Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/kdTzrA50tq60hL0U9ocdmjBCK30.mft
File: kdTzrA50tq60hL0U9ocdmjBCK30.mft (raw, json)
Hash identifier: xcUKTS0N2NbKlrOKEgRcGvm0GJeTH6CE2JENRsTEugU=
Subject key identifier: 8B:68:49:79:F0:F9:70:0A:6C:E5:4D:56:01:5A:A2:9C:A3:DD:0E:96
Authority key identifier: 91:D4:F3:AC:0E:74:B6:AE:B4:84:BD:14:F6:87:1D:9A:30:42:2B:7D
Certificate issuer: /CN=91d4f3ac0e74b6aeb484bd14f6871d9a30422b7d
Certificate serial: 0197C238196A386774F37C2AD65191726550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdTzrA50tq60hL0U9ocdmjBCK30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/kdTzrA50tq60hL0U9ocdmjBCK30.mft
Manifest number: 32
Signing time: Mon 30 Jun 2025 19:02:25 +0000
Manifest this update: Mon 30 Jun 2025 19:02:25 +0000
Manifest next update: Tue 01 Jul 2025 19:02:25 +0000
Files and hashes: 1: kdTzrA50tq60hL0U9ocdmjBCK30.crl (hash: gUPbpkmAU+46zljqPn6DrvqGD+s87qWZeXHF5piTaEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/kdTzrA50tq60hL0U9ocdmjBCK30.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/kdTzrA50tq60hL0U9ocdmjBCK30.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdTzrA50tq60hL0U9ocdmjBCK30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:38:19:6a:38:67:74:f3:7c:2a:d6:51:91:72:65:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d4f3ac0e74b6aeb484bd14f6871d9a30422b7d
Validity
Not Before: Jun 30 19:02:25 2025 GMT
Not After : Jul 1 19:02:25 2025 GMT
Subject: CN=8b684979f0f9700a6ce54d56015aa29ca3dd0e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b0:b6:52:35:e9:08:9e:73:9a:a7:63:20:b5:
f6:ee:1a:8f:5f:d8:73:5d:a1:f9:88:de:a3:c3:15:
35:b1:78:b9:77:18:4f:cd:a0:2c:18:34:2f:2f:fe:
5e:33:4d:cf:f6:6c:77:3f:ec:0b:c1:5f:cc:71:30:
6c:6d:f4:89:c2:7b:95:b9:0b:b0:1e:c9:01:64:bf:
43:3a:0c:8e:35:49:20:27:fa:7c:97:13:6b:39:5a:
f5:d5:0d:10:c1:df:b7:19:77:c3:9c:14:77:36:57:
9b:8c:18:b2:9b:f0:bd:d4:24:ab:8c:75:10:6f:f5:
37:1c:49:5b:04:d7:3e:2d:de:d8:06:92:9b:16:d0:
67:07:71:5a:2d:18:67:ab:2d:9d:32:03:48:08:d3:
d2:a0:96:29:24:8a:77:44:47:99:ec:71:5a:eb:56:
b2:b9:9b:79:07:96:3a:03:cb:26:9a:fb:1b:85:5f:
00:a4:59:a5:ab:5b:b6:57:29:a5:fb:e6:0a:7d:03:
3c:af:7e:ca:86:ab:84:0c:f2:72:34:a2:a8:84:69:
5c:2c:89:34:a9:fe:f5:d4:86:06:37:0f:87:7f:67:
e2:fb:42:e1:20:a7:ab:38:85:e0:1d:9e:78:85:02:
70:71:bb:c6:ab:1a:f2:8f:e4:09:d9:a0:da:4b:02:
c7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:68:49:79:F0:F9:70:0A:6C:E5:4D:56:01:5A:A2:9C:A3:DD:0E:96
X509v3 Authority Key Identifier:
