Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
File: K1ATo25hvsQKEqDkHEjxkYYwca8.mft (raw, json)
Hash identifier: U5HERujKoFf3Q8xPQ9cvH+XGfUIJADInhVS6ZRVcK7o=
Subject key identifier: D1:E4:92:3F:76:7B:7A:30:15:BF:80:0B:97:51:EC:1C:C0:82:A5:7F
Authority key identifier: 2B:50:13:A3:6E:61:BE:C4:0A:12:A0:E4:1C:48:F1:91:86:30:71:AF
Certificate issuer: /CN=2b5013a36e61bec40a12a0e41c48f191863071af
Certificate serial: 0199239FEA78B0985AE86E56DA89DEF97CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 10:01:46 +0000
Manifest this update: Sun 07 Sep 2025 10:01:46 +0000
Manifest next update: Mon 08 Sep 2025 10:01:46 +0000
Files and hashes: 1: K1ATo25hvsQKEqDkHEjxkYYwca8.crl (hash: dIO8wuSYwpRuVq6c7I3PVXVHTiF3KrRRrY7N7oskQ9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:ea:78:b0:98:5a:e8:6e:56:da:89:de:f9:7c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5013a36e61bec40a12a0e41c48f191863071af
Validity
Not Before: Sep 7 10:01:46 2025 GMT
Not After : Sep 8 10:01:46 2025 GMT
Subject: CN=d1e4923f767b7a3015bf800b9751ec1cc082a57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:92:ac:fa:65:12:45:99:02:42:0e:aa:8c:85:
9d:b5:92:1b:3a:5a:20:b4:11:ee:2c:ef:96:cd:17:
b2:c5:e1:cd:68:56:dd:48:50:34:a4:15:aa:2a:21:
d1:e3:ae:b5:0e:3c:eb:b6:28:4f:c9:15:27:8d:3d:
ee:ed:a3:f8:5b:73:48:d5:4e:ce:cf:2b:42:7e:85:
d5:87:fa:2e:ac:ef:20:ad:c1:c5:4c:10:fd:42:12:
33:ef:9c:7e:db:d3:34:79:dd:e1:62:05:94:a6:f7:
9f:5d:8e:b4:e2:21:77:b4:f4:8a:d6:84:24:e2:f4:
b1:eb:a8:b7:bd:87:22:94:35:a2:e7:60:8a:c9:6b:
1d:1a:9a:0d:70:46:c7:c3:0a:a4:d5:95:87:f5:7f:
96:57:77:71:5b:b0:d2:f3:a4:71:68:6d:4e:9b:83:
6a:fc:fb:dc:68:42:f2:b9:ba:22:7c:5f:35:85:47:
d4:79:7d:1c:e2:d8:9d:3d:fd:be:1e:f7:6c:b5:46:
a8:8b:41:3f:67:c0:5f:fd:69:04:4d:0b:28:78:9f:
02:f8:47:ed:fa:9e:7d:94:bc:76:77:67:c7:2a:c6:
9b:b8:83:be:6f:8d:13:8d:17:f0:d1:97:3f:cc:b4:
f7:cb:93:42:fa:f8:5f:07:66:cb:f6:43:b3:bb:a2:
22:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E4:92:3F:76:7B:7A:30:15:BF:80:0B:97:51:EC:1C:C0:82:A5:7F
X509v3 Authority Key Identifier:
keyid:2B:50:13:A3:6E:61:BE:C4:0A:12:A0:E4:1C:48:F1:91:86:30:71:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4e:e3:6b:91:a0:7d:45:4e:d4:a4:d4:14:f4:99:aa:62:09:
f4:fd:73:32:fe:7f:9c:39:ad:01:af:48:17:ff:30:3d:dd:79:
ba:82:1e:db:62:cc:36:2f:e4:99:55:3a:ea:07:5d:69:74:4c:
