Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
File: _KXnwS9jZpo_aAySaEpD-ohO0Uw.mft (raw, json)
Hash identifier: B250Nww0SW8ag+5J0KmdeF2XuUEaZuCKKUE+kLLLI9U=
Subject key identifier: 4B:9E:3F:4F:13:D1:93:02:28:3B:AB:F3:73:92:62:23:88:60:34:CB
Authority key identifier: FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C
Certificate issuer: /CN=fca5e7c12f63669a3f680c92684a43fa884ed14c
Certificate serial: 0199221EC7BF35CDB65CD6C4779BCEEF8FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
Manifest number: 1573
Signing time: Sun 07 Sep 2025 03:01:06 +0000
Manifest this update: Sun 07 Sep 2025 03:01:06 +0000
Manifest next update: Mon 08 Sep 2025 03:01:06 +0000
Files and hashes: 1: _KXnwS9jZpo_aAySaEpD-ohO0Uw.crl (hash: fENaKfK4QnPD/oqbzOq53Wou5myA8zZG6ac9pB8jGoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:c7:bf:35:cd:b6:5c:d6:c4:77:9b:ce:ef:8f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca5e7c12f63669a3f680c92684a43fa884ed14c
Validity
Not Before: Sep 7 03:01:06 2025 GMT
Not After : Sep 8 03:01:06 2025 GMT
Subject: CN=4b9e3f4f13d19302283babf373926223886034cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6d:83:45:43:a8:74:b0:7a:78:5f:e0:05:9d:
d4:50:0d:bb:5f:e8:56:10:20:ed:8d:69:4d:c3:a2:
e6:1f:a7:72:e1:b2:12:0c:b3:03:24:db:0a:87:66:
21:71:f0:38:9d:34:5b:b2:cc:8e:38:be:33:a6:fb:
a5:b6:eb:3b:24:24:b6:73:c0:e5:38:1e:8a:ff:eb:
bd:f9:ce:ba:3c:41:1e:7c:dd:bd:3c:78:4a:b0:e5:
64:de:ad:4a:bd:9d:36:d7:f6:55:95:60:37:e8:bf:
2f:c0:91:a6:08:e4:c5:c7:ae:38:ba:cb:d1:79:97:
09:e8:9f:b1:ac:c7:21:12:90:99:7b:d1:75:a2:4f:
1d:12:25:6b:85:82:35:25:e9:95:d8:19:6b:ec:e2:
27:52:b8:0a:38:11:44:05:e1:12:e9:ba:d1:a7:67:
1f:8a:da:dc:6b:46:f4:b7:76:1c:f7:34:20:c9:c8:
dc:63:77:48:27:fc:9f:f7:7d:ea:af:c5:b0:61:3a:
d6:4d:92:1a:5b:25:7b:18:a5:d5:0a:06:57:ae:6e:
bf:3d:98:8c:d6:1e:fd:70:81:e1:e8:75:07:fa:f4:
12:a1:60:c8:24:98:4e:ba:5d:5d:0a:0c:1f:b4:74:
fa:fa:89:70:d1:00:93:a0:f9:94:93:04:fa:f9:8c:
2b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9E:3F:4F:13:D1:93:02:28:3B:AB:F3:73:92:62:23:88:60:34:CB
X509v3 Authority Key Identifier:
keyid:FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8c:98:5d:9a:58:31:c4:e8:db:2f:69:b6:61:8d:c5:08:a9:
81:e8:aa:76:ab:79:ae:be:17:ab:4f:7f:38:e8:8d:13:87:61:
88:e7:67:8f:90:a3:c3:b9:f5:3d:47:0a:43:9e:9c:d6:35:35:
92:77:5c:8c:97:94:89:c9:9a:03:14:08:21:64:7c:b6:cd:f5:
6d:de:6f:14:da:df:75:94:a6:36:9d:f6:de:89:64:57:2c:87:
e0:b7:b2:e4:90:4d:35:57:84:74:fe:28:59:dd:5f:77:95:5a:
b6:f6:e0:fe:2a:50:c3:b8:56:bf:b1:fc:c7:d5:75:c0:03:2a:
55:9b:b2:b4:b4:e4:9d:d0:9b:56:a5:53:e0:92:22:e7:0f:4b:
e9:31:79:cb:84:f7:1b:1e:f8:6f:a3:8e:8e:6e:91:f2:2d:d3:
b2:bc:dc:2a:1d:1e:d3:81:9d:8f:be:bd:90:6b:4c:55:6b:1d:
5e:23:f5:60:75:24:a9:18:3f:8a:8c:45:f0:e6:a4:d6:4e:b0:
07:2c:e2:63:b6:9f:96:19:c5:af:73:e8:94:1f:cb:44:26:8c:
af:0c:0c:97:1c:41:4c:9a:4e:21:cb:3c:f4:a1:8d:bf:92:30:
bc:44:24:6b:4a:9f:af:a5:e8:12:c0:57:6b:49:ff:a4:40:14:
41:2f:e8:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHse/Nc22XNbEd5vO74+sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYTVlN2MxMmY2MzY2OWEzZjY4MGM5MjY4NGE0M2ZhODg0
ZWQxNGMwHhcNMjUwOTA3MDMwMTA2WhcNMjUwOTA4MDMwMTA2WjAzMTEwLwYDVQQD
Eyg0YjllM2Y0ZjEzZDE5MzAyMjgzYmFiZjM3MzkyNjIyMzg4NjAzNGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G2DRUOodLB6eF/gBZ3UUA27X+hW
ECDtjWlNw6LmH6dy4bISDLMDJNsKh2YhcfA4nTRbssyOOL4zpvultus7JCS2c8Dl
OB6K/+u9+c66PEEefN29PHhKsOVk3q1KvZ021/ZVlWA36L8vwJGmCOTFx644usvR
eZcJ6J+xrMchEpCZe9F1ok8dEiVrhYI1JemV2Blr7OInUrgKOBFEBeES6brRp2cf
itrca0b0t3Yc9zQgycjcY3dIJ/yf933qr8WwYTrWTZIaWyV7GKXVCgZXrm6/PZiM
1h79cIHh6HUH+vQSoWDIJJhOul1dCgwftHT6+olw0QCToPmUkwT6+YwrrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEueP08T0ZMCKDur83OSYiOIYDTLMB8GA1UdIwQY
MBaAFPyl58EvY2aaP2gMkmhKQ/qITtFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0tYbndTOWpacG9fYUF5U2FFcEQtb2hPMFV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC82OWRhMTItYmY0Zi00NzU1LTg3YWUt
NWU5NGYwNDgyYTFkLzEvX0tYbndTOWpacG9fYUF5U2FFcEQtb2hPMFV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC82OWRhMTItYmY0Zi00NzU1LTg3YWUtNWU5NGYwNDgyYTFk
LzEvX0tYbndTOWpacG9fYUF5U2FFcEQtb2hPMFV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEoyYXZpY
McTo2y9ptmGNxQipgeiqdqt5rr4Xq09/OOiNE4dhiOdnj5Cjw7n1PUcKQ56c1jU1
kndcjJeUicmaAxQIIWR8ts31bd5vFNrfdZSmNp323olkVyyH4Ley5JBNNVeEdP4o
Wd1fd5Vatvbg/ipQw7hWv7H8x9V1wAMqVZuytLTkndCbVqVT4JIi5w9L6TF5y4T3
Gx74b6OOjm6R8i3TsrzcKh0e04Gdj769kGtMVWsdXiP1YHUkqRg/ioxF8Oak1k6w
ByziY7aflhnFr3PolB/LRCaMrwwMlxxBTJpOIcs89KGNv5IwvEQka0qfr6XoEsBX
a0n/pEAUQS/oNQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:39 2025 by rpki-client