keyid:91:D4:F3:AC:0E:74:B6:AE:B4:84:BD:14:F6:87:1D:9A:30:42:2B:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdTzrA50tq60hL0U9ocdmjBCK30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/kdTzrA50tq60hL0U9ocdmjBCK30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/kdTzrA50tq60hL0U9ocdmjBCK30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bf:24:d1:69:20:1c:2f:c3:dd:f8:ab:b1:61:42:f3:94:e3:
1f:8d:5c:36:af:07:39:93:c3:37:b3:d5:09:b7:a7:88:c0:6f:
9e:c2:7a:4c:a1:a4:7a:6d:52:1a:d0:a6:ec:f4:76:36:29:9d:
f6:3f:53:1e:de:11:e1:2a:30:da:26:44:ce:63:59:36:12:a1:
4f:a5:48:31:28:8a:aa:a4:e4:2c:2a:08:31:8e:64:c7:fd:10:
35:e9:43:c1:0f:00:fc:45:2a:04:29:71:c8:bb:27:bb:5b:01:
33:21:41:d7:11:be:4d:0c:25:3b:ac:12:4e:1b:9a:2e:07:2a:
39:0f:45:e2:5d:03:64:f8:15:16:a3:7c:88:dc:e6:8a:29:fa:
ac:22:c3:9c:a4:42:48:36:b8:5e:be:ed:a2:98:5d:41:ae:1e:
3c:70:45:18:29:3d:8e:54:64:78:66:21:4d:53:98:a1:1a:fa:
e5:e1:db:9c:71:7e:ff:11:5c:27:80:eb:bf:87:01:4f:f4:32:
33:a1:f8:4d:a2:18:bc:d8:87:35:26:cc:64:62:f2:8e:d9:85:
4d:56:34:ad:ab:d9:54:02:b1:15:72:d4:55:78:b2:e7:16:5e:
89:22:30:9c:5f:84:5e:c1:19:e8:d0:e3:de:70:e3:36:01:b4:
82:5e:2c:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfCOBlqOGd083wq1lGRcmVQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZDRmM2FjMGU3NGI2YWViNDg0YmQxNGY2ODcxZDlhMzA0
MjJiN2QwHhcNMjUwNjMwMTkwMjI1WhcNMjUwNzAxMTkwMjI1WjAzMTEwLwYDVQQD
Eyg4YjY4NDk3OWYwZjk3MDBhNmNlNTRkNTYwMTVhYTI5Y2EzZGQwZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbC2UjXpCJ5zmqdjILX27hqPX9hz
XaH5iN6jwxU1sXi5dxhPzaAsGDQvL/5eM03P9mx3P+wLwV/McTBsbfSJwnuVuQuw
HskBZL9DOgyONUkgJ/p8lxNrOVr11Q0Qwd+3GXfDnBR3NlebjBiym/C91CSrjHUQ
b/U3HElbBNc+Ld7YBpKbFtBnB3FaLRhnqy2dMgNICNPSoJYpJIp3REeZ7HFa61ay
uZt5B5Y6A8smmvsbhV8ApFmlq1u2Vyml++YKfQM8r37KhquEDPJyNKKohGlcLIk0
qf711IYGNw+Hf2fi+0LhIKerOIXgHZ54hQJwcbvGqxryj+QJ2aDaSwLHgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItoSXnw+XAKbOVNVgFaopyj3Q6WMB8GA1UdIwQY
MBaAFJHU86wOdLautIS9FPaHHZowQit9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2RUenJBNTB0cTYwaEwwVTlvY2RtakJDSzMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84ZDBjNjgtNjFhNS00YWUxLWE4MzEt
YWExMDQ3MzJmNTczLzEva2RUenJBNTB0cTYwaEwwVTlvY2RtakJDSzMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84ZDBjNjgtNjFhNS00YWUxLWE4MzEtYWExMDQ3MzJmNTcz
LzEva2RUenJBNTB0cTYwaEwwVTlvY2RtakJDSzMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQr8k0Wkg
HC/D3firsWFC85TjH41cNq8HOZPDN7PVCbeniMBvnsJ6TKGkem1SGtCm7PR2Nimd
9j9THt4R4Sow2iZEzmNZNhKhT6VIMSiKqqTkLCoIMY5kx/0QNelDwQ8A/EUqBClx
yLsnu1sBMyFB1xG+TQwlO6wSThuaLgcqOQ9F4l0DZPgVFqN8iNzmiin6rCLDnKRC
SDa4Xr7tophdQa4ePHBFGCk9jlRkeGYhTVOYoRr65eHbnHF+/xFcJ4Drv4cBT/Qy
M6H4TaIYvNiHNSbMZGLyjtmFTVY0ravZVAKxFXLUVXiy5xZeiSIwnF+EXsEZ6NDj
3nDjNgG0gl4seg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 00:27:28 2025 by rpki-client