Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
File: KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft (raw, json)
Hash identifier: Eh2o2MTSICc0L8H0g9JMxmaBeK8+95B8Ux26IWbpODk=
Subject key identifier: 4D:00:64:4C:EE:30:7D:A8:A1:D0:EB:56:DE:0E:50:23:73:4F:C6:1D
Authority key identifier: 28:69:3B:00:56:DE:87:D8:4B:AC:CD:D8:05:D0:36:5F:AC:60:F6:7C
Certificate issuer: /CN=28693b0056de87d84baccdd805d0365fac60f67c
Certificate serial: 019874F4E882DF3665E3768B5CCEC02BA9D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
Manifest number: 0258
Signing time: Mon 04 Aug 2025 12:01:03 +0000
Manifest this update: Mon 04 Aug 2025 12:01:03 +0000
Manifest next update: Tue 05 Aug 2025 12:01:03 +0000
Files and hashes: 1: KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl (hash: CmSV0dny1UOl5PfRUFssHQjbDfhUv5UhhtgPcRzH8Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:e8:82:df:36:65:e3:76:8b:5c:ce:c0:2b:a9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28693b0056de87d84baccdd805d0365fac60f67c
Validity
Not Before: Aug 4 12:01:03 2025 GMT
Not After : Aug 5 12:01:03 2025 GMT
Subject: CN=4d00644cee307da8a1d0eb56de0e5023734fc61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:25:f5:e8:ec:d9:29:5a:ce:26:c8:c0:0d:c6:
aa:c4:08:03:7b:ef:64:a2:e7:4b:44:bb:dd:fe:ed:
eb:c6:4f:ab:12:4a:03:e3:90:f1:38:a7:a1:4a:c7:
70:21:95:1a:68:15:04:3e:cc:81:05:a4:ba:e5:cc:
c7:97:8d:28:d0:68:1b:b7:af:4d:fe:50:16:34:b1:
8c:77:91:8c:f5:3f:0a:4b:de:59:9d:85:f0:28:e1:
eb:34:0b:95:e3:21:b1:ca:b0:d4:8e:a8:54:6c:82:
b5:3b:3e:b6:6a:7f:15:f0:31:52:c8:df:07:ea:03:
6b:4e:7c:ae:90:32:b3:ac:2a:e5:82:e0:fd:83:51:
9d:ab:ed:39:62:d7:77:79:64:71:e5:7d:f4:22:73:
48:35:4e:89:88:31:5c:b2:3a:a8:dd:bc:46:fb:62:
39:95:65:b2:f3:8e:83:12:78:fc:12:0f:71:b4:f8:
0b:60:1c:ac:04:bd:64:0c:72:63:c3:f3:f9:83:87:
d0:29:dc:53:ab:f9:23:2d:ad:70:3b:f4:f6:89:15:
3e:99:85:de:39:69:4f:7f:e9:eb:cb:36:9d:8c:89:
79:7d:7f:55:91:cc:d7:17:62:bf:cf:d7:7b:97:bd:
29:5e:8e:12:5b:e0:7d:13:f8:cc:1b:ec:8f:06:01:
7f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:00:64:4C:EE:30:7D:A8:A1:D0:EB:56:DE:0E:50:23:73:4F:C6:1D
X509v3 Authority Key Identifier:
keyid:28:69:3B:00:56:DE:87:D8:4B:AC:CD:D8:05:D0:36:5F:AC:60:F6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:17:ba:8a:80:83:bc:2f:66:7b:15:b9:66:5c:e1:87:0a:e1:
96:58:f0:6a:d6:4a:7d:10:c4:bd:94:1a:17:19:fc:09:9b:cd:
