Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
File: kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft (raw, json)
Hash identifier: JDflhi9v9qvbfNsnPQxN5K4ArFHmWumPEjiU7cmwGxY=
Subject key identifier: 94:50:57:22:62:F4:74:58:24:EE:1B:47:78:C0:1A:53:94:92:19:14
Authority key identifier: 93:32:0E:8B:E7:C7:4C:A6:55:C7:C3:E9:78:BC:1A:A6:0F:D8:DB:44
Certificate issuer: /CN=93320e8be7c74ca655c7c3e978bc1aa60fd8db44
Certificate serial: 0199221E7424EA6674762F330DB54C820BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
Manifest number: 1601
Signing time: Sun 07 Sep 2025 03:00:45 +0000
Manifest this update: Sun 07 Sep 2025 03:00:45 +0000
Manifest next update: Mon 08 Sep 2025 03:00:45 +0000
Files and hashes: 1: kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl (hash: C6KP8cIBLuuycG4gQ9SmMMPF2hH7AnX0JQE+OdqWd9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:74:24:ea:66:74:76:2f:33:0d:b5:4c:82:0b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93320e8be7c74ca655c7c3e978bc1aa60fd8db44
Validity
Not Before: Sep 7 03:00:45 2025 GMT
Not After : Sep 8 03:00:45 2025 GMT
Subject: CN=9450572262f4745824ee1b4778c01a5394921914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:f0:17:b2:68:e6:b3:73:da:56:52:06:3a:
bf:48:40:8c:2c:a8:92:d4:9c:b5:39:c1:5e:c5:a5:
25:f3:2f:9a:41:2c:ee:99:81:30:a3:e3:90:15:98:
01:c7:72:1b:65:87:9f:57:cd:71:af:8a:9d:e7:9e:
33:1e:3e:ab:c7:34:36:d8:6f:9c:ba:57:b0:f6:cd:
9f:47:7e:8a:80:36:be:59:94:29:a8:2d:43:b4:74:
c4:95:26:48:4f:35:cc:9a:fd:d9:b6:b5:e2:70:d4:
b1:b3:79:e1:a2:ec:58:30:0e:d2:47:93:5e:b4:77:
68:0e:5f:85:76:06:8d:8c:ca:b2:b1:87:d3:fc:01:
ce:4c:2c:90:c8:0d:0d:4d:d4:4d:a0:46:e1:60:70:
11:1e:75:6d:1b:c3:83:a6:7e:71:a9:f4:f8:83:16:
75:d9:eb:aa:48:53:57:2a:4c:b5:d9:98:29:da:eb:
a3:23:6c:ca:67:5e:4b:fa:7c:bf:ff:8b:5b:e8:76:
07:3f:d0:27:54:6f:cf:37:96:de:45:62:32:29:e1:
42:db:a9:50:e4:73:97:c7:5b:9d:22:98:1e:7c:b3:
7e:8b:cc:cc:0f:ac:fd:a1:7d:f7:25:b5:aa:17:c9:
9e:4c:1e:46:1c:6c:a6:ca:f4:df:b6:a4:4c:39:2d:
d6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:50:57:22:62:F4:74:58:24:EE:1B:47:78:C0:1A:53:94:92:19:14
X509v3 Authority Key Identifier:
keyid:93:32:0E:8B:E7:C7:4C:A6:55:C7:C3:E9:78:BC:1A:A6:0F:D8:DB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ae:84:a9:a1:0a:2d:4d:fa:39:af:a4:6d:da:48:bd:44:06:
fe:15:c2:ba:44:de:b9:ed:f0:a2:ce:94:20:fe:44:10:2d:3a:
66:83:c1:11:ec:ee:3e:1b:f2:0d:f5:ee:d6:9c:b2:49:e0:e8:
88:78:6e:4e:3e:c2:25:84:87:df:c9:5e:76:e3:ab:18:8a:2d:
8f:ef:21:7d:24:4a:63:73:19:eb:d6:b9:a0:da:b7:75:c0:11:
1f:bc:e0:64:ab:ea:99:ac:89:3b:40:a2:5f:32:05:c2:3f:b3:
a0:f8:cd:4f:f3:50:86:8d:ce:45:84:66:2f:f8:1f:10:10:cf:
f1:5c:56:75:ee:b2:53:d0:f3:6c:52:60:ca:a0:f0:44:25:e9:
00:41:ad:d4:76:5b:ad:b6:35:0b:a7:bd:f8:19:3b:a8:47:7e:
7a:c8:04:fe:0f:bd:4b:c3:5c:ec:1b:df:ab:5b:d6:af:c1:65:
29:02:3e:63:43:fd:82:43:d4:fa:1c:61:40:ff:9b:b0:fb:c3:
2c:ae:cb:da:0d:2a:8c:df:55:93:74:67:7a:9f:97:ca:03:2b:
d7:3f:c2:d3:34:e9:b4:68:91:a0:3b:94:4e:fa:1d:bb:ca:b0:
83:57:ed:57:bb:a2:26:cd:69:4f:54:ed:14:bf:aa:66:a6:96:
92:50:07:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHnQk6mZ0di8zDbVMggvaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMzIwZThiZTdjNzRjYTY1NWM3YzNlOTc4YmMxYWE2MGZk
OGRiNDQwHhcNMjUwOTA3MDMwMDQ1WhcNMjUwOTA4MDMwMDQ1WjAzMTEwLwYDVQQD
Eyg5NDUwNTcyMjYyZjQ3NDU4MjRlZTFiNDc3OGMwMWE1Mzk0OTIxOTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXTwF7Jo5rNz2lZSBjq/SECMLKiS
1Jy1OcFexaUl8y+aQSzumYEwo+OQFZgBx3IbZYefV81xr4qd554zHj6rxzQ22G+c
ulew9s2fR36KgDa+WZQpqC1DtHTElSZITzXMmv3ZtrXicNSxs3nhouxYMA7SR5Ne
tHdoDl+FdgaNjMqysYfT/AHOTCyQyA0NTdRNoEbhYHARHnVtG8ODpn5xqfT4gxZ1
2euqSFNXKky12Zgp2uujI2zKZ15L+ny//4tb6HYHP9AnVG/PN5beRWIyKeFC26lQ
5HOXx1udIpgefLN+i8zMD6z9oX33JbWqF8meTB5GHGymyvTftqRMOS3WcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRQVyJi9HRYJO4bR3jAGlOUkhkUMB8GA1UdIwQY
MBaAFJMyDovnx0ymVcfD6Xi8GqYP2NtEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3pJT2ktZkhUS1pWeDhQcGVMd2FwZ19ZMjBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lNmQzNzMtNDRjNi00OGY3LThiNzYt
ZmE5MWM3NWZiOWRjLzEva3pJT2ktZkhUS1pWeDhQcGVMd2FwZ19ZMjBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9lNmQzNzMtNDRjNi00OGY3LThiNzYtZmE5MWM3NWZiOWRj
LzEva3pJT2ktZkhUS1pWeDhQcGVMd2FwZ19ZMjBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkK6EqaEK
LU36Oa+kbdpIvUQG/hXCukTeue3wos6UIP5EEC06ZoPBEezuPhvyDfXu1pyySeDo
iHhuTj7CJYSH38leduOrGIotj+8hfSRKY3MZ69a5oNq3dcARH7zgZKvqmayJO0Ci
XzIFwj+zoPjNT/NQho3ORYRmL/gfEBDP8VxWde6yU9DzbFJgyqDwRCXpAEGt1HZb
rbY1C6e9+Bk7qEd+esgE/g+9S8Nc7Bvfq1vWr8FlKQI+Y0P9gkPU+hxhQP+bsPvD
LK7L2g0qjN9Vk3Rnep+XygMr1z/C0zTptGiRoDuUTvodu8qwg1ftV7uiJs1pT1Tt
FL+qZqaWklAHzQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:39 2025 by rpki-client