Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft
File: KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft (raw, json)
Hash identifier: BXvsEDYE7W0xddnnKD3exykrkRWM6u9re/NgLL3l2BA=
Subject key identifier: 1E:DF:B2:DD:D5:FC:BE:95:B8:5D:99:16:74:DA:27:97:3D:FA:EC:64
Authority key identifier: 28:18:D8:93:A6:99:56:1A:94:D0:58:57:4C:62:EE:FD:51:4B:7F:96
Certificate issuer: /CN=2818d893a699561a94d058574c62eefd514b7f96
Certificate serial: 0199244389B153FB29F60F5151DCF93EB7FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft
Manifest number: EC
Signing time: Sun 07 Sep 2025 13:00:29 +0000
Manifest this update: Sun 07 Sep 2025 13:00:29 +0000
Manifest next update: Mon 08 Sep 2025 13:00:29 +0000
Files and hashes: 1: KBjYk6aZVhqU0FhXTGLu_VFLf5Y.crl (hash: txo4hFXtm4xthdKel11DnbEW094YVia0xFHFaJibBDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:89:b1:53:fb:29:f6:0f:51:51:dc:f9:3e:b7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2818d893a699561a94d058574c62eefd514b7f96
Validity
Not Before: Sep 7 13:00:29 2025 GMT
Not After : Sep 8 13:00:29 2025 GMT
Subject: CN=1edfb2ddd5fcbe95b85d991674da27973dfaec64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:d5:fa:dd:d0:36:02:5c:db:c5:99:ee:8f:
16:49:be:ef:13:14:8d:dd:b7:f4:8b:80:59:3b:b8:
0f:bf:64:ad:7c:ae:95:04:e1:a4:fe:eb:81:d1:fe:
39:40:91:42:0d:80:5a:85:d3:81:6a:42:53:d8:05:
41:72:f8:ce:d3:5a:a0:c3:63:9f:81:e6:76:2c:c0:
79:02:5a:b5:85:c5:30:2b:84:78:28:a2:1e:12:4b:
cc:ba:b7:32:cd:61:8a:ec:f5:ff:4d:d7:a6:13:8d:
53:2b:04:a6:a4:03:24:8e:96:9f:7e:28:00:79:80:
fe:18:13:6c:34:85:5b:10:72:27:1d:be:fc:92:1a:
15:73:b3:3f:4b:a1:24:8e:bc:5f:61:f5:89:7e:b0:
74:73:d1:79:31:76:c0:f0:0c:54:72:b7:ed:f3:06:
d8:ed:73:53:66:fa:78:57:cc:a9:e5:b9:f0:b3:a5:
fb:a5:ad:77:ea:e3:9a:ef:ee:b7:fc:25:0a:27:d5:
7b:f8:c4:c2:05:ba:70:48:0c:e7:76:dc:41:2f:92:
a2:3a:e7:2b:9f:0c:7e:34:bc:c4:3e:a4:7e:3e:6e:
0c:ff:3d:77:a9:90:08:45:88:7e:4e:16:3e:9b:32:
f1:3e:90:4f:2b:1c:e3:bf:a2:42:d2:06:af:51:86:
7e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DF:B2:DD:D5:FC:BE:95:B8:5D:99:16:74:DA:27:97:3D:FA:EC:64
X509v3 Authority Key Identifier:
keyid:28:18:D8:93:A6:99:56:1A:94:D0:58:57:4C:62:EE:FD:51:4B:7F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e3:7f:c5:61:0f:48:40:6e:4e:59:a9:55:fb:a4:50:77:59:
83:28:23:ac:dd:b9:7b:20:8f:46:3e:f8:be:86:88:c9:61:25:
