Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
File: K_sNVIxJtqVhik07PB2kw9FEv0Y.mft (raw, json)
Hash identifier: ARPjDrPCq3kVakQmUuRY0G8C6ZV2DBoPA8SmPJ7cBYY=
Subject key identifier: F9:23:2A:F2:88:B2:35:CE:D2:95:61:6E:8F:41:74:DD:0F:22:8C:BC
Authority key identifier: 2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
Certificate issuer: /CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Certificate serial: 01992C6B60AD2DA0DE04B269C0E5AC5343AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
Manifest number: 0C18
Signing time: Tue 09 Sep 2025 03:00:58 +0000
Manifest this update: Tue 09 Sep 2025 03:00:58 +0000
Manifest next update: Wed 10 Sep 2025 03:00:58 +0000
Files and hashes: 1: BZKsmbKkOgpiNQItA4ToED7-XVE.roa (hash: +K+xyT8SZ5ycbey8u6qvz7hsOUxVuM3hMuLKIog812k=)
2: K_sNVIxJtqVhik07PB2kw9FEv0Y.crl (hash: akiS+qvs8nMRlNN5pOmKlz23qvtroSkDQZp+m3bWJmo=)
3: igZag3cgyJRdv01vkp4DRY6VvTk.roa (hash: JpGBcXUxW150Ej7SxtVldKg4tZ/GU0LkZvopH1/QgMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:6b:60:ad:2d:a0:de:04:b2:69:c0:e5:ac:53:43:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Validity
Not Before: Sep 9 03:00:58 2025 GMT
Not After : Sep 10 03:00:58 2025 GMT
Subject: CN=f9232af288b235ced295616e8f4174dd0f228cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3a:2e:15:a4:c4:20:e5:91:31:5e:13:ce:24:
4b:5a:4b:e7:57:90:34:f0:4a:ce:2b:62:2f:c5:a3:
44:7b:95:b6:63:10:9f:36:a9:eb:ae:31:91:d8:93:
30:d9:15:48:61:a9:48:af:b2:19:3d:e3:d0:23:65:
d9:1c:ef:5c:bc:e9:65:af:a4:52:a4:56:ec:c8:fc:
98:21:26:43:16:5b:a1:b1:35:9b:71:2c:9a:a6:4a:
9b:a2:b4:94:43:a5:87:4b:08:d9:e4:cd:c6:4d:06:
78:bb:5e:6e:0b:90:b1:55:27:d7:bd:ce:18:15:28:
2a:ce:6e:26:56:b7:bc:2c:e6:c5:62:95:49:c4:56:
4a:fe:74:ee:52:a7:e9:e6:18:3a:66:df:46:7c:98:
91:ed:d8:07:a3:7f:72:d3:ad:28:08:98:af:ea:4a:
2b:4f:8b:b2:57:9d:12:db:5a:49:1a:c5:72:98:cc:
48:d7:d3:22:d7:c2:af:00:af:1b:6b:d6:e9:af:94:
4c:21:f8:55:cb:a7:bb:ff:3d:fc:16:d6:6d:4a:f2:
73:f9:61:af:84:3a:aa:46:b8:49:f1:49:9e:8e:ff:
53:2a:89:bc:ca:a2:91:b3:15:88:7d:9a:eb:22:f5:
5d:3c:2b:be:2a:42:15:2f:52:92:c0:4c:70:c9:c6:
53:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:23:2A:F2:88:B2:35:CE:D2:95:61:6E:8F:41:74:DD:0F:22:8C:BC
X509v3 Authority Key Identifier:
keyid:2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:43:20:b8:e5:e8:3d:b7:35:24:df:eb:64:c1:3f:24:0c:8d:
