
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
File: KYOEG8CfH9T-PemRAWwLcSb7pS4.mft (raw, json)
Hash identifier: LbULILfO8Wgg7pklsysjJVOiT118yzXofOLY8/B+NFk=
Subject key identifier: B9:69:59:BB:27:68:00:4C:90:12:1F:B2:3F:08:24:AC:01:E5:A7:1D
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial: 0196C42705957BFDBF1C7CF69BF0DC65B3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
Manifest number: 0D60
Signing time: Mon 12 May 2025 11:00:13 +0000
Manifest this update: Mon 12 May 2025 11:00:13 +0000
Manifest next update: Tue 13 May 2025 11:00:13 +0000
Files and hashes: 1: 8L44IrkkvnWwO7YzdGP90TGDjSg.roa (hash: CEFaAsOLSJVrCdoCjPllcGxEqTE9RA4Tw9wSIQ0mmME=)
2: KYOEG8CfH9T-PemRAWwLcSb7pS4.crl (hash: w2BQoPImaaNfWhg8WpRvCEvLq1u6dgTlMT25eDS3uaI=)
3: pLFppFwWIfA_W9uCMBC8y8BR8ts.roa (hash: dbla97+OI8Jm8+2WXqrvaQmGEN37T1/jOIGIxTsBgg0=)
4: tG9g7Co1XH6U8tZyoXMC-RjzpsI.roa (hash: f5hLHvCO22cXuPn8MfVWI6zy/RfS3YcwLYdVmDvuy/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:05:95:7b:fd:bf:1c:7c:f6:9b:f0:dc:65:b3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Validity
Not Before: May 12 11:00:13 2025 GMT
Not After : May 13 11:00:13 2025 GMT
Subject: CN=b96959bb2768004c90121fb23f0824ac01e5a71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fa:89:29:0b:f6:3f:a0:9d:fe:21:4f:f2:98:
c5:06:a2:79:39:b3:e1:ea:65:98:af:03:2e:b6:41:
7e:6f:2e:5a:0f:59:9f:ef:05:19:97:e3:f2:de:a5:
c4:6f:10:f3:10:89:ac:7f:07:c3:5f:09:03:01:4e:
e1:e9:3d:3b:7e:33:cd:35:29:41:45:fc:59:05:b3:
ec:19:11:70:31:fc:b9:b1:df:22:d6:06:80:b1:3a:
a8:97:e8:a4:e9:7c:c1:36:78:c4:da:ab:a3:62:07:
99:b4:0d:0e:e9:a4:f5:bc:1e:c4:d1:66:44:d8:de:
ae:86:c5:58:c5:b8:0f:61:0f:1d:c1:b1:ce:42:66:
a9:8c:43:1a:2e:1c:b1:1b:d4:b9:96:0a:40:f4:e1:
cf:c0:76:f3:83:76:a4:34:aa:87:79:59:3d:c5:61:
b5:96:7a:5b:7e:6b:3a:df:0f:47:67:c4:07:7a:63:
6c:e4:4a:14:7a:c0:49:57:50:4e:fb:f8:68:f8:dd:
d6:49:b6:e3:dc:e1:6f:23:21:aa:96:be:84:5e:85:
37:2e:0c:c5:15:d4:aa:81:b3:0b:0d:21:a7:07:21:
0f:3a:92:f8:98:98:b4:40:00:60:64:7c:08:71:51:
84:dd:cd:27:a6:fc:ea:76:b8:e6:b7:82:3f:84:33:
d6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:69:59:BB:27:68:00:4C:90:12:1F:B2:3F:08:24:AC:01:E5:A7:1D
X509v3 Authority Key Identifier:
keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e4:88:2a:c0:b0:29:4f:35:32:c0:c0:77:a7:6e:1d:25:7f:
3e:09:1d:89:88:ac:ac:9d:41:bc:06:34:6a:ee:e1:9d:1c:3b:
05:09:41:ea:b7:8d:2b:4a:09:d3:99:e8:2d:ef:e5:c2:9f:bf:
d5:b6:c5:e8:17:51:b6:b9:5e:f4:21:17:e9:74:fa:18:1a:60:
34:30:14:ee:77:8c:cf:89:95:17:3a:d3:86:35:fc:c4:e0:45:
8d:da:cc:b1:ab:24:ed:1a:58:19:91:9c:3c:7e:4f:9b:c6:4a:
76:45:29:97:5a:44:db:02:42:fe:cc:c6:9a:52:91:48:76:45:
f5:9b:3f:e8:f4:56:cf:78:d9:83:d0:e2:a5:e5:d7:a5:14:90:
22:b4:25:cd:15:73:43:35:16:3e:7d:82:f5:61:f5:98:fb:91:
59:04:68:a1:0d:57:d8:a9:93:33:db:bb:ed:d1:11:6d:3c:a0:
51:31:01:1f:a9:99:d3:93:8b:28:bc:b8:32:b8:ab:cd:71:fc:
14:83:2c:d3:10:a1:ec:e3:f2:a5:03:9a:03:a4:98:6d:7f:17:
81:37:85:8a:c9:c8:06:43:f2:9d:e8:71:cd:56:cc:4c:13:ec:
97:65:5a:fd:ae:43:b8:27:36:77:3d:67:e0:78:64:a2:a2:2b:
58:75:53:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEJwWVe/2/HHz2m/DcZbPfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODM4NDFiYzA5ZjFmZDRmZTNkZTk5MTAxNmMwYjcxMjZm
YmE1MmUwHhcNMjUwNTEyMTEwMDEzWhcNMjUwNTEzMTEwMDEzWjAzMTEwLwYDVQQD
EyhiOTY5NTliYjI3NjgwMDRjOTAxMjFmYjIzZjA4MjRhYzAxZTVhNzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PqJKQv2P6Cd/iFP8pjFBqJ5ObPh
6mWYrwMutkF+by5aD1mf7wUZl+Py3qXEbxDzEImsfwfDXwkDAU7h6T07fjPNNSlB
RfxZBbPsGRFwMfy5sd8i1gaAsTqol+ik6XzBNnjE2qujYgeZtA0O6aT1vB7E0WZE
2N6uhsVYxbgPYQ8dwbHOQmapjEMaLhyxG9S5lgpA9OHPwHbzg3akNKqHeVk9xWG1
lnpbfms63w9HZ8QHemNs5EoUesBJV1BO+/ho+N3WSbbj3OFvIyGqlr6EXoU3LgzF
FdSqgbMLDSGnByEPOpL4mJi0QABgZHwIcVGE3c0npvzqdrjmt4I/hDPWpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlpWbsnaABMkBIfsj8IJKwB5acdMB8GA1UdIwQY
MBaAFCmDhBvAnx/U/j3pkQFsC3Em+6UuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2It
MWRkNWRhYjM2ZjlmLzEvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2ItMWRkNWRhYjM2Zjlm
LzEvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+SIKsCw
KU81MsDAd6duHSV/PgkdiYisrJ1BvAY0au7hnRw7BQlB6reNK0oJ05noLe/lwp+/
1bbF6BdRtrle9CEX6XT6GBpgNDAU7neMz4mVFzrThjX8xOBFjdrMsask7RpYGZGc
PH5Pm8ZKdkUpl1pE2wJC/szGmlKRSHZF9Zs/6PRWz3jZg9DipeXXpRSQIrQlzRVz
QzUWPn2C9WH1mPuRWQRooQ1X2KmTM9u77dERbTygUTEBH6mZ05OLKLy4MrirzXH8
FIMs0xCh7OPypQOaA6SYbX8XgTeFisnIBkPynehxzVbMTBPsl2Va/a5DuCc2dz1n
4HhkoqIrWHVTRw==
-----END CERTIFICATE-----
Generated at Mon May 12 13:54:14 2025 by rpki-client