Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
File: KbOnF2ZaETfpncj60i4-f5jbiXM.mft (raw, json)
Hash identifier: hcYUEEyZK3c28I+edXDDLJqE5DOzhhSlupdrpP8LG4s=
Subject key identifier: 00:97:FA:91:55:D8:A8:41:67:92:EF:F3:2C:88:D7:62:A5:FA:DB:A0
Authority key identifier: 29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
Certificate issuer: /CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Certificate serial: 019827B52196B3B4F1F9F8ED603136EF9DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
Manifest number: 15F5
Signing time: Sun 20 Jul 2025 12:00:38 +0000
Manifest this update: Sun 20 Jul 2025 12:00:38 +0000
Manifest next update: Mon 21 Jul 2025 12:00:38 +0000
Files and hashes: 1: 0l-uuc0ta--zZGivAH1vRPmB_34.roa (hash: N3+ixN59bx1CAdzBVH5dBhTA7XSG6tSZGbX7+qQ9kkU=)
2: KbOnF2ZaETfpncj60i4-f5jbiXM.crl (hash: tvR1/InEsz/EYzcdooC+7/MiSemfvv3/VsfyL9CH2tU=)
3: ZjCHU3LEGq34M383f_KumGN_eB4.roa (hash: YxlGAgs8g3hAPxhoH9iP3cLnbEfE9zXQU/84spENz30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:b5:21:96:b3:b4:f1:f9:f8:ed:60:31:36:ef:9d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Validity
Not Before: Jul 20 12:00:38 2025 GMT
Not After : Jul 21 12:00:38 2025 GMT
Subject: CN=0097fa9155d8a8416792eff32c88d762a5fadba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fe:7c:fc:ac:79:ec:f4:98:54:77:2b:81:5a:
67:ea:e5:6d:52:bd:0b:99:ee:62:7c:bb:7c:0d:ea:
5e:51:2a:43:56:7e:aa:18:49:9a:ce:ba:9c:1d:76:
ae:e4:af:3f:65:90:22:33:a8:41:83:b5:40:40:e6:
28:32:13:ad:f6:a9:f2:38:9b:d4:84:b5:0c:7f:7d:
0e:b6:77:c6:00:a6:ea:c1:29:51:e2:c2:3c:ec:9c:
4a:f1:16:81:4c:be:bc:f6:99:82:77:cf:c4:96:0a:
e7:2a:b8:06:72:0a:6d:3f:a9:ba:3b:91:26:46:a5:
b9:b4:cb:6c:16:22:ce:86:5d:11:a5:6a:0c:8c:c8:
5b:f6:30:15:c1:d8:19:f3:69:5e:61:c0:0f:8e:b4:
b1:68:d8:8f:68:35:e3:64:7f:9b:8b:6a:b4:fe:22:
e5:1c:3a:7c:aa:b6:d8:b7:20:26:47:33:f8:bd:8b:
5b:2f:9b:d6:49:c9:45:1e:95:0d:75:c9:0c:6c:b5:
7f:e0:5d:93:b4:2e:3c:90:b8:9d:2e:0a:9b:3b:53:
b6:62:82:3a:fa:e2:d9:fb:55:f6:1d:7e:62:b9:8d:
d1:66:2d:b4:0d:1a:79:f8:9f:a6:65:fa:89:a7:cb:
ea:b9:60:47:58:d3:28:74:ce:b8:5d:48:cf:0e:81:
4a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:97:FA:91:55:D8:A8:41:67:92:EF:F3:2C:88:D7:62:A5:FA:DB:A0
X509v3 Authority Key Identifier:
keyid:29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ed:16:f9:c5:21:e5:0d:12:90:97:20:6d:41:7b:ad:36:50:
6f:76:fb:fc:9f:b1:3d:c9:fa:33:ab:f7:c5:f7:29:3a:e3:52:
d8:9a:54:54:19:7e:45:d4:e7:8c:e1:b2:d0:bd:42:3b:07:c6:
65:9b:38:7d:bf:ef:a6:dd:fe:66:79:89:59:72:a2:f5:9f:a6:
40:ce:50:72:3f:1e:a7:08:aa:7b:90:44:8f:2c:e7:24:08:e4:
72:91:6c:aa:f2:af:73:b8:03:71:3f:b4:05:60:71:7f:cd:f2:
93:86:49:33:7c:d2:fe:94:fb:6a:8c:ef:4e:73:d8:06:a8:d3:
71:e6:ea:03:07:d9:51:f3:7c:8f:76:56:dd:58:5f:37:a4:4e:
31:ac:6f:19:e7:da:bd:72:b5:de:e1:b4:70:1f:c0:71:2c:9e:
57:e4:69:f6:3c:4d:c7:e5:0d:22:99:c9:85:ff:d1:73:d2:3f:
59:e1:b2:81:67:28:1b:50:56:93:3c:ad:90:50:61:0a:1e:37:
19:83:2a:16:fc:9b:1d:ba:94:cb:71:c2:fd:ee:cb:49:2f:a7:
b5:2d:ee:9a:8a:d9:35:38:50:93:a0:5e:fc:c6:c9:55:42:d0:
14:50:ab:8c:d3:9c:d0:bf:79:2e:f2:62:c9:d8:68:11:c2:e8:
dc:c2:e9:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgntSGWs7Tx+fjtYDE2753cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YjNhNzE3NjY1YTExMzdlOTlkYzhmYWQyMmUzZTdmOThk
Yjg5NzMwHhcNMjUwNzIwMTIwMDM4WhcNMjUwNzIxMTIwMDM4WjAzMTEwLwYDVQQD
EygwMDk3ZmE5MTU1ZDhhODQxNjc5MmVmZjMyYzg4ZDc2MmE1ZmFkYmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP58/Kx57PSYVHcrgVpn6uVtUr0L
me5ifLt8DepeUSpDVn6qGEmazrqcHXau5K8/ZZAiM6hBg7VAQOYoMhOt9qnyOJvU
hLUMf30OtnfGAKbqwSlR4sI87JxK8RaBTL689pmCd8/ElgrnKrgGcgptP6m6O5Em
RqW5tMtsFiLOhl0RpWoMjMhb9jAVwdgZ82leYcAPjrSxaNiPaDXjZH+bi2q0/iLl
HDp8qrbYtyAmRzP4vYtbL5vWSclFHpUNdckMbLV/4F2TtC48kLidLgqbO1O2YoI6
+uLZ+1X2HX5iuY3RZi20DRp5+J+mZfqJp8vquWBHWNModM64XUjPDoFKrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACX+pFV2KhBZ5Lv8yyI12Kl+tugMB8GA1UdIwQY
MBaAFCmzpxdmWhE36Z3I+tIuPn+Y24lzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2JPbkYyWmFFVGZwbmNqNjBpNC1mNWpiaVhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hY2QyOGUtNTJhZS00YWM5LWIwMjgt
NjY5ZjdhNzYxNjMxLzEvS2JPbkYyWmFFVGZwbmNqNjBpNC1mNWpiaVhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hY2QyOGUtNTJhZS00YWM5LWIwMjgtNjY5ZjdhNzYxNjMx
LzEvS2JPbkYyWmFFVGZwbmNqNjBpNC1mNWpiaVhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQe0W+cUh
5Q0SkJcgbUF7rTZQb3b7/J+xPcn6M6v3xfcpOuNS2JpUVBl+RdTnjOGy0L1COwfG
ZZs4fb/vpt3+ZnmJWXKi9Z+mQM5Qcj8epwiqe5BEjyznJAjkcpFsqvKvc7gDcT+0
BWBxf83yk4ZJM3zS/pT7aozvTnPYBqjTcebqAwfZUfN8j3ZW3VhfN6ROMaxvGefa
vXK13uG0cB/AcSyeV+Rp9jxNx+UNIpnJhf/Rc9I/WeGygWcoG1BWkzytkFBhCh43
GYMqFvybHbqUy3HC/e7LSS+ntS3umorZNThQk6Be/MbJVULQFFCrjNOc0L95LvJi
ydhoEcLo3MLp4Q==
-----END CERTIFICATE-----
Generated at Sun Jul 20 14:58:12 2025 by rpki-client