Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
File: C_K7rLR03WED6JEXpjZ0VpZN8xk.mft (raw, json)
Hash identifier: vEdpZSgadcMV2jsHCvrjge3RKhC0Z1n1gQVZDXfIPgM=
Subject key identifier: FE:CB:E5:21:95:97:C2:2A:37:E0:63:E2:BC:11:71:3C:B4:40:AC:14
Authority key identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
Certificate issuer: /CN=0bf2bbacb474dd6103e89117a6367456964df319
Certificate serial: 019849D31C7EE1864F3F416461420C18C8D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 03:00:28 +0000
Manifest this update: Sun 27 Jul 2025 03:00:28 +0000
Manifest next update: Mon 28 Jul 2025 03:00:28 +0000
Files and hashes: 1: C_K7rLR03WED6JEXpjZ0VpZN8xk.crl (hash: RRiBu2kZ/YLUkgSXuGfB5dikxabsoc6SEShsNLk8L68=)
2: h4zrMqfOoefngHFo_c_Z31Wn-uw.roa (hash: rUimB7Pd+YTy8jaYyx7sVXzcYUcWrZdClxDPlBTFsaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:1c:7e:e1:86:4f:3f:41:64:61:42:0c:18:c8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf2bbacb474dd6103e89117a6367456964df319
Validity
Not Before: Jul 27 03:00:28 2025 GMT
Not After : Jul 28 03:00:28 2025 GMT
Subject: CN=fecbe5219597c22a37e063e2bc11713cb440ac14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4d:96:9a:cc:0c:f6:8f:9f:8f:72:c6:7d:67:
f3:9d:fc:b8:04:f5:40:1c:f1:26:e9:5d:c1:45:59:
5f:ce:80:fb:ea:f1:e0:36:f9:c9:f4:c5:ed:b9:b6:
7c:e9:57:4b:5a:10:dc:27:83:75:6c:7f:58:fa:7a:
0a:0e:e4:62:1b:da:b0:f8:a7:05:94:a5:06:42:dd:
0f:dc:08:5f:0c:93:02:6d:69:15:19:54:25:52:2e:
23:01:71:0b:71:42:44:e2:8c:d5:58:a7:43:39:20:
f1:eb:bb:30:a1:77:1a:f8:1a:83:2f:2a:54:85:18:
81:3e:df:5b:a1:c1:3f:6d:b6:94:1c:be:05:e6:07:
51:88:67:cb:71:c2:aa:fc:2c:25:77:04:b3:e6:9c:
d3:ae:94:c7:a2:05:4b:8c:4e:df:66:40:f6:d9:9e:
45:60:81:38:2b:b6:eb:f2:01:ce:f3:89:07:64:82:
d1:32:42:4e:3c:c5:6f:80:2c:a4:be:51:24:1c:5e:
58:2a:02:6a:b0:38:79:b0:74:f5:df:e2:5a:96:64:
ff:b0:2a:10:44:85:a2:d7:75:7a:02:36:63:26:7b:
63:5a:55:7f:3d:7a:27:25:7e:3b:a8:e7:d4:30:53:
19:40:e0:02:54:f0:45:ca:72:8a:54:1f:8e:b0:77:
c0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CB:E5:21:95:97:C2:2A:37:E0:63:E2:BC:11:71:3C:B4:40:AC:14
X509v3 Authority Key Identifier:
keyid:0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b2:8f:8b:3e:53:3d:03:ba:57:c7:5c:4c:46:aa:ea:38:ba:
6d:6b:9b:32:35:3b:a8:81:09:9b:37:5a:16:b6:ad:98:2e:8e:
ec:5a:86:0b:22:31:9b:3c:bd:07:87:aa:89:91:8a:16:61:ae:
