Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
File: KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft (raw, json)
Hash identifier: ExGj/rLnPdfJaSRJmsJ1Jci05tpTWULLG2xZUBoX8y0=
Subject key identifier: AA:53:E0:AF:9E:02:77:05:2A:2C:F8:51:9F:6B:4F:7D:D2:BD:89:C0
Authority key identifier: 29:47:98:77:68:64:7E:EB:8A:0F:38:60:C4:41:76:24:7C:E6:FC:59
Certificate issuer: /CN=2947987768647eeb8a0f3860c44176247ce6fc59
Certificate serial: 019922FA5A4E99FAFEB07EF1F5A1B9BFAD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
Manifest number: 0E89
Signing time: Sun 07 Sep 2025 07:00:56 +0000
Manifest this update: Sun 07 Sep 2025 07:00:56 +0000
Manifest next update: Mon 08 Sep 2025 07:00:56 +0000
Files and hashes: 1: KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl (hash: RtTvGk3dC3BEGegviQzHuNyv9JP0xi+FY+vMPV1e63U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:5a:4e:99:fa:fe:b0:7e:f1:f5:a1:b9:bf:ad:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2947987768647eeb8a0f3860c44176247ce6fc59
Validity
Not Before: Sep 7 07:00:56 2025 GMT
Not After : Sep 8 07:00:56 2025 GMT
Subject: CN=aa53e0af9e0277052a2cf8519f6b4f7dd2bd89c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:6b:7d:4e:6a:d5:ae:4e:d3:b9:9e:9c:d3:c1:
33:10:72:49:42:29:cb:a3:a2:b5:0e:a9:54:ec:ee:
97:fb:6a:49:46:51:a1:e5:5f:1f:67:87:9f:b9:30:
2c:54:20:ca:c8:da:fd:f6:ff:97:33:6a:1d:c3:dc:
ba:57:c9:f0:64:c6:0f:dd:36:99:19:4c:1f:79:65:
32:70:22:8a:f1:6a:5d:3b:e6:b4:f3:c5:00:f3:25:
7c:94:72:e2:14:8e:be:32:bb:1f:74:66:89:bc:ab:
50:04:6d:42:74:1e:61:15:96:a3:ca:49:7d:0b:d3:
d1:92:ec:cd:36:cd:ab:54:05:59:53:80:d6:78:4c:
94:9d:cb:0f:7e:07:98:5a:a9:44:0f:77:40:c3:c2:
58:16:7c:90:86:0a:f0:e4:eb:91:c0:76:d1:d3:e1:
22:66:91:7d:08:cf:b5:99:e5:54:2e:da:b1:5e:ce:
da:35:78:56:84:57:c8:d6:c2:6a:cc:29:65:fd:a7:
73:3f:d0:e9:b3:4e:a9:da:eb:5c:9b:3e:22:f5:34:
3f:1e:d7:d1:fd:71:2d:5f:c5:85:5b:cf:b4:4d:fa:
41:8a:2e:34:9a:fb:4c:da:7a:4b:69:1f:39:8a:7c:
f4:84:8c:7c:f8:7a:01:42:d9:d2:8d:6a:10:39:8b:
94:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:53:E0:AF:9E:02:77:05:2A:2C:F8:51:9F:6B:4F:7D:D2:BD:89:C0
X509v3 Authority Key Identifier:
keyid:29:47:98:77:68:64:7E:EB:8A:0F:38:60:C4:41:76:24:7C:E6:FC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:80:54:7d:6e:a6:89:56:85:6c:1e:8c:3d:61:40:fd:79:fa:
07:4a:9d:34:4b:17:21:f9:09:f6:d5:88:10:22:4a:c9:7f:98:
