Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
File: KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft (raw, json)
Hash identifier: /mQx5SFRMqnfUbSYgiX0iXnp//gnrSJr9QiqzA1a1Mw=
Subject key identifier: 9D:9C:5D:18:33:DB:5B:AA:51:0F:9D:EE:B1:4B:F4:62:16:42:A6:8E
Authority key identifier: 29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
Certificate issuer: /CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Certificate serial: 01984A4166BB0F70601DB131843B21EC70F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 05:00:56 +0000
Manifest this update: Sun 27 Jul 2025 05:00:56 +0000
Manifest next update: Mon 28 Jul 2025 05:00:56 +0000
Files and hashes: 1: KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl (hash: 0fu1hPXcZLjlSYTVo1IyMOAhHaOWA0aR5ZxM+jj1L+0=)
2: aI7Jkk0hKBc5FvPXNc087oh3O6I.roa (hash: NGQRZS/iBgx2LNEuUjWmKtWDne6hFeLh8g8pm9sOGIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:66:bb:0f:70:60:1d:b1:31:84:3b:21:ec:70:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Validity
Not Before: Jul 27 05:00:56 2025 GMT
Not After : Jul 28 05:00:56 2025 GMT
Subject: CN=9d9c5d1833db5baa510f9deeb14bf4621642a68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:c0:8f:24:48:69:06:3d:28:8f:dc:71:7a:
e1:ce:0a:b4:b6:02:34:93:01:ae:0a:e7:c4:7b:5e:
dd:44:13:64:a7:1c:30:2b:4f:36:cc:5a:f8:59:87:
1d:a3:93:82:8a:e9:f5:22:0f:2a:bf:bc:49:af:0c:
20:1b:da:4b:d0:2a:a6:9e:46:45:8b:3e:1f:d8:63:
01:52:ad:71:d7:48:c5:b7:47:be:8f:37:f6:a3:4d:
f9:73:96:2e:76:37:1b:af:e4:3e:40:05:35:48:de:
d2:57:dd:9d:a1:5a:78:4f:4a:66:af:a2:e2:41:ea:
47:8f:68:62:c4:9a:83:79:37:22:1b:4a:fa:5d:86:
4d:b5:2f:4a:5f:98:92:da:03:b7:42:12:55:7f:1e:
f8:f3:a6:0c:57:61:ff:e3:b6:e8:1f:a7:23:b5:6d:
3d:d5:89:1b:30:63:e2:b0:22:63:3c:94:4b:20:cc:
86:d1:85:4b:11:fd:a5:5e:5e:a3:bc:4b:0f:aa:59:
c8:91:c8:f0:4b:74:66:0c:41:45:a4:2b:f8:8e:1b:
6a:f2:39:39:81:47:4c:71:f6:2f:27:15:24:e1:98:
09:10:96:a4:b0:8b:b7:6f:dd:7b:33:c7:93:31:84:
c6:1d:a8:58:47:16:35:40:24:18:a0:8f:4a:cd:5e:
68:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9C:5D:18:33:DB:5B:AA:51:0F:9D:EE:B1:4B:F4:62:16:42:A6:8E
X509v3 Authority Key Identifier:
keyid:29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ba:76:59:1f:69:39:ef:74:25:78:73:eb:85:15:fe:64:72:
67:a2:90:7f:73:5f:82:bf:c0:82:aa:27:66:29:f5:73:fb:bf:
32:63:c4:40:4b:c9:25:72:aa:e3:fb:07:ef:ff:e1:b9:33:d5:
ba:7c:21:9d:9e:5a:47:44:8a:c3:f1:0d:36:a4:35:c9:b1:16:
05:49:94:4f:db:bd:da:0a:64:10:ec:34:77:b8:06:f9:01:1f:
3f:d9:87:aa:c8:e1:54:6a:c6:4d:c4:13:5a:5f:a3:38:9b:da:
d8:32:76:bf:02:36:6f:b1:d5:46:30:71:f3:b9:65:3c:da:69:
48:78:eb:dc:57:d1:21:a9:a3:66:d1:a7:3e:b7:d3:37:e2:50:
39:db:2a:71:66:68:b5:4b:86:8e:70:5c:81:65:d1:a1:79:08:
76:2d:35:a0:b9:a9:8c:68:33:d9:25:5c:a0:09:55:9c:e2:8c:
55:d6:bb:cd:58:cb:2d:68:2a:76:35:d3:7a:81:f4:78:2c:b1:
00:43:a6:46:85:07:99:8c:03:eb:b2:b1:1f:cc:09:28:53:62:
55:45:7a:cc:be:d8:88:5f:c2:ca:25:32:46:f6:e4:7a:56:49:
d5:da:37:bd:ae:bf:81:71:20:81:96:6a:08:5f:2f:31:27:71:
01:5d:49:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQWa7D3BgHbExhDsh7HD3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NWI2YTM0YTIxMDliYTdjNGQ5N2Y3NmM3NDQ2NmYxNGMz
MzMzZTAwHhcNMjUwNzI3MDUwMDU2WhcNMjUwNzI4MDUwMDU2WjAzMTEwLwYDVQQD
Eyg5ZDljNWQxODMzZGI1YmFhNTEwZjlkZWViMTRiZjQ2MjE2NDJhNjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfrAjyRIaQY9KI/ccXrhzgq0tgI0
kwGuCufEe17dRBNkpxwwK082zFr4WYcdo5OCiun1Ig8qv7xJrwwgG9pL0CqmnkZF
iz4f2GMBUq1x10jFt0e+jzf2o035c5Yudjcbr+Q+QAU1SN7SV92doVp4T0pmr6Li
QepHj2hixJqDeTciG0r6XYZNtS9KX5iS2gO3QhJVfx7486YMV2H/47boH6cjtW09
1YkbMGPisCJjPJRLIMyG0YVLEf2lXl6jvEsPqlnIkcjwS3RmDEFFpCv4jhtq8jk5
gUdMcfYvJxUk4ZgJEJaksIu3b917M8eTMYTGHahYRxY1QCQYoI9KzV5omQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2cXRgz21uqUQ+d7rFL9GIWQqaOMB8GA1UdIwQY
MBaAFClbajSiEJunxNl/dsdEZvFMMzPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1Z0cU5LSVFtNmZFMlg5MngwUm04VXd6TS1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lOWIxNzMtOTJiNi00MjEwLWE4ZTAt
Yjc5N2E0NDA2ZjMwLzEvS1Z0cU5LSVFtNmZFMlg5MngwUm04VXd6TS1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lOWIxNzMtOTJiNi00MjEwLWE4ZTAtYjc5N2E0NDA2ZjMw
LzEvS1Z0cU5LSVFtNmZFMlg5MngwUm04VXd6TS1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7p2WR9p
Oe90JXhz64UV/mRyZ6KQf3Nfgr/AgqonZin1c/u/MmPEQEvJJXKq4/sH7//huTPV
unwhnZ5aR0SKw/ENNqQ1ybEWBUmUT9u92gpkEOw0d7gG+QEfP9mHqsjhVGrGTcQT
Wl+jOJva2DJ2vwI2b7HVRjBx87llPNppSHjr3FfRIamjZtGnPrfTN+JQOdsqcWZo
tUuGjnBcgWXRoXkIdi01oLmpjGgz2SVcoAlVnOKMVda7zVjLLWgqdjXTeoH0eCyx
AEOmRoUHmYwD67KxH8wJKFNiVUV6zL7YiF/CyiUyRvbkelZJ1do3va6/gXEggZZq
CF8vMSdxAV1JUw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:20:33 2025 by rpki-client