8d:05:f8:79:5d:91:53:9d:1d:12:5b:1c:f4:ca:9d:b8:76:cc:
43:df:15:14:35:9b:e0:b7:2e:63:99:cf:20:2d:8e:1f:34:6c:
c7:ac:90:60:f7:d0:9a:e5:77:73:2e:84:3c:b9:60:40:fb:91:
96:29:6f:42:e8:1e:71:bb:c9:c1:3d:42:f5:9d:4d:2c:ea:1f:
cc:36:fc:19:b1:ee:87:c2:29:41:6d:86:bc:53:df:a6:98:21:
30:a5:f9:2e:a1:04:35:f9:cf:46:f9:29:03:f4:1e:2b:9b:97:
4b:02:ac:45:a6:8d:28:36:08:9f:68:dd:ba:2e:af:46:23:08:
45:44:e4:8b:ba:5f:3a:ba:22:57:1a:84:48:bd:4f:b6:71:27:
82:f2:e6:9d:26:04:a3:f7:7e:96:f5:4b:aa:77:c5:dd:c7:b4:
f2:dc:80:58:87:ed:4d:53:12:45:90:78:ba:84:41:0e:23:fc:
2d:36:4b:fd:6a:76:cf:c7:60:cb:0f:f3:5b:42:e6:5c:7a:ea:
51:d9:39:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0xx+4YZPP0FkYUIMGMjTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZjJiYmFjYjQ3NGRkNjEwM2U4OTExN2E2MzY3NDU2OTY0
ZGYzMTkwHhcNMjUwNzI3MDMwMDI4WhcNMjUwNzI4MDMwMDI4WjAzMTEwLwYDVQQD
EyhmZWNiZTUyMTk1OTdjMjJhMzdlMDYzZTJiYzExNzEzY2I0NDBhYzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU2WmswM9o+fj3LGfWfznfy4BPVA
HPEm6V3BRVlfzoD76vHgNvnJ9MXtubZ86VdLWhDcJ4N1bH9Y+noKDuRiG9qw+KcF
lKUGQt0P3AhfDJMCbWkVGVQlUi4jAXELcUJE4ozVWKdDOSDx67swoXca+BqDLypU
hRiBPt9bocE/bbaUHL4F5gdRiGfLccKq/CwldwSz5pzTrpTHogVLjE7fZkD22Z5F
YIE4K7br8gHO84kHZILRMkJOPMVvgCykvlEkHF5YKgJqsDh5sHT13+JalmT/sCoQ
RIWi13V6AjZjJntjWlV/PXonJX47qOfUMFMZQOACVPBFynKKVB+OsHfALwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7L5SGVl8IqN+Bj4rwRcTy0QKwUMB8GA1UdIwQY
MBaAFAvyu6y0dN1hA+iRF6Y2dFaWTfMZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19LN3JMUjAzV0VENkpFWHBqWjBWcFpOOHhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jYmQ0YTctMzk0ZC00YzAzLWJlZDUt
ZDZiOTZlODhhNjExLzEvQ19LN3JMUjAzV0VENkpFWHBqWjBWcFpOOHhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jYmQ0YTctMzk0ZC00YzAzLWJlZDUtZDZiOTZlODhhNjEx
LzEvQ19LN3JMUjAzV0VENkpFWHBqWjBWcFpOOHhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbKPiz5T
PQO6V8dcTEaq6ji6bWubMjU7qIEJmzdaFratmC6O7FqGCyIxmzy9B4eqiZGKFmGu
jQX4eV2RU50dElsc9MqduHbMQ98VFDWb4LcuY5nPIC2OHzRsx6yQYPfQmuV3cy6E
PLlgQPuRlilvQugecbvJwT1C9Z1NLOofzDb8GbHuh8IpQW2GvFPfppghMKX5LqEE
NfnPRvkpA/QeK5uXSwKsRaaNKDYIn2jdui6vRiMIRUTki7pfOroiVxqESL1PtnEn
gvLmnSYEo/d+lvVLqnfF3ce08tyAWIftTVMSRZB4uoRBDiP8LTZL/Wp2z8dgyw/z
W0LmXHrqUdk5YA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:10:52 2025 by rpki-client