73:e2:ba:94:fe:02:e6:c8:13:a6:e5:a2:c1:2e:ad:6f:69:8a:
7f:a9:fa:ce:2d:4c:03:4c:12:03:bf:2e:df:7a:48:df:df:fb:
13:27:bc:55:56:d5:7b:aa:f4:fc:bb:d1:06:0a:c7:42:4e:f6:
1c:54:02:62:79:11:00:40:b1:57:68:4f:64:a2:2c:2e:7b:3d:
83:fa:5a:36:02:6b:6f:6e:c4:27:b1:16:82:1b:21:df:ae:65:
5e:0d:e0:75:ef:de:76:83:d1:c6:07:38:0a:0a:87:f5:d0:0d:
92:de:f0:60:e4:90:40:fc:66:b0:62:66:6c:a0:2d:fb:07:f0:
6c:18:bd:cd:11:60:eb:f5:f2:1d:f9:b5:69:14:bb:ea:05:db:
c2:a2:2d:65:fe:ce:22:81:95:ed:09:5b:2a:ef:de:e8:71:c2:
db:8a:5f:6e:4b:00:c3:01:68:db:bd:40:22:45:37:3c:05:e2:
df:ad:e5:da:70:2a:9e:70:f1:c8:e6:bd:f8:5d:d6:b5:10:e6:
9e:98:ef:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn+p4sJha6G5W2one+Xy6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNTAxM2EzNmU2MWJlYzQwYTEyYTBlNDFjNDhmMTkxODYz
MDcxYWYwHhcNMjUwOTA3MTAwMTQ2WhcNMjUwOTA4MTAwMTQ2WjAzMTEwLwYDVQQD
EyhkMWU0OTIzZjc2N2I3YTMwMTViZjgwMGI5NzUxZWMxY2MwODJhNTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05Ks+mUSRZkCQg6qjIWdtZIbOlog
tBHuLO+WzReyxeHNaFbdSFA0pBWqKiHR4661DjzrtihPyRUnjT3u7aP4W3NI1U7O
zytCfoXVh/ourO8grcHFTBD9QhIz75x+29M0ed3hYgWUpvefXY604iF3tPSK1oQk
4vSx66i3vYcilDWi52CKyWsdGpoNcEbHwwqk1ZWH9X+WV3dxW7DS86RxaG1Om4Nq
/PvcaELyuboifF81hUfUeX0c4tidPf2+HvdstUaoi0E/Z8Bf/WkETQsoeJ8C+Eft
+p59lLx2d2fHKsabuIO+b40TjRfw0Zc/zLT3y5NC+vhfB2bL9kOzu6IigQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHkkj92e3owFb+AC5dR7BzAgqV/MB8GA1UdIwQY
MBaAFCtQE6NuYb7EChKg5BxI8ZGGMHGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzFBVG8yNWh2c1FLRXFEa0hFanhrWVl3Y2E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8xNmFkOGYtMWYxMy00NjlhLWE3ZjUt
ZjQzMmU5ZDhjNGQ3LzEvSzFBVG8yNWh2c1FLRXFEa0hFanhrWVl3Y2E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8xNmFkOGYtMWYxMy00NjlhLWE3ZjUtZjQzMmU5ZDhjNGQ3
LzEvSzFBVG8yNWh2c1FLRXFEa0hFanhrWVl3Y2E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdE7ja5Gg
fUVO1KTUFPSZqmIJ9P1zMv5/nDmtAa9IF/8wPd15uoIe22LMNi/kmVU66gddaXRM
c+K6lP4C5sgTpuWiwS6tb2mKf6n6zi1MA0wSA78u33pI39/7Eye8VVbVe6r0/LvR
BgrHQk72HFQCYnkRAECxV2hPZKIsLns9g/paNgJrb27EJ7EWghsh365lXg3gde/e
doPRxgc4CgqH9dANkt7wYOSQQPxmsGJmbKAt+wfwbBi9zRFg6/XyHfm1aRS76gXb
wqItZf7OIoGV7QlbKu/e6HHC24pfbksAwwFo271AIkU3PAXi363l2nAqnnDxyOa9
+F3WtRDmnpjvsQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:09 2025 by rpki-client