Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
File: kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft (raw, json)
Hash identifier: MhQaqoKxBpxQ6g4o20Bab9nd+TnAvWL67r18Itx7uQI=
Subject key identifier: AF:5D:2C:8E:FB:C8:A6:71:68:7F:5E:98:0D:28:97:79:44:45:28:51
Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
Certificate issuer: /CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Certificate serial: 0198481BF6B8467E5A985EE295261633688A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
Manifest number: 04F7
Signing time: Sat 26 Jul 2025 19:00:48 +0000
Manifest this update: Sat 26 Jul 2025 19:00:48 +0000
Manifest next update: Sun 27 Jul 2025 19:00:48 +0000
Files and hashes: 1: kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl (hash: ZrlS/EcRsRpACRtXQqoB2aVcnAd4Jhk0JSnMS6AA7xY=)
2: uEevp2GUNz1b7rUD1ir2ld6ATDU.roa (hash: QtO8bxI6kXGPk5HpdZyF30S3dseJ+gcUwY5+nGoFUJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:f6:b8:46:7e:5a:98:5e:e2:95:26:16:33:68:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Validity
Not Before: Jul 26 19:00:48 2025 GMT
Not After : Jul 27 19:00:48 2025 GMT
Subject: CN=af5d2c8efbc8a671687f5e980d28977944452851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:f5:0f:9d:40:b8:24:c9:5c:6c:4f:ae:cd:
7e:24:a5:88:4f:41:31:7c:f4:b6:86:6a:9d:ad:8b:
bd:81:c7:bc:01:a5:36:57:7f:fa:ee:16:30:1f:7b:
f2:34:b9:9c:de:fe:59:02:9e:c7:e5:f9:84:b2:75:
ca:04:14:dd:b3:3f:fb:c8:f3:b1:5c:6b:fe:cb:5f:
b6:ea:ee:0b:1c:99:67:88:04:8e:9c:4f:b6:d8:03:
29:c8:4d:7b:bf:11:8e:c5:31:45:d7:b0:3d:a0:76:
b7:8a:89:c3:e5:f1:eb:86:00:86:ff:b1:25:be:bb:
cb:d4:31:8d:4f:73:ac:eb:ed:30:10:bb:8a:6b:82:
21:96:7e:dc:d0:ea:75:be:7c:8d:f7:f7:d1:73:5a:
bf:f9:67:ad:d0:35:07:c7:36:d5:2c:f6:4f:d9:3e:
07:cc:f0:04:32:f9:37:db:7d:a4:2a:81:e7:d6:43:
99:49:9d:ab:9b:cc:99:c2:bf:fd:ca:4c:9d:81:c4:
a4:c4:be:c0:cd:b6:79:4c:ae:a3:e3:6a:af:8f:3f:
04:32:6d:2e:ca:d7:8e:ff:e7:d7:56:b6:d3:e6:4e:
bc:54:3a:7a:f6:91:71:2b:ce:a9:58:bc:70:b6:03:
03:17:de:23:5b:fc:af:9a:99:de:6c:7b:b3:e4:c4:
30:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5D:2C:8E:FB:C8:A6:71:68:7F:5E:98:0D:28:97:79:44:45:28:51
X509v3 Authority Key Identifier:
keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f3:4e:2e:40:4d:e1:d3:3c:c7:f0:a9:16:0f:52:0c:50:30:
45:34:ec:d0:28:4a:37:f7:32:af:0b:b1:e7:dc:38:d2:68:ec:
03:1d:09:11:23:06:d7:d2:ba:d9:44:98:fb:d6:6d:59:bc:92:
59:b8:e2:39:22:b9:3c:7b:39:9d:8c:a4:f9:a2:d7:8a:bf:a4:
1d:e0:22:d3:1c:f7:33:0d:73:34:f1:63:31:1e:96:1b:72:dd:
a5:aa:7a:24:65:75:c9:d2:c8:aa:e6:6e:4b:5b:59:34:e6:06:
f5:b1:f8:f5:fc:b3:c8:bb:b3:3a:06:6e:ba:b8:8d:e5:82:49:
ff:2c:57:65:a0:46:56:b4:0e:3b:5a:85:b6:f2:7a:5d:bc:47:
a5:c7:4c:51:a7:c7:2a:eb:ea:de:9f:6f:20:3c:52:51:f6:75:
e1:91:ac:8b:b6:3a:68:8f:4d:db:77:d0:7f:55:b4:52:85:ea:
3f:2d:94:ca:7a:de:aa:a2:6f:1a:a2:4b:e2:84:37:c0:85:f5:
5f:1a:44:8a:c6:dd:f4:c3:40:14:2b:5b:65:e7:a6:74:4a:bc:
0c:af:1b:7a:38:f3:14:b7:7b:73:39:8b:21:63:49:68:72:95:
63:96:63:cf:b5:bc:79:03:5b:ec:fc:4d:30:0e:8e:b1:ea:1a:
71:f5:50:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIG/a4Rn5amF7ilSYWM2iKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNjU4N2E3YzQyYzI2MWZhMjU0YjBiODJlN2JjMDcxOWNj
NjQ4MTIwHhcNMjUwNzI2MTkwMDQ4WhcNMjUwNzI3MTkwMDQ4WjAzMTEwLwYDVQQD
EyhhZjVkMmM4ZWZiYzhhNjcxNjg3ZjVlOTgwZDI4OTc3OTQ0NDUyODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgr1D51AuCTJXGxPrs1+JKWIT0Ex
fPS2hmqdrYu9gce8AaU2V3/67hYwH3vyNLmc3v5ZAp7H5fmEsnXKBBTdsz/7yPOx
XGv+y1+26u4LHJlniASOnE+22AMpyE17vxGOxTFF17A9oHa3ionD5fHrhgCG/7El
vrvL1DGNT3Os6+0wELuKa4Ihln7c0Op1vnyN9/fRc1q/+Wet0DUHxzbVLPZP2T4H
zPAEMvk3232kKoHn1kOZSZ2rm8yZwr/9ykydgcSkxL7AzbZ5TK6j42qvjz8EMm0u
yteO/+fXVrbT5k68VDp69pFxK86pWLxwtgMDF94jW/yvmpnebHuz5MQwswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9dLI77yKZxaH9emA0ol3lERShRMB8GA1UdIwQY
MBaAFJJlh6fELCYfolSwuC57wHGcxkgSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iZDIwMDUtZmI3Yi00MDUyLWIzZjIt
ODhmYTNiNmViMDA2LzEva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9iZDIwMDUtZmI3Yi00MDUyLWIzZjItODhmYTNiNmViMDA2
LzEva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofNOLkBN
4dM8x/CpFg9SDFAwRTTs0ChKN/cyrwux59w40mjsAx0JESMG19K62USY+9ZtWbyS
WbjiOSK5PHs5nYyk+aLXir+kHeAi0xz3Mw1zNPFjMR6WG3Ldpap6JGV1ydLIquZu
S1tZNOYG9bH49fyzyLuzOgZuuriN5YJJ/yxXZaBGVrQOO1qFtvJ6XbxHpcdMUafH
Kuvq3p9vIDxSUfZ14ZGsi7Y6aI9N23fQf1W0UoXqPy2UynreqqJvGqJL4oQ3wIX1
XxpEisbd9MNAFCtbZeemdEq8DK8bejjzFLd7czmLIWNJaHKVY5Zjz7W8eQNb7PxN
MA6OseoacfVQ3A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:52:38 2025 by rpki-client