Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json)
Hash identifier: 7CDMseT5VbWzQrSlOzQJM5+BatYYmyQMmoa70IM7PXc=
Subject key identifier: 78:7B:1F:CA:49:B1:DE:89:95:B3:72:F9:AA:FF:DF:82:41:AB:E4:E4
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 019856458FBC67BE56D464A22317E36E6691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
Manifest number: 1196
Signing time: Tue 29 Jul 2025 13:00:56 +0000
Manifest this update: Tue 29 Jul 2025 13:00:56 +0000
Manifest next update: Wed 30 Jul 2025 13:00:56 +0000
Files and hashes: 1: Hvxuzsj6EczQMtzXmG3ZXMTDSzY.roa (hash: IsEfb4XnUiiJKA1AVKZnGfwgI7NGrVN9fX4TxNoqt/g=)
2: RZ8C7kJw0WnSALfkl5thd-tNGAc.roa (hash: siN5gEDK5XnJ7yawdzNqRM0ni+t0tEVv4a0T208KnEI=)
3: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: FcI6hN9iKlp68TfwqFjYbEcBN3iKNnwdP9mXcMDLCd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:45:8f:bc:67:be:56:d4:64:a2:23:17:e3:6e:66:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: Jul 29 13:00:56 2025 GMT
Not After : Jul 30 13:00:56 2025 GMT
Subject: CN=787b1fca49b1de8995b372f9aaffdf8241abe4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:98:db:93:c6:b8:c0:f0:a0:d0:68:e5:73:
78:c5:88:25:c4:d4:ba:93:b0:83:b4:ba:8c:fb:61:
a7:59:bb:a2:c2:25:41:ad:d9:68:23:cc:14:7b:95:
ab:7b:b1:b3:32:65:f5:23:b3:12:12:c1:6d:2d:9f:
21:51:ca:93:20:91:09:93:ad:6e:c4:3c:07:cf:a7:
bc:a6:55:a5:c4:31:2b:24:ca:94:62:6d:0f:89:70:
df:96:1f:f9:45:2f:49:9a:14:f5:8a:f9:5a:63:38:
89:62:68:60:af:93:cf:24:2e:ce:4b:b7:ea:bd:cd:
42:31:ab:b4:cd:2e:5f:7f:42:03:ee:59:5a:4f:ec:
47:55:8a:f9:a2:5b:cf:07:a5:7a:27:a6:84:03:56:
e2:7f:08:9a:5b:bb:49:50:0b:a6:76:34:17:68:5f:
f4:b8:09:45:3d:5e:b9:b9:49:4b:66:b9:8b:c6:98:
80:0e:96:57:84:34:ac:da:f1:46:e7:d5:b0:e1:92:
eb:f7:f2:69:a7:87:fb:6d:8d:9f:05:98:cb:5b:49:
1c:de:68:30:c8:9b:6e:b1:5c:dc:ee:07:ac:8e:1b:
65:9a:04:9d:94:31:7e:34:95:36:41:87:d3:49:f2:
c7:67:05:c0:2e:8e:e8:bf:3f:88:da:3f:27:71:20:
d2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7B:1F:CA:49:B1:DE:89:95:B3:72:F9:AA:FF:DF:82:41:AB:E4:E4
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bf:2a:4d:c8:e2:a1:73:18:f2:ef:a4:e7:46:e4:45:5a:8b:
36:d5:dd:ae:cc:a4:c8:43:ea:e9:63:6c:62:65:9f:59:6b:ad:
20:ba:5d:4b:cc:5b:8d:e2:53:b6:62:cc:c9:1d:46:91:8d:24:
9d:55:36:0b:33:d3:b0:1b:e9:d4:7b:15:9b:84:7e:9f:48:87:
72:f1:d5:f6:64:60:a4:18:fc:1b:46:fe:7a:9b:1c:c6:78:5f:
f4:4f:e9:49:50:fb:5e:79:c4:15:ae:11:79:39:c6:95:8c:10:
e7:fe:18:35:11:9c:52:fb:06:ae:8b:cd:bf:7d:89:f4:e3:28:
69:73:e8:bd:a2:d1:89:fd:1e:4f:c1:be:b1:f2:e4:88:26:ea:
d6:0d:f5:87:62:21:3c:55:0f:62:0b:01:81:fd:4b:ac:50:2f:
13:d7:38:6a:a6:e0:fe:e4:54:51:c5:f2:3f:6f:ec:60:7e:f7:
bd:08:8f:44:dd:a4:68:d4:af:c4:39:97:3a:e0:46:ca:18:5e:
e4:0b:ea:27:8a:7b:ce:78:f2:08:d4:88:48:5a:ca:82:e4:1e:
7c:14:9a:65:28:24:1c:2b:1d:ff:e0:bc:91:c8:c3:79:04:d2:
6a:e4:81:91:24:00:52:29:08:80:4f:13:96:4d:2e:ce:ba:0b:
b4:f9:7b:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhWRY+8Z75W1GSiIxfjbmaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTA2OWE1ZDc2NGRhMjU1OTU0ZGIyZWU5ZDEyNDNkZTE2
YjkxMDEwHhcNMjUwNzI5MTMwMDU2WhcNMjUwNzMwMTMwMDU2WjAzMTEwLwYDVQQD
Eyg3ODdiMWZjYTQ5YjFkZTg5OTViMzcyZjlhYWZmZGY4MjQxYWJlNGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJuY25PGuMDwoNBo5XN4xYglxNS6
k7CDtLqM+2GnWbuiwiVBrdloI8wUe5Wre7GzMmX1I7MSEsFtLZ8hUcqTIJEJk61u
xDwHz6e8plWlxDErJMqUYm0PiXDflh/5RS9JmhT1ivlaYziJYmhgr5PPJC7OS7fq
vc1CMau0zS5ff0ID7llaT+xHVYr5olvPB6V6J6aEA1bifwiaW7tJUAumdjQXaF/0
uAlFPV65uUlLZrmLxpiADpZXhDSs2vFG59Ww4ZLr9/Jpp4f7bY2fBZjLW0kc3mgw
yJtusVzc7gesjhtlmgSdlDF+NJU2QYfTSfLHZwXALo7ovz+I2j8ncSDS4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHh7H8pJsd6JlbNy+ar/34JBq+TkMB8GA1UdIwQY
MBaAFJJQaaXXZNolWVTbLunRJD3ha5EBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xCcHBkZGsyaVZaVk5zdTZkRWtQZUZya1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82Nzg4ZjUtNDg4OS00YmU3LWJiMTkt
YTliOGRlNjExYTk2LzEva2xCcHBkZGsyaVZaVk5zdTZkRWtQZUZya1FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS82Nzg4ZjUtNDg4OS00YmU3LWJiMTktYTliOGRlNjExYTk2
LzEva2xCcHBkZGsyaVZaVk5zdTZkRWtQZUZya1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHb8qTcji
oXMY8u+k50bkRVqLNtXdrsykyEPq6WNsYmWfWWutILpdS8xbjeJTtmLMyR1GkY0k
nVU2CzPTsBvp1HsVm4R+n0iHcvHV9mRgpBj8G0b+epscxnhf9E/pSVD7XnnEFa4R
eTnGlYwQ5/4YNRGcUvsGrovNv32J9OMoaXPovaLRif0eT8G+sfLkiCbq1g31h2Ih
PFUPYgsBgf1LrFAvE9c4aqbg/uRUUcXyP2/sYH73vQiPRN2kaNSvxDmXOuBGyhhe
5AvqJ4p7znjyCNSISFrKguQefBSaZSgkHCsd/+C8kcjDeQTSauSBkSQAUikIgE8T
lk0uzroLtPl7bA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 14:40:04 2025 by rpki-client