Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
File: KboKHXhI0sGyMd0-aCRCDRh5mRM.mft (raw, json)
Hash identifier: Wx3OxzzEsrdMKKh8e2qy9+rhz+VTCp38vhhnYyfsofk=
Subject key identifier: C3:03:24:C7:0A:9E:30:90:F1:AC:05:CD:AD:85:2D:B9:12:67:15:22
Authority key identifier: 29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
Certificate issuer: /CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Certificate serial: 0199247B1E476C2AAE2F3F875FFF11B7A8BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
Manifest number: 1677
Signing time: Sun 07 Sep 2025 14:01:12 +0000
Manifest this update: Sun 07 Sep 2025 14:01:12 +0000
Manifest next update: Mon 08 Sep 2025 14:01:12 +0000
Files and hashes: 1: KboKHXhI0sGyMd0-aCRCDRh5mRM.crl (hash: IzKG1Hv4QuU1/BiHcs01KxWI5twQ6nTYrp+Hgk+kme4=)
2: eZNf3C9feSNGJ4V8vhX9W1CodHo.roa (hash: jCzejzqRu1A4u7nv7yzoXy+ymx/Nx97x4lbTMxiUYlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:7b:1e:47:6c:2a:ae:2f:3f:87:5f:ff:11:b7:a8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Validity
Not Before: Sep 7 14:01:12 2025 GMT
Not After : Sep 8 14:01:12 2025 GMT
Subject: CN=c30324c70a9e3090f1ac05cdad852db912671522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d4:e3:ad:b0:8d:52:9b:cd:11:9c:b7:99:a3:
ea:fa:71:6a:0e:05:d1:90:35:0a:b3:41:4d:1d:5d:
24:02:3a:c3:13:b2:69:fd:17:26:43:9e:77:52:98:
77:e7:5d:c1:28:42:85:a2:38:bb:ab:ab:63:88:4f:
70:20:68:2d:b5:39:87:6c:01:ff:c9:f9:5a:5a:18:
2f:44:a6:3d:92:30:35:58:5c:1f:ce:03:5c:99:28:
c9:c3:2e:db:55:a3:d6:1e:0b:0c:5d:79:f7:ad:fb:
8a:90:6b:56:91:a8:62:f6:a4:34:ce:96:97:03:b4:
30:4b:5c:2e:43:a8:7c:6e:4b:c0:e3:e4:73:98:f2:
80:5f:89:b3:8b:79:7f:05:f0:3c:c5:df:6b:31:31:
f3:3d:ab:6d:57:09:18:bb:0b:f9:a1:c0:44:07:08:
c8:47:05:b6:55:43:bc:9c:fb:9e:6a:40:ea:00:30:
5a:7b:ee:92:12:66:28:0e:d4:60:69:04:e8:2b:46:
ff:35:0e:ae:53:7a:03:22:7d:4f:f3:f2:93:f2:48:
a4:9a:19:4e:7a:e3:c3:79:7c:77:61:d5:04:eb:6f:
03:7e:96:99:a1:ed:23:97:8e:1b:81:52:6e:05:5a:
f3:61:f7:99:70:5b:01:83:37:8a:d7:86:f8:c9:9f:
4e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:03:24:C7:0A:9E:30:90:F1:AC:05:CD:AD:85:2D:B9:12:67:15:22
X509v3 Authority Key Identifier:
keyid:29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:29:5f:d4:41:3c:9a:a9:fa:64:0d:7c:5a:84:b6:93:e9:8e:
e1:a6:6e:af:65:f2:54:56:e9:5f:a8:0d:9e:05:f8:38:3d:d9:
7c:99:72:d3:aa:3d:a0:ef:be:15:9e:a5:f1:26:0c:6d:25:6d:
c2:d7:44:c8:89:fb:34:8d:d9:d2:ce:d3:27:25:16:fa:af:e9:
8a:58:e8:6f:b5:d9:3c:0e:bd:dd:49:0f:8f:60:c4:d0:8e:da:
ba:d5:1b:2b:5e:72:97:29:0e:66:25:31:60:0e:04:79:f4:de:
48:af:c8:54:84:15:21:9a:d9:16:bc:5e:f4:5a:a7:42:c8:84:
05:34:f6:aa:f0:1c:53:f5:6c:7a:7e:6e:36:0c:5b:b0:4c:30:
2e:85:5e:65:10:21:14:f9:ad:74:85:8f:9f:a9:4c:7c:16:5c:
e1:4d:e5:81:21:0f:ff:b2:6a:f6:df:dd:91:95:ee:b5:ca:a3:
f6:25:e7:3b:30:d1:9b:63:c3:c1:c9:83:25:0d:44:d9:ef:c0:
fe:fe:70:c5:5a:0a:77:34:7d:2b:d6:67:8a:51:98:bb:00:3f:
75:eb:32:ef:a0:d9:f2:38:8a:27:19:05:e1:2c:12:e3:73:02:
d0:40:9b:3a:87:d0:91:d6:59:cd:03:49:76:aa:f7:8d:f8:12:
50:f3:0a:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkex5HbCquLz+HX/8Rt6i6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YmEwYTFkNzg0OGQyYzFiMjMxZGQzZTY4MjQ0MjBkMTg3
OTk5MTMwHhcNMjUwOTA3MTQwMTEyWhcNMjUwOTA4MTQwMTEyWjAzMTEwLwYDVQQD
EyhjMzAzMjRjNzBhOWUzMDkwZjFhYzA1Y2RhZDg1MmRiOTEyNjcxNTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09TjrbCNUpvNEZy3maPq+nFqDgXR
kDUKs0FNHV0kAjrDE7Jp/RcmQ553Uph3513BKEKFoji7q6tjiE9wIGgttTmHbAH/
yflaWhgvRKY9kjA1WFwfzgNcmSjJwy7bVaPWHgsMXXn3rfuKkGtWkahi9qQ0zpaX
A7QwS1wuQ6h8bkvA4+RzmPKAX4mzi3l/BfA8xd9rMTHzPattVwkYuwv5ocBEBwjI
RwW2VUO8nPueakDqADBae+6SEmYoDtRgaQToK0b/NQ6uU3oDIn1P8/KT8kikmhlO
euPDeXx3YdUE628DfpaZoe0jl44bgVJuBVrzYfeZcFsBgzeK14b4yZ9O9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMDJMcKnjCQ8awFza2FLbkSZxUiMB8GA1UdIwQY
MBaAFCm6Ch14SNLBsjHdPmgkQg0YeZkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2JvS0hYaEkwc0d5TWQwLWFDUkNEUmg1bVJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zMGMwYzAtOWVjYS00NjRmLThiOWYt
NmE1YjVmNWNhOWQzLzEvS2JvS0hYaEkwc0d5TWQwLWFDUkNEUmg1bVJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8zMGMwYzAtOWVjYS00NjRmLThiOWYtNmE1YjVmNWNhOWQz
LzEvS2JvS0hYaEkwc0d5TWQwLWFDUkNEUmg1bVJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADSlf1EE8
mqn6ZA18WoS2k+mO4aZur2XyVFbpX6gNngX4OD3ZfJly06o9oO++FZ6l8SYMbSVt
wtdEyIn7NI3Z0s7TJyUW+q/piljob7XZPA693UkPj2DE0I7autUbK15ylykOZiUx
YA4EefTeSK/IVIQVIZrZFrxe9FqnQsiEBTT2qvAcU/Vsen5uNgxbsEwwLoVeZRAh
FPmtdIWPn6lMfBZc4U3lgSEP/7Jq9t/dkZXutcqj9iXnOzDRm2PDwcmDJQ1E2e/A
/v5wxVoKdzR9K9ZnilGYuwA/desy76DZ8jiKJxkF4SwS43MC0ECbOofQkdZZzQNJ
dqr3jfgSUPMKRw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:16 2025 by rpki-client