Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
File: KqttsAX47NmhIcY2hYB17xMUXbA.mft (raw, json)
Hash identifier: ImSgMc7MdldsYIwzYI0AvWceGsf7j3TQYGG1P/B39Zs=
Subject key identifier: 36:57:FF:F9:C9:DE:63:A9:0C:E6:71:2C:2C:E5:21:0C:8F:CF:E7:E0
Authority key identifier: 2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0
Certificate issuer: /CN=2aab6db005f8ecd9a121c636858075ef13145db0
Certificate serial: 0197B6A233CA307DA6F17B2C10D3D8C30BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
Manifest number: 0FB0
Signing time: Sat 28 Jun 2025 13:02:52 +0000
Manifest this update: Sat 28 Jun 2025 13:02:52 +0000
Manifest next update: Sun 29 Jun 2025 13:02:52 +0000
Files and hashes: 1: KqttsAX47NmhIcY2hYB17xMUXbA.crl (hash: JFnD+kfoBXXNB1Vot70PoKir7PmVvOMqpeyZhEDAeHI=)
2: NTwv9MrFUxU0rREuWqapE-DiajI.roa (hash: hq+d0ybPFOeu8D+rx2edFf/i0EP0Jbrx83E12M+26zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:33:ca:30:7d:a6:f1:7b:2c:10:d3:d8:c3:0b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aab6db005f8ecd9a121c636858075ef13145db0
Validity
Not Before: Jun 28 13:02:52 2025 GMT
Not After : Jun 29 13:02:52 2025 GMT
Subject: CN=3657fff9c9de63a90ce6712c2ce5210c8fcfe7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:03:e8:79:b3:90:52:72:d7:48:67:d5:7f:87:
2a:62:db:34:45:53:64:23:dd:9d:64:04:7c:e6:a1:
e7:7b:fd:07:93:b8:df:09:65:45:9a:e5:f5:8a:e0:
67:26:3f:ae:82:1c:a1:24:23:59:28:be:d6:2f:54:
a9:d4:ec:1e:c7:65:07:4e:54:bf:25:9a:2f:b9:d6:
ad:ae:79:2a:a7:46:ea:53:c8:97:7d:7d:50:5b:00:
46:7f:03:9c:1a:57:41:85:27:d6:92:99:1d:b4:2b:
68:29:b2:26:0b:5e:27:41:0b:c3:ed:cc:7e:ba:ad:
0b:76:75:0b:f0:e1:8f:d1:62:43:b1:e6:62:cc:51:
22:5a:13:41:41:1e:e4:ab:f9:e2:85:35:4b:12:b9:
89:7e:d1:6d:eb:1a:ac:1c:93:ad:45:63:de:b9:0d:
21:95:23:13:f3:3f:22:ef:24:e1:70:42:8c:1a:71:
98:b2:77:ce:8a:c1:4c:a3:a7:33:43:07:94:b2:23:
bd:27:21:33:23:5b:6f:0a:d6:3e:fb:e5:54:26:4e:
2a:35:f3:74:ed:93:36:38:ef:bc:de:d9:f1:ca:e3:
8f:44:70:63:be:cd:1f:f7:0b:8d:70:16:47:ff:e4:
f2:b8:55:57:40:d3:ca:14:2d:86:bd:7c:9a:10:ef:
b0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:57:FF:F9:C9:DE:63:A9:0C:E6:71:2C:2C:E5:21:0C:8F:CF:E7:E0
X509v3 Authority Key Identifier:
keyid:2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:5b:35:00:10:3c:32:58:e8:14:39:69:4b:d7:64:93:b3:59:
88:7b:b9:c6:e4:a0:a3:c1:1f:c1:19:19:bb:cf:90:07:7d:58:
35:b4:f6:7c:e5:ca:75:12:74:5a:a3:a3:e5:4b:a1:57:b4:ee:
c2:c4:48:30:45:45:17:79:00:10:f4:a4:57:eb:ef:0e:55:99:
df:7c:3b:d5:af:52:64:fc:86:61:02:23:ca:19:fd:4d:00:68:
2a:43:cf:af:b9:c8:0d:ae:27:d2:c2:0b:4b:77:17:75:43:ba:
63:7c:44:d5:39:e7:be:19:39:ee:2c:74:97:7e:4e:a8:6a:01:
bf:c8:08:52:c0:29:0e:f1:09:43:b0:58:10:7c:22:04:61:a8:
7a:38:e1:d5:0e:64:c9:fd:41:64:4b:d6:4e:d0:21:fc:17:38:
36:75:1d:90:b8:66:cb:08:40:78:1e:cb:7a:51:b5:79:55:c3:
cb:68:41:ab:2f:95:03:9f:7b:71:83:a5:0b:ca:3d:fc:a2:b8:
b3:29:ef:60:58:e8:a2:77:8d:6e:93:f6:34:d7:5a:88:6d:5e:
0a:73:59:52:cb:2a:0a:ff:ab:07:2b:40:1a:0e:2f:73:ee:72:
76:52:2c:ae:c1:78:61:7b:66:03:71:54:43:98:d5:e1:9f:d5:
01:5c:00:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ojPKMH2m8XssENPYwwvfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYWI2ZGIwMDVmOGVjZDlhMTIxYzYzNjg1ODA3NWVmMTMx
NDVkYjAwHhcNMjUwNjI4MTMwMjUyWhcNMjUwNjI5MTMwMjUyWjAzMTEwLwYDVQQD
EygzNjU3ZmZmOWM5ZGU2M2E5MGNlNjcxMmMyY2U1MjEwYzhmY2ZlN2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQPoebOQUnLXSGfVf4cqYts0RVNk
I92dZAR85qHne/0Hk7jfCWVFmuX1iuBnJj+ughyhJCNZKL7WL1Sp1Owex2UHTlS/
JZovudatrnkqp0bqU8iXfX1QWwBGfwOcGldBhSfWkpkdtCtoKbImC14nQQvD7cx+
uq0LdnUL8OGP0WJDseZizFEiWhNBQR7kq/nihTVLErmJftFt6xqsHJOtRWPeuQ0h
lSMT8z8i7yThcEKMGnGYsnfOisFMo6czQweUsiO9JyEzI1tvCtY+++VUJk4qNfN0
7ZM2OO+83tnxyuOPRHBjvs0f9wuNcBZH/+TyuFVXQNPKFC2GvXyaEO+wwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZX//nJ3mOpDOZxLCzlIQyPz+fgMB8GA1UdIwQY
MBaAFCqrbbAF+OzZoSHGNoWAde8TFF2wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3F0dHNBWDQ3Tm1oSWNZMmhZQjE3eE1VWGJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YzE3YmEtNWFiNC00ZjU5LWI0YmUt
YWQ2YTgxYjgyYTE3LzEvS3F0dHNBWDQ3Tm1oSWNZMmhZQjE3eE1VWGJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84YzE3YmEtNWFiNC00ZjU5LWI0YmUtYWQ2YTgxYjgyYTE3
LzEvS3F0dHNBWDQ3Tm1oSWNZMmhZQjE3eE1VWGJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApVs1ABA8
MljoFDlpS9dkk7NZiHu5xuSgo8EfwRkZu8+QB31YNbT2fOXKdRJ0WqOj5UuhV7Tu
wsRIMEVFF3kAEPSkV+vvDlWZ33w71a9SZPyGYQIjyhn9TQBoKkPPr7nIDa4n0sIL
S3cXdUO6Y3xE1Tnnvhk57ix0l35OqGoBv8gIUsApDvEJQ7BYEHwiBGGoejjh1Q5k
yf1BZEvWTtAh/Bc4NnUdkLhmywhAeB7LelG1eVXDy2hBqy+VA597cYOlC8o9/KK4
synvYFjooneNbpP2NNdaiG1eCnNZUssqCv+rBytAGg4vc+5ydlIsrsF4YXtmA3FU
Q5jV4Z/VAVwATQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:15 2025 by rpki-client