
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
File: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft (raw, json)
Hash identifier: UuaNyMIxTlFKRfLUWQXRhymD6Lpgr/688VP6sfwPp6Y=
Subject key identifier: D5:9E:9C:70:B2:73:CC:A7:A2:6B:23:D9:25:A3:F3:FA:9E:01:7C:F5
Authority key identifier: 29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
Certificate issuer: /CN=29187f811597dd03513be42f43155bc15a3a0b3f
Certificate serial: 0197B70EB4046FFA40A53EA37A0B58B6EF65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 15:01:23 +0000
Manifest this update: Sat 28 Jun 2025 15:01:23 +0000
Manifest next update: Sun 29 Jun 2025 15:01:23 +0000
Files and hashes: 1: 1-u5MAxIx2a76GWU9BSY3kkXJY7s.roa (hash: opAgG+CnSobBzmEROSJ8hMqy2rOkfcnuYJpvFL5TYq0=)
2: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl (hash: dvfP9QYrIp+pS5aRTwcmuyTs+aSyDI4xGjTP0/8JVJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b4:04:6f:fa:40:a5:3e:a3:7a:0b:58:b6:ef:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29187f811597dd03513be42f43155bc15a3a0b3f
Validity
Not Before: Jun 28 15:01:23 2025 GMT
Not After : Jun 29 15:01:23 2025 GMT
Subject: CN=d59e9c70b273cca7a26b23d925a3f3fa9e017cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3d:fb:4b:61:c8:80:e4:52:86:2c:c1:62:d9:
fc:8a:69:41:db:94:3e:c0:65:b8:74:1c:e6:b8:95:
fd:be:db:f6:a7:19:a4:f6:5d:bb:59:c2:ab:d2:47:
7c:be:2f:2d:6e:ae:21:b2:23:1a:3d:54:90:5d:1b:
20:04:db:e7:20:a8:fb:63:ad:32:ed:74:5f:55:0e:
b4:6f:eb:72:16:1b:94:f3:33:05:c4:46:1d:00:5e:
7b:bf:f3:13:a1:15:28:15:a4:ab:68:82:de:06:fa:
e0:cb:87:0e:e6:9d:e0:dc:44:ee:c4:bd:69:97:4e:
b8:a9:0e:12:13:5f:fe:79:54:73:39:bc:b7:a6:94:
5c:b8:07:00:2a:02:2c:0a:d3:ce:31:e4:94:33:2d:
8c:a8:99:21:d2:66:fa:95:53:1c:35:4a:50:76:80:
eb:b6:9c:3f:85:fd:ef:d0:6d:00:b6:bc:d9:e2:de:
36:c0:1e:30:3c:43:f3:6e:f0:b3:85:06:14:75:c8:
34:ee:9a:b6:93:f6:4b:6a:e5:07:3f:8b:ac:2b:8a:
10:ec:cf:74:52:7b:b6:14:88:c7:3a:03:3d:44:a7:
db:02:87:08:be:a9:6d:84:5d:14:d8:fe:ea:2a:50:
bc:2b:7a:45:b1:09:46:71:02:60:43:49:3b:5a:ef:
92:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9E:9C:70:B2:73:CC:A7:A2:6B:23:D9:25:A3:F3:FA:9E:01:7C:F5
X509v3 Authority Key Identifier:
keyid:29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c9:28:09:de:bd:a3:a8:51:61:ac:97:b0:06:06:09:2f:8d:
d1:a1:a4:52:f0:2e:bd:33:75:85:af:a5:a4:bc:1a:85:bf:31:
