Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/70669e-5744-4477-86ba-795c3a612e8b/1/KfQ0DfcXYFdICDAMsU_Bdg-uzPk.mft
File: KfQ0DfcXYFdICDAMsU_Bdg-uzPk.mft (raw, json)
Hash identifier: Gxxxy08KO7UHBka8wPwE/7cn7UeXbf5OZl2Y7qFAUoA=
Subject key identifier: 3F:4C:79:44:12:76:37:4D:2B:BF:11:85:91:B5:8C:8A:A0:84:5D:58
Authority key identifier: 29:F4:34:0D:F7:17:60:57:48:08:30:0C:B1:4F:C1:76:0F:AE:CC:F9
Certificate issuer: /CN=29f4340df71760574808300cb14fc1760faeccf9
Certificate serial: 0198496510DC7ADF927533B0107262757AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfQ0DfcXYFdICDAMsU_Bdg-uzPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/70669e-5744-4477-86ba-795c3a612e8b/1/KfQ0DfcXYFdICDAMsU_Bdg-uzPk.mft
Manifest number: B5
Signing time: Sun 27 Jul 2025 01:00:16 +0000
Manifest this update: Sun 27 Jul 2025 01:00:16 +0000
Manifest next update: Mon 28 Jul 2025 01:00:16 +0000
Files and hashes: 1: KfQ0DfcXYFdICDAMsU_Bdg-uzPk.crl (hash: Owp97dNFhmEka1o1g+qwH5QMlEADG9GHJaBk1Nd5PRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/70669e-5744-4477-86ba-795c3a612e8b/1/KfQ0DfcXYFdICDAMsU_Bdg-uzPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/70669e-5744-4477-86ba-795c3a612e8b/1/KfQ0DfcXYFdICDAMsU_Bdg-uzPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfQ0DfcXYFdICDAMsU_Bdg-uzPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:10:dc:7a:df:92:75:33:b0:10:72:62:75:7a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f4340df71760574808300cb14fc1760faeccf9
Validity
Not Before: Jul 27 01:00:16 2025 GMT
Not After : Jul 28 01:00:16 2025 GMT
Subject: CN=3f4c79441276374d2bbf118591b58c8aa0845d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:49:6a:78:ad:ea:66:ab:fa:04:2c:c2:a3:d4:
c3:79:72:60:a2:58:b2:83:85:9e:99:41:ed:a4:ee:
fc:99:e1:fe:40:41:78:19:bb:9d:e5:37:4f:f2:ea:
a5:6b:f9:ec:2a:9b:83:cd:e8:b5:6c:ff:d5:c9:0d:
39:3d:c7:68:a2:26:9b:59:10:2d:33:1c:6d:69:b4:
a3:c5:62:7d:95:03:a9:1b:ae:54:88:1a:5b:f2:22:
12:2c:5d:a2:98:71:9b:a5:da:ab:91:9d:d2:7b:87:
ed:b2:be:dd:c3:66:48:25:51:64:50:b3:15:ce:06:
7a:d7:ac:c8:2b:ec:8f:70:5b:9b:73:15:f8:b0:5a:
7d:1f:0b:8a:f8:75:91:1d:fa:15:7b:95:8b:1d:f5:
44:78:6c:29:2a:0e:c4:81:b6:3b:5d:4c:8f:44:40:
4c:4e:86:63:c2:d7:c5:bf:fb:8a:1a:17:57:6d:3c:
62:c0:b4:b0:e5:55:fa:fd:36:45:05:42:24:4c:e9:
6e:b8:c1:0e:56:d1:d2:79:e0:4d:97:bf:f8:f0:87:
7b:c1:35:19:85:4a:13:97:c6:8b:05:88:3c:62:69:
71:9c:09:18:76:bd:70:35:ae:42:47:97:2c:b7:23:
51:5e:06:bb:8a:d9:2b:29:b3:bb:2f:fe:5d:71:bf:
96:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4C:79:44:12:76:37:4D:2B:BF:11:85:91:B5:8C:8A:A0:84:5D:58
X509v3 Authority Key Identifier:
