Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
File: KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json)
Hash identifier: QkX2GQOr/OxA4/PbZHZnLPSW1xMALoQdJ34PQOJwDP4=
Subject key identifier: DF:B2:45:23:24:E2:03:DA:60:FF:CF:28:DE:19:43:F3:0A:AA:37:DF
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial: 019933495089D74C6F924C650E29D38723B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
Manifest number: 0A58
Signing time: Wed 10 Sep 2025 11:01:06 +0000
Manifest this update: Wed 10 Sep 2025 11:01:06 +0000
Manifest next update: Thu 11 Sep 2025 11:01:06 +0000
Files and hashes: 1: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: 0xvKdHqHRHMpZ2/m10kM+8J6ktls4vYOZrNxDB5MsiM=)
2: URjGhFursZ-Xj8pdWi1TJTjrqwg.roa (hash: rj0lONsdMyEx7NS5wD8pesT6gLWyuS0FDSfkDIpjiaU=)
3: rF48GSjCA8nAgS7e7P_0TwDWMHI.roa (hash: mzK0vZsIrvw7/YH7xF2HGiJG11ODO49sPGy1ll1t6eQ=)
4: s8_NtbGTu8kgBV4HuDM2-AUVj2Q.roa (hash: E+MCsmGddUOCxHp7ENUlFyd8Du3D6Rxe6k6mioQYpr4=)
5: wKUJgTwD7cFwdEtrEHOHqt6iRN8.roa (hash: kOGKpGaa2gE7ztgll470FJTFa167kUV848g0OHaW6ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:49:50:89:d7:4c:6f:92:4c:65:0e:29:d3:87:23:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Validity
Not Before: Sep 10 11:01:06 2025 GMT
Not After : Sep 11 11:01:06 2025 GMT
Subject: CN=dfb2452324e203da60ffcf28de1943f30aaa37df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:64:01:bd:db:13:46:5e:15:f2:60:ef:99:00:
31:3f:f3:8b:18:ea:42:18:d9:fd:b2:89:e2:4e:6b:
b1:89:93:af:7f:b3:66:4c:db:9d:7c:60:96:c6:bc:
13:29:92:34:98:5e:27:74:e3:3d:9b:c9:8e:21:75:
f2:04:56:98:19:fd:9e:b8:73:9e:c4:43:97:67:fd:
6a:78:3e:6b:3d:db:3b:e2:63:3c:04:94:75:2f:d7:
65:1b:93:d7:cc:5a:59:c5:a0:cb:3c:e7:6a:b4:d6:
2e:ba:98:29:6f:fe:a0:04:15:c4:38:24:c4:12:a2:
14:88:16:b5:3f:a7:40:20:f9:a1:29:78:c8:c1:ab:
fe:8a:dd:5e:7c:82:87:36:50:c4:23:c3:4d:ba:c4:
4c:26:56:f8:2a:3e:5e:34:54:85:c6:22:bb:30:b2:
f6:3b:30:f9:f3:87:d6:e2:8c:c6:74:9f:46:58:cb:
a3:4b:aa:eb:82:95:2a:ca:16:3e:7e:46:4f:d2:cb:
45:16:5f:a7:0e:bf:84:33:29:24:92:54:96:29:8b:
2b:01:41:72:82:df:96:c1:de:fa:5d:0b:9f:83:70:
4e:05:94:07:92:8e:93:86:51:31:51:a8:4b:61:f1:
a2:ce:3c:86:f9:2b:d4:74:c7:c4:5a:03:f3:a8:a6:
9f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B2:45:23:24:E2:03:DA:60:FF:CF:28:DE:19:43:F3:0A:AA:37:DF
X509v3 Authority Key Identifier:
keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b4:8a:ed:b5:58:be:f1:76:09:82:09:98:67:5e:8b:2c:11:
84:35:40:75:e1:2b:93:1a:3e:7b:69:42:63:59:e7:23:75:0c:
21:f0:a7:aa:61:50:2d:1a:7f:a0:35:17:4f:d9:6e:24:a3:81:
8a:74:8b:56:00:6e:78:db:e1:69:19:c8:a8:eb:2c:bc:5e:87:
bc:7b:f0:b3:3d:5c:22:e8:1d:8d:dd:87:47:7c:f3:07:5c:4a:
ea:05:31:31:31:7b:aa:40:00:69:df:fa:49:28:b2:18:15:1e:
4c:e7:a5:52:62:cf:23:b3:b5:c9:b4:fc:b2:97:3b:fd:88:f2:
e5:8d:b1:47:4c:17:ab:3f:73:16:2f:72:b3:08:9f:f1:b7:98:
af:e1:c0:c4:ba:6d:1b:94:98:30:81:c8:01:77:26:8f:1c:67:
0a:28:2c:a7:a5:f9:f6:87:f7:98:11:a7:db:60:84:0a:9b:2e:
91:dc:c4:f5:49:0d:cb:b7:ba:f6:cb:48:f8:64:ee:f2:aa:dd:
cb:1c:0d:9c:88:06:bc:72:9c:e7:d0:94:71:5a:c8:d3:2c:da:
3e:55:27:fa:42:a2:a6:4f:4f:0c:a8:ea:da:80:7e:01:c4:e9:
4b:a1:8d:2b:f6:d6:e7:eb:07:d2:47:85:b2:61:d3:60:ee:f8:
79:10:b9:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzSVCJ10xvkkxlDinThyO4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZjZhMzAwYmY3ZDQwYjdmOGQ2MTgxYzViOGE3ZGJjNzFi
N2QxMjMwHhcNMjUwOTEwMTEwMTA2WhcNMjUwOTExMTEwMTA2WjAzMTEwLwYDVQQD
EyhkZmIyNDUyMzI0ZTIwM2RhNjBmZmNmMjhkZTE5NDNmMzBhYWEzN2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGQBvdsTRl4V8mDvmQAxP/OLGOpC
GNn9soniTmuxiZOvf7NmTNudfGCWxrwTKZI0mF4ndOM9m8mOIXXyBFaYGf2euHOe
xEOXZ/1qeD5rPds74mM8BJR1L9dlG5PXzFpZxaDLPOdqtNYuupgpb/6gBBXEOCTE
EqIUiBa1P6dAIPmhKXjIwav+it1efIKHNlDEI8NNusRMJlb4Kj5eNFSFxiK7MLL2
OzD584fW4ozGdJ9GWMujS6rrgpUqyhY+fkZP0stFFl+nDr+EMykkklSWKYsrAUFy
gt+Wwd76XQufg3BOBZQHko6ThlExUahLYfGizjyG+SvUdMfEWgPzqKafJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+yRSMk4gPaYP/PKN4ZQ/MKqjffMB8GA1UdIwQY
MBaAFCn2owC/fUC3+NYYHFuKfbxxt9EjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hYWY0OWMtODNkZC00NmFhLThjZTct
Yjg0YzQxM2RmYWE0LzEvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9hYWY0OWMtODNkZC00NmFhLThjZTctYjg0YzQxM2RmYWE0
LzEvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbSK7bVY
vvF2CYIJmGdeiywRhDVAdeErkxo+e2lCY1nnI3UMIfCnqmFQLRp/oDUXT9luJKOB
inSLVgBueNvhaRnIqOssvF6HvHvwsz1cIugdjd2HR3zzB1xK6gUxMTF7qkAAad/6
SSiyGBUeTOelUmLPI7O1ybT8spc7/Yjy5Y2xR0wXqz9zFi9yswif8beYr+HAxLpt
G5SYMIHIAXcmjxxnCigsp6X59of3mBGn22CECpsukdzE9UkNy7e69stI+GTu8qrd
yxwNnIgGvHKc59CUcVrI0yzaPlUn+kKipk9PDKjq2oB+AcTpS6GNK/bW5+sH0keF
smHTYO74eRC5vA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 17:10:50 2025 by rpki-client