Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
File: KqeI7abIDvkCuV1gOHAKXafW0Mw.mft (raw, json)
Hash identifier: bMTplPhOhZyvY1Eo6+TfPvR390RKg2NLnNbxFCvkzvU=
Subject key identifier: A2:74:04:BE:98:79:A2:51:40:58:59:15:76:57:B8:B5:25:56:BB:66
Authority key identifier: 2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
Certificate issuer: /CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Certificate serial: 01984AE5A5910FF911FB368865C0467944DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
Manifest number: 0318
Signing time: Sun 27 Jul 2025 08:00:20 +0000
Manifest this update: Sun 27 Jul 2025 08:00:20 +0000
Manifest next update: Mon 28 Jul 2025 08:00:20 +0000
Files and hashes: 1: 4F3kZ7GYIkoJqlMsPFZBwlzQSuw.roa (hash: ItB+wlPpdA+q/aEoNNR8SWZkkiYGjXwWKDPOB3X3e6A=)
2: KqeI7abIDvkCuV1gOHAKXafW0Mw.crl (hash: AxSIH3rSzEcgD6S1Fbgqpn5D9AVvsBCWG7G5xKE4F3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:a5:91:0f:f9:11:fb:36:88:65:c0:46:79:44:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Validity
Not Before: Jul 27 08:00:20 2025 GMT
Not After : Jul 28 08:00:20 2025 GMT
Subject: CN=a27404be9879a251405859157657b8b52556bb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:7e:18:4f:a4:20:66:24:76:eb:70:e7:0b:
d1:1c:6b:cc:57:49:11:0e:5b:a4:66:97:b0:0b:b5:
d7:d3:d6:40:eb:42:36:c2:df:1b:f1:2f:7a:1c:a0:
f7:d4:5b:50:aa:99:89:fb:bb:bd:05:cf:4e:43:77:
fd:1e:c7:08:47:25:94:93:97:a2:b4:e4:b7:ff:49:
83:37:d3:89:91:3e:1c:05:19:d1:ca:e0:ef:bf:5f:
7c:1e:73:50:82:df:d0:5a:7d:54:bf:82:fe:4e:3b:
0d:24:80:2f:11:00:8e:26:e2:49:b1:f3:fa:2d:91:
74:0b:a7:a1:f0:35:97:8c:76:8f:11:44:fd:9b:0f:
63:1f:55:b9:a7:49:c0:a4:93:61:eb:a8:70:de:10:
d5:6d:54:e8:a6:0b:42:9e:e0:2c:24:61:23:bc:79:
36:b0:a2:51:e5:3e:d3:7e:76:1e:bb:cf:2b:a2:ce:
76:2e:f8:2b:c2:13:ee:b2:57:16:c7:01:d0:05:36:
9f:ad:bf:8f:34:ab:27:4d:fb:1b:d2:38:91:1d:29:
c2:a9:2a:34:7b:a0:fe:73:e5:bb:2a:a8:50:ce:18:
a9:a5:06:45:b8:06:5e:b0:f5:ff:f8:7b:da:29:ca:
8e:e4:4d:62:88:06:fc:45:e1:b1:23:14:07:c5:76:
cc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:74:04:BE:98:79:A2:51:40:58:59:15:76:57:B8:B5:25:56:BB:66
X509v3 Authority Key Identifier:
keyid:2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d9:5d:fa:2d:d2:1a:f2:07:f1:c5:24:7f:79:81:96:73:2f:
7c:af:d0:50:2c:84:2f:a4:90:26:b8:ef:77:7d:5b:c7:38:5a:
cc:ab:58:d9:d7:4b:d0:1f:21:81:88:34:cb:40:b4:72:41:2a:
8f:e9:88:9d:63:70:36:be:98:75:11:08:05:34:56:10:21:c9:
4a:16:37:5a:e2:33:24:0f:69:30:53:c3:a6:99:2f:d9:9a:0a:
98:1a:50:11:a6:6c:e2:33:f6:32:d7:c7:26:ae:93:7b:61:56:
59:bf:e3:d3:d6:62:40:e7:c7:9d:9c:a1:a0:70:df:41:68:80:
f6:d2:1a:87:2a:f5:88:03:a4:d9:3b:9c:85:e7:6f:c0:44:3a:
cb:ba:f3:14:0b:0b:08:d0:73:3c:f1:c1:e4:6c:0b:d3:00:a9:
d6:2b:bd:07:fa:98:f3:68:15:ba:55:94:af:b4:e2:35:33:f1:
14:9c:6e:01:1f:9b:13:dd:20:f6:37:f1:91:3e:72:44:91:58:
ad:fd:92:68:a4:08:d8:d4:06:98:b6:4d:67:11:25:c6:6a:83:
30:6b:16:18:78:d2:b4:dd:e7:65:a8:07:24:98:fb:25:9f:7c:
bc:ff:87:a2:a6:39:e0:9f:33:36:78:63:d5:ab:21:d2:3f:ac:
56:b9:fc:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5aWRD/kR+zaIZcBGeUTeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTc4OGVkYTZjODBlZjkwMmI5NWQ2MDM4NzAwYTVkYTdk
NmQwY2MwHhcNMjUwNzI3MDgwMDIwWhcNMjUwNzI4MDgwMDIwWjAzMTEwLwYDVQQD
EyhhMjc0MDRiZTk4NzlhMjUxNDA1ODU5MTU3NjU3YjhiNTI1NTZiYjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UF+GE+kIGYkdutw5wvRHGvMV0kR
DlukZpewC7XX09ZA60I2wt8b8S96HKD31FtQqpmJ+7u9Bc9OQ3f9HscIRyWUk5ei
tOS3/0mDN9OJkT4cBRnRyuDvv198HnNQgt/QWn1Uv4L+TjsNJIAvEQCOJuJJsfP6
LZF0C6eh8DWXjHaPEUT9mw9jH1W5p0nApJNh66hw3hDVbVTopgtCnuAsJGEjvHk2
sKJR5T7TfnYeu88ros52LvgrwhPuslcWxwHQBTafrb+PNKsnTfsb0jiRHSnCqSo0
e6D+c+W7KqhQzhippQZFuAZesPX/+HvaKcqO5E1iiAb8ReGxIxQHxXbMSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJ0BL6YeaJRQFhZFXZXuLUlVrtmMB8GA1UdIwQY
MBaAFCqniO2myA75ArldYDhwCl2n1tDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FlSTdhYklEdmtDdVYxZ09IQUtYYWZXME13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hNjU3NGQtZmI2ZC00N2RiLWJhMGMt
ZjE2ZjFlZTRmODkxLzEvS3FlSTdhYklEdmtDdVYxZ09IQUtYYWZXME13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9hNjU3NGQtZmI2ZC00N2RiLWJhMGMtZjE2ZjFlZTRmODkx
LzEvS3FlSTdhYklEdmtDdVYxZ09IQUtYYWZXME13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdld+i3S
GvIH8cUkf3mBlnMvfK/QUCyEL6SQJrjvd31bxzhazKtY2ddL0B8hgYg0y0C0ckEq
j+mInWNwNr6YdREIBTRWECHJShY3WuIzJA9pMFPDppkv2ZoKmBpQEaZs4jP2MtfH
Jq6Te2FWWb/j09ZiQOfHnZyhoHDfQWiA9tIahyr1iAOk2TuchedvwEQ6y7rzFAsL
CNBzPPHB5GwL0wCp1iu9B/qY82gVulWUr7TiNTPxFJxuAR+bE90g9jfxkT5yRJFY
rf2SaKQI2NQGmLZNZxElxmqDMGsWGHjStN3nZagHJJj7JZ98vP+HoqY54J8zNnhj
1ash0j+sVrn8yQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 16:53:28 2025 by rpki-client