26:5f:ac:4e:e4:d4:c7:d3:ed:14:c0:0d:34:61:d2:a2:05:82:
71:7c:8f:de:bd:65:62:17:1c:3a:14:42:37:d7:29:2c:13:d9:
06:c9:cb:9b:a2:10:6c:02:2a:9f:7b:27:62:47:3d:29:09:3f:
1c:92:8e:9f:09:c2:8e:c2:c1:b7:2d:b2:b3:8f:d6:d4:75:c6:
cb:c9:43:60:dd:a0:1f:b6:ac:a7:5e:0d:0b:aa:52:5b:b1:83:
b0:99:6d:46:37:cb:18:2e:01:27:17:7a:a2:d7:ed:0e:4e:13:
f4:05:6b:7e:3a:6f:af:6b:56:9c:b9:e0:9a:1d:59:cf:b2:b1:
13:92:6e:5b:cc:8e:1d:4f:df:18:a6:e8:b6:3f:71:78:53:61:
38:67:e3:8d:31:b2:5f:6a:2b:48:3b:6f:43:db:27:2a:a6:cc:
5c:56:b5:a8:69:9f:24:07:b4:ec:e8:f2:64:74:d6:7b:06:08:
2b:77:25:2b:8a:1c:b0:07:27:1d:2f:38:67:45:c7:36:4a:86:
0a:e6:7c:33:d9:ff:d9:bd:26:98:24:be:79:06:91:e9:e5:c1:
d9:0b:e0:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh09OiC3zZl43aLXM7AK6nWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NjkzYjAwNTZkZTg3ZDg0YmFjY2RkODA1ZDAzNjVmYWM2
MGY2N2MwHhcNMjUwODA0MTIwMTAzWhcNMjUwODA1MTIwMTAzWjAzMTEwLwYDVQQD
Eyg0ZDAwNjQ0Y2VlMzA3ZGE4YTFkMGViNTZkZTBlNTAyMzczNGZjNjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCX16OzZKVrOJsjADcaqxAgDe+9k
oudLRLvd/u3rxk+rEkoD45DxOKehSsdwIZUaaBUEPsyBBaS65czHl40o0Ggbt69N
/lAWNLGMd5GM9T8KS95ZnYXwKOHrNAuV4yGxyrDUjqhUbIK1Oz62an8V8DFSyN8H
6gNrTnyukDKzrCrlguD9g1Gdq+05Ytd3eWRx5X30InNINU6JiDFcsjqo3bxG+2I5
lWWy846DEnj8Eg9xtPgLYBysBL1kDHJjw/P5g4fQKdxTq/kjLa1wO/T2iRU+mYXe
OWlPf+nryzadjIl5fX9VkczXF2K/z9d7l70pXo4SW+B9E/jMG+yPBgF/lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0AZEzuMH2oodDrVt4OUCNzT8YdMB8GA1UdIwQY
MBaAFChpOwBW3ofYS6zN2AXQNl+sYPZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0drN0FGYmVoOWhMck0zWUJkQTJYNnhnOW53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85ODFmMmEtNzRjMC00MGI3LThjMzct
MTUwN2I4NTNkZmM5LzEvS0drN0FGYmVoOWhMck0zWUJkQTJYNnhnOW53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi85ODFmMmEtNzRjMC00MGI3LThjMzctMTUwN2I4NTNkZmM5
LzEvS0drN0FGYmVoOWhMck0zWUJkQTJYNnhnOW53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBe6ioCD
vC9mexW5ZlzhhwrhlljwatZKfRDEvZQaFxn8CZvNJl+sTuTUx9PtFMANNGHSogWC
cXyP3r1lYhccOhRCN9cpLBPZBsnLm6IQbAIqn3snYkc9KQk/HJKOnwnCjsLBty2y
s4/W1HXGy8lDYN2gH7asp14NC6pSW7GDsJltRjfLGC4BJxd6otftDk4T9AVrfjpv
r2tWnLngmh1Zz7KxE5JuW8yOHU/fGKbotj9xeFNhOGfjjTGyX2orSDtvQ9snKqbM
XFa1qGmfJAe07OjyZHTWewYIK3clK4ocsAcnHS84Z0XHNkqGCuZ8M9n/2b0mmCS+
eQaR6eXB2QvgxA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:58:55 2025 by rpki-client