69:b5:ba:12:9b:10:e1:b6:74:54:a2:52:66:7b:20:69:82:45:
66:49:11:ae:08:ea:e5:3a:c5:4e:73:76:55:d1:e3:15:5c:16:
69:6f:33:d9:1d:cd:54:cf:73:be:ca:7f:68:9f:88:8c:59:8d:
2f:5b:df:25:73:2d:72:09:64:bb:de:e3:13:b9:d8:15:74:87:
8c:aa:9f:45:bc:6c:e2:78:af:78:49:0b:b2:06:31:da:89:c1:
32:ed:af:a3:38:f1:1a:84:6c:8b:d9:0c:23:c1:15:5f:33:39:
1f:cd:e4:24:46:66:40:a6:41:c3:76:47:f6:be:ee:7d:a4:d6:
e7:29:c2:32:da:4a:a8:4d:37:79:09:4e:e3:83:d1:8c:61:49:
9b:46:8a:ba:0f:95:48:1c:75:79:8f:ab:d0:c6:88:b8:18:e9:
14:cd:03:ef:46:13:a4:a6:00:55:5b:0c:e0:fe:0d:d8:28:dd:
5c:60:b2:a3:29:d9:21:27:03:94:5a:69:77:37:8a:3c:9d:74:
f9:61:a0:17:3b:1b:5b:52:76:73:fa:ea:77:02:f4:df:8e:c2:
bc:ff:30:36:7e:f8:31:8a:58:3d:7f:f4:aa:85:c6:a2:f0:90:
1a:7c:1c:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZksa2CtLaDeBLJpwOWsU0OtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZmIwZDU0OGM0OWI2YTU2MThhNGQzYjNjMWRhNGMzZDE0
NGJmNDYwHhcNMjUwOTA5MDMwMDU4WhcNMjUwOTEwMDMwMDU4WjAzMTEwLwYDVQQD
EyhmOTIzMmFmMjg4YjIzNWNlZDI5NTYxNmU4ZjQxNzRkZDBmMjI4Y2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zouFaTEIOWRMV4TziRLWkvnV5A0
8ErOK2IvxaNEe5W2YxCfNqnrrjGR2JMw2RVIYalIr7IZPePQI2XZHO9cvOllr6RS
pFbsyPyYISZDFluhsTWbcSyapkqborSUQ6WHSwjZ5M3GTQZ4u15uC5CxVSfXvc4Y
FSgqzm4mVre8LObFYpVJxFZK/nTuUqfp5hg6Zt9GfJiR7dgHo39y060oCJiv6kor
T4uyV50S21pJGsVymMxI19Mi18KvAK8ba9bpr5RMIfhVy6e7/z38FtZtSvJz+WGv
hDqqRrhJ8Umejv9TKom8yqKRsxWIfZrrIvVdPCu+KkIVL1KSwExwycZTDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkjKvKIsjXO0pVhbo9BdN0PIoy8MB8GA1UdIwQY
MBaAFCv7DVSMSbalYYpNOzwdpMPRRL9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mNWQwZjktY2EyZi00YjZlLTkxN2Mt
MTM3MTA5MzY5NjIxLzEvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mNWQwZjktY2EyZi00YjZlLTkxN2MtMTM3MTA5MzY5NjIx
LzEvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEMguOXo
Pbc1JN/rZME/JAyNabW6EpsQ4bZ0VKJSZnsgaYJFZkkRrgjq5TrFTnN2VdHjFVwW
aW8z2R3NVM9zvsp/aJ+IjFmNL1vfJXMtcglku97jE7nYFXSHjKqfRbxs4niveEkL
sgYx2onBMu2vozjxGoRsi9kMI8EVXzM5H83kJEZmQKZBw3ZH9r7ufaTW5ynCMtpK
qE03eQlO44PRjGFJm0aKug+VSBx1eY+r0MaIuBjpFM0D70YTpKYAVVsM4P4N2Cjd
XGCyoynZIScDlFppdzeKPJ10+WGgFzsbW1J2c/rqdwL0347CvP8wNn74MYpYPX/0
qoXGovCQGnwcGA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 08:12:25 2025 by rpki-client