Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
File: KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft (raw, json)
Hash identifier: nUTqdYBKwUvJlxVtpuY5AhTHUM4RiLGs+X7AmQXJHBg=
Subject key identifier: 25:08:58:17:F8:80:98:A8:22:16:B3:69:F4:C3:02:5D:C4:C6:BD:42
Authority key identifier: 28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
Certificate issuer: /CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Certificate serial: 0197D286109947919C8DED1B591E6D7FE0C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
Manifest number: 0FBE
Signing time: Thu 03 Jul 2025 23:01:30 +0000
Manifest this update: Thu 03 Jul 2025 23:01:30 +0000
Manifest next update: Fri 04 Jul 2025 23:01:30 +0000
Files and hashes: 1: KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl (hash: WvHW0SYbFwzPyS7y6zil5rfXk2oB/cp5fDeG8SQx3+4=)
2: NdfWSMRABwv2F_yFFl7X4UZH0vA.roa (hash: cuV8z/cxgYl0ffX7fgAA/EzOTZZ9e9S+JYGHmQ2nzxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:86:10:99:47:91:9c:8d:ed:1b:59:1e:6d:7f:e0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Validity
Not Before: Jul 3 23:01:30 2025 GMT
Not After : Jul 4 23:01:30 2025 GMT
Subject: CN=25085817f88098a82216b369f4c3025dc4c6bd42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:40:09:58:71:b3:80:69:cf:b6:f0:7f:58:
82:8d:0a:f2:ba:1a:57:e8:cf:47:9e:64:99:ba:12:
a1:58:20:ec:45:0b:10:94:30:37:2c:d0:4a:61:60:
e3:4e:ad:d5:4c:b9:51:8a:7a:19:3f:57:36:11:f3:
4f:ef:fe:49:c1:19:68:bc:b4:cb:0e:0a:53:ab:9f:
42:f9:bc:ba:19:23:a2:bf:0a:f5:5d:ff:18:59:9d:
ef:a1:75:9a:76:60:e9:29:18:27:0b:3a:d2:ca:8c:
ce:65:f4:04:2e:ee:f4:5e:3c:2b:86:71:4e:2f:c0:
ec:3a:e4:eb:f7:46:10:f4:d8:ad:bf:a1:af:70:70:
af:d3:57:34:b1:d0:46:17:cf:c0:db:f1:78:b6:78:
65:7a:76:2e:2b:b9:2e:9d:0e:1b:5d:ef:53:ef:e3:
59:82:e1:cd:0f:3f:bd:07:06:2f:df:e8:6f:aa:54:
5f:7b:c5:77:9c:5b:c3:12:43:0c:d8:9f:62:dc:d6:
7a:f0:d4:e2:20:24:75:55:56:07:f2:d5:64:81:b3:
6e:f7:b3:a8:4c:81:13:98:4b:8d:f8:7a:00:2d:bd:
44:3d:7e:fe:8f:74:66:b3:dd:ca:c0:26:41:1c:3b:
a1:57:c2:7a:ad:25:73:2c:4a:6e:72:f6:08:ba:71:
da:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:08:58:17:F8:80:98:A8:22:16:B3:69:F4:C3:02:5D:C4:C6:BD:42
X509v3 Authority Key Identifier:
keyid:28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:1b:82:c6:6e:e9:59:d4:e0:8a:e8:bf:ec:bd:b5:27:16:36:
36:14:c7:3a:ab:e5:80:68:64:c1:e1:0c:3f:ee:33:11:8c:87:
6e:16:64:bc:fb:34:a0:02:9c:aa:0f:55:e4:2a:7b:06:ea:44:
07:43:11:51:ce:3e:e0:20:d1:31:a2:8a:c0:79:60:99:60:04:
7d:bf:a1:f3:e1:3d:85:39:a6:2f:8e:51:02:b8:6b:c1:6e:32:
88:ae:4b:7b:03:ec:e8:f3:83:0d:5d:0d:3b:be:65:93:23:46:
3e:34:a7:6c:ea:8c:a4:7e:3c:d0:a7:d4:6c:ac:7f:3d:83:9b:
9c:4e:10:20:21:75:6f:17:79:a4:69:46:d8:6b:90:f2:ab:8a:
4a:13:5c:9b:db:46:d9:51:37:6f:7e:b2:95:9a:bc:4b:b4:8a:
06:c0:90:c9:a1:9d:f3:43:50:a6:cb:98:d1:78:ce:a6:dc:57:
c5:83:de:2c:f0:2e:2d:83:8a:11:8c:16:64:41:4d:ba:75:7a:
34:92:60:b9:6c:cc:14:b9:be:d3:69:9c:90:53:f4:f0:1e:ec:
6c:13:b8:4c:08:86:90:cc:5f:36:2c:b8:a4:a5:bb:28:79:1e:
5d:41:8e:d6:4d:f0:37:4a:b8:57:37:99:5a:68:19:83:21:d9:
73:b5:81:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfShhCZR5Gcje0bWR5tf+DBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NDVmMWY0ZDU5ZjgxMWQ2MzIzZGI0ZDg2ZDRmNDE4NTRl
ZGU3NDQwHhcNMjUwNzAzMjMwMTMwWhcNMjUwNzA0MjMwMTMwWjAzMTEwLwYDVQQD
EygyNTA4NTgxN2Y4ODA5OGE4MjIxNmIzNjlmNGMzMDI1ZGM0YzZiZDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcFACVhxs4Bpz7bwf1iCjQryuhpX
6M9HnmSZuhKhWCDsRQsQlDA3LNBKYWDjTq3VTLlRinoZP1c2EfNP7/5JwRlovLTL
DgpTq59C+by6GSOivwr1Xf8YWZ3voXWadmDpKRgnCzrSyozOZfQELu70XjwrhnFO
L8DsOuTr90YQ9Nitv6GvcHCv01c0sdBGF8/A2/F4tnhlenYuK7kunQ4bXe9T7+NZ
guHNDz+9BwYv3+hvqlRfe8V3nFvDEkMM2J9i3NZ68NTiICR1VVYH8tVkgbNu97Oo
TIETmEuN+HoALb1EPX7+j3Rms93KwCZBHDuhV8J6rSVzLEpucvYIunHasQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUIWBf4gJioIhazafTDAl3Exr1CMB8GA1UdIwQY
MBaAFChF8fTVn4EdYyPbTYbU9BhU7edEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85MDY5Y2UtZGZlMS00YjhhLWFmMDMt
MjI2ZjNiODAzMWI3LzEvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS85MDY5Y2UtZGZlMS00YjhhLWFmMDMtMjI2ZjNiODAzMWI3
LzEvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3RuCxm7p
WdTgiui/7L21JxY2NhTHOqvlgGhkweEMP+4zEYyHbhZkvPs0oAKcqg9V5Cp7BupE
B0MRUc4+4CDRMaKKwHlgmWAEfb+h8+E9hTmmL45RArhrwW4yiK5LewPs6PODDV0N
O75lkyNGPjSnbOqMpH480KfUbKx/PYObnE4QICF1bxd5pGlG2GuQ8quKShNcm9tG
2VE3b36ylZq8S7SKBsCQyaGd80NQpsuY0XjOptxXxYPeLPAuLYOKEYwWZEFNunV6
NJJguWzMFLm+02mckFP08B7sbBO4TAiGkMxfNiy4pKW7KHkeXUGO1k3wN0q4VzeZ
WmgZgyHZc7WBhg==
-----END CERTIFICATE-----
Generated at Fri Jul 4 03:14:04 2025 by rpki-client