Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
File: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft (raw, json)
Hash identifier: DOl3/qqEdl/SFd3yeJfUkJeR5obFMQ8xwVbW0j01FEA=
Subject key identifier: CA:36:65:2E:C9:F9:D8:05:CA:AC:DB:C8:D1:DB:54:DA:0D:D6:DB:71
Authority key identifier: 29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
Certificate issuer: /CN=29187f811597dd03513be42f43155bc15a3a0b3f
Certificate serial: 0199221EDF91E9248BBF11C8931D38167133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
Manifest number: 1677
Signing time: Sun 07 Sep 2025 03:01:12 +0000
Manifest this update: Sun 07 Sep 2025 03:01:12 +0000
Manifest next update: Mon 08 Sep 2025 03:01:12 +0000
Files and hashes: 1: 1-u5MAxIx2a76GWU9BSY3kkXJY7s.roa (hash: opAgG+CnSobBzmEROSJ8hMqy2rOkfcnuYJpvFL5TYq0=)
2: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl (hash: A3Gqv2rdjsR4TzvwFGHJ+H0GptL/PJgqIZS+z3TbES8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:df:91:e9:24:8b:bf:11:c8:93:1d:38:16:71:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29187f811597dd03513be42f43155bc15a3a0b3f
Validity
Not Before: Sep 7 03:01:12 2025 GMT
Not After : Sep 8 03:01:12 2025 GMT
Subject: CN=ca36652ec9f9d805caacdbc8d1db54da0dd6db71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:47:14:fb:37:a4:f4:1c:72:08:98:3f:16:
33:e5:9a:f3:37:47:c2:cc:a9:82:67:81:61:d7:b6:
ca:ef:2c:04:3f:72:ae:cf:27:04:c2:91:85:0a:3c:
80:a2:a1:f2:7f:08:18:2b:c5:34:ff:94:d0:2b:e7:
e6:7f:3e:ed:a2:8e:3f:bf:90:f0:12:73:f2:60:84:
6a:d2:47:ec:7d:30:42:d6:4d:7b:a0:2f:fe:30:55:
85:6c:32:0f:8b:7e:f1:84:3a:bd:67:07:c8:b4:ae:
33:82:5e:a5:dc:d0:68:55:9a:f7:03:cf:0f:47:f4:
05:c1:46:61:fd:a1:5e:0e:dc:11:ac:ac:3c:71:ab:
44:79:cb:e8:14:56:43:e2:34:e1:2f:98:19:ac:f3:
eb:02:e1:1a:0f:88:bc:89:c5:e7:f5:09:bf:94:54:
a9:b1:48:9a:a9:33:6f:62:17:3a:3d:be:c2:ee:91:
6d:8c:91:46:57:63:b3:ee:7b:d9:d4:d6:90:91:3d:
1e:32:b7:6f:9f:2a:12:69:2c:d7:ea:fd:0d:59:3d:
50:66:79:ab:1f:32:db:0b:71:da:1d:55:b2:79:7c:
f3:d5:03:29:23:72:e7:21:f2:09:fa:df:3b:4a:37:
4e:b5:26:e1:98:c1:b4:79:e8:57:91:25:90:e8:70:
c9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:36:65:2E:C9:F9:D8:05:CA:AC:DB:C8:D1:DB:54:DA:0D:D6:DB:71
X509v3 Authority Key Identifier:
keyid:29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:98:ab:73:cd:72:02:a7:25:b2:b8:15:79:95:d0:e3:ec:fc:
40:55:f2:06:da:24:a0:5e:73:18:3d:ed:15:ad:67:86:04:7d:
d2:a5:45:52:82:3d:cc:47:d5:84:ab:6c:b2:52:e0:9b:97:45:
18:ec:0b:30:58:89:15:71:ba:56:ba:e8:19:2e:f4:b7:09:9d:
72:21:44:62:6a:a8:95:fb:da:28:6f:c1:66:df:bc:ff:05:b5:
3c:4e:86:e7:4b:cb:5e:5a:1d:ae:5c:88:26:18:e7:9a:9c:bb:
10:7d:d8:19:d0:fb:16:e9:86:92:8e:81:23:a9:c8:f9:11:d3:
6b:1e:8f:7f:b4:9d:fc:2a:84:ec:42:08:6a:bd:6b:7e:89:db:
94:3b:5d:37:89:a2:a1:eb:66:6c:b5:39:43:38:b4:fc:aa:f3:
14:24:95:31:87:2f:02:4b:13:1d:db:02:f4:36:98:ee:5c:35:
6d:e9:5c:d1:f8:be:de:76:c3:75:e5:4a:50:a6:22:1d:ae:0a:
d6:ab:5d:17:62:5a:c9:b2:4e:cf:dd:82:76:54:7b:00:87:60:
29:84:3b:f0:a2:ae:bd:d5:1a:f0:37:84:01:e6:87:e9:4a:35:
81:da:71:9a:00:e8:2c:3d:ca:7c:2d:a9:a8:6a:70:f6:65:e2:
cc:17:c4:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHt+R6SSLvxHIkx04FnEzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MTg3ZjgxMTU5N2RkMDM1MTNiZTQyZjQzMTU1YmMxNWEz
YTBiM2YwHhcNMjUwOTA3MDMwMTEyWhcNMjUwOTA4MDMwMTEyWjAzMTEwLwYDVQQD
EyhjYTM2NjUyZWM5ZjlkODA1Y2FhY2RiYzhkMWRiNTRkYTBkZDZkYjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaBHFPs3pPQccgiYPxYz5ZrzN0fC
zKmCZ4Fh17bK7ywEP3KuzycEwpGFCjyAoqHyfwgYK8U0/5TQK+fmfz7too4/v5Dw
EnPyYIRq0kfsfTBC1k17oC/+MFWFbDIPi37xhDq9ZwfItK4zgl6l3NBoVZr3A88P
R/QFwUZh/aFeDtwRrKw8catEecvoFFZD4jThL5gZrPPrAuEaD4i8icXn9Qm/lFSp
sUiaqTNvYhc6Pb7C7pFtjJFGV2Oz7nvZ1NaQkT0eMrdvnyoSaSzX6v0NWT1QZnmr
HzLbC3HaHVWyeXzz1QMpI3LnIfIJ+t87SjdOtSbhmMG0eehXkSWQ6HDJ9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMo2ZS7J+dgFyqzbyNHbVNoN1ttxMB8GA1UdIwQY
MBaAFCkYf4EVl90DUTvkL0MVW8FaOgs/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1JoX2dSV1gzUU5STy1RdlF4VmJ3Vm82Q3o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84YzAwNmQtNTBmNS00NDVkLWI3ZTgt
MjQ5OTRiMDQwZjQxLzEvS1JoX2dSV1gzUU5STy1RdlF4VmJ3Vm82Q3o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC84YzAwNmQtNTBmNS00NDVkLWI3ZTgtMjQ5OTRiMDQwZjQx
LzEvS1JoX2dSV1gzUU5STy1RdlF4VmJ3Vm82Q3o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpirc81y
AqclsrgVeZXQ4+z8QFXyBtokoF5zGD3tFa1nhgR90qVFUoI9zEfVhKtsslLgm5dF
GOwLMFiJFXG6VrroGS70twmdciFEYmqolfvaKG/BZt+8/wW1PE6G50vLXlodrlyI
Jhjnmpy7EH3YGdD7FumGko6BI6nI+RHTax6Pf7Sd/CqE7EIIar1rfonblDtdN4mi
oetmbLU5Qzi0/KrzFCSVMYcvAksTHdsC9DaY7lw1belc0fi+3nbDdeVKUKYiHa4K
1qtdF2JaybJOz92CdlR7AIdgKYQ78KKuvdUa8DeEAeaH6Uo1gdpxmgDoLD3KfC2p
qGpw9mXizBfERQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:28:07 2025 by rpki-client