Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
File: kmhshS82--n8i-d8QJtSJqbuVNU.mft (raw, json)
Hash identifier: Ekw/w8s5uQWlYAet0AY7l5LzEwW9Tz1bGCrKKOx2Ox0=
Subject key identifier: 6A:6E:78:A9:C9:F6:E8:B6:8E:71:87:CE:80:FC:E9:BF:02:B1:81:0A
Authority key identifier: 92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5
Certificate issuer: /CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5
Certificate serial: 0197C0ED7D83C70A733D0B5BD88ACBB5B881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
Manifest number: 15BD
Signing time: Mon 30 Jun 2025 13:01:18 +0000
Manifest this update: Mon 30 Jun 2025 13:01:18 +0000
Manifest next update: Tue 01 Jul 2025 13:01:18 +0000
Files and hashes: 1: IvJ7HvT-6tCK5GKbaPNyk54ml9M.roa (hash: 7zWh/VLAgd5GsVxZJpmQ4YamOZV0jGAf5fVHM29zO30=)
2: kmhshS82--n8i-d8QJtSJqbuVNU.crl (hash: YRXX5UVyZ/iDSrvxPTwvVhhz4EtfxllaUsZ5Eih6jug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:ed:7d:83:c7:0a:73:3d:0b:5b:d8:8a:cb:b5:b8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5
Validity
Not Before: Jun 30 13:01:18 2025 GMT
Not After : Jul 1 13:01:18 2025 GMT
Subject: CN=6a6e78a9c9f6e8b68e7187ce80fce9bf02b1810a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:76:e2:58:f9:d8:37:23:28:69:5c:c4:15:8d:
12:4f:d3:e8:12:d8:19:48:ef:b0:55:d7:26:fb:ba:
84:cd:a3:ab:82:bc:ed:c1:c4:a1:35:64:f9:9d:b3:
c7:ff:ea:4f:15:bd:09:80:38:54:99:95:b4:e4:43:
e9:37:93:63:e3:4c:3e:b0:6a:bc:c7:97:d1:0c:81:
df:3f:4b:eb:7a:5f:01:ec:f7:8b:a4:60:25:cd:f7:
4e:e8:fc:6d:67:65:3e:47:16:0e:f8:df:39:7f:79:
7b:0f:28:eb:7d:b4:5c:29:91:48:0f:be:bd:4b:c8:
ce:0f:5d:55:8a:3f:ba:8b:39:76:58:05:c8:10:62:
4a:53:88:57:a1:3f:5a:fe:28:fe:65:49:e1:65:8a:
83:9a:51:5e:e5:60:e9:15:53:cd:70:ad:0b:f6:fc:
d2:57:52:25:30:b0:b8:d2:c0:66:22:a8:f2:de:6d:
74:7b:80:44:dd:3d:26:61:25:6c:2e:80:35:35:f7:
12:bf:55:6f:c1:14:f0:f9:2b:04:a6:83:98:f8:e9:
6a:a8:51:ce:bf:cc:49:1c:00:9a:bb:9d:94:0b:28:
1a:e3:be:a2:5e:11:8d:90:1f:ea:bc:c5:b1:53:1c:
e9:5a:08:e8:47:4b:ad:37:8c:74:26:84:67:ff:a7:
0c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6E:78:A9:C9:F6:E8:B6:8E:71:87:CE:80:FC:E9:BF:02:B1:81:0A
X509v3 Authority Key Identifier:
keyid:92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:dc:bc:61:4c:9d:c7:9d:90:70:04:5d:b3:5f:28:d5:ce:0b:
29:e4:53:52:df:26:89:f9:23:3b:07:5a:cd:99:47:79:e4:d3:
18:95:ca:e3:5f:05:af:62:23:32:2a:29:51:53:5b:42:0c:d7:
b8:fe:f0:36:2c:6a:80:74:6a:d9:a4:32:1e:19:c0:35:a7:cb:
3d:66:42:31:a9:93:c7:2d:67:29:96:5a:86:60:76:61:00:5e:
86:a6:0e:a2:81:66:05:62:3f:2b:d7:e1:fd:37:b7:35:44:2f:
f3:60:61:c5:bc:81:d2:06:4f:9f:e1:dd:0b:04:4c:90:86:05:
59:18:cd:1d:b3:94:5c:ee:71:6d:0a:ae:57:94:b7:63:a5:d4:
c4:c2:a8:32:97:04:51:3c:42:82:b2:bd:4e:cf:23:92:bc:bb:
42:e4:1a:b0:d6:9b:4b:60:e9:83:e4:7b:cb:2e:9a:45:2f:ec:
0d:06:93:14:01:8e:63:c7:07:60:a3:3a:7f:3d:eb:ea:0e:b6:
e9:e8:b0:4c:7d:e1:d8:13:6b:5e:cc:10:e4:24:3b:8f:4c:b3:
96:59:3f:f0:8e:8a:ff:f8:b5:7d:8e:86:44:93:61:f1:35:2b:
b4:5d:2a:61:34:af:1f:da:55:38:ec:e9:00:5a:e6:58:8b:3d:
db:e3:ea:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfA7X2DxwpzPQtb2IrLtbiBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNjg2Yzg1MmYzNmZiZTlmYzhiZTc3YzQwOWI1MjI2YTZl
ZTU0ZDUwHhcNMjUwNjMwMTMwMTE4WhcNMjUwNzAxMTMwMTE4WjAzMTEwLwYDVQQD
Eyg2YTZlNzhhOWM5ZjZlOGI2OGU3MTg3Y2U4MGZjZTliZjAyYjE4MTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXbiWPnYNyMoaVzEFY0ST9PoEtgZ
SO+wVdcm+7qEzaOrgrztwcShNWT5nbPH/+pPFb0JgDhUmZW05EPpN5Nj40w+sGq8
x5fRDIHfP0vrel8B7PeLpGAlzfdO6PxtZ2U+RxYO+N85f3l7DyjrfbRcKZFID769
S8jOD11Vij+6izl2WAXIEGJKU4hXoT9a/ij+ZUnhZYqDmlFe5WDpFVPNcK0L9vzS
V1IlMLC40sBmIqjy3m10e4BE3T0mYSVsLoA1NfcSv1VvwRTw+SsEpoOY+OlqqFHO
v8xJHACau52UCyga476iXhGNkB/qvMWxUxzpWgjoR0utN4x0JoRn/6cM+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpueKnJ9ui2jnGHzoD86b8CsYEKMB8GA1UdIwQY
MBaAFJJobIUvNvvp/IvnfECbUiam7lTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva21oc2hTODItLW44aS1kOFFKdFNKcWJ1Vk5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kNTU5YjItNGIzMy00ZjhkLTlkMjEt
YmE3MWZiZGIwMzc0LzEva21oc2hTODItLW44aS1kOFFKdFNKcWJ1Vk5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kNTU5YjItNGIzMy00ZjhkLTlkMjEtYmE3MWZiZGIwMzc0
LzEva21oc2hTODItLW44aS1kOFFKdFNKcWJ1Vk5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdy8YUyd
x52QcARds18o1c4LKeRTUt8mifkjOwdazZlHeeTTGJXK418Fr2IjMiopUVNbQgzX
uP7wNixqgHRq2aQyHhnANafLPWZCMamTxy1nKZZahmB2YQBehqYOooFmBWI/K9fh
/Te3NUQv82BhxbyB0gZPn+HdCwRMkIYFWRjNHbOUXO5xbQquV5S3Y6XUxMKoMpcE
UTxCgrK9Ts8jkry7QuQasNabS2Dpg+R7yy6aRS/sDQaTFAGOY8cHYKM6fz3r6g62
6eiwTH3h2BNrXswQ5CQ7j0yzllk/8I6K//i1fY6GRJNh8TUrtF0qYTSvH9pVOOzp
AFrmWIs92+Pq+A==
-----END CERTIFICATE-----
Generated at Mon Jun 30 19:24:24 2025 by rpki-client