Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.mft
File: K5Ro565AOUbluk3mHMHEej2b794.mft (raw, json)
Hash identifier: xxkbkj2Z1+r6Qwnra8CVWRya1JuqTh5BwgK2oU0vwt4=
Subject key identifier: 9D:4B:0E:44:31:2A:29:F7:09:FD:E4:07:F4:82:02:E3:40:5F:D3:32
Authority key identifier: 2B:94:68:E7:AE:40:39:46:E5:BA:4D:E6:1C:C1:C4:7A:3D:9B:EF:DE
Certificate issuer: /CN=2b9468e7ae403946e5ba4de61cc1c47a3d9befde
Certificate serial: 01984F312B4FF907C64E2A608AE53556E864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5Ro565AOUbluk3mHMHEej2b794.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.mft
Manifest number: 0ABD
Signing time: Mon 28 Jul 2025 04:01:19 +0000
Manifest this update: Mon 28 Jul 2025 04:01:19 +0000
Manifest next update: Tue 29 Jul 2025 04:01:19 +0000
Files and hashes: 1: K5Ro565AOUbluk3mHMHEej2b794.crl (hash: sGqgPCgpAQ1FEg+A6yv7nGWD9GNfIrrpNQsIDmAVJQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5Ro565AOUbluk3mHMHEej2b794.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:31:2b:4f:f9:07:c6:4e:2a:60:8a:e5:35:56:e8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9468e7ae403946e5ba4de61cc1c47a3d9befde
Validity
Not Before: Jul 28 04:01:19 2025 GMT
Not After : Jul 29 04:01:19 2025 GMT
Subject: CN=9d4b0e44312a29f709fde407f48202e3405fd332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:46:a7:74:c7:27:e9:04:71:6b:4a:d3:2a:a4:
54:2f:c4:72:fa:80:b4:b3:a3:b6:a1:51:d8:8c:9e:
42:fd:85:e9:3c:36:69:b0:80:24:41:9a:a5:46:e8:
8c:23:c2:2d:db:d0:62:9e:18:13:db:91:4f:f4:a5:
b8:32:41:3a:af:1a:74:49:36:4d:30:fd:06:05:72:
55:9f:25:48:0c:92:78:c1:3a:1c:49:17:59:d4:89:
99:a2:a1:0e:bc:22:b3:ef:b8:88:35:01:91:1a:ed:
c2:49:a4:31:85:29:4a:40:f5:f7:a9:f4:3a:cf:2c:
1f:e6:b3:e1:45:b8:09:3b:61:00:08:0c:8f:0b:02:
32:12:5d:2b:73:33:b3:97:58:d4:72:d8:dc:20:de:
dd:1e:7d:17:1b:43:98:a4:20:0e:f5:90:19:2f:be:
cc:bd:e1:eb:46:a2:62:e8:9b:19:b0:68:88:ee:ee:
14:aa:9c:d6:e6:f7:18:4c:96:56:4e:1e:6f:3d:6d:
f3:97:a2:e8:03:30:76:20:87:96:cb:ea:ae:26:81:
e8:3f:ee:32:17:b3:a0:e5:20:8e:87:b9:b4:e9:d2:
96:01:8c:7f:99:8c:82:46:8f:86:74:0f:1c:df:94:
36:c9:10:f1:c7:d6:6c:c1:41:2f:20:1f:a6:98:aa:
2c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4B:0E:44:31:2A:29:F7:09:FD:E4:07:F4:82:02:E3:40:5F:D3:32
X509v3 Authority Key Identifier:
keyid:2B:94:68:E7:AE:40:39:46:E5:BA:4D:E6:1C:C1:C4:7A:3D:9B:EF:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Ro565AOUbluk3mHMHEej2b794.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:75:0f:f7:bf:07:68:be:1e:f1:98:d2:b5:82:e6:db:64:11:
fb:61:08:9b:58:80:a5:94:2f:01:53:00:2c:6c:8a:57:b7:38:
2c:d0:9a:a3:b2:11:53:df:06:0d:00:fa:66:86:1d:c0:b6:eb:
75:ce:bf:7d:5d:a1:c7:d4:09:5f:05:77:b6:31:fb:37:4b:6a:
84:c4:d4:f1:d9:de:f7:00:88:7a:78:a5:84:fc:de:80:6a:e7:
95:7f:69:f0:0b:92:f6:36:3c:3b:7a:ba:c1:6d:25:82:6b:c8:
f8:33:60:b6:2b:c0:fe:0e:c6:3b:6e:d5:bc:b3:1e:c8:16:02:
ac:5d:0f:15:91:27:cf:f6:f9:cd:d5:ad:e9:e5:7a:43:a3:8d:
1d:80:ff:4f:18:43:11:0a:cd:67:ac:50:a8:21:b1:67:87:8e:
fe:ce:99:5b:0a:93:b9:7d:9e:ab:86:e0:40:3e:fe:cc:c8:aa:
3d:78:da:f3:62:cd:6e:72:28:cf:1a:a4:ad:aa:ff:ff:f0:a9:
03:7b:26:90:66:8c:7f:02:8e:e7:06:d1:99:c0:3d:f1:e0:48:
0f:ec:fd:0e:32:ec:07:07:16:59:2e:4e:1e:1e:54:7c:74:f9:
e5:39:1c:a0:28:8b:49:a5:5e:64:30:bb:40:c9:57:1c:fd:8c:
97:ee:98:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhPMStP+QfGTipgiuU1VuhkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTQ2OGU3YWU0MDM5NDZlNWJhNGRlNjFjYzFjNDdhM2Q5
YmVmZGUwHhcNMjUwNzI4MDQwMTE5WhcNMjUwNzI5MDQwMTE5WjAzMTEwLwYDVQQD
Eyg5ZDRiMGU0NDMxMmEyOWY3MDlmZGU0MDdmNDgyMDJlMzQwNWZkMzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkandMcn6QRxa0rTKqRUL8Ry+oC0
s6O2oVHYjJ5C/YXpPDZpsIAkQZqlRuiMI8It29BinhgT25FP9KW4MkE6rxp0STZN
MP0GBXJVnyVIDJJ4wTocSRdZ1ImZoqEOvCKz77iINQGRGu3CSaQxhSlKQPX3qfQ6
zywf5rPhRbgJO2EACAyPCwIyEl0rczOzl1jUctjcIN7dHn0XG0OYpCAO9ZAZL77M
veHrRqJi6JsZsGiI7u4UqpzW5vcYTJZWTh5vPW3zl6LoAzB2IIeWy+quJoHoP+4y
F7Og5SCOh7m06dKWAYx/mYyCRo+GdA8c35Q2yRDxx9ZswUEvIB+mmKosGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1LDkQxKin3Cf3kB/SCAuNAX9MyMB8GA1UdIwQY
MBaAFCuUaOeuQDlG5bpN5hzBxHo9m+/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVSbzU2NUFPVWJsdWszbUhNSEVlajJiNzk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi80YjVjMTgtODQ3Mi00MWRiLWI1NTct
MjI2OWMxYWYyYWQzLzEvSzVSbzU2NUFPVWJsdWszbUhNSEVlajJiNzk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi80YjVjMTgtODQ3Mi00MWRiLWI1NTctMjI2OWMxYWYyYWQz
LzEvSzVSbzU2NUFPVWJsdWszbUhNSEVlajJiNzk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHUP978H
aL4e8ZjStYLm22QR+2EIm1iApZQvAVMALGyKV7c4LNCao7IRU98GDQD6ZoYdwLbr
dc6/fV2hx9QJXwV3tjH7N0tqhMTU8dne9wCIenilhPzegGrnlX9p8AuS9jY8O3q6
wW0lgmvI+DNgtivA/g7GO27VvLMeyBYCrF0PFZEnz/b5zdWt6eV6Q6ONHYD/TxhD
EQrNZ6xQqCGxZ4eO/s6ZWwqTuX2eq4bgQD7+zMiqPXja82LNbnIozxqkrar///Cp
A3smkGaMfwKO5wbRmcA98eBID+z9DjLsBwcWWS5OHh5UfHT55TkcoCiLSaVeZDC7
QMlXHP2Ml+6Ytw==
-----END CERTIFICATE-----
Generated at Mon Jul 28 05:42:55 2025 by rpki-client