Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
File: KEo1xF93T6_4QkXOEkvcZVx0Uos.mft (raw, json)
Hash identifier: ++1VhgPDj/SvvSbTbOy2i+P5kwwW1yKD8yFgWR30d+o=
Subject key identifier: 60:3A:FE:CF:84:2B:4A:A0:0B:08:80:1F:61:11:6E:31:35:72:95:EA
Authority key identifier: 28:4A:35:C4:5F:77:4F:AF:F8:42:45:CE:12:4B:DC:65:5C:74:52:8B
Certificate issuer: /CN=284a35c45f774faff84245ce124bdc655c74528b
Certificate serial: 019849D2D03AB1DCA38B729DE2B9C867C356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEo1xF93T6_4QkXOEkvcZVx0Uos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
Manifest number: 06D2
Signing time: Sun 27 Jul 2025 03:00:09 +0000
Manifest this update: Sun 27 Jul 2025 03:00:09 +0000
Manifest next update: Mon 28 Jul 2025 03:00:09 +0000
Files and hashes: 1: KEo1xF93T6_4QkXOEkvcZVx0Uos.crl (hash: AGJirKMd94YedWqI3aJWcbQM/93PNNimi/YnjmaUUr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEo1xF93T6_4QkXOEkvcZVx0Uos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:d0:3a:b1:dc:a3:8b:72:9d:e2:b9:c8:67:c3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284a35c45f774faff84245ce124bdc655c74528b
Validity
Not Before: Jul 27 03:00:09 2025 GMT
Not After : Jul 28 03:00:09 2025 GMT
Subject: CN=603afecf842b4aa00b08801f61116e31357295ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b3:fa:30:28:b6:cb:5a:1a:88:a7:96:85:5e:
9a:99:f6:cd:04:22:eb:7c:5e:f6:6d:75:ea:cd:a1:
c7:f7:b0:51:65:3c:2d:d0:4a:67:20:bd:26:4e:f7:
2b:a2:01:00:78:ef:c2:17:9d:85:9d:62:7f:dc:eb:
51:bd:93:78:2b:5d:2e:55:a5:86:7b:46:85:c7:36:
37:ee:20:29:13:6f:ef:19:fe:52:5e:3f:9f:55:1f:
ad:22:25:3e:73:4a:37:9c:6e:f4:f8:5a:99:3d:db:
87:6b:7d:a4:b9:79:48:2a:28:f3:b7:22:65:e1:d3:
05:2a:c2:24:14:d9:52:17:f7:7f:a8:ca:a0:e2:2b:
88:b4:7a:87:d9:2e:62:46:2d:df:9e:5e:cc:81:20:
6c:bf:b3:7a:b1:0a:74:bc:ae:7a:25:84:36:d9:33:
0f:d5:e2:60:38:64:17:4f:ee:d4:bb:9d:da:8c:09:
e6:b4:e5:ca:d6:1d:4e:08:f4:0b:f3:f4:9f:3c:ec:
33:7c:f5:92:37:21:7b:97:b2:50:04:9a:d1:5c:9e:
fb:33:1a:29:a2:3d:0a:54:c0:c6:82:58:62:0f:5f:
7d:40:52:75:b8:c7:33:bf:eb:c4:82:f6:f3:52:c9:
e8:dc:39:f0:0d:f0:eb:30:38:2d:b9:10:a7:fd:d5:
d5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3A:FE:CF:84:2B:4A:A0:0B:08:80:1F:61:11:6E:31:35:72:95:EA
X509v3 Authority Key Identifier:
keyid:28:4A:35:C4:5F:77:4F:AF:F8:42:45:CE:12:4B:DC:65:5C:74:52:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEo1xF93T6_4QkXOEkvcZVx0Uos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:69:81:53:e9:a4:fa:76:4c:d5:48:27:7a:49:67:a6:e8:e7:
