Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.mft
File: KMWxDr1MOSkgFDB-h_prHJtCFn0.mft (raw, json)
Hash identifier: MmgNZcEH+oVBDLiojLSFYhAErcoOQbueeivW6T3ilug=
Subject key identifier: 84:A9:26:F5:08:30:E7:21:93:ED:F7:A6:0D:DE:54:25:F1:D9:BC:E5
Authority key identifier: 28:C5:B1:0E:BD:4C:39:29:20:14:30:7E:87:FA:6B:1C:9B:42:16:7D
Certificate issuer: /CN=28c5b10ebd4c39292014307e87fa6b1c9b42167d
Certificate serial: 0199239ED6D2BA11D2193A272819C0E16D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMWxDr1MOSkgFDB-h_prHJtCFn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.mft
Manifest number: 0711
Signing time: Sun 07 Sep 2025 10:00:36 +0000
Manifest this update: Sun 07 Sep 2025 10:00:36 +0000
Manifest next update: Mon 08 Sep 2025 10:00:36 +0000
Files and hashes: 1: KMWxDr1MOSkgFDB-h_prHJtCFn0.crl (hash: ACp9VbGbuSc5XScZ5YSuXRB5mgDXI6SiXwgMl2rwocY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMWxDr1MOSkgFDB-h_prHJtCFn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:d6:d2:ba:11:d2:19:3a:27:28:19:c0:e1:6d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c5b10ebd4c39292014307e87fa6b1c9b42167d
Validity
Not Before: Sep 7 10:00:36 2025 GMT
Not After : Sep 8 10:00:36 2025 GMT
Subject: CN=84a926f50830e72193edf7a60dde5425f1d9bce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:db:28:0b:84:ca:af:f5:9d:7a:ab:ad:e3:88:
e6:62:f1:72:e4:d5:b3:35:e1:3c:89:4b:e1:61:15:
97:57:0f:c6:b8:e9:57:fc:78:90:83:79:03:7b:fe:
48:c0:91:ef:18:42:c6:a0:a7:52:3d:64:08:65:50:
71:f7:c5:7b:1f:62:bd:80:32:a5:02:4a:bc:e6:fc:
db:40:0b:90:ea:38:95:04:38:99:cb:de:9c:f3:07:
f3:dc:38:8f:d3:27:09:06:52:0e:a5:d0:fb:3d:42:
be:09:b6:72:22:eb:e5:2a:bc:f4:2c:06:f6:e7:d9:
3f:f4:7e:cb:6f:dc:e1:1f:d3:05:12:5c:10:6a:c8:
b6:f6:4d:dd:28:90:c8:49:2f:d3:fc:f3:fa:ab:72:
9d:c8:17:15:98:c1:6e:03:f1:af:cc:c3:bc:25:e6:
fa:ac:54:cd:7e:2c:73:01:9b:76:b5:bc:14:1a:2d:
d1:1a:82:11:5b:c0:0c:df:ce:0e:00:bc:8c:56:db:
07:3f:2f:ce:12:96:9e:09:fe:71:f3:08:f5:79:b4:
1e:fb:f5:3c:88:fa:24:63:d4:4f:1e:3c:ca:1d:b9:
c9:21:37:0f:c9:b7:fd:d8:75:94:7b:e9:1e:6c:fc:
57:05:a0:0d:30:ec:dd:9b:b9:84:05:b7:46:8a:0e:
20:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A9:26:F5:08:30:E7:21:93:ED:F7:A6:0D:DE:54:25:F1:D9:BC:E5
X509v3 Authority Key Identifier:
keyid:28:C5:B1:0E:BD:4C:39:29:20:14:30:7E:87:FA:6B:1C:9B:42:16:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMWxDr1MOSkgFDB-h_prHJtCFn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8e:90:42:2d:24:8e:db:45:39:d5:eb:15:2e:a0:6b:a5:b8:
66:b6:87:e4:a5:b7:96:49:3e:e0:95:59:9e:f9:04:28:4b:e8:
cf:66:52:4e:27:4b:33:17:da:2c:d3:59:03:64:bf:68:2b:dc:
62:bd:7e:a9:55:33:06:a1:4e:a0:b2:c7:16:97:f1:47:5c:78:
04:aa:9b:c0:86:bc:6f:5f:e9:c8:14:52:2b:fd:c0:11:9e:8a:
5a:81:87:14:0b:9a:8d:c2:33:97:c5:46:69:f6:41:b4:8b:43:
75:18:94:f3:b9:a8:cf:6f:20:44:43:29:10:df:7f:e2:91:80:
89:f3:ab:7e:b4:eb:78:f9:c4:b2:f8:25:9c:7e:4d:72:11:76:
3e:d6:3c:1f:47:29:bd:d6:6a:1b:e7:b7:63:43:da:53:36:42:
93:ab:9c:0a:ae:dc:e8:8e:ed:ac:db:0c:2f:81:e4:88:1f:ad:
6b:63:a4:4b:8b:84:7a:02:ca:34:fd:6b:89:a6:54:92:2e:56:
d1:b1:b0:36:7c:88:cb:57:32:85:43:f7:72:80:71:4d:59:62:
64:fc:e0:0b:fb:dc:82:32:a7:8f:e3:a4:e0:f1:91:d0:55:8c:
57:ba:c2:98:65:b9:51:66:c6:dd:19:95:35:05:e6:b2:60:da:
62:d7:9a:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjntbSuhHSGTonKBnA4W1vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YzViMTBlYmQ0YzM5MjkyMDE0MzA3ZTg3ZmE2YjFjOWI0
MjE2N2QwHhcNMjUwOTA3MTAwMDM2WhcNMjUwOTA4MTAwMDM2WjAzMTEwLwYDVQQD
Eyg4NGE5MjZmNTA4MzBlNzIxOTNlZGY3YTYwZGRlNTQyNWYxZDliY2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNsoC4TKr/Wdequt44jmYvFy5NWz
NeE8iUvhYRWXVw/GuOlX/HiQg3kDe/5IwJHvGELGoKdSPWQIZVBx98V7H2K9gDKl
Akq85vzbQAuQ6jiVBDiZy96c8wfz3DiP0ycJBlIOpdD7PUK+CbZyIuvlKrz0LAb2
59k/9H7Lb9zhH9MFElwQasi29k3dKJDISS/T/PP6q3KdyBcVmMFuA/GvzMO8Jeb6
rFTNfixzAZt2tbwUGi3RGoIRW8AM384OALyMVtsHPy/OEpaeCf5x8wj1ebQe+/U8
iPokY9RPHjzKHbnJITcPybf92HWUe+kebPxXBaANMOzdm7mEBbdGig4gSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISpJvUIMOchk+33pg3eVCXx2bzlMB8GA1UdIwQY
MBaAFCjFsQ69TDkpIBQwfof6axybQhZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS01XeERyMU1PU2tnRkRCLWhfcHJISnRDRm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85YWIwMmMtMGFjOC00N2YxLThjN2Mt
YTYyOWQxOTc2ZWEzLzEvS01XeERyMU1PU2tnRkRCLWhfcHJISnRDRm4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC85YWIwMmMtMGFjOC00N2YxLThjN2MtYTYyOWQxOTc2ZWEz
LzEvS01XeERyMU1PU2tnRkRCLWhfcHJISnRDRm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa46QQi0k
jttFOdXrFS6ga6W4ZraH5KW3lkk+4JVZnvkEKEvoz2ZSTidLMxfaLNNZA2S/aCvc
Yr1+qVUzBqFOoLLHFpfxR1x4BKqbwIa8b1/pyBRSK/3AEZ6KWoGHFAuajcIzl8VG
afZBtItDdRiU87moz28gREMpEN9/4pGAifOrfrTrePnEsvglnH5NchF2PtY8H0cp
vdZqG+e3Y0PaUzZCk6ucCq7c6I7trNsML4HkiB+ta2OkS4uEegLKNP1riaZUki5W
0bGwNnyIy1cyhUP3coBxTVliZPzgC/vcgjKnj+Ok4PGR0FWMV7rCmGW5UWbG3RmV
NQXmsmDaYteapw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:36 2025 by rpki-client