Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
File: K6cIjjnnrYgXt9EOoqW4oJikegs.mft (raw, json)
Hash identifier: ZRvbNF+n+RyZL7G8jBFB1L8GDDoTFJNCscpAuPBqyv0=
Subject key identifier: 4A:3E:5E:D6:A0:D2:E9:3F:8C:76:C1:BC:8D:F0:F2:84:3E:A4:D0:9E
Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
Certificate issuer: /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Certificate serial: 019922C39626BED3B245E3A9D808071B3172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 06:01:07 +0000
Manifest this update: Sun 07 Sep 2025 06:01:07 +0000
Manifest next update: Mon 08 Sep 2025 06:01:07 +0000
Files and hashes: 1: K6cIjjnnrYgXt9EOoqW4oJikegs.crl (hash: TkHKauEtfhmtP3ysNLUPwo6FC3YsxkX/7XDFRsD6/uw=)
2: nFthzao_iVS1TdMPq7jAXyRRLuU.roa (hash: NXsb3alCPuDvQ88g31RvJaxIIcKhEe221c9ghi3si40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:96:26:be:d3:b2:45:e3:a9:d8:08:07:1b:31:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Validity
Not Before: Sep 7 06:01:07 2025 GMT
Not After : Sep 8 06:01:07 2025 GMT
Subject: CN=4a3e5ed6a0d2e93f8c76c1bc8df0f2843ea4d09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2f:bf:4f:06:95:4e:84:ec:6b:65:3e:28:4a:
98:a0:76:6c:e1:fd:f4:89:c2:7e:bf:31:40:c8:0e:
6d:f9:c2:f0:36:ef:f3:7a:b3:08:7d:b5:29:30:95:
44:6c:8d:0f:64:2b:e9:5d:4f:bc:73:32:22:ff:26:
d1:2d:ee:57:45:3a:e0:cb:e8:19:a0:b5:c2:f5:92:
51:86:4d:b3:28:52:b6:f8:86:d3:9c:6a:ff:50:1a:
07:03:cf:e4:cb:3a:a8:75:2b:4b:bb:f4:9e:eb:b0:
04:e1:a2:30:03:ce:5e:8d:82:2d:e0:5e:2d:88:c7:
8e:c6:5c:e8:b9:2a:b3:b4:50:2e:1b:ca:3a:2e:5a:
c1:64:86:48:23:52:49:31:94:53:a5:50:e4:ad:ef:
28:ed:e2:4b:31:71:36:f5:c9:9c:1f:66:6b:84:db:
25:7e:bf:ae:fd:d8:8a:e1:cc:f8:f5:e2:16:86:cb:
c5:d2:f0:57:7f:9f:60:3b:89:0a:c2:a1:e0:00:42:
71:f0:51:a2:7b:bd:5e:ec:e0:ca:07:f4:71:43:c1:
dd:5e:6d:b9:9b:8e:1f:26:b6:15:d7:22:88:92:d5:
b6:09:bd:fa:9a:dc:91:a2:30:0f:87:26:3b:09:63:
38:8e:a0:0c:95:42:d9:dd:04:31:eb:f7:f2:fd:e8:
c6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3E:5E:D6:A0:D2:E9:3F:8C:76:C1:BC:8D:F0:F2:84:3E:A4:D0:9E
X509v3 Authority Key Identifier:
keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:87:18:3f:5d:14:87:11:03:b3:ac:b3:ec:21:ac:20:3f:1d:
e5:84:55:f2:32:38:fd:a3:c0:b7:59:e1:ab:74:b4:f9:bd:69:
45:76:6c:67:f2:54:b1:b1:d2:0d:db:c7:57:a5:57:a5:f8:d4:
