Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
File: Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft (raw, json)
Hash identifier: 7YtTZn73MR3Gbn+NW6v3i1pmXoZJunj6TJ/iIZrFk+0=
Subject key identifier: 7C:89:16:46:5D:D7:C9:FF:02:67:4B:8B:02:C2:3C:71:3D:66:F5:BE
Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
Certificate issuer: /CN=2a7df35d41b4062c10fc118189de47da27096db8
Certificate serial: 0197BAB3F9C7CC772F85498D9B65A03E1DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
Manifest number: 069C
Signing time: Sun 29 Jun 2025 08:00:46 +0000
Manifest this update: Sun 29 Jun 2025 08:00:46 +0000
Manifest next update: Mon 30 Jun 2025 08:00:46 +0000
Files and hashes: 1: Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl (hash: whv3Ve52nPrLobPzXIgnXtMEnYqLExJVxogqL3PDmwc=)
2: Wky7GIO48q5Am7lt9_maGgpqgJU.roa (hash: zVs1sI4WsKaD65jBAnhtkrYGwGsMw1WHVF/3i95RTn0=)
3: fEeq-E1sxHOFQUJWiqwG8VrB7mI.roa (hash: /r8rCHZ/j6Q+/dPG2IPSlLzNTFQayT8a7Qiqlbqm++I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b3:f9:c7:cc:77:2f:85:49:8d:9b:65:a0:3e:1d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8
Validity
Not Before: Jun 29 08:00:46 2025 GMT
Not After : Jun 30 08:00:46 2025 GMT
Subject: CN=7c8916465dd7c9ff02674b8b02c23c713d66f5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:f9:c9:54:96:bf:64:85:49:e3:83:59:99:
94:d2:cf:d0:49:2f:e3:01:b5:e7:7c:4d:64:81:b5:
0d:7a:f3:b7:3d:79:01:ef:f7:d1:4f:31:ce:52:af:
6f:4a:ea:bd:5b:36:0f:0f:57:e3:4e:4e:20:25:89:
a5:84:ef:1b:8c:24:c5:98:bc:19:0c:bd:fc:e7:dc:
e5:41:37:13:ef:e2:9f:0e:aa:27:bc:4f:fc:42:bf:
04:5b:c6:50:49:83:52:cb:97:41:60:7f:58:fa:01:
00:05:5c:8b:81:a6:c1:2c:1b:5c:69:fc:ca:96:9a:
01:c7:99:af:0f:ab:bf:e0:41:ca:18:d7:ca:0b:e1:
3d:c9:21:01:20:f7:17:a0:f1:25:e9:4d:a6:af:6d:
30:bc:ff:0c:f7:c3:1b:4b:0e:47:49:8a:04:50:bc:
ac:96:01:29:d0:e5:44:22:f1:0d:20:01:a5:ea:0a:
92:51:95:d8:ca:16:94:24:6b:00:a6:77:58:fe:01:
ba:f5:4a:5b:cb:bc:1d:ec:ce:54:96:4b:8b:e2:0c:
4f:55:9f:1b:9b:f0:97:f1:22:a7:40:29:06:60:33:
a1:bf:4b:a6:fb:0d:d3:1b:e6:e9:33:08:9d:1d:ba:
66:50:66:53:d7:6e:9a:1c:43:44:1f:4f:fb:14:33:
a7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:89:16:46:5D:D7:C9:FF:02:67:4B:8B:02:C2:3C:71:3D:66:F5:BE
X509v3 Authority Key Identifier:
keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1b:1b:4f:f4:39:0e:29:5c:67:70:43:1f:a0:a1:6f:0c:0d:
