Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
File: ks_7H6VV_DWhSvymELOBBf1cZFw.mft (raw, json)
Hash identifier: Tl7xgz+kqQi1EJ5WiW3+tH7N856DyoCC9OSpDXglbG8=
Subject key identifier: 65:5A:CD:B4:17:42:9A:D8:CB:EB:CF:73:6D:0B:0A:A8:0F:CA:DD:E6
Authority key identifier: 92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C
Certificate issuer: /CN=92cffb1fa555fc35a14afca610b38105fd5c645c
Certificate serial: 0199239F71E2A1B2DE3CC23572C91026E8D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
Manifest number: 0E6F
Signing time: Sun 07 Sep 2025 10:01:15 +0000
Manifest this update: Sun 07 Sep 2025 10:01:15 +0000
Manifest next update: Mon 08 Sep 2025 10:01:15 +0000
Files and hashes: 1: ks_7H6VV_DWhSvymELOBBf1cZFw.crl (hash: Vnq7ll9A9cvmsvazMnoFv5wnQQrNxpsrYiEpiBZM8sA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:71:e2:a1:b2:de:3c:c2:35:72:c9:10:26:e8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cffb1fa555fc35a14afca610b38105fd5c645c
Validity
Not Before: Sep 7 10:01:15 2025 GMT
Not After : Sep 8 10:01:15 2025 GMT
Subject: CN=655acdb417429ad8cbebcf736d0b0aa80fcadde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c0:53:0c:8f:75:cf:6b:72:42:e7:0c:e2:b3:
7b:ff:4d:26:00:36:97:71:75:33:41:1e:89:3a:e4:
48:8a:c9:a2:ea:3b:79:1c:89:d4:06:cc:75:ba:ae:
ad:cb:9c:83:d2:0c:1e:6a:a5:c4:86:8a:5c:e7:b2:
52:09:7c:ce:ba:ad:73:8d:f3:8a:99:5b:ab:98:fc:
95:d9:7e:48:6b:14:a1:aa:00:8b:9a:f3:71:39:c9:
ce:4d:74:85:07:6b:c6:44:5f:cb:46:92:a5:eb:59:
93:c1:bc:1d:3b:1a:e1:d8:36:bd:2e:c0:9d:7b:4e:
12:1c:30:88:70:1c:77:52:65:8f:42:ca:c9:ed:d8:
4a:76:28:99:32:b6:d7:9e:b2:87:70:97:1d:c1:79:
7f:40:2a:59:32:60:54:09:f0:3d:08:c3:83:5e:6c:
bb:51:14:68:bb:24:a7:56:fd:d4:3f:b1:bf:b4:83:
9a:0f:2e:08:71:13:cd:52:88:d5:10:67:01:1a:6f:
07:72:7f:ef:3e:25:25:4d:2b:32:67:8c:79:56:f6:
15:2a:38:17:ae:8d:5c:ae:74:9d:7e:50:d3:a5:61:
5a:e3:71:be:a7:10:f3:b2:88:53:61:f1:aa:8b:92:
26:83:24:82:94:d7:c4:7f:9a:6a:20:22:73:df:a6:
d2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5A:CD:B4:17:42:9A:D8:CB:EB:CF:73:6D:0B:0A:A8:0F:CA:DD:E6
X509v3 Authority Key Identifier:
keyid:92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e9:6e:39:ac:4d:5c:aa:45:2b:dd:46:27:28:d3:5c:2d:02:
18:f6:8d:3d:ee:3a:e7:2e:5d:21:92:f9:92:80:2b:c1:1a:c2:
1b:d9:39:91:21:ba:bd:a0:3e:a6:12:71:33:33:ec:71:32:f3:
