Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
File: k4KIfhkEky8RhsLDHGqS_17GQ4c.mft (raw, json)
Hash identifier: J3PHK+87S6GKDC+Q1Bu7656srpYosv7p/8zRuvS2atc=
Subject key identifier: 98:E1:C6:74:7B:70:DB:76:9B:2B:30:F5:90:D5:AA:A3:49:D1:B2:7C
Authority key identifier: 93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87
Certificate issuer: /CN=9382887e1904932f1186c2c31c6a92ff5ec64387
Certificate serial: 019847774564129AD5EAC57597CB3C5131A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
Manifest number: 032F
Signing time: Sat 26 Jul 2025 16:00:55 +0000
Manifest this update: Sat 26 Jul 2025 16:00:55 +0000
Manifest next update: Sun 27 Jul 2025 16:00:55 +0000
Files and hashes: 1: k4KIfhkEky8RhsLDHGqS_17GQ4c.crl (hash: 8ZmQxJ3cOdTOFiEcCvKH9snCPhTPlFbXAgqAd+s2ACE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:45:64:12:9a:d5:ea:c5:75:97:cb:3c:51:31:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9382887e1904932f1186c2c31c6a92ff5ec64387
Validity
Not Before: Jul 26 16:00:55 2025 GMT
Not After : Jul 27 16:00:55 2025 GMT
Subject: CN=98e1c6747b70db769b2b30f590d5aaa349d1b27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:15:62:4b:52:b9:27:72:70:82:e4:67:00:
9c:14:e7:bd:3c:db:8e:05:e3:62:93:43:16:eb:ea:
0d:7c:ca:bd:b4:b0:61:2e:f1:f6:97:b1:fd:fb:a2:
8f:de:c2:ed:f1:44:50:76:e2:18:27:74:c7:6e:db:
d1:63:7b:82:29:e9:d9:12:90:2a:f2:d8:29:92:ba:
6b:b5:7c:1c:ae:2e:2c:08:f8:2f:60:5f:c0:7f:c8:
c5:2e:19:e8:da:7b:df:08:88:63:91:c4:18:64:09:
46:f9:db:59:0a:56:d9:03:fe:2a:a6:74:00:7f:99:
9b:61:c4:77:96:f6:a1:3f:23:66:70:7f:c4:b3:f3:
0a:62:64:83:49:8c:02:62:0e:ee:15:85:90:f0:ad:
a9:a5:1e:99:14:74:bb:56:5b:2a:02:6f:b2:6d:4a:
3b:1a:f9:5e:35:0f:91:c5:35:46:68:35:a7:73:32:
4c:e5:9f:a3:ee:73:0c:ee:b7:4b:be:e6:d3:b0:4f:
5d:6c:66:a7:61:82:1c:88:f3:a5:e0:ce:7e:26:3c:
a9:d4:03:4a:07:a0:ae:7f:ce:df:5b:a4:08:db:af:
99:d4:3f:9b:0e:f1:11:c1:3e:34:a0:6f:10:17:fa:
77:a4:96:fc:6a:5f:45:65:bf:0f:be:83:ce:a3:10:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E1:C6:74:7B:70:DB:76:9B:2B:30:F5:90:D5:AA:A3:49:D1:B2:7C
X509v3 Authority Key Identifier:
keyid:93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:88:e7:29:d2:16:e2:2a:59:ac:68:a6:03:6b:bb:d3:3e:06:
f4:7e:ca:82:c3:92:02:33:e9:43:fe:09:c6:2d:ff:f9:96:ec:
22:b0:dc:8a:95:40:2d:58:f3:09:c1:17:07:d0:fc:3f:bc:ac:
