Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier: eKuFKBFJstlvf7nSNE1q/IGRKY7p3i3697+QXPSTM+k=
Subject key identifier: D9:5C:E3:76:C5:5E:FF:E1:C3:1A:25:22:21:3A:7B:38:07:B3:8A:B7
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: 01987ED36C02C2B53D41778EA580CFDFFC8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number: 0F2B
Signing time: Wed 06 Aug 2025 10:00:41 +0000
Manifest this update: Wed 06 Aug 2025 10:00:41 +0000
Manifest next update: Thu 07 Aug 2025 10:00:41 +0000
Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: gPYUybjEbmWSxjOeSmxub8pxmfSawYmjIsS1i/uv9tA=)
2: z5t3MUctHGLyNYnasAsmy7myIE0.roa (hash: mO/iLAoYiC6aPBgVm4fsRrMygy6NYm/K/6/lkuaPce4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:6c:02:c2:b5:3d:41:77:8e:a5:80:cf:df:fc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: Aug 6 10:00:41 2025 GMT
Not After : Aug 7 10:00:41 2025 GMT
Subject: CN=d95ce376c55effe1c31a2522213a7b3807b38ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:43:b6:bf:81:f8:47:16:6c:12:e7:e8:ae:
41:41:c0:2b:03:ca:8c:a0:0d:38:35:c7:fd:78:ec:
61:c5:95:28:ba:25:11:ae:9f:2f:40:4c:e2:5c:82:
01:88:02:90:67:b2:05:72:23:d5:d6:4f:97:26:ea:
35:2a:a7:8d:99:05:82:cf:78:62:32:18:a7:1d:7e:
62:d1:4a:e3:19:00:82:56:b8:56:cf:55:3a:82:40:
c3:18:36:b9:14:37:1b:96:11:71:d2:4f:38:89:e3:
f9:fe:af:4e:ae:94:58:7a:7e:01:8d:a7:3c:3a:1c:
e9:ff:f5:ff:4f:b0:bf:e3:a0:80:2e:bb:30:3d:a7:
82:4d:61:2e:30:d8:f7:94:39:3d:5f:35:87:6e:fe:
80:46:ab:3f:d5:70:0a:14:d4:cd:6b:ce:f3:52:8d:
87:29:da:65:b8:f5:18:05:90:84:6f:8e:96:6f:3b:
9a:9f:ce:71:8e:97:41:24:74:28:b2:fe:73:c8:d3:
f2:18:0d:1d:2a:a0:52:5d:0b:00:9f:cd:2b:7d:08:
e5:d2:a8:41:67:63:eb:d7:4b:c3:d6:5c:bc:74:97:
8d:95:bf:c0:43:61:a7:2d:39:46:21:80:98:82:64:
00:4a:d2:4a:df:ee:a4:4e:f2:22:4c:51:6c:08:8a:
cb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5C:E3:76:C5:5E:FF:E1:C3:1A:25:22:21:3A:7B:38:07:B3:8A:B7
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:98:d1:a0:71:c4:41:01:9e:03:13:e5:ba:ad:15:2c:aa:39:
59:c0:4f:38:67:f6:df:7f:e0:11:7e:21:0c:15:8b:ea:2b:03:
da:a7:a1:47:2d:f3:aa:ff:46:29:6e:cc:70:86:85:ac:54:d4:
01:f7:c1:21:cd:71:10:dd:e3:a9:ac:ec:d0:f0:63:e5:c3:28:
73:58:9e:9a:a3:cc:da:89:90:c7:61:e4:16:db:ed:6c:27:4c:
19:96:3b:a8:cb:29:fa:71:e1:75:f3:58:0e:a7:dc:50:1a:0e:
91:98:06:d3:93:66:c6:11:60:e8:40:be:5f:c5:38:0b:b9:0e:
1b:11:67:c4:99:95:b2:dc:84:6a:0f:62:b5:1d:1b:bf:71:09:
c0:e5:f5:e4:da:7e:88:20:a5:d4:ee:9c:b2:3a:a9:7b:a4:46:
07:82:7b:9f:ca:96:28:a3:8d:77:dc:83:1b:67:db:67:cf:2c:
6f:d4:94:66:20:e9:74:d1:10:ab:ad:d5:3c:5e:cf:32:12:f9:
3c:78:73:27:50:27:ff:85:a1:bd:20:cb:0f:34:2e:dc:e4:f3:
f2:67:5a:ec:7c:1c:41:f4:c7:35:24:69:4e:4b:6e:bf:62:48:
ed:67:61:cc:ec:53:e5:74:4f:dd:29:50:65:f0:a5:34:a9:40:
57:d5:5e:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+02wCwrU9QXeOpYDP3/yMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MDY5YjRlYzA0N2M2YzJkODBhNDk5MmU0MjI4YjMxN2Nj
OGIyMGMwHhcNMjUwODA2MTAwMDQxWhcNMjUwODA3MTAwMDQxWjAzMTEwLwYDVQQD
EyhkOTVjZTM3NmM1NWVmZmUxYzMxYTI1MjIyMTNhN2IzODA3YjM4YWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLRDtr+B+EcWbBLn6K5BQcArA8qM
oA04Ncf9eOxhxZUouiURrp8vQEziXIIBiAKQZ7IFciPV1k+XJuo1KqeNmQWCz3hi
MhinHX5i0UrjGQCCVrhWz1U6gkDDGDa5FDcblhFx0k84ieP5/q9OrpRYen4Bjac8
Ohzp//X/T7C/46CALrswPaeCTWEuMNj3lDk9XzWHbv6ARqs/1XAKFNTNa87zUo2H
KdpluPUYBZCEb46Wbzuan85xjpdBJHQosv5zyNPyGA0dKqBSXQsAn80rfQjl0qhB
Z2Pr10vD1ly8dJeNlb/AQ2GnLTlGIYCYgmQAStJK3+6kTvIiTFFsCIrLPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlc43bFXv/hwxolIiE6ezgHs4q3MB8GA1UdIwQY
MBaAFCgGm07AR8bC2ApJkuQiizF8yLIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODct
ZGY3YjQ1YmU0NmM3LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODctZGY3YjQ1YmU0NmM3
LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5jRoHHE
QQGeAxPluq0VLKo5WcBPOGf233/gEX4hDBWL6isD2qehRy3zqv9GKW7McIaFrFTU
AffBIc1xEN3jqazs0PBj5cMoc1iemqPM2omQx2HkFtvtbCdMGZY7qMsp+nHhdfNY
DqfcUBoOkZgG05NmxhFg6EC+X8U4C7kOGxFnxJmVstyEag9itR0bv3EJwOX15Np+
iCCl1O6csjqpe6RGB4J7n8qWKKONd9yDG2fbZ88sb9SUZiDpdNEQq63VPF7PMhL5
PHhzJ1An/4WhvSDLDzQu3OTz8mda7HwcQfTHNSRpTktuv2JI7WdhzOxT5XRP3SlQ
ZfClNKlAV9VeRg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:07:26 2025 by rpki-client