Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
File: K-U9NAqL9Hwb800yVeEC77GBrRk.mft (raw, json)
Hash identifier: yDyIIqqT+UgI6FIHbHyfBbpaqBxKqThYgoPxbR8ayew=
Subject key identifier: C3:99:11:1C:18:E3:0C:83:B8:AE:3E:9C:89:66:7D:7D:5F:6E:82:4F
Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Certificate serial: 0198499C0B4E3C6F92644B11F56F67A4B028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
Manifest number: 0A57
Signing time: Sun 27 Jul 2025 02:00:19 +0000
Manifest this update: Sun 27 Jul 2025 02:00:19 +0000
Manifest next update: Mon 28 Jul 2025 02:00:19 +0000
Files and hashes: 1: K-U9NAqL9Hwb800yVeEC77GBrRk.crl (hash: RXP8K+0W2iDWzzbyqEdBkCyKD+sha0vhxzUQ7z/5xRk=)
2: QmDTegVSmEYF6fnpKbqY_97oaSM.roa (hash: tHb5J/NaAqeZ3yJpUfHC3cRpeW6+mrRMysLZDeKxz2M=)
3: _tQcgZijvm9qlNfbL3oLbTBqXKw.roa (hash: xWDEvLw1mwcjLwMZNAz8Pf0/GCXvJ3lHopahWXf20MA=)
4: y4GLfgEHHvh7-yMgUWBtC7KLuEc.roa (hash: dQpKnxbZerxvWzLT4LUfokJhZeXYIR/y034iOg9NMks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:0b:4e:3c:6f:92:64:4b:11:f5:6f:67:a4:b0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Validity
Not Before: Jul 27 02:00:19 2025 GMT
Not After : Jul 28 02:00:19 2025 GMT
Subject: CN=c399111c18e30c83b8ae3e9c89667d7d5f6e824f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:70:9e:68:f1:a5:e5:07:96:db:e6:98:ae:1e:
27:31:7e:7b:34:3c:08:1a:1b:ae:26:f9:23:2c:4f:
5b:a3:43:21:aa:e5:40:24:bb:f6:2d:3b:38:bc:ba:
7b:9f:cf:5e:cd:43:08:d4:60:4a:e7:84:19:7d:de:
18:cf:c0:56:41:a0:b7:a9:0c:b9:b4:cf:d7:4a:55:
b7:f0:e2:a9:4a:46:b6:38:56:27:f7:33:42:78:02:
1d:4c:6d:7a:db:8c:4c:5d:38:c2:5d:b4:a3:5d:13:
2d:62:3c:9c:76:fe:94:aa:80:05:cc:36:7e:6b:72:
a9:66:83:a0:e9:1e:c7:d8:b7:b9:a7:32:c7:82:4a:
e8:df:db:ad:9b:fe:90:97:34:9e:23:51:73:3b:f5:
66:f1:82:7f:fe:63:39:5a:64:39:5e:99:1c:f5:a3:
81:61:9b:e6:b4:e6:87:2c:6f:d2:34:af:b1:df:a0:
e2:07:f6:71:87:7f:87:e6:06:d3:d8:f9:10:da:f2:
e4:93:c1:73:69:67:00:d0:22:e0:ba:c2:ba:79:e2:
c4:19:63:90:a0:72:d1:ab:ae:e1:b5:97:88:4d:9b:
9a:bc:ec:4a:08:4e:98:84:ba:6a:07:f9:24:d2:43:
ee:79:a4:d1:82:73:4e:78:af:ae:5e:eb:a2:bb:35:
6d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:99:11:1C:18:E3:0C:83:B8:AE:3E:9C:89:66:7D:7D:5F:6E:82:4F
X509v3 Authority Key Identifier:
keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:67:e8:ba:0e:f5:fe:ac:3f:97:c8:96:00:3c:53:08:ff:a3:
b9:c9:a1:bc:35:bb:23:be:6d:5d:5e:f4:71:70:32:1a:8d:4d:
89:3f:0c:5a:54:37:2f:40:71:4d:f9:96:be:55:14:5f:43:8c:
50:1f:36:ed:0b:20:2d:9c:f4:1b:d3:b8:1b:d3:f5:b6:48:96:
32:b8:09:87:02:2b:bf:eb:5b:19:dd:3a:cc:d2:cf:30:3d:60:
85:a1:ff:d7:6a:11:45:a7:d5:61:fd:c0:a9:6e:ed:9e:b5:2f:
3c:f2:22:64:b4:95:bf:81:94:c9:7f:43:29:09:23:d5:d7:13:
4a:a2:72:cc:35:ec:12:6b:54:9d:22:7d:fd:0f:af:4e:79:94:
c5:d5:60:e6:0d:0d:95:a3:cd:a7:5b:11:8d:87:bc:21:44:9f:
79:b6:f1:a2:98:5c:b2:76:aa:fe:55:00:9a:bc:39:be:29:c9:
0b:d1:07:1f:e7:be:ba:c0:0f:82:6f:bf:1b:ef:32:e8:5e:b5:
7c:04:53:c9:5b:7c:6f:3a:d4:33:71:bf:7c:0b:e7:b4:9b:a3:
89:50:c8:17:0a:8d:d8:2d:07:f9:3d:ff:84:d2:c8:f4:a4:c0:
78:9d:45:f9:76:34:62:61:3e:d5:9b:23:62:0d:6b:c4:95:1a:
72:08:a8:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnAtOPG+SZEsR9W9npLAoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZTUzZDM0MGE4YmY0N2MxYmYzNGQzMjU1ZTEwMmVmYjE4
MWFkMTkwHhcNMjUwNzI3MDIwMDE5WhcNMjUwNzI4MDIwMDE5WjAzMTEwLwYDVQQD
EyhjMzk5MTExYzE4ZTMwYzgzYjhhZTNlOWM4OTY2N2Q3ZDVmNmU4MjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3CeaPGl5QeW2+aYrh4nMX57NDwI
GhuuJvkjLE9bo0MhquVAJLv2LTs4vLp7n89ezUMI1GBK54QZfd4Yz8BWQaC3qQy5
tM/XSlW38OKpSka2OFYn9zNCeAIdTG1624xMXTjCXbSjXRMtYjycdv6UqoAFzDZ+
a3KpZoOg6R7H2Le5pzLHgkro39utm/6QlzSeI1FzO/Vm8YJ//mM5WmQ5Xpkc9aOB
YZvmtOaHLG/SNK+x36DiB/Zxh3+H5gbT2PkQ2vLkk8FzaWcA0CLgusK6eeLEGWOQ
oHLRq67htZeITZuavOxKCE6YhLpqB/kk0kPueaTRgnNOeK+uXuuiuzVtcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOZERwY4wyDuK4+nIlmfX1fboJPMB8GA1UdIwQY
MBaAFCvlPTQKi/R8G/NNMlXhAu+xga0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEt
NzRmMGMzZTY2M2NiLzEvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEtNzRmMGMzZTY2M2Ni
LzEvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtWfoug71
/qw/l8iWADxTCP+jucmhvDW7I75tXV70cXAyGo1NiT8MWlQ3L0BxTfmWvlUUX0OM
UB827QsgLZz0G9O4G9P1tkiWMrgJhwIrv+tbGd06zNLPMD1ghaH/12oRRafVYf3A
qW7tnrUvPPIiZLSVv4GUyX9DKQkj1dcTSqJyzDXsEmtUnSJ9/Q+vTnmUxdVg5g0N
laPNp1sRjYe8IUSfebbxophcsnaq/lUAmrw5vinJC9EHH+e+usAPgm+/G+8y6F61
fARTyVt8bzrUM3G/fAvntJujiVDIFwqN2C0H+T3/hNLI9KTAeJ1F+XY0YmE+1Zsj
Yg1rxJUacgio0Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:44:17 2025 by rpki-client