b8:1f:85:89:13:b7:f3:57:66:99:4f:2c:2a:fb:be:6c:09:4d:
94:ca:f8:36:6c:5d:60:63:14:e5:4b:69:bf:ad:ef:55:ad:9c:
92:f3:6a:8f:d1:f5:52:98:36:a1:ac:23:0f:38:56:f2:e7:c2:
e7:7a:06:36:46:6b:4f:4c:ff:cd:06:c5:2a:f4:5d:fa:47:a5:
4a:63:6c:fe:f5:72:cc:f3:73:db:3e:7b:ec:d2:3d:68:42:fd:
a7:b1:c4:d3:28:cc:46:68:df:bf:7e:43:a8:a1:97:3f:ea:be:
17:e5:33:ff:28:0d:47:29:7e:90:e6:2a:a3:82:8c:49:51:43:
75:f5:2d:f0:55:59:58:81:91:80:4d:43:2e:94:f4:c4:a8:23:
f4:6a:fc:a7:d7:7f:0c:8f:b8:25:52:b0:cb:a0:3e:11:c4:54:
0a:1e:cb:b6:06:dd:37:21:b6:28:75:e2:65:f8:c7:89:eb:e0:
de:c9:14:34:a2:79:39:95:60:a4:3a:5c:80:84:ac:d3:52:45:
9e:0d:88:4d:98:a6:5b:7a:02:85:56:2e:54:d9:c3:22:d4:45:
5c:a7:d4:5a:71:9a:28:ea:74:23:70:87:3d:ed:39:30:9a:f9:
d6:b9:ba:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6s/nHzHcvhUmNm2WgPh3YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhN2RmMzVkNDFiNDA2MmMxMGZjMTE4MTg5ZGU0N2RhMjcw
OTZkYjgwHhcNMjUwNjI5MDgwMDQ2WhcNMjUwNjMwMDgwMDQ2WjAzMTEwLwYDVQQD
Eyg3Yzg5MTY0NjVkZDdjOWZmMDI2NzRiOGIwMmMyM2M3MTNkNjZmNWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNP5yVSWv2SFSeODWZmU0s/QSS/j
AbXnfE1kgbUNevO3PXkB7/fRTzHOUq9vSuq9WzYPD1fjTk4gJYmlhO8bjCTFmLwZ
DL3859zlQTcT7+KfDqonvE/8Qr8EW8ZQSYNSy5dBYH9Y+gEABVyLgabBLBtcafzK
lpoBx5mvD6u/4EHKGNfKC+E9ySEBIPcXoPEl6U2mr20wvP8M98MbSw5HSYoEULys
lgEp0OVEIvENIAGl6gqSUZXYyhaUJGsApndY/gG69Upby7wd7M5UlkuL4gxPVZ8b
m/CX8SKnQCkGYDOhv0um+w3TG+bpMwidHbpmUGZT126aHENEH0/7FDOnRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyJFkZd18n/AmdLiwLCPHE9ZvW+MB8GA1UdIwQY
MBaAFCp9811BtAYsEPwRgYneR9onCW24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS24zelhVRzBCaXdRX0JHQmlkNUgyaWNKYmJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lZDMzNGMtZDc5Ny00MjVhLTkzYTEt
YTljYzg5ZDQ0YjI1LzEvS24zelhVRzBCaXdRX0JHQmlkNUgyaWNKYmJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9lZDMzNGMtZDc5Ny00MjVhLTkzYTEtYTljYzg5ZDQ0YjI1
LzEvS24zelhVRzBCaXdRX0JHQmlkNUgyaWNKYmJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApRsbT/Q5
DilcZ3BDH6ChbwwNuB+FiRO381dmmU8sKvu+bAlNlMr4NmxdYGMU5Utpv63vVa2c
kvNqj9H1Upg2oawjDzhW8ufC53oGNkZrT0z/zQbFKvRd+kelSmNs/vVyzPNz2z57
7NI9aEL9p7HE0yjMRmjfv35DqKGXP+q+F+Uz/ygNRyl+kOYqo4KMSVFDdfUt8FVZ
WIGRgE1DLpT0xKgj9Gr8p9d/DI+4JVKwy6A+EcRUCh7LtgbdNyG2KHXiZfjHievg
3skUNKJ5OZVgpDpcgISs01JFng2ITZimW3oChVYuVNnDItRFXKfUWnGaKOp0I3CH
Pe05MJr51rm6iA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:25:12 2025 by rpki-client