7d:4f:46:99:07:d8:d9:d6:c4:ae:3b:52:2e:64:f9:66:bd:db:
a5:dd:05:29:cd:40:1d:15:21:96:98:b6:b3:67:72:09:80:af:
be:61:6e:b7:93:42:29:d9:75:81:86:69:50:3a:84:82:72:3b:
0f:00:14:a2:da:a8:d4:55:e0:be:d8:a7:7a:e2:df:d5:12:ae:
19:ad:17:ec:9c:10:5f:c2:3c:78:77:2d:f2:74:35:96:37:36:
37:d2:86:12:d7:7d:10:b5:1d:16:63:11:f9:a7:f2:ce:de:f2:
e7:88:b2:1e:f6:50:f8:26:88:d3:53:6a:84:83:0b:4a:f3:4a:
66:35:cb:ce:d2:ee:04:e6:2f:e2:a3:ed:04:d8:cc:c0:f6:23:
cd:4b:a2:64:59:f8:b5:43:67:ae:b3:86:92:92:70:6b:ce:e7:
73:33:c9:c1:a4:87:4d:29:ac:6b:17:ca:31:31:e5:34:4f:01:
26:77:2b:87:72:6c:09:38:18:04:ca:5a:1f:89:c3:7e:53:e8:
e6:c1:3f:2b:54:fe:4d:77:23:ce:4d:b4:62:07:9c:21:26:2c:
f0:9f:90:c4:71:9d:4f:c2:d3:93:ce:65:94:0a:96:2d:6f:cf:
46:f0:73:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0tA6sdyji3Kd4rnIZ8NWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NGEzNWM0NWY3NzRmYWZmODQyNDVjZTEyNGJkYzY1NWM3
NDUyOGIwHhcNMjUwNzI3MDMwMDA5WhcNMjUwNzI4MDMwMDA5WjAzMTEwLwYDVQQD
Eyg2MDNhZmVjZjg0MmI0YWEwMGIwODgwMWY2MTExNmUzMTM1NzI5NWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrP6MCi2y1oaiKeWhV6amfbNBCLr
fF72bXXqzaHH97BRZTwt0EpnIL0mTvcrogEAeO/CF52FnWJ/3OtRvZN4K10uVaWG
e0aFxzY37iApE2/vGf5SXj+fVR+tIiU+c0o3nG70+FqZPduHa32kuXlIKijztyJl
4dMFKsIkFNlSF/d/qMqg4iuItHqH2S5iRi3fnl7MgSBsv7N6sQp0vK56JYQ22TMP
1eJgOGQXT+7Uu53ajAnmtOXK1h1OCPQL8/SfPOwzfPWSNyF7l7JQBJrRXJ77Mxop
oj0KVMDGglhiD199QFJ1uMczv+vEgvbzUsno3DnwDfDrMDgtuRCn/dXVmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGA6/s+EK0qgCwiAH2ERbjE1cpXqMB8GA1UdIwQY
MBaAFChKNcRfd0+v+EJFzhJL3GVcdFKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0VvMXhGOTNUNl80UWtYT0VrdmNaVngwVW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85MjAzMDEtNWNhZS00ZGExLWEzYzIt
YWYwMGQ3MWQzNDA3LzEvS0VvMXhGOTNUNl80UWtYT0VrdmNaVngwVW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy85MjAzMDEtNWNhZS00ZGExLWEzYzItYWYwMGQ3MWQzNDA3
LzEvS0VvMXhGOTNUNl80UWtYT0VrdmNaVngwVW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuGmBU+mk
+nZM1UgneklnpujnfU9GmQfY2dbErjtSLmT5Zr3bpd0FKc1AHRUhlpi2s2dyCYCv
vmFut5NCKdl1gYZpUDqEgnI7DwAUotqo1FXgvtineuLf1RKuGa0X7JwQX8I8eHct
8nQ1ljc2N9KGEtd9ELUdFmMR+afyzt7y54iyHvZQ+CaI01NqhIMLSvNKZjXLztLu
BOYv4qPtBNjMwPYjzUuiZFn4tUNnrrOGkpJwa87nczPJwaSHTSmsaxfKMTHlNE8B
Jncrh3JsCTgYBMpaH4nDflPo5sE/K1T+TXcjzk20YgecISYs8J+QxHGdT8LTk85l
lAqWLW/PRvBzkA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:08:08 2025 by rpki-client