2f:22:f5:5e:80:fc:cd:f3:7b:db:fd:99:b2:c1:17:bc:61:f0:
66:02:02:ab:8f:cc:73:5b:76:db:a1:52:fb:cd:c2:5b:55:db:
3e:cc:7b:af:1a:94:4b:a0:28:a2:fc:b1:10:71:8c:1c:fd:40:
ad:e0:80:05:84:97:6e:94:5c:16:ce:e4:21:a9:95:cb:af:57:
b0:ef:b3:b0:95:36:4d:dd:c7:bb:e5:58:cd:17:e0:ee:1b:82:
bd:0e:48:aa:bc:c4:89:fd:09:23:75:ca:09:ca:aa:6d:0a:5e:
84:4d:0e:5c:ee:b2:d3:08:fd:7e:e3:eb:c2:d5:ae:22:a4:45:
c0:ad:bd:54:f8:44:62:2f:ce:c8:e0:d1:c9:68:fb:46:8f:3b:
f1:09:74:f0:fa:b3:e3:7a:45:53:0a:e0:4e:59:71:33:98:c5:
96:22:c7:36:3d:62:73:66:41:61:cd:e9:65:38:67:62:5d:fc:
a2:99:5b:db:fc:9b:84:87:38:8f:4e:e9:11:df:ff:34:fa:cf:
35:c8:14:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn3HiobLePMI1cskQJujUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyY2ZmYjFmYTU1NWZjMzVhMTRhZmNhNjEwYjM4MTA1ZmQ1
YzY0NWMwHhcNMjUwOTA3MTAwMTE1WhcNMjUwOTA4MTAwMTE1WjAzMTEwLwYDVQQD
Eyg2NTVhY2RiNDE3NDI5YWQ4Y2JlYmNmNzM2ZDBiMGFhODBmY2FkZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysBTDI91z2tyQucM4rN7/00mADaX
cXUzQR6JOuRIismi6jt5HInUBsx1uq6ty5yD0gweaqXEhopc57JSCXzOuq1zjfOK
mVurmPyV2X5IaxShqgCLmvNxOcnOTXSFB2vGRF/LRpKl61mTwbwdOxrh2Da9LsCd
e04SHDCIcBx3UmWPQsrJ7dhKdiiZMrbXnrKHcJcdwXl/QCpZMmBUCfA9CMODXmy7
URRouySnVv3UP7G/tIOaDy4IcRPNUojVEGcBGm8Hcn/vPiUlTSsyZ4x5VvYVKjgX
ro1crnSdflDTpWFa43G+pxDzsohTYfGqi5ImgySClNfEf5pqICJz36bSIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVazbQXQprYy+vPc20LCqgPyt3mMB8GA1UdIwQY
MBaAFJLP+x+lVfw1oUr8phCzgQX9XGRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3NfN0g2VlZfRFdoU3Z5bUVMT0JCZjFjWkZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9mZjUxYTAtYTFiMS00MTliLTg1MTgt
NmJiNWQ0ZDJlNTM5LzEva3NfN0g2VlZfRFdoU3Z5bUVMT0JCZjFjWkZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9mZjUxYTAtYTFiMS00MTliLTg1MTgtNmJiNWQ0ZDJlNTM5
LzEva3NfN0g2VlZfRFdoU3Z5bUVMT0JCZjFjWkZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgeluOaxN
XKpFK91GJyjTXC0CGPaNPe465y5dIZL5koArwRrCG9k5kSG6vaA+phJxMzPscTLz
LyL1XoD8zfN72/2ZssEXvGHwZgICq4/Mc1t226FS+83CW1XbPsx7rxqUS6Aoovyx
EHGMHP1AreCABYSXbpRcFs7kIamVy69XsO+zsJU2Td3Hu+VYzRfg7huCvQ5IqrzE
if0JI3XKCcqqbQpehE0OXO6y0wj9fuPrwtWuIqRFwK29VPhEYi/OyODRyWj7Ro87
8Ql08Pqz43pFUwrgTllxM5jFliLHNj1ic2ZBYc3pZThnYl38oplb2/ybhIc4j07p
Ed//NPrPNcgUiA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:11 2025 by rpki-client