Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
File: K4V9n2ATsKvwt13vPuHIGbbCWEs.mft (raw, json)
Hash identifier: ne0KE0WxMBD+b8iefqc4fGymxg1Zo3nvc+FzA7tKows=
Subject key identifier: 3B:3B:3D:A4:76:D3:80:28:0A:FE:55:FF:CF:24:A1:E0:A0:61:F1:B4
Authority key identifier: 2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B
Certificate issuer: /CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b
Certificate serial: 0199225566515582AD709819227ADF3FE424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
Manifest number: 1322
Signing time: Sun 07 Sep 2025 04:00:46 +0000
Manifest this update: Sun 07 Sep 2025 04:00:46 +0000
Manifest next update: Mon 08 Sep 2025 04:00:46 +0000
Files and hashes: 1: K4V9n2ATsKvwt13vPuHIGbbCWEs.crl (hash: K9BxHZmQ9PXqMqJ7lHuPXv2pCWpSUymJ2YBnTgIB5pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:66:51:55:82:ad:70:98:19:22:7a:df:3f:e4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b
Validity
Not Before: Sep 7 04:00:46 2025 GMT
Not After : Sep 8 04:00:46 2025 GMT
Subject: CN=3b3b3da476d380280afe55ffcf24a1e0a061f1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:67:34:8b:f6:88:48:bc:ee:d4:46:3b:ae:4c:
c7:3f:3f:8e:93:9d:45:65:58:2e:ee:3f:d8:31:5e:
fa:80:f3:c6:b3:21:03:09:fe:e7:55:7d:6a:d0:3f:
19:50:a0:34:cf:f4:0d:4b:8d:2c:0c:23:7f:6a:60:
35:3d:b2:15:2e:df:b0:c3:f5:4f:c7:fb:9f:2c:c8:
36:6b:a4:41:e0:c5:84:45:66:cd:c6:d6:05:62:bf:
f5:2c:a9:7d:7a:67:22:72:b0:3f:bb:ff:09:99:7d:
9e:34:7e:43:b8:b0:b8:86:67:d0:2f:90:44:dd:ea:
2c:9d:36:a5:98:3e:40:74:70:0f:01:03:a5:e9:96:
d8:47:ff:d3:07:a6:57:ac:cb:da:33:20:9b:3d:2e:
6b:65:94:e2:6d:05:db:81:c6:2f:8f:57:e8:ac:9b:
42:cd:34:cd:a7:d3:d8:07:92:10:7e:2b:7a:1b:8b:
67:4f:e7:70:78:fe:e2:67:39:ce:49:b4:cd:2a:d6:
9e:1f:90:94:8f:7a:38:67:d0:c9:57:4c:59:c0:e6:
f2:23:7f:5e:0a:bb:4c:05:f5:b5:88:67:a3:ca:ab:
25:ac:fe:c3:c2:88:c1:d0:f5:04:66:76:1b:8a:0c:
39:3c:e5:3a:a8:ad:75:91:27:40:b1:23:44:c7:5f:
b5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3B:3D:A4:76:D3:80:28:0A:FE:55:FF:CF:24:A1:E0:A0:61:F1:B4
X509v3 Authority Key Identifier:
keyid:2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:95:60:a3:a3:78:dd:35:25:6b:29:c6:4c:0d:ef:77:57:56:
f2:7f:89:c0:cc:cc:76:88:76:4b:c4:af:0e:a8:5e:4f:a2:cb:
59:5f:4e:11:a9:8b:39:c6:e2:58:19:0a:da:b4:e4:99:e7:b8:
35:6c:44:b7:dc:53:a6:bd:53:e5:6b:6e:65:c9:34:fe:ab:5a:
5e:df:44:1c:54:2f:7e:df:e3:05:12:61:bc:19:94:7a:d7:24:
01:71:76:66:46:62:90:b8:3d:fb:74:7c:27:fe:04:2e:7c:2a:
13:df:95:1f:32:45:0b:c5:a6:53:fa:7c:28:7d:65:29:01:43:
d7:fe:37:1c:4a:b1:f6:8d:00:6f:76:a6:c3:df:25:60:57:f9:
8c:36:cf:39:d4:0a:d2:a6:f1:db:0e:25:59:bd:12:fe:3a:63:
ce:26:8d:d6:fd:fd:82:14:71:d4:53:19:77:04:52:57:c2:e6:
62:90:9f:a3:e9:b8:c3:a9:55:b2:e5:5b:45:9b:69:4c:81:c9:
5a:34:4e:84:ce:94:14:7e:55:a6:a9:73:da:62:b0:07:ba:e5:
0e:41:dc:b6:47:89:d8:cd:b0:4d:ff:fd:df:a1:e3:4f:95:b4:
4a:b0:66:1a:57:58:1a:b2:db:20:f7:b0:1f:ed:2d:6b:d5:88:
17:3a:a2:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVWZRVYKtcJgZInrfP+QkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiODU3ZDlmNjAxM2IwYWJmMGI3NWRlZjNlZTFjODE5YjZj
MjU4NGIwHhcNMjUwOTA3MDQwMDQ2WhcNMjUwOTA4MDQwMDQ2WjAzMTEwLwYDVQQD
EygzYjNiM2RhNDc2ZDM4MDI4MGFmZTU1ZmZjZjI0YTFlMGEwNjFmMWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmc0i/aISLzu1EY7rkzHPz+Ok51F
ZVgu7j/YMV76gPPGsyEDCf7nVX1q0D8ZUKA0z/QNS40sDCN/amA1PbIVLt+ww/VP
x/ufLMg2a6RB4MWERWbNxtYFYr/1LKl9emcicrA/u/8JmX2eNH5DuLC4hmfQL5BE
3eosnTalmD5AdHAPAQOl6ZbYR//TB6ZXrMvaMyCbPS5rZZTibQXbgcYvj1forJtC
zTTNp9PYB5IQfit6G4tnT+dweP7iZznOSbTNKtaeH5CUj3o4Z9DJV0xZwObyI39e
CrtMBfW1iGejyqslrP7DwojB0PUEZnYbigw5POU6qK11kSdAsSNEx1+1UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDs7PaR204AoCv5V/88koeCgYfG0MB8GA1UdIwQY
MBaAFCuFfZ9gE7Cr8Ldd7z7hyBm2wlhLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzRWOW4yQVRzS3Z3dDEzdlB1SElHYmJDV0VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zNzhhMGQtMjcwZS00ZjViLTkxZTgt
ZWFhOWQ2MTIzZjU3LzEvSzRWOW4yQVRzS3Z3dDEzdlB1SElHYmJDV0VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zNzhhMGQtMjcwZS00ZjViLTkxZTgtZWFhOWQ2MTIzZjU3
LzEvSzRWOW4yQVRzS3Z3dDEzdlB1SElHYmJDV0VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpVgo6N4
3TUlaynGTA3vd1dW8n+JwMzMdoh2S8SvDqheT6LLWV9OEamLOcbiWBkK2rTkmee4
NWxEt9xTpr1T5WtuZck0/qtaXt9EHFQvft/jBRJhvBmUetckAXF2ZkZikLg9+3R8
J/4ELnwqE9+VHzJFC8WmU/p8KH1lKQFD1/43HEqx9o0Ab3amw98lYFf5jDbPOdQK
0qbx2w4lWb0S/jpjziaN1v39ghRx1FMZdwRSV8LmYpCfo+m4w6lVsuVbRZtpTIHJ
WjROhM6UFH5Vpqlz2mKwB7rlDkHctkeJ2M2wTf/936HjT5W0SrBmGldYGrLbIPew
H+0ta9WIFzqipA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:11 2025 by rpki-client