Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
File: KboKHXhI0sGyMd0-aCRCDRh5mRM.mft (raw, json)
Hash identifier: 0FkVw8qyhe4NIus/8Pj3M0hPxAjP4uzn8zujQn52EzY=
Subject key identifier: 13:61:18:7E:DA:98:AC:83:40:05:E5:90:6E:88:16:BA:50:67:87:C5
Authority key identifier: 29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
Certificate issuer: /CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Certificate serial: 0197D09758850BE7DDA7B3B44663068252C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
Manifest number: 15C7
Signing time: Thu 03 Jul 2025 14:01:08 +0000
Manifest this update: Thu 03 Jul 2025 14:01:08 +0000
Manifest next update: Fri 04 Jul 2025 14:01:08 +0000
Files and hashes: 1: KboKHXhI0sGyMd0-aCRCDRh5mRM.crl (hash: VdfOFHhbzyrPs9ewWVjmxD2vDPPr43QL1Opftceslv8=)
2: eZNf3C9feSNGJ4V8vhX9W1CodHo.roa (hash: jCzejzqRu1A4u7nv7yzoXy+ymx/Nx97x4lbTMxiUYlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:97:58:85:0b:e7:dd:a7:b3:b4:46:63:06:82:52:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Validity
Not Before: Jul 3 14:01:08 2025 GMT
Not After : Jul 4 14:01:08 2025 GMT
Subject: CN=1361187eda98ac834005e5906e8816ba506787c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b4:99:e2:05:ac:e0:f4:56:28:97:a6:a5:14:
97:92:33:71:80:9a:f2:11:1c:3b:33:7d:0e:d4:7c:
fd:ac:52:be:99:45:72:6d:a7:0c:6b:9b:23:b2:2f:
ee:1e:20:be:5c:99:ce:c5:48:76:f0:19:66:7b:2d:
dd:db:e3:06:dc:e8:ee:25:f1:91:3a:e8:9b:7e:6b:
39:0d:6d:2f:bc:2d:7d:70:5c:e3:d4:43:51:15:0d:
23:ec:36:8b:9b:e9:28:8d:0f:f5:0e:a7:b2:79:9a:
ed:50:61:96:40:08:a4:11:19:50:e5:a8:db:12:97:
13:20:8c:eb:9c:6c:e4:fa:ea:d2:8e:8c:a9:88:43:
21:7f:32:54:ba:b7:fe:01:13:8e:21:4b:02:68:6e:
38:bc:1e:0f:83:40:71:84:09:09:40:c6:26:0d:13:
b0:14:34:5a:fd:93:30:e9:8c:04:8a:30:eb:85:e4:
43:fc:c9:0b:d9:28:51:e6:60:77:27:66:9d:49:97:
c8:5d:75:99:ed:2d:f9:a4:70:30:d9:6b:fd:c0:ca:
64:35:ec:9f:6f:68:b4:d1:af:93:f4:43:17:cd:14:
68:67:16:fa:d6:ea:d0:c2:bf:67:10:e6:47:ba:1e:
e8:4c:b3:43:ae:95:a6:0b:1a:5b:38:aa:3c:1d:f4:
51:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:61:18:7E:DA:98:AC:83:40:05:E5:90:6E:88:16:BA:50:67:87:C5
X509v3 Authority Key Identifier:
keyid:29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2c:51:b2:11:98:ef:89:f6:af:fd:72:b0:41:86:c2:cf:a1:
6b:f8:3f:4d:40:49:53:ca:af:f6:90:fc:1b:69:81:c2:55:37:
51:ca:c1:aa:15:98:c9:9b:d1:b1:c2:78:6b:ef:a3:b6:39:3e:
05:e5:27:16:11:b3:16:18:60:5d:a9:c6:4f:2a:ac:f6:52:1d:
13:b6:2c:7f:26:16:98:45:9d:2f:53:bc:86:fc:3d:21:04:26:
34:17:d4:61:ea:92:22:01:47:f6:36:c2:a2:c2:66:c7:46:8c:
6c:0e:40:d6:a0:91:20:43:6f:ad:d2:b4:12:df:c4:85:34:e4:
a9:d1:34:3e:56:41:ff:6d:df:40:d6:fc:0d:4e:70:36:bb:45:
a8:db:8e:94:54:2a:e2:84:f4:53:a0:89:b1:01:24:20:66:7a:
8b:cd:fa:ac:16:f5:e6:fe:b7:5d:94:8f:50:3b:21:46:56:d1:
cc:e2:ec:00:ec:06:7e:0e:66:33:23:8d:22:6b:2e:2d:16:15:
f2:79:f0:a1:e1:28:bd:02:39:2b:e1:71:ba:09:ae:ac:6b:18:
8a:ac:b7:d8:1a:01:0c:3f:18:56:40:ac:17:f9:13:42:b9:ec:
4a:41:68:0c:2c:6c:e3:7b:fb:2c:0f:88:8c:07:fe:f6:23:56:
cf:95:6f:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfQl1iFC+fdp7O0RmMGglLAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YmEwYTFkNzg0OGQyYzFiMjMxZGQzZTY4MjQ0MjBkMTg3
OTk5MTMwHhcNMjUwNzAzMTQwMTA4WhcNMjUwNzA0MTQwMTA4WjAzMTEwLwYDVQQD
EygxMzYxMTg3ZWRhOThhYzgzNDAwNWU1OTA2ZTg4MTZiYTUwNjc4N2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7SZ4gWs4PRWKJempRSXkjNxgJry
ERw7M30O1Hz9rFK+mUVybacMa5sjsi/uHiC+XJnOxUh28Blmey3d2+MG3OjuJfGR
Ouibfms5DW0vvC19cFzj1ENRFQ0j7DaLm+kojQ/1DqeyeZrtUGGWQAikERlQ5ajb
EpcTIIzrnGzk+urSjoypiEMhfzJUurf+AROOIUsCaG44vB4Pg0BxhAkJQMYmDROw
FDRa/ZMw6YwEijDrheRD/MkL2ShR5mB3J2adSZfIXXWZ7S35pHAw2Wv9wMpkNeyf
b2i00a+T9EMXzRRoZxb61urQwr9nEOZHuh7oTLNDrpWmCxpbOKo8HfRRkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNhGH7amKyDQAXlkG6IFrpQZ4fFMB8GA1UdIwQY
MBaAFCm6Ch14SNLBsjHdPmgkQg0YeZkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2JvS0hYaEkwc0d5TWQwLWFDUkNEUmg1bVJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zMGMwYzAtOWVjYS00NjRmLThiOWYt
NmE1YjVmNWNhOWQzLzEvS2JvS0hYaEkwc0d5TWQwLWFDUkNEUmg1bVJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8zMGMwYzAtOWVjYS00NjRmLThiOWYtNmE1YjVmNWNhOWQz
LzEvS2JvS0hYaEkwc0d5TWQwLWFDUkNEUmg1bVJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECxRshGY
74n2r/1ysEGGws+ha/g/TUBJU8qv9pD8G2mBwlU3UcrBqhWYyZvRscJ4a++jtjk+
BeUnFhGzFhhgXanGTyqs9lIdE7YsfyYWmEWdL1O8hvw9IQQmNBfUYeqSIgFH9jbC
osJmx0aMbA5A1qCRIENvrdK0Et/EhTTkqdE0PlZB/23fQNb8DU5wNrtFqNuOlFQq
4oT0U6CJsQEkIGZ6i836rBb15v63XZSPUDshRlbRzOLsAOwGfg5mMyONImsuLRYV
8nnwoeEovQI5K+FxugmurGsYiqy32BoBDD8YVkCsF/kTQrnsSkFoDCxs43v7LA+I
jAf+9iNWz5VvSA==
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:14:07 2025 by rpki-client