv3LPX4cm71k1Dw0+ilFTPcMB8GA1UdIwQY
MBaAFClKHNto8VTPlUGKMIyC2NpQd1EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wNGY0NzQtZTNiNS00NTk1LWEwNDQt
NjU3ZTQxYzYzY2E5LzEvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wNGY0NzQtZTNiNS00NTk1LWEwNDQtNjU3ZTQxYzYzY2E5
LzEvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0CRiEpG
kexmdB0OrDxM1KtKsdipGrUjNElQRX8hOAXGug0llJNUAwk3CT2UJFng7gK/ETMv
3AkDC4FU0y5XZM3Dz0mKinrughgcjx6G5++3dig+1JACchQYk8K2z13PhX89bQhv
WjFg/HBVKpbwRR0mg+vInesBhAoAPuhIctVXLESSkchCULo11dSWYSqXoOMYmJCE
yKO82Hu5bNuZr20FEDRHEDwcUhd3H6sYOXLL/TzsqIO++2YsojhAOUKeiuNmfgdN
kP1VRrxi626TRh4+7XNZyqjPzykqq6oSwzjzB3F5b+rFXP+4IhA5NzDnI8jXGd3Z
YeC52v9xHLUBmg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:41 2025 by rpki-client