31:a3:8e:41:04:ba:c8:c9:68:3e:da:01:f7:52:3c:0a:cd:79:
80:5c:4d:e1:0b:2e:37:4a:3a:d6:15:57:da:62:cf:08:1a:54:
96:1a:42:4d:b3:ab:50:ee:d9:1c:0d:83:27:8c:83:0e:e8:5f:
fb:df:8f:8d:75:1e:e5:bb:a9:13:b3:b4:dd:b3:04:65:19:61:
6a:1a:3b:02:d8:be:ae:85:19:90:9b:19:d4:a1:e9:74:fb:3c:
b5:49:cc:3e:17:76:d2:4f:ec:74:0a:5c:a8:f8:f0:ac:6e:75:
82:c4:46:a4:e5:d7:06:eb:02:f1:ba:c7:e8:77:50:61:55:2f:
29:ad:a8:da:e8:5d:b0:f0:bf:b3:32:97:10:55:e8:1b:1e:2e:
2f:49:c4:28:50:93:f6:bd:aa:db:d1:e3:0e:7c:38:44:d8:ff:
c8:53:e4:88:f5:0e:b6:42:6b:e1:52:b7:3c:ad:5c:32:7b:bb:
6c:84:7e:3b:e9:da:90:b8:ea:61:bd:28:af:3e:8a:e1:62:ef:
ff:29:29:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHd0VkEprV6sV1l8s8UTGhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzODI4ODdlMTkwNDkzMmYxMTg2YzJjMzFjNmE5MmZmNWVj
NjQzODcwHhcNMjUwNzI2MTYwMDU1WhcNMjUwNzI3MTYwMDU1WjAzMTEwLwYDVQQD
Eyg5OGUxYzY3NDdiNzBkYjc2OWIyYjMwZjU5MGQ1YWFhMzQ5ZDFiMjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVQVYktSuSdycILkZwCcFOe9PNuO
BeNik0MW6+oNfMq9tLBhLvH2l7H9+6KP3sLt8URQduIYJ3THbtvRY3uCKenZEpAq
8tgpkrprtXwcri4sCPgvYF/Af8jFLhno2nvfCIhjkcQYZAlG+dtZClbZA/4qpnQA
f5mbYcR3lvahPyNmcH/Es/MKYmSDSYwCYg7uFYWQ8K2ppR6ZFHS7VlsqAm+ybUo7
GvleNQ+RxTVGaDWnczJM5Z+j7nMM7rdLvubTsE9dbGanYYIciPOl4M5+Jjyp1ANK
B6Cuf87fW6QI26+Z1D+bDvERwT40oG8QF/p3pJb8al9FZb8PvoPOoxAvPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjhxnR7cNt2mysw9ZDVqqNJ0bJ8MB8GA1UdIwQY
MBaAFJOCiH4ZBJMvEYbCwxxqkv9exkOHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazRLSWZoa0VreThSaHNMREhHcVNfMTdHUTRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZjkwZWItMTVjOC00MGQ4LWEyMjAt
NWM5NDU0NjhjNDc1LzEvazRLSWZoa0VreThSaHNMREhHcVNfMTdHUTRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iZjkwZWItMTVjOC00MGQ4LWEyMjAtNWM5NDU0NjhjNDc1
LzEvazRLSWZoa0VreThSaHNMREhHcVNfMTdHUTRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYjnKdIW
4ipZrGimA2u70z4G9H7KgsOSAjPpQ/4Jxi3/+ZbsIrDcipVALVjzCcEXB9D8P7ys
MaOOQQS6yMloPtoB91I8Cs15gFxN4QsuN0o61hVX2mLPCBpUlhpCTbOrUO7ZHA2D
J4yDDuhf+9+PjXUe5bupE7O03bMEZRlhaho7Ati+roUZkJsZ1KHpdPs8tUnMPhd2
0k/sdApcqPjwrG51gsRGpOXXBusC8brH6HdQYVUvKa2o2uhdsPC/szKXEFXoGx4u
L0nEKFCT9r2q29HjDnw4RNj/yFPkiPUOtkJr4VK3PK1cMnu7bIR+O+nakLjqYb0o
rz6K4WLv/ykpVQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:43:53 2025 by rpki-client