Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
File: KL69RlhhhHPtTIN2fFHejiM8MpI.mft (raw, json)
Hash identifier: O3cRjKCHY1pvLX/D37E97n4+6XmUhIHPuKHCu9ATdBg=
Subject key identifier: 6E:06:FC:48:7E:85:5F:C1:FE:19:FB:0E:38:5F:4B:17:BB:B2:48:B2
Authority key identifier: 28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92
Certificate issuer: /CN=28bebd4658618473ed4c83767c51de8e233c3292
Certificate serial: 01988C5807B92363A1470CF58CEAF65C4677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
Manifest number: 0FA1
Signing time: Sat 09 Aug 2025 01:00:35 +0000
Manifest this update: Sat 09 Aug 2025 01:00:35 +0000
Manifest next update: Sun 10 Aug 2025 01:00:35 +0000
Files and hashes: 1: KL69RlhhhHPtTIN2fFHejiM8MpI.crl (hash: 8K9FW8/ivdxuhu1xKIKl8dYs3STk4plOl6qxmC1+4Rs=)
2: jp-8lbUOvN6sUPZsTL-dh7MOVR8.roa (hash: /kMpoM5rzLA4Q5DdnfjuYEV0in2H+0XYtN+u4LENV/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:07:b9:23:63:a1:47:0c:f5:8c:ea:f6:5c:46:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bebd4658618473ed4c83767c51de8e233c3292
Validity
Not Before: Aug 9 01:00:35 2025 GMT
Not After : Aug 10 01:00:35 2025 GMT
Subject: CN=6e06fc487e855fc1fe19fb0e385f4b17bbb248b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:c7:1e:66:e7:52:88:1d:c2:a2:3f:b9:34:
21:5d:5e:75:29:a8:6b:2b:25:29:87:14:93:ba:8e:
8d:f8:50:dc:49:f6:4d:c4:9a:89:82:79:b3:d8:28:
49:aa:d9:df:ea:b8:9b:a8:c1:2b:51:de:e0:9a:06:
04:47:2c:47:3a:dc:ab:87:8f:03:91:32:1a:e3:11:
22:04:0b:fc:69:53:7a:10:4b:64:b9:ca:52:af:c7:
7f:98:26:73:b2:d3:4a:31:c7:0c:69:da:b7:bb:ea:
3e:5c:8b:0c:86:b4:7a:2d:7c:10:62:be:34:18:e4:
d5:2f:2b:4f:84:a4:b2:75:f8:89:22:62:3c:2b:aa:
29:af:4b:e4:26:1e:71:e9:5e:46:52:45:83:cd:31:
c9:fa:04:01:db:ff:88:b8:fd:ea:58:16:81:95:59:
cf:e0:aa:cd:d1:17:0a:02:46:