Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
File: kw4KO7COSsZzY-MLqDsHFjLQqkM.mft (raw, json)
Hash identifier: Kv2A9CbHgqGmpAzIsbXKAHYFXpkUkR7iozDONbWo4jk=
Subject key identifier: A8:B3:7A:98:8A:7A:E7:66:7F:E0:E3:44:35:53:66:70:82:C1:3E:7F
Authority key identifier: 93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
Certificate issuer: /CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Certificate serial: 019845BF363BAB8FB1B72A984918CFC2F1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
Manifest number: 0307
Signing time: Sat 26 Jul 2025 08:00:15 +0000
Manifest this update: Sat 26 Jul 2025 08:00:15 +0000
Manifest next update: Sun 27 Jul 2025 08:00:15 +0000
Files and hashes: 1: kw4KO7COSsZzY-MLqDsHFjLQqkM.crl (hash: am/DugPgEfymHEttkJED8RAayPQEexEvtwJ6K4TJqYk=)
2: xaq4DEF6a2KbAw0s5ehiRgdBeuQ.roa (hash: NrVb13nbYMUhAilB4rQP3yYP82eHLTMIedBxEXPs6iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:36:3b:ab:8f:b1:b7:2a:98:49:18:cf:c2:f1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Validity
Not Before: Jul 26 08:00:15 2025 GMT
Not After : Jul 27 08:00:15 2025 GMT
Subject: CN=a8b37a988a7ae7667fe0e3443553667082c13e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:be:16:47:6c:b5:8c:08:02:26:9f:6f:41:d0:
97:e4:fd:0c:07:cd:ff:97:64:14:d8:81:f9:e2:d5:
07:f4:12:c0:ff:5a:e9:59:38:7b:e6:97:5e:7d:7f:
16:4c:b9:fb:23:67:9f:a6:fa:dd:aa:48:3a:e8:a8:
a8:b2:1c:98:e8:d3:08:4c:85:03:40:3c:32:47:dd:
86:d2:b4:43:4b:de:88:d7:9f:04:73:4f:0a:31:63:
29:3e:e6:d0:1a:b2:fd:6e:b5:1e:2b:3e:56:3f:7a:
0c:69:44:e4:1f:de:c5:db:49:44:0c:c6:d8:b9:f3:
16:ac:63:9a:dd:da:58:19:ed:68:05:9b:6e:af:fc:
12:92:fc:37:ea:f1:55:15:3e:5f:c1:ee:30:7e:6a:
50:9e:06:6b:ea:e2:27:d8:c9:aa:f5:44:b2:50:01:
cc:87:ce:be:58:4b:cb:de:33:e8:dd:f5:f1:10:d7:
a8:bb:ae:7d:8b:00:65:72:8a:88:b3:6f:18:d5:9b:
c5:cd:e5:77:45:08:2f:f3:ed:1e:7f:7b:7d:65:a8:
63:d4:24:04:ac:a5:37:0b:80:6a:02:aa:05:6a:bf:
b1:55:f4:42:92:0e:78:eb:46:57:5a:15:84:1b:b9:
cb:24:4a:47:5f:92:96:eb:56:5d:49:f7:87:3b:ba:
90:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B3:7A:98:8A:7A:E7:66:7F:E0:E3:44:35:53:66:70:82:C1:3E:7F
X509v3 Authority Key Identifier:
keyid:93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9b:f8:ed:82:ed:9b:80:3f:d7:e0:61:93:dd:cf:c9:dc:ff:
74:8e:e3:0c:40:58:82:00:41:55:16:1a:00:7f:48:10:38:f8:
93:b2:3f:2d:06:73:10:4b:5a:42:f2:d2:18:c6:79:7b:11:8d:
f9:e8:ab:7f:5f:5c:7a:84:1c:c4:ad:7d:b8:29:ed:2b:a7:01:
4f:1e:88:9c:ba:6d:52:5a:07:93:1a:e6:9c:7d:ab:f1:25:ad:
f5:4e:25:b6:a7:86:30:86:0a:d3:39:80:59:1e:eb:21:e9:4f:
4e:5f:3b:74:d8:1d:f6:34:e0:47:8c:d8:2d:8b:69:b1:26:55:
3c:2c:50:7d:ed:46:6f:50:7b:83:b1:d7:59:6f:f1:74:2e:05:
3c:a5:ce:67:c6:31:d1:8f:e5:a4:59:12:c6:3f:72:8c:fb:1b:
15:2d:65:11:e9:29:06:3a:76:90:b0:41:5c:9f:59:a2:84:f6:
fa:39:46:47:c1:f5:6d:21:b2:cf:85:5e:44:76:ac:5d:14:87:
a4:ae:37:39:97:5e:e3:f2:5e:7b:80:b9:dc:65:75:2b:e8:05:
b0:e3:24:dc:b8:69:30:74:6b:00:ed:b9:3b:2a:45:2f:67:97:
40:78:95:d5:40:0d:8d:1c:5f:d7:d3:f6:7e:c1:d1:a4:b8:4d:
b4:a1:58:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFvzY7q4+xtyqYSRjPwvHxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMGUwYTNiYjA4ZTRhYzY3MzYzZTMwYmE4M2IwNzE2MzJk
MGFhNDMwHhcNMjUwNzI2MDgwMDE1WhcNMjUwNzI3MDgwMDE1WjAzMTEwLwYDVQQD
EyhhOGIzN2E5ODhhN2FlNzY2N2ZlMGUzNDQzNTUzNjY3MDgyYzEzZTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb4WR2y1jAgCJp9vQdCX5P0MB83/
l2QU2IH54tUH9BLA/1rpWTh75pdefX8WTLn7I2efpvrdqkg66KioshyY6NMITIUD
QDwyR92G0rRDS96I158Ec08KMWMpPubQGrL9brUeKz5WP3oMaUTkH97F20lEDMbY
ufMWrGOa3dpYGe1oBZtur/wSkvw36vFVFT5fwe4wfmpQngZr6uIn2Mmq9USyUAHM
h86+WEvL3jPo3fXxENeou659iwBlcoqIs28Y1ZvFzeV3RQgv8+0ef3t9Zahj1CQE
rKU3C4BqAqoFar+xVfRCkg5460ZXWhWEG7nLJEpHX5KW61ZdSfeHO7qQOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKizepiKeudmf+DjRDVTZnCCwT5/MB8GA1UdIwQY
MBaAFJMOCjuwjkrGc2PjC6g7BxYy0KpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3c0S083Q09Tc1p6WS1NTHFEc0hGakxRcWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81OTUwYzktOTdlYy00MGRjLTliMTEt
MDI5NWExYzExZmViLzEva3c0S083Q09Tc1p6WS1NTHFEc0hGakxRcWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81OTUwYzktOTdlYy00MGRjLTliMTEtMDI5NWExYzExZmVi
LzEva3c0S083Q09Tc1p6WS1NTHFEc0hGakxRcWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJv47YLt
m4A/1+Bhk93Pydz/dI7jDEBYggBBVRYaAH9IEDj4k7I/LQZzEEtaQvLSGMZ5exGN
+eirf19ceoQcxK19uCntK6cBTx6InLptUloHkxrmnH2r8SWt9U4ltqeGMIYK0zmA
WR7rIelPTl87dNgd9jTgR4zYLYtpsSZVPCxQfe1Gb1B7g7HXWW/xdC4FPKXOZ8Yx
0Y/lpFkSxj9yjPsbFS1lEekpBjp2kLBBXJ9ZooT2+jlGR8H1bSGyz4VeRHasXRSH
pK43OZde4/Jee4C53GV1K+gFsOMk3LhpMHRrAO25OypFL2eXQHiV1UANjRxf19P2
fsHRpLhNtKFY+A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:18:49 2025 by rpki-client