38:93:98:ba:10:98:b0:ec:4c:7c:59:50:d1:1a:e5:c9:14:7d:
8a:b5:29:2b:99:ce:85:6d:47:f3:75:ab:d5:7b:a0:5d:f8:1b:
20:ae:b2:e6:dc:cf:5b:bf:03:14:19:67:ca:90:f9:86:fa:b4:
4b:44:35:49:18:08:9c:41:06:c8:e5:a4:62:84:c2:9d:eb:ba:
ad:2c:d4:a7:58:2b:e2:e0:31:78:d6:9e:fb:9f:aa:bd:24:23:
3f:32:42:4b:07:17:7a:21:44:a4:f8:a7:a9:11:a9:12:3f:5d:
e9:db:b2:59:3e:20:e7:15:47:83:ed:09:81:dc:d0:60:1b:0a:
8a:b1:c6:5a:df:21:f5:99:d3:cb:dc:8e:0f:13:a8:03:b7:82:
70:b6:9b:cb:40:48:25:ff:14:8e:1e:33:ef:9f:e1:30:7d:b8:
fe:9c:27:14:98:ba:31:40:91:68:15:e8:f1:f1:9b:85:52:67:
43:11:20:50:f3:f7:56:bc:51:50:be:4a:ba:c5:ed:ec:ce:7e:
df:ae:56:1e:de:06:e9:aa:ea:f0:c5:60:57:b6:67:f7:65:14:
39:d1:5d:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkQ4mxU/sp9g9RUdz5Prf/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MThkODkzYTY5OTU2MWE5NGQwNTg1NzRjNjJlZWZkNTE0
YjdmOTYwHhcNMjUwOTA3MTMwMDI5WhcNMjUwOTA4MTMwMDI5WjAzMTEwLwYDVQQD
EygxZWRmYjJkZGQ1ZmNiZTk1Yjg1ZDk5MTY3NGRhMjc5NzNkZmFlYzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrjV+t3QNgJc28WZ7o8WSb7vExSN
3bf0i4BZO7gPv2StfK6VBOGk/uuB0f45QJFCDYBahdOBakJT2AVBcvjO01qgw2Of
geZ2LMB5Alq1hcUwK4R4KKIeEkvMurcyzWGK7PX/TdemE41TKwSmpAMkjpaffigA
eYD+GBNsNIVbEHInHb78khoVc7M/S6EkjrxfYfWJfrB0c9F5MXbA8AxUcrft8wbY
7XNTZvp4V8yp5bnws6X7pa136uOa7+63/CUKJ9V7+MTCBbpwSAzndtxBL5KiOucr
nwx+NLzEPqR+Pm4M/z13qZAIRYh+ThY+mzLxPpBPKxzjv6JC0gavUYZ+twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7fst3V/L6VuF2ZFnTaJ5c9+uxkMB8GA1UdIwQY
MBaAFCgY2JOmmVYalNBYV0xi7v1RS3+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JqWWs2YVpWaHFVMEZoWFRHTHVfVkZMZjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS85NzEzNzEtZWVkZi00ZDY2LThiNWYt
ZTQxNzA2YmYxMjMxLzEvS0JqWWs2YVpWaHFVMEZoWFRHTHVfVkZMZjVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS85NzEzNzEtZWVkZi00ZDY2LThiNWYtZTQxNzA2YmYxMjMx
LzEvS0JqWWs2YVpWaHFVMEZoWFRHTHVfVkZMZjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoeN/xWEP
SEBuTlmpVfukUHdZgygjrN25eyCPRj74voaIyWElOJOYuhCYsOxMfFlQ0RrlyRR9
irUpK5nOhW1H83Wr1XugXfgbIK6y5tzPW78DFBlnypD5hvq0S0Q1SRgInEEGyOWk
YoTCneu6rSzUp1gr4uAxeNae+5+qvSQjPzJCSwcXeiFEpPinqRGpEj9d6duyWT4g
5xVHg+0JgdzQYBsKirHGWt8h9ZnTy9yODxOoA7eCcLaby0BIJf8Ujh4z75/hMH24
/pwnFJi6MUCRaBXo8fGbhVJnQxEgUPP3VrxRUL5KusXt7M5+365WHt4G6arq8MVg
V7Zn92UUOdFdzA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:35:42 2025 by rpki-client