Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
File: KwUe8jBg61G_2MeXlfak2vSKOqA.mft (raw, json)
Hash identifier: Bony9eA/tmC1CKZvxwCXjjKKK1KRple57pIDQKdnoms=
Subject key identifier: BF:53:5D:62:0B:25:EE:6A:0F:C9:33:42:F3:7C:30:4D:01:56:E2:18
Authority key identifier: 2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
Certificate issuer: /CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Certificate serial: 01983C175B924AF29E0F69DE0F6B650B9EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
Manifest number: 0A2D
Signing time: Thu 24 Jul 2025 11:00:20 +0000
Manifest this update: Thu 24 Jul 2025 11:00:20 +0000
Manifest next update: Fri 25 Jul 2025 11:00:20 +0000
Files and hashes: 1: HJo0Q6u7BHPf7uGGtOh1Cm5Rgr4.roa (hash: KO4VFFsczF64WfUlIBm0orog3QT9gcqLspybHYHoxis=)
2: KwUe8jBg61G_2MeXlfak2vSKOqA.crl (hash: LoOPduzcq/EbzVf8ROLH2d6ZNHOVM9RZYmQZC6O8E4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:17:5b:92:4a:f2:9e:0f:69:de:0f:6b:65:0b:9e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Validity
Not Before: Jul 24 11:00:20 2025 GMT
Not After : Jul 25 11:00:20 2025 GMT
Subject: CN=bf535d620b25ee6a0fc93342f37c304d0156e218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7f:58:2f:8a:08:46:14:3f:cf:a4:40:99:df:
67:f3:b6:85:ea:39:41:9e:d7:19:23:2c:bb:8e:6e:
75:73:08:a5:76:0f:11:b5:03:4f:32:43:b8:61:38:
65:c5:36:8f:6e:1e:72:d7:16:e0:b2:af:08:b5:e5:
70:0a:ab:3b:4a:b6:05:ce:1b:c5:ca:d3:3d:eb:d9:
be:7c:94:36:40:6b:00:a2:b9:1d:0c:2d:9f:59:94:
64:5a:07:b5:74:a7:87:f5:0f:61:05:9c:fe:73:cc:
82:57:c6:a9:07:5d:fb:e9:12:8a:5f:27:1c:27:99:
92:df:ae:e0:21:b0:5f:c7:17:1c:5d:1f:76:ba:ad:
b3:d3:24:e4:2b:31:93:de:9b:0a:38:ca:e7:26:7e:
3e:ac:06:d1:e2:3e:9f:4c:78:f9:5a:2d:7c:fb:be:
08:d6:53:67:4a:a0:ef:4d:2b:5d:cf:8f:13:82:61:
e9:27:76:a0:12:62:0d:8e:ca:cb:ea:8d:38:52:0a:
4e:a5:1f:b0:d8:ca:0e:86:a9:08:02:e3:02:4f:18:
af:c7:58:21:c8:0f:90:b0:c6:18:98:01:da:f0:36:
aa:d7:cf:09:51:68:3e:ca:62:52:3f:fb:b8:01:7c:
ef:a2:52:69:88:a5:2e:77:b5:a7:d5:6c:18:a5:ef:
e4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:53:5D:62:0B:25:EE:6A:0F:C9:33:42:F3:7C:30:4D:01:56:E2:18
X509v3 Authority Key Identifier:
keyid:2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:83:78:fb:b4:2e:0b:32:2d:13:df:e3:23:59:cc:42:bb:9b:
18:56:a2:ab:bc:c3:39:b8:67:a7:42:f7:71:e8:32:b4:cd:88:
