Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
File: K0bJzPf_e9zPg3dioOFXvcE1cOA.mft (raw, json)
Hash identifier: ZaOj1yutww4TDFDxM5eNvTTGzmAVOtuvRSk4dJ//LxI=
Subject key identifier: A0:1C:D5:05:05:EA:14:38:5B:88:43:FD:30:3B:DB:12:58:9D:F3:34
Authority key identifier: 2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
Certificate issuer: /CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Certificate serial: 0199221E4F3158466A6AB6627E20F5DBA9CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
Manifest number: 0682
Signing time: Sun 07 Sep 2025 03:00:35 +0000
Manifest this update: Sun 07 Sep 2025 03:00:35 +0000
Manifest next update: Mon 08 Sep 2025 03:00:35 +0000
Files and hashes: 1: K0bJzPf_e9zPg3dioOFXvcE1cOA.crl (hash: 0KGDKRvLK6gIKlL/FbWuJe7ZkmMIhmRXsUSJ87ykVgs=)
2: qLWefGaIQEsRkcA1tO3guUVq3OU.roa (hash: xslOk/6LQdIGFli9jwCBp6kVRfq8yxFvis0Kh4JP+fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:4f:31:58:46:6a:6a:b6:62:7e:20:f5:db:a9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Validity
Not Before: Sep 7 03:00:35 2025 GMT
Not After : Sep 8 03:00:35 2025 GMT
Subject: CN=a01cd50505ea14385b8843fd303bdb12589df334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:71:e7:d4:8b:96:84:00:9c:7d:60:a7:21:d0:
f1:7f:82:6e:b6:3e:1a:88:4a:2e:bc:73:f8:de:b1:
38:fa:51:e2:94:97:12:bb:91:bd:f5:ce:4f:fd:be:
32:ba:13:76:56:2e:ca:8f:79:ea:2d:69:47:f2:bf:
8a:ea:09:cf:4a:53:70:99:9a:2c:e5:f0:bf:06:bd:
c4:40:ea:55:dc:83:7f:4d:8b:c1:d5:68:b3:78:3e:
71:b6:ec:7e:e0:ef:88:1a:80:ff:7a:a2:8e:9b:a2:
31:b0:4c:a5:29:2f:63:ce:5e:8c:c6:0d:78:74:d7:
65:d5:23:55:d5:16:2a:b5:b9:cd:f3:41:97:87:41:
7f:bb:bd:ad:e3:91:5d:3e:98:9c:f7:cb:02:c6:2b:
40:48:c3:e9:f0:62:a5:25:4a:13:d8:44:b3:b0:b0:
30:05:1a:0f:de:20:4c:9b:29:2a:eb:23:4c:d9:f4:
a8:fb:84:e5:08:0c:9c:89:fd:bd:93:41:d9:f7:0f:
16:8f:f6:a0:f6:5f:0e:87:d2:4c:23:68:ef:36:43:
68:a3:67:c5:d6:80:af:e2:a6:8e:3e:87:c1:65:e4:
94:d9:d2:4f:78:f1:a4:9e:67:23:d5:0b:ef:92:f0:
4c:09:80:74:25:b6:d4:a2:18:37:8f:5b:68:ec:c4:
5e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1C:D5:05:05:EA:14:38:5B:88:43:FD:30:3B:DB:12:58:9D:F3:34
X509v3 Authority Key Identifier:
keyid:2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a9:04:35:78:27:f0:26:e2:37:4d:bf:f7:53:af:69:c2:ea:
13:df:31:d7:33:ad:5a:42:1b:9e:87:16:3a:08:b5:02:55:69:
36:07:27:b2:c8:ab:71:c7:55:82:da:0d:81:24:db:7c:98:cf:
fb:f7:ce:4a:38:76:a7:fc:1c:e9:31:1c:03:21:77:e1:97:9b:
da:e6:cd:32:24:04:96:61:50:02:36:62:1c:18:89:da:89:fe:
11:db:ad:34:3e:1b:51:0a:80:c6:e2:b1:d9:cd:a8:4e:5e:4f:
24:4b:db:a6:cc:4d:71:97:6e:49:78:93:53:61:22:37:31:af:
52:b7:9e:20:76:54:7b:e1:67:be:b3:03:1c:fa:8f:b5:ee:f2:
92:1f:d8:cf:c6:e4:0f:cf:87:9b:5d:91:49:94:86:7a:d5:52:
43:66:58:2f:61:16:94:2c:8a:d1:93:90:50:be:34:f0:50:d2:
ef:0d:28:72:87:12:7c:9b:cf:09:94:37:58:db:3f:02:ae:a9:
6f:39:99:ce:e8:94:18:59:86:36:da:d1:8f:2a:a8:eb:51:67:
b2:3a:44:74:21:67:22:67:6c:fc:6f:58:f1:ef:8a:09:37:72:
ac:bf:59:10:ad:bb:39:98:b9:7a:82:d9:7a:2d:78:5a:fe:fa:
19:eb:64:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHk8xWEZqarZifiD126nOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNDZjOWNjZjdmZjdiZGNjZjgzNzc2MmEwZTE1N2JkYzEz
NTcwZTAwHhcNMjUwOTA3MDMwMDM1WhcNMjUwOTA4MDMwMDM1WjAzMTEwLwYDVQQD
EyhhMDFjZDUwNTA1ZWExNDM4NWI4ODQzZmQzMDNiZGIxMjU4OWRmMzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXHn1IuWhACcfWCnIdDxf4Jutj4a
iEouvHP43rE4+lHilJcSu5G99c5P/b4yuhN2Vi7Kj3nqLWlH8r+K6gnPSlNwmZos
5fC/Br3EQOpV3IN/TYvB1WizeD5xtux+4O+IGoD/eqKOm6IxsEylKS9jzl6Mxg14
dNdl1SNV1RYqtbnN80GXh0F/u72t45FdPpic98sCxitASMPp8GKlJUoT2ESzsLAw
BRoP3iBMmykq6yNM2fSo+4TlCAycif29k0HZ9w8Wj/ag9l8Oh9JMI2jvNkNoo2fF
1oCv4qaOPofBZeSU2dJPePGknmcj1QvvkvBMCYB0JbbUohg3j1to7MRehQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAc1QUF6hQ4W4hD/TA72xJYnfM0MB8GA1UdIwQY
MBaAFCtGycz3/3vcz4N3YqDhV73BNXDgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzBiSnpQZl9lOXpQZzNkaW9PRlh2Y0UxY09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zNGNjZmUtODBlNi00ZDk2LWI5Njgt
YzdhMmQ1ZjlmZDYwLzEvSzBiSnpQZl9lOXpQZzNkaW9PRlh2Y0UxY09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zNGNjZmUtODBlNi00ZDk2LWI5NjgtYzdhMmQ1ZjlmZDYw
LzEvSzBiSnpQZl9lOXpQZzNkaW9PRlh2Y0UxY09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKkENXgn
8CbiN02/91OvacLqE98x1zOtWkIbnocWOgi1AlVpNgcnssirccdVgtoNgSTbfJjP
+/fOSjh2p/wc6TEcAyF34Zeb2ubNMiQElmFQAjZiHBiJ2on+EdutND4bUQqAxuKx
2c2oTl5PJEvbpsxNcZduSXiTU2EiNzGvUreeIHZUe+FnvrMDHPqPte7ykh/Yz8bk
D8+Hm12RSZSGetVSQ2ZYL2EWlCyK0ZOQUL408FDS7w0ococSfJvPCZQ3WNs/Aq6p
bzmZzuiUGFmGNtrRjyqo61FnsjpEdCFnImds/G9Y8e+KCTdyrL9ZEK27OZi5eoLZ
ei14Wv76GetkyA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:18 2025 by rpki-client