57:40:71:01:5d:4e:c6:2d:0e:a9:f6:6e:13:98:25:e3:82:5e:
51:9a:96:ce:af:a7:0e:00:af:e6:af:b8:d0:b6:75:83:b0:56:
6f:8f:39:5c:72:22:41:8b:6d:28:e1:7f:e1:4e:5b:c7:ba:08:
d3:98:0a:80:86:17:8f:db:e9:8f:01:df:57:bb:4b:a5:84:c0:
b2:6e:76:96:70:08:76:69:25:81:e3:f9:76:56:4e:50:9c:5e:
96:e8:d1:1f:fa:21:03:c2:6e:f6:5b:67:f5:db:6e:c1:9e:4e:
b5:1c:d2:25:35:f4:09:6b:7f:00:3b:0b:e3:dc:39:11:ae:76:
e9:60:5b:9d:6e:6c:6c:a8:49:8d:6b:56:f3:f3:81:76:a6:2f:
36:36:c0:c2:9e:3d:90:99:62:18:92:74:30:e7:40:26:cc:df:
bf:63:e3:3c:ab:86:a8:b2:b3:28:a5:48:0b:03:a6:d0:9f:fb:
a2:8c:1d:d7:e6:7e:6b:f6:0d:07:b4:65:9b:47:f8:a9:f2:24:
ee:8f:74:e5:ea:e7:d0:21:fa:ce:98:a9:d6:e8:f0:d2:b8:05:
5a:bc:52:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+lpOmfr+sH7x9aG5v62UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NDc5ODc3Njg2NDdlZWI4YTBmMzg2MGM0NDE3NjI0N2Nl
NmZjNTkwHhcNMjUwOTA3MDcwMDU2WhcNMjUwOTA4MDcwMDU2WjAzMTEwLwYDVQQD
EyhhYTUzZTBhZjllMDI3NzA1MmEyY2Y4NTE5ZjZiNGY3ZGQyYmQ4OWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Wt9TmrVrk7TuZ6c08EzEHJJQinL
o6K1DqlU7O6X+2pJRlGh5V8fZ4efuTAsVCDKyNr99v+XM2odw9y6V8nwZMYP3TaZ
GUwfeWUycCKK8WpdO+a088UA8yV8lHLiFI6+MrsfdGaJvKtQBG1CdB5hFZajykl9
C9PRkuzNNs2rVAVZU4DWeEyUncsPfgeYWqlED3dAw8JYFnyQhgrw5OuRwHbR0+Ei
ZpF9CM+1meVULtqxXs7aNXhWhFfI1sJqzCll/adzP9Dps06p2utcmz4i9TQ/HtfR
/XEtX8WFW8+0TfpBii40mvtM2npLaR85inz0hIx8+HoBQtnSjWoQOYuULwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpT4K+eAncFKiz4UZ9rT33SvYnAMB8GA1UdIwQY
MBaAFClHmHdoZH7rig84YMRBdiR85vxZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1VlWWQyaGtmdXVLRHpoZ3hFRjJKSHptX0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lZGVmYjMtMTM4ZC00YWU2LTk0ODct
NWRhYjFiNGE1YzYxLzEvS1VlWWQyaGtmdXVLRHpoZ3hFRjJKSHptX0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lZGVmYjMtMTM4ZC00YWU2LTk0ODctNWRhYjFiNGE1YzYx
LzEvS1VlWWQyaGtmdXVLRHpoZ3hFRjJKSHptX0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYBUfW6m
iVaFbB6MPWFA/Xn6B0qdNEsXIfkJ9tWIECJKyX+YV0BxAV1Oxi0OqfZuE5gl44Je
UZqWzq+nDgCv5q+40LZ1g7BWb485XHIiQYttKOF/4U5bx7oI05gKgIYXj9vpjwHf
V7tLpYTAsm52lnAIdmklgeP5dlZOUJxelujRH/ohA8Ju9ltn9dtuwZ5OtRzSJTX0
CWt/ADsL49w5Ea526WBbnW5sbKhJjWtW8/OBdqYvNjbAwp49kJliGJJ0MOdAJszf
v2PjPKuGqLKzKKVICwOm0J/7oowd1+Z+a/YNB7Rlm0f4qfIk7o905ern0CH6zpip
1ujw0rgFWrxShA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:23:00 2025 by rpki-client