f7:cf:62:e4:44:6b:9f:77:66:bb:38:6b:fc:69:38:58:66:c8:
08:c8:bb:c8:ab:f0:eb:37:c1:2b:87:1b:51:a6:6d:8d:2f:fa:
85:ae:af:27:b1:01:42:f6:ef:5f:ba:1b:85:35:0d:d9:ac:3d:
d5:54:f1:fc:b3:15:57:9c:61:7a:f0:4c:f1:bd:d5:7c:f5:d2:
78:6c:ff:96:21:83:3e:f9:48:9e:fe:a9:42:6c:6d:49:67:cf:
f8:c6:a3:26:d7:63:6c:cc:ed:c2:7d:01:0e:d0:5f:81:b4:0a:
37:f7:82:41:9d:19:ac:28:6c:b0:35:74:eb:6f:62:29:18:21:
fc:18:f2:3f:0a:a0:db:91:71:8a:f1:42:31:67:d3:35:b4:ba:
87:c1:d0:cd:de:ff:68:08:8c:c0:a4:56:7d:a1:fe:aa:2b:97:
ab:86:f9:33:78:81:a2:43:58:af:b2:64:fb:cc:58:84:65:31:
b5:f6:16:bf:53:14:29:55:47:77:12:87:dd:76:01:02:ef:3c:
6b:46:77:3e:69:4e:4a:4a:cd:aa:bc:f3:bb:de:1b:71:de:b9:
4a:11:db:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DrQEb/pApT6jegtYtu9lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MTg3ZjgxMTU5N2RkMDM1MTNiZTQyZjQzMTU1YmMxNWEz
YTBiM2YwHhcNMjUwNjI4MTUwMTIzWhcNMjUwNjI5MTUwMTIzWjAzMTEwLwYDVQQD
EyhkNTllOWM3MGIyNzNjY2E3YTI2YjIzZDkyNWEzZjNmYTllMDE3Y2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3z37S2HIgORShizBYtn8imlB25Q+
wGW4dBzmuJX9vtv2pxmk9l27WcKr0kd8vi8tbq4hsiMaPVSQXRsgBNvnIKj7Y60y
7XRfVQ60b+tyFhuU8zMFxEYdAF57v/MToRUoFaSraILeBvrgy4cO5p3g3ETuxL1p
l064qQ4SE1/+eVRzOby3ppRcuAcAKgIsCtPOMeSUMy2MqJkh0mb6lVMcNUpQdoDr
tpw/hf3v0G0AtrzZ4t42wB4wPEPzbvCzhQYUdcg07pq2k/ZLauUHP4usK4oQ7M90
Unu2FIjHOgM9RKfbAocIvqlthF0U2P7qKlC8K3pFsQlGcQJgQ0k7Wu+SPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWenHCyc8ynomsj2SWj8/qeAXz1MB8GA1UdIwQY
MBaAFCkYf4EVl90DUTvkL0MVW8FaOgs/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1JoX2dSV1gzUU5STy1RdlF4VmJ3Vm82Q3o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84YzAwNmQtNTBmNS00NDVkLWI3ZTgt
MjQ5OTRiMDQwZjQxLzEvS1JoX2dSV1gzUU5STy1RdlF4VmJ3Vm82Q3o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC84YzAwNmQtNTBmNS00NDVkLWI3ZTgtMjQ5OTRiMDQwZjQx
LzEvS1JoX2dSV1gzUU5STy1RdlF4VmJ3Vm82Q3o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUckoCd69
o6hRYayXsAYGCS+N0aGkUvAuvTN1ha+lpLwahb8x989i5ERrn3dmuzhr/Gk4WGbI
CMi7yKvw6zfBK4cbUaZtjS/6ha6vJ7EBQvbvX7obhTUN2aw91VTx/LMVV5xhevBM
8b3VfPXSeGz/liGDPvlInv6pQmxtSWfP+MajJtdjbMztwn0BDtBfgbQKN/eCQZ0Z
rChssDV0629iKRgh/BjyPwqg25FxivFCMWfTNbS6h8HQzd7/aAiMwKRWfaH+qiuX
q4b5M3iBokNYr7Jk+8xYhGUxtfYWv1MUKVVHdxKH3XYBAu88a0Z3PmlOSkrNqrzz
u94bcd65ShHbOw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:36 2025 by rpki-client