Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
File: KfNCRmRyXVgguqeCcTFDozB2kfM.mft (raw, json)
Hash identifier: 6qhwoI+Y2ARUQQLaPIkg+G7Dn0ZwNlyRvmotrx5QTFs=
Subject key identifier: 17:F9:C5:84:4E:F4:F5:2B:3E:40:38:4E:FB:10:0F:86:AB:47:9C:05
Authority key identifier: 29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
Certificate issuer: /CN=29f3424664725d5820baa782713143a3307691f3
Certificate serial: 019922C2FBCAD01E09C441B7CE34F7B70E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
Manifest number: CC
Signing time: Sun 07 Sep 2025 06:00:27 +0000
Manifest this update: Sun 07 Sep 2025 06:00:27 +0000
Manifest next update: Mon 08 Sep 2025 06:00:27 +0000
Files and hashes: 1: KfNCRmRyXVgguqeCcTFDozB2kfM.crl (hash: ospcHri+BVSfC1ui1Os3tcP8OHlNnJLjSmZNQWFmA+E=)
2: lvisyME0LlQajyGS5pMcYDKFR08.roa (hash: 31DzKjH8PvmlicGQvfn7fIzRcBCmYUXLsghB5MjrccU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c2:fb:ca:d0:1e:09:c4:41:b7:ce:34:f7:b7:0e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f3424664725d5820baa782713143a3307691f3
Validity
Not Before: Sep 7 06:00:27 2025 GMT
Not After : Sep 8 06:00:27 2025 GMT
Subject: CN=17f9c5844ef4f52b3e40384efb100f86ab479c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e6:f6:b6:de:aa:f5:f3:ac:d1:40:13:98:02:
f2:f0:05:0c:5f:0b:ca:56:54:d9:1f:2c:f3:85:7e:
41:36:1b:e0:3c:ab:61:f2:b1:34:84:46:54:89:f4:
e6:68:ec:11:78:13:5e:f2:db:0b:4e:4a:16:ac:e2:
4a:f6:e7:3a:c1:a9:53:96:46:60:a7:f8:68:13:ca:
7f:5c:12:43:87:77:bf:aa:15:52:6e:76:ff:d1:63:
e9:d8:bd:e0:f7:8d:60:c7:a5:61:fb:27:01:8a:49:
5f:f5:d3:6c:7e:6d:74:b0:36:11:3b:7d:c6:87:cd:
81:27:fc:b2:93:de:14:16:49:95:5c:09:6a:b5:50:
5e:af:7c:d1:13:52:ad:59:5f:44:be:37:d9:7d:06:
35:38:dd:a8:dd:64:fb:1a:b7:0f:53:f5:7f:24:62:
99:1c:ef:7b:9e:64:9c:63:0b:eb:c9:11:16:94:c1:
af:9a:ba:27:3e:4d:4c:b5:91:0c:14:61:70:de:48:
bd:f5:69:48:09:df:63:be:aa:b7:6d:f5:b4:e6:e5:
ae:38:ad:d1:88:1a:11:7a:3d:16:b2:54:a4:85:6b:
3e:89:5c:94:b4:72:db:4a:70:72:48:64:8b:c2:29:
8a:eb:95:7a:58:95:52:3e:94:48:0d:d2:cf:88:10:
d9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F9:C5:84:4E:F4:F5:2B:3E:40:38:4E:FB:10:0F:86:AB:47:9C:05
X509v3 Authority Key Identifier:
keyid:29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:54:7f:47:d9:e4:69:7f:64:6d:a6:96:0a:f8:de:21:7b:48:
07:13:93:69:54:f9:fb:41:c8:80:64:76:51:dc:04:78:ea:5a:
98:49:e1:4f:cc:d3:e6:f4:35:2c:85:c0:31:ae:e1:67:36:50:
9f:e0:de:4f:36:7b:a3:a1:a5:15:60:1f:ee:eb:2a:0b:f8:1c:
e1:68:66:36:0c:b1:94:b1:de:14:7a:9e:03:4b:82:b1:3c:62:
ff:39:1f:a9:30:c2:97:c5:20:1a:8b:44:82:31:f4:51:e3:2f:
ec:92:1b:3b:81:0d:e3:9f:5f:90:79:6f:73:4d:e8:2c:56:8c:
41:49:c3:2f:66:5d:c4:e8:86:0e:86:ee:ed:73:f3:ee:e9:fa:
41:bc:59:3b:43:7c:d0:93:e2:21:0b:d4:c5:07:46:94:59:fd:
d9:d9:c3:fc:fe:bf:87:d3:c3:68:de:aa:92:bf:cd:3e:7d:0c:
13:bb:fd:de:08:c0:a7:53:52:d3:f5:2f:7c:c7:22:f6:22:3b:
17:86:9c:1f:7d:94:e7:5e:17:73:17:56:5c:bc:d3:5a:4f:db:
c2:57:6a:1b:3c:a2:fb:6a:e2:e6:a2:5a:7d:d1:3f:4e:a7:f5:
b8:c0:7c:3d:15:63:0d:c0:b9:92:66:93:4e:09:8a:5a:73:aa:
a5:0b:64:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiwvvK0B4JxEG3zjT3tw6TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZjM0MjQ2NjQ3MjVkNTgyMGJhYTc4MjcxMzE0M2EzMzA3
NjkxZjMwHhcNMjUwOTA3MDYwMDI3WhcNMjUwOTA4MDYwMDI3WjAzMTEwLwYDVQQD
EygxN2Y5YzU4NDRlZjRmNTJiM2U0MDM4NGVmYjEwMGY4NmFiNDc5YzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+b2tt6q9fOs0UATmALy8AUMXwvK
VlTZHyzzhX5BNhvgPKth8rE0hEZUifTmaOwReBNe8tsLTkoWrOJK9uc6walTlkZg
p/hoE8p/XBJDh3e/qhVSbnb/0WPp2L3g941gx6Vh+ycBiklf9dNsfm10sDYRO33G
h82BJ/yyk94UFkmVXAlqtVBer3zRE1KtWV9EvjfZfQY1ON2o3WT7GrcPU/V/JGKZ
HO97nmScYwvryREWlMGvmronPk1MtZEMFGFw3ki99WlICd9jvqq3bfW05uWuOK3R
iBoRej0WslSkhWs+iVyUtHLbSnBySGSLwimK65V6WJVSPpRIDdLPiBDZDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBf5xYRO9PUrPkA4TvsQD4arR5wFMB8GA1UdIwQY
MBaAFCnzQkZkcl1YILqngnExQ6MwdpHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2ZOQ1JtUnlYVmdndXFlQ2NURkRvekIya2ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xMjk4ZTEtYTFlNC00YWJjLWFiMWYt
NjQ5ZDI1YTk1OTA3LzEvS2ZOQ1JtUnlYVmdndXFlQ2NURkRvekIya2ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8xMjk4ZTEtYTFlNC00YWJjLWFiMWYtNjQ5ZDI1YTk1OTA3
LzEvS2ZOQ1JtUnlYVmdndXFlQ2NURkRvekIya2ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlR/R9nk
aX9kbaaWCvjeIXtIBxOTaVT5+0HIgGR2UdwEeOpamEnhT8zT5vQ1LIXAMa7hZzZQ
n+DeTzZ7o6GlFWAf7usqC/gc4WhmNgyxlLHeFHqeA0uCsTxi/zkfqTDCl8UgGotE
gjH0UeMv7JIbO4EN459fkHlvc03oLFaMQUnDL2ZdxOiGDobu7XPz7un6QbxZO0N8
0JPiIQvUxQdGlFn92dnD/P6/h9PDaN6qkr/NPn0ME7v93gjAp1NS0/UvfMci9iI7
F4acH32U514XcxdWXLzTWk/bwldqGzyi+2ri5qJafdE/Tqf1uMB8PRVjDcC5kmaT
TgmKWnOqpQtkTQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:39 2025 by rpki-client