keyid:29:F4:34:0D:F7:17:60:57:48:08:30:0C:B1:4F:C1:76:0F:AE:CC:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfQ0DfcXYFdICDAMsU_Bdg-uzPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/70669e-5744-4477-86ba-795c3a612e8b/1/KfQ0DfcXYFdICDAMsU_Bdg-uzPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/70669e-5744-4477-86ba-795c3a612e8b/1/KfQ0DfcXYFdICDAMsU_Bdg-uzPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0a:d9:e5:b6:7f:54:a0:96:a4:b8:cd:c5:45:07:75:c2:0f:
ca:45:ce:e9:fb:17:03:40:b9:93:7a:a2:86:ba:9c:62:87:24:
06:be:df:39:d2:c2:10:b0:30:99:11:f5:f0:77:69:9e:e3:2e:
1e:51:63:68:69:3b:11:f9:94:1e:27:36:86:2a:ef:b7:65:d8:
c3:16:73:85:0f:f8:c1:cb:55:c4:7a:d2:cc:01:32:02:b3:d1:
0a:24:3d:7c:28:ab:a2:93:79:c4:f4:b5:7b:a3:b8:19:b9:b7:
ec:30:63:63:aa:49:ed:79:44:e0:cb:75:13:1c:28:4b:b9:c1:
de:8f:2f:87:36:f0:ad:15:00:47:5b:ea:8c:d4:bc:e8:d1:e9:
82:0b:85:b1:81:a4:ed:06:cf:a2:a8:a1:ed:39:84:5b:e5:59:
17:ed:54:0e:0a:8b:09:4e:54:21:6e:31:28:3a:30:a8:bf:1c:
22:bd:ea:9c:6f:46:eb:11:d2:af:a7:8b:fa:23:b8:26:f3:e2:
9b:76:e4:a6:96:c1:66:37:d5:45:b8:b0:54:07:31:99:dd:76:
8a:9f:f8:93:da:a4:b5:4a:85:43:de:36:cf:fa:f4:fe:da:1f:
5e:2b:ce:e2:52:4a:b7:df:93:2f:a4:d9:55:14:45:85:87:e3:
2a:02:b8:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZRDcet+SdTOwEHJidXrIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZjQzNDBkZjcxNzYwNTc0ODA4MzAwY2IxNGZjMTc2MGZh
ZWNjZjkwHhcNMjUwNzI3MDEwMDE2WhcNMjUwNzI4MDEwMDE2WjAzMTEwLwYDVQQD
EygzZjRjNzk0NDEyNzYzNzRkMmJiZjExODU5MWI1OGM4YWEwODQ1ZDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnklqeK3qZqv6BCzCo9TDeXJgoliy
g4WemUHtpO78meH+QEF4Gbud5TdP8uqla/nsKpuDzei1bP/VyQ05PcdooiabWRAt
MxxtabSjxWJ9lQOpG65UiBpb8iISLF2imHGbpdqrkZ3Se4ftsr7dw2ZIJVFkULMV
zgZ616zIK+yPcFubcxX4sFp9HwuK+HWRHfoVe5WLHfVEeGwpKg7EgbY7XUyPREBM
ToZjwtfFv/uKGhdXbTxiwLSw5VX6/TZFBUIkTOluuMEOVtHSeeBNl7/48Id7wTUZ
hUoTl8aLBYg8YmlxnAkYdr1wNa5CR5cstyNRXga7itkrKbO7L/5dcb+WewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9MeUQSdjdNK78RhZG1jIqghF1YMB8GA1UdIwQY
MBaAFCn0NA33F2BXSAgwDLFPwXYPrsz5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2ZRMERmY1hZRmRJQ0RBTXNVX0JkZy11elBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83MDY2OWUtNTc0NC00NDc3LTg2YmEt
Nzk1YzNhNjEyZThiLzEvS2ZRMERmY1hZRmRJQ0RBTXNVX0JkZy11elBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83MDY2OWUtNTc0NC00NDc3LTg2YmEtNzk1YzNhNjEyZThi
LzEvS2ZRMERmY1hZRmRJQ0RBTXNVX0JkZy11elBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwrZ5bZ/
VKCWpLjNxUUHdcIPykXO6fsXA0C5k3qihrqcYockBr7fOdLCELAwmRH18HdpnuMu
HlFjaGk7EfmUHic2hirvt2XYwxZzhQ/4wctVxHrSzAEyArPRCiQ9fCiropN5xPS1
e6O4Gbm37DBjY6pJ7XlE4Mt1ExwoS7nB3o8vhzbwrRUAR1vqjNS86NHpgguFsYGk
7QbPoqih7TmEW+VZF+1UDgqLCU5UIW4xKDowqL8cIr3qnG9G6xHSr6eL+iO4JvPi
m3bkppbBZjfVRbiwVAcxmd12ip/4k9qktUqFQ942z/r0/tofXivO4lJKt9+TL6TZ
VRRFhYfjKgK4Hg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:45:59 2025 by rpki-client