Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier: 854b6WUnB60WnXr0lg5KLcl8JjRWs/HdOcGeOBRM+NQ=
Subject key identifier: EC:4A:F7:CE:C0:9A:1E:72:B9:94:E1:5C:23:1F:D9:96:47:5F:D3:9A
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial: 0198541FFDA70978DD23A91ACFAF9DDE701A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number: 04CF
Signing time: Tue 29 Jul 2025 03:00:39 +0000
Manifest this update: Tue 29 Jul 2025 03:00:39 +0000
Manifest next update: Wed 30 Jul 2025 03:00:39 +0000
Files and hashes: 1: D46Ir3fESQdKV4ntE1MciVCeNwY.roa (hash: ND9cgWv5J0hNtKyrA/zDulukUC/W3FHSN0hW88QXa3s=)
2: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: GAKMJBg8YpYUpVmNH6zTfsQAOHOL3MEzi3XeG7nXOus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:fd:a7:09:78:dd:23:a9:1a:cf:af:9d:de:70:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Validity
Not Before: Jul 29 03:00:39 2025 GMT
Not After : Jul 30 03:00:39 2025 GMT
Subject: CN=ec4af7cec09a1e72b994e15c231fd996475fd39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9f:5a:74:9d:b0:38:a2:5f:1f:90:10:00:1d:
90:75:9b:50:d3:b1:63:60:3f:ea:05:f4:e2:ef:db:
16:8a:7d:33:97:6c:65:68:ca:a5:81:03:0b:6b:d0:
92:e2:a5:57:82:4d:8b:be:33:3d:a5:d4:03:06:57:
c9:a7:69:f3:9c:bc:28:86:c9:fb:79:56:c3:f1:ff:
bf:fd:e6:2e:d6:32:1b:7c:59:af:22:a9:a9:63:0b:
8c:08:2e:96:e2:f8:18:12:2b:1d:00:90:81:06:f2:
25:61:c7:e7:03:c6:60:50:3b:25:56:a4:13:ea:70:
b3:02:99:5b:c9:f9:a1:bd:2b:72:a3:5b:2c:c5:9e:
61:b8:80:9e:98:71:cb:1b:6a:ac:83:56:73:4b:15:
94:18:f5:2c:50:6c:c8:3b:b8:25:ca:eb:4a:d8:15:
ca:bb:e3:42:a9:66:a3:13:2d:7e:ff:7e:f1:0b:fa:
1d:c5:ea:9e:11:f2:8b:f2:be:1b:d7:16:be:cc:c1:
c3:53:d0:82:1d:14:a6:12:70:17:6a:1c:fe:e9:03:
74:c7:0b:95:c2:de:6a:fa:8c:f5:a2:47:58:97:98:
e7:47:59:fe:f7:5b:70:ed:c3:a6:8c:00:72:a3:46:
21:ff:ba:f0:16:0a:1b:ad:25:4e:d9:32:8f:14:dc:
6f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4A:F7:CE:C0:9A:1E:72:B9:94:E1:5C:23:1F:D9:96:47:5F:D3:9A
X509v3 Authority Key Identifier:
keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f0:bf:e0:c5:bd:bd:17:2a:62:e7:c6:95:15:4f:71:3d:02:
59:82:da:f4:1f:56:37:1a:44:e3:aa:7a:29:97:4a:36:f7:d7:
fd:d6:d4:31:41:e2:eb:f6:8e:e3:1d:4f:06:2f:df:b4:25:7e:
04:80:63:af:68:98:9f:f9:69:26:40:09:20:74:27:c7:ea:b0:
0e:2a:59:1c:c0:5e:b9:f3:16:29:6c:cc:24:c8:d8:97:17:93:
d1:70:bc:0a:be:ee:d7:5b:ea:c2:00:31:c5:4e:d8:1b:e4:60:
47:cf:93:21:2e:ae:78:4a:9f:28:1f:69:75:f3:18:f7:ef:bc:
bc:b2:7a:af:b7:1b:3b:d9:12:99:73:ff:5d:ce:19:a6:0e:46:
d0:e4:94:67:11:c6:f1:ce:97:ff:e0:d1:c5:db:32:ad:b4:c4:
ad:63:94:79:eb:c6:a9:56:89:1c:ff:1a:ef:57:b9:1b:b3:93:
94:07:19:6a:96:85:9b:98:80:7b:ae:7e:62:32:23:40:15:2a:
42:44:26:b0:18:6e:39:f5:2b:5f:10:b4:89:5d:66:b3:39:99:
8a:5f:b5:1f:a8:87:88:e4:86:77:e5:7d:cd:df:b4:64:a2:e8:
a1:78:7d:45:30:78:9a:d5:d5:ce:5c:56:33:54:23:d6:68:f8:
16:34:17:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhUH/2nCXjdI6kaz6+d3nAaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NDQyN2RjZWJhYjQwZWJjMTk4MzlmMmQyNWVlYTJjZTBh
NTYyZmYwHhcNMjUwNzI5MDMwMDM5WhcNMjUwNzMwMDMwMDM5WjAzMTEwLwYDVQQD
EyhlYzRhZjdjZWMwOWExZTcyYjk5NGUxNWMyMzFmZDk5NjQ3NWZkMzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp9adJ2wOKJfH5AQAB2QdZtQ07Fj
YD/qBfTi79sWin0zl2xlaMqlgQMLa9CS4qVXgk2LvjM9pdQDBlfJp2nznLwohsn7
eVbD8f+//eYu1jIbfFmvIqmpYwuMCC6W4vgYEisdAJCBBvIlYcfnA8ZgUDslVqQT
6nCzAplbyfmhvStyo1ssxZ5huICemHHLG2qsg1ZzSxWUGPUsUGzIO7glyutK2BXK
u+NCqWajEy1+/37xC/odxeqeEfKL8r4b1xa+zMHDU9CCHRSmEnAXahz+6QN0xwuV
wt5q+oz1okdYl5jnR1n+91tw7cOmjAByo0Yh/7rwFgobrSVO2TKPFNxvhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxK987Amh5yuZThXCMf2ZZHX9OaMB8GA1UdIwQY
MBaAFChEJ9zrq0DrwZg58tJe6izgpWL/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0VRbjNPdXJRT3ZCbURueTBsN3FMT0NsWXY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80NmQ4YjQtOGY0Ny00ZTkzLWFjYzIt
NTBkMDA1NzgyZmFiLzEvS0VRbjNPdXJRT3ZCbURueTBsN3FMT0NsWXY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS80NmQ4YjQtOGY0Ny00ZTkzLWFjYzItNTBkMDA1NzgyZmFi
LzEvS0VRbjNPdXJRT3ZCbURueTBsN3FMT0NsWXY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvC/4MW9
vRcqYufGlRVPcT0CWYLa9B9WNxpE46p6KZdKNvfX/dbUMUHi6/aO4x1PBi/ftCV+
BIBjr2iYn/lpJkAJIHQnx+qwDipZHMBeufMWKWzMJMjYlxeT0XC8Cr7u11vqwgAx
xU7YG+RgR8+TIS6ueEqfKB9pdfMY9++8vLJ6r7cbO9kSmXP/Xc4Zpg5G0OSUZxHG
8c6X/+DRxdsyrbTErWOUeevGqVaJHP8a71e5G7OTlAcZapaFm5iAe65+YjIjQBUq
QkQmsBhuOfUrXxC0iV1mszmZil+1H6iHiOSGd+V9zd+0ZKLooXh9RTB4mtXVzlxW
M1Qj1mj4FjQXyQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:38:18 2025 by rpki-client