a0:e7:c6:dc:4a:98:d7:c7:f9:48:aa:6a:e3:84:a6:bd:95:b0:
59:24:3a:83:66:5c:b9:ae:bc:ec:9c:23:4b:af:46:99:54:be:
b2:98:75:c2:d0:2f:c5:cb:a0:70:c2:38:bb:c0:a1:39:fc:ee:
6e:d1:79:18:2b:33:ac:8c:6b:2c:f6:34:d7:e8:c7:f4:39:f1:
dc:de:19:bb:bf:76:9f:d3:13:16:de:ca:3e:08:fe:a5:9b:84:
5e:33:02:1b:76:49:27:90:66:d3:a4:55:32:34:84:c8:f7:52:
9a:bd:b0:c5:a1:ab:c2:6b:bb:e6:83:48:a3:6c:d4:71:a5:5b:
bf:51:69:3f:d0:4b:20:d9:33:9d:41:a3:4b:5c:f2:20:7f:a6:
eb:f4:7a:d6:23:64:a5:c7:05:ce:3e:4c:b5:f9:5a:8e:c7:36:
4b:5c:17:78:5c:4e:88:3c:60:d7:c8:d7:db:68:56:fe:07:cb:
27:12:b3:5a:50:82:0d:5b:cf:00:95:44:f9:e7:4f:3d:3f:3a:
36:e9:ea:4a:46:44:60:40:38:85:c6:8b:44:76:dd:3b:ec:a2:
69:e3:66:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg8F1uSSvKeD2neD2tlC57uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMDUxZWYyMzA2MGViNTFiZmQ4Yzc5Nzk1ZjZhNGRhZjQ4
YTNhYTAwHhcNMjUwNzI0MTEwMDIwWhcNMjUwNzI1MTEwMDIwWjAzMTEwLwYDVQQD
EyhiZjUzNWQ2MjBiMjVlZTZhMGZjOTMzNDJmMzdjMzA0ZDAxNTZlMjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy39YL4oIRhQ/z6RAmd9n87aF6jlB
ntcZIyy7jm51cwildg8RtQNPMkO4YThlxTaPbh5y1xbgsq8IteVwCqs7SrYFzhvF
ytM969m+fJQ2QGsAorkdDC2fWZRkWge1dKeH9Q9hBZz+c8yCV8apB1376RKKXycc
J5mS367gIbBfxxccXR92uq2z0yTkKzGT3psKOMrnJn4+rAbR4j6fTHj5Wi18+74I
1lNnSqDvTStdz48TgmHpJ3agEmINjsrL6o04UgpOpR+w2MoOhqkIAuMCTxivx1gh
yA+QsMYYmAHa8Daq188JUWg+ymJSP/u4AXzvolJpiKUud7Wn1WwYpe/kzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9TXWILJe5qD8kzQvN8ME0BVuIYMB8GA1UdIwQY
MBaAFCsFHvIwYOtRv9jHl5X2pNr0ijqgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3dVZThqQmc2MUdfMk1lWGxmYWsydlNLT3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8zODE3OWMtMjVhYi00MzY4LThjZjgt
NTdlNTkzY2Y5YTRlLzEvS3dVZThqQmc2MUdfMk1lWGxmYWsydlNLT3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8zODE3OWMtMjVhYi00MzY4LThjZjgtNTdlNTkzY2Y5YTRl
LzEvS3dVZThqQmc2MUdfMk1lWGxmYWsydlNLT3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYN4+7Qu
CzItE9/jI1nMQrubGFaiq7zDObhnp0L3cegytM2IoOfG3EqY18f5SKpq44SmvZWw
WSQ6g2Zcua687JwjS69GmVS+sph1wtAvxcugcMI4u8ChOfzubtF5GCszrIxrLPY0
1+jH9Dnx3N4Zu792n9MTFt7KPgj+pZuEXjMCG3ZJJ5Bm06RVMjSEyPdSmr2wxaGr
wmu75oNIo2zUcaVbv1FpP9BLINkznUGjS1zyIH+m6/R61iNkpccFzj5Mtflajsc2
S1wXeFxOiDxg18jX22hW/gfLJxKzWlCCDVvPAJVE+edPPT86NunqSkZEYEA4hcaL
RHbdO+yiaeNmCg==
-----END CERTIFICATE-----
Generated at Thu Jul 24 17:41:54 2025 by rpki-client