56:11:ab:df:03:6d:26:ff:08:85:45:a3:51:2d:20:e1:fb:6b:
b7:69:ce:b0:05:3c:6e:47:a7:c5:fe:f4:92:75:57:b0:a1:a2:
2e:30:96:d7:d1:00:bb:55:35:41:dc:fc:e4:fe:4a:b3:24:d2:
80:e6:0e:cc:12:e8:3f:42:92:03:16:48:b4:0e:c4:99:58:b2:
0a:c6:44:8b:61:84:db:87:0a:4b:8d:07:be:e2:2f:61:47:17:
c4:a2:cc:d0:73:be:b4:3c:26:ac:38:bf:21:b1:94:26:80:bd:
45:63:fe:67:05:6e:c2:c9:3a:ff:33:04:e0:aa:f6:38:db:fb:
df:0e:93:8d:60:0a:48:45:75:b4:9c:91:de:df:a0:2e:d2:f2:
2a:2c:28:5f:49:35:53:3d:fb:12:b6:a7:72:ef:96:62:3b:17:
52:a0:1e:86:de:22:49:38:c3:62:fc:83:fa:08:f2:3f:66:df:
01:28:5b:10:4f:b5:34:bc:f8:30:f3:b9:99:41:a2:8f:3b:b8:
6a:79:d5:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw5YmvtOyReOp2AgHGzFyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYTcwODhlMzllN2FkODgxN2I3ZDEwZWEyYTViOGEwOThh
NDdhMGIwHhcNMjUwOTA3MDYwMTA3WhcNMjUwOTA4MDYwMTA3WjAzMTEwLwYDVQQD
Eyg0YTNlNWVkNmEwZDJlOTNmOGM3NmMxYmM4ZGYwZjI4NDNlYTRkMDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi+/TwaVToTsa2U+KEqYoHZs4f30
icJ+vzFAyA5t+cLwNu/zerMIfbUpMJVEbI0PZCvpXU+8czIi/ybRLe5XRTrgy+gZ
oLXC9ZJRhk2zKFK2+IbTnGr/UBoHA8/kyzqodStLu/Se67AE4aIwA85ejYIt4F4t
iMeOxlzouSqztFAuG8o6LlrBZIZII1JJMZRTpVDkre8o7eJLMXE29cmcH2ZrhNsl
fr+u/diK4cz49eIWhsvF0vBXf59gO4kKwqHgAEJx8FGie71e7ODKB/RxQ8HdXm25
m44fJrYV1yKIktW2Cb36mtyRojAPhyY7CWM4jqAMlULZ3QQx6/fy/ejGaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEo+Xtag0uk/jHbBvI3w8oQ+pNCeMB8GA1UdIwQY
MBaAFCunCI45562IF7fRDqKluKCYpHoLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzZjSWpqbm5yWWdYdDlFT29xVzRvSmlrZWdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9iZjU4YzUtZjNlMi00MWFjLWEyMTYt
NGE2N2U0ZDA1NmFiLzEvSzZjSWpqbm5yWWdYdDlFT29xVzRvSmlrZWdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9iZjU4YzUtZjNlMi00MWFjLWEyMTYtNGE2N2U0ZDA1NmFi
LzEvSzZjSWpqbm5yWWdYdDlFT29xVzRvSmlrZWdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4cYP10U
hxEDs6yz7CGsID8d5YRV8jI4/aPAt1nhq3S0+b1pRXZsZ/JUsbHSDdvHV6VXpfjU
VhGr3wNtJv8IhUWjUS0g4ftrt2nOsAU8bkenxf70knVXsKGiLjCW19EAu1U1Qdz8
5P5KsyTSgOYOzBLoP0KSAxZItA7EmViyCsZEi2GE24cKS40HvuIvYUcXxKLM0HO+
tDwmrDi/IbGUJoC9RWP+ZwVuwsk6/zME4Kr2ONv73w6TjWAKSEV1tJyR3t+gLtLy
KiwoX0k1Uz37Erancu+WYjsXUqAeht4iSTjDYvyD+gjyP2bfAShbEE+1NLz4MPO5
mUGijzu4annVQQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:32 2025 by rpki-client