Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: /0Q82oGsoNjryBwMvza1GneQGo1PJ5N7T0NS2dGew0s=
Subject key identifier: 23:77:E6:3D:B0:18:06:2D:0B:66:8A:79:55:AD:B0:80:EF:06:5C:E1
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 0199161BEACDD94370FA97101195400A1E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 0781
Signing time: Thu 04 Sep 2025 19:02:32 +0000
Manifest this update: Thu 04 Sep 2025 19:02:32 +0000
Manifest next update: Fri 05 Sep 2025 19:02:32 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: smTAfij4SIgyyU9JAy7omfM1FZE0RssMt1nvHqwqedY=)
2: e156A2TTFNsUHYceE64LHXFN6g0.roa (hash: nO0mYNmn3X/br3j4EpG5tdC2In3Gz3kRvtjW6m8kRsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:1b:ea:cd:d9:43:70:fa:97:10:11:95:40:0a:1e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: Sep 4 19:02:32 2025 GMT
Not After : Sep 5 19:02:32 2025 GMT
Subject: CN=2377e63db018062d0b668a7955adb080ef065ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d9:7e:b9:8a:de:2c:41:c8:5f:10:36:68:c4:
1d:c0:0f:ef:95:09:1f:c6:7f:86:4a:47:bc:1c:1e:
c2:fd:71:8f:1e:c9:9e:24:9b:b4:1e:31:59:33:7a:
8d:8a:20:9f:af:8f:41:4b:6d:19:e5:d1:dd:b7:d4:
0d:22:30:c0:a9:71:e3:a4:5d:4a:5b:78:5b:a6:5e:
7d:00:04:fb:19:1b:85:23:79:59:db:c2:e2:13:2a:
d5:50:4f:48:3b:b3:6d:37:9a:81:aa:73:4c:d0:10:
41:03:bf:96:51:54:16:a9:2b:04:1b:87:47:1c:7d:
3f:c2:f7:96:d0:a6:16:ce:7b:5f:fa:2a:3a:1b:f3:
4d:95:b6:c2:20:cd:9e:48:7a:02:71:ad:a3:24:88:
3a:10:a5:47:a8:e6:88:dd:cc:96:71:96:f5:7d:9a:
ad:9b:86:30:f1:1b:32:c1:19:d9:dd:e2:a4:6a:47:
a5:b2:30:5c:b2:d4:9b:26:f0:0c:58:61:19:ce:65:
08:57:8b:c8:c1:da:3d:eb:1c:f9:da:c5:fb:d7:fe:
01:14:4d:28:12:7e:d4:be:42:93:29:0f:f9:46:03:
8d:c5:93:30:e0:c3:ba:d5:44:6f:0f:68:22:34:2b:
ef:ce:67:c2:fb:da:2b:6d:63:d3:68:86:37:31:24:
97:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:77:E6:3D:B0:18:06:2D:0B:66:8A:79:55:AD:B0:80:EF:06:5C:E1
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:51:43:bf:48:04:ff:8c:6a:49:3e:bf:74:9d:95:15:c4:90:
84:d1:d8:94:a8:6a:89:8d:5f:a6:ad:85:b0:6c:00:c3:c0:92:
04:c8:5e:15:bf:99:ad:54:f6:af:c8:26:bd:c7:d9:ae:e2:eb:
07:69:49:8b:ee:25:13:3f:b9:fa:2b:a7:27:5d:16:ab:86:da:
1e:ff:22:4f:5d:27:5f:1d:f9:ab:65:42:81:be:60:1e:3b:7a:
c5:77:cf:81:30:60:11:98:85:b6:14:3d:c8:c6:cc:4a:df:d4:
79:ad:c6:34:e4:5d:28:1d:bc:48:62:9a:16:70:93:61:f9:f4:
b3:5e:8f:f9:d2:4f:12:0d:ab:e5:e0:23:c5:72:aa:a6:7a:fa:
be:98:63:13:b8:f1:35:69:79:ee:69:ef:2a:80:7b:93:49:5c:
8f:b7:88:ea:fd:da:33:f2:89:49:2f:0f:d5:2b:bd:74:0f:0f:
c5:46:14:2f:fe:5f:19:3c:b4:fe:b8:6a:4a:0b:82:93:b8:c0:
85:1c:19:03:cf:a8:5d:93:6a:54:58:2d:1f:77:22:db:ab:2e:
9c:3b:8e:53:c8:87:63:1c:c4:6e:64:73:79:54:32:07:5a:6f:
8a:bd:9d:67:40:85:05:d9:f0:cd:ee:95:c9:a4:9c:ee:7e:cd:
50:52:3b:2f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZkWG+rN2UNw+pcQEZVACh4qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTQ4NTBjN2FiMzBiYmI4YWY4MGRjZjlhYWJjNmI5NTFh
YTY1YTQwHhcNMjUwOTA0MTkwMjMyWhcNMjUwOTA1MTkwMjMyWjAzMTEwLwYDVQQD
EygyMzc3ZTYzZGIwMTgwNjJkMGI2NjhhNzk1NWFkYjA4MGVmMDY1Y2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNl+uYreLEHIXxA2aMQdwA/vlQkf
xn+GSke8HB7C/XGPHsmeJJu0HjFZM3qNiiCfr49BS20Z5dHdt9QNIjDAqXHjpF1K
W3hbpl59AAT7GRuFI3lZ28LiEyrVUE9IO7NtN5qBqnNM0BBBA7+WUVQWqSsEG4dH
HH0/wveW0KYWzntf+io6G/NNlbbCIM2eSHoCca2jJIg6EKVHqOaI3cyWcZb1fZqt
m4Yw8RsywRnZ3eKkakelsjBcstSbJvAMWGEZzmUIV4vIwdo96xz52sX71/4BFE0o
En7UvkKTKQ/5RgONxZMw4MO61URvD2giNCvvzmfC+9orbWPTaIY3MSSXlQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCN35j2wGAYtC2aKeVWtsIDvBlzhMB8GA1UdIwQY
MBaAFPikhQx6swu7ivgNz5qrxrlRqmWkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LU0ZESHF6Qzd1Sy1BM1BtcXZHdVZHcVphUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvMzg5NjlkLTcyNzYtNGYyNy05ZTFj
LTcyODZhYzBhOTA3Yi8xLzEtS1NGREhxekM3dUstQTNQbXF2R3VWR3FaYVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMxLzM4OTY5ZC03Mjc2LTRmMjctOWUxYy03Mjg2YWMwYTkw
N2IvMS8xLUtTRkRIcXpDN3VLLUEzUG1xdkd1VkdxWmFRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq1FD
v0gE/4xqST6/dJ2VFcSQhNHYlKhqiY1fpq2FsGwAw8CSBMheFb+ZrVT2r8gmvcfZ
ruLrB2lJi+4lEz+5+iunJ10Wq4baHv8iT10nXx35q2VCgb5gHjt6xXfPgTBgEZiF
thQ9yMbMSt/Uea3GNORdKB28SGKaFnCTYfn0s16P+dJPEg2r5eAjxXKqpnr6vphj
E7jxNWl57mnvKoB7k0lcj7eI6v3aM/KJSS8P1Su9dA8PxUYUL/5fGTy0/rhqSguC
k7jAhRwZA8+oXZNqVFgtH3ci26sunDuOU8iHYxzEbmRzeVQyB1pvir2dZ0CFBdnw
ze6VyaSc7n7NUFI7Lw==
-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:15 2025 by rpki-client