Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
File: kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft (raw, json)
Hash identifier: VMDkekIlhnA6yHmz2/qWN8Wa2Ll7d+P1AZrZQ7sHWD8=
Subject key identifier: 15:D4:DF:49:B7:6A:23:38:3D:CF:64:B8:FE:A8:9B:94:E7:56:FB:18
Authority key identifier: 91:D2:76:7A:A9:10:E9:57:DC:53:58:02:50:26:E6:C3:70:57:0A:2D
Certificate issuer: /CN=91d2767aa910e957dc5358025026e6c370570a2d
Certificate serial: 019827EC2B67EC65B5B89962F43CB93C4738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
Manifest number: 11
Signing time: Sun 20 Jul 2025 13:00:45 +0000
Manifest this update: Sun 20 Jul 2025 13:00:45 +0000
Manifest next update: Mon 21 Jul 2025 13:00:45 +0000
Files and hashes: 1: kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl (hash: yphtSiw/5g2H5zt/6cZBInbGnSyVU3hyt2LaXXKr2Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:2b:67:ec:65:b5:b8:99:62:f4:3c:b9:3c:47:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d2767aa910e957dc5358025026e6c370570a2d
Validity
Not Before: Jul 20 13:00:45 2025 GMT
Not After : Jul 21 13:00:45 2025 GMT
Subject: CN=15d4df49b76a23383dcf64b8fea89b94e756fb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:ef:5f:f0:76:a0:73:3a:23:9f:42:fd:0f:
60:57:39:ef:c2:35:13:cb:d2:4a:8a:f4:4a:52:9b:
55:d0:f8:6e:ac:1b:b1:50:22:04:ce:fe:b0:3c:1f:
e1:8a:55:72:a7:62:ae:3e:2d:4d:4d:02:cd:4f:47:
c2:87:2f:dc:b7:54:b6:4d:35:3f:0d:79:10:99:73:
27:12:fc:ad:5e:ef:e0:2c:c6:02:b1:0b:11:0b:1e:
62:6d:94:cf:b7:4e:e4:26:57:4a:b4:92:8c:cf:bf:
44:d9:8f:54:6e:cd:01:45:04:b5:c1:60:d0:57:7f:
c4:2e:51:a9:85:85:1c:70:22:03:a3:6d:d9:5c:cc:
5a:62:10:60:f9:34:60:9e:a2:14:4f:22:ae:a4:c0:
74:92:42:c2:50:eb:12:9c:bd:61:b6:44:9d:b0:3f:
dc:72:03:0e:29:d1:18:79:ac:90:0f:8c:fc:f9:1a:
6d:12:7c:3e:3c:96:f9:4f:ee:0f:74:46:a2:e1:50:
56:0d:89:18:0f:0f:17:70:c6:c9:a0:4a:b7:4f:c0:
1f:5c:73:b3:51:9b:48:ca:55:09:ec:d0:ed:7f:11:
19:ca:a4:48:c9:4c:e3:04:c2:67:5f:3e:a4:cc:c2:
2a:c0:91:34:66:38:2c:61:fd:fa:20:f3:8b:23:8c:
4b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D4:DF:49:B7:6A:23:38:3D:CF:64:B8:FE:A8:9B:94:E7:56:FB:18
X509v3 Authority Key Identifier:
keyid:91:D2:76:7A:A9:10:E9:57:DC:53:58:02:50:26:E6:C3:70:57:0A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:51:96:bc:f1:b6:41:fd:15:8c:5b:65:75:03:c6:b6:71:5c:
d7:ad:54:f9:94:35:52:df:f4:23:cb:26:1c:db:b5:3f:57:e9:
9a:79:7d:5b:0a:93:94:c6:73:b5:aa:d7:67:6a:de:5e:94:d3:
83:bb:c4:11:fb:a0:af:32:b7:2e:8a:af:cd:66:b9:67:7e:16:
6f:ed:39:c2:dd:76:a0:96:dc:41:c3:88:9f:6c:ee:88:36:b2:
30:ae:d0:a4:a0:72:5f:91:57:cf:97:59:0b:92:47:87:cc:48:
79:50:d3:eb:c5:fb:0a:03:e0:d0:d2:ef:d0:52:1a:a5:12:cc:
8b:fd:f2:64:b7:6f:7d:21:5e:ab:b0:84:e1:d9:17:a8:e2:ad:
5e:cf:de:f4:4b:c9:b0:9f:82:ab:1b:32:ae:56:72:2b:db:c5:
54:79:7a:7f:49:e7:63:55:05:b0:95:b9:97:5d:3a:cd:65:0e:
47:ed:ea:53:2d:f4:fc:17:8c:59:73:66:38:91:ae:74:6d:20:
2b:c3:85:8b:1c:fb:6e:ba:65:8e:57:1b:43:d9:b2:24:7a:3c:
f5:5a:2d:65:51:01:41:be:3b:5b:d5:61:e4:2a:5e:1c:8d:23:
47:53:dc:94:37:77:a9:50:5d:6e:84:47:ce:89:01:7e:d0:e2:
91:21:c3:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgn7Ctn7GW1uJli9Dy5PEc4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZDI3NjdhYTkxMGU5NTdkYzUzNTgwMjUwMjZlNmMzNzA1
NzBhMmQwHhcNMjUwNzIwMTMwMDQ1WhcNMjUwNzIxMTMwMDQ1WjAzMTEwLwYDVQQD
EygxNWQ0ZGY0OWI3NmEyMzM4M2RjZjY0YjhmZWE4OWI5NGU3NTZmYjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt7vX/B2oHM6I59C/Q9gVznvwjUT
y9JKivRKUptV0PhurBuxUCIEzv6wPB/hilVyp2KuPi1NTQLNT0fChy/ct1S2TTU/
DXkQmXMnEvytXu/gLMYCsQsRCx5ibZTPt07kJldKtJKMz79E2Y9Ubs0BRQS1wWDQ
V3/ELlGphYUccCIDo23ZXMxaYhBg+TRgnqIUTyKupMB0kkLCUOsSnL1htkSdsD/c
cgMOKdEYeayQD4z8+RptEnw+PJb5T+4PdEai4VBWDYkYDw8XcMbJoEq3T8AfXHOz
UZtIylUJ7NDtfxEZyqRIyUzjBMJnXz6kzMIqwJE0ZjgsYf36IPOLI4xLnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXU30m3aiM4Pc9kuP6om5TnVvsYMB8GA1UdIwQY
MBaAFJHSdnqpEOlX3FNYAlAm5sNwVwotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2RKMmVxa1E2VmZjVTFnQ1VDYm13M0JYQ2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80NGZhYTItNjAzYi00Mzc2LWI4N2Qt
YzQ3NTUyNTQ5NzQxLzEva2RKMmVxa1E2VmZjVTFnQ1VDYm13M0JYQ2kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC80NGZhYTItNjAzYi00Mzc2LWI4N2QtYzQ3NTUyNTQ5NzQx
LzEva2RKMmVxa1E2VmZjVTFnQ1VDYm13M0JYQ2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFGWvPG2
Qf0VjFtldQPGtnFc161U+ZQ1Ut/0I8smHNu1P1fpmnl9WwqTlMZztarXZ2reXpTT
g7vEEfugrzK3LoqvzWa5Z34Wb+05wt12oJbcQcOIn2zuiDayMK7QpKByX5FXz5dZ
C5JHh8xIeVDT68X7CgPg0NLv0FIapRLMi/3yZLdvfSFeq7CE4dkXqOKtXs/e9EvJ
sJ+CqxsyrlZyK9vFVHl6f0nnY1UFsJW5l106zWUOR+3qUy30/BeMWXNmOJGudG0g
K8OFixz7brpljlcbQ9myJHo89VotZVEBQb47W9Vh5CpeHI0jR1PclDd3qVBdboRH
zokBftDikSHDpg==
-----END CERTIFICATE-----
Generated at Sun Jul 20 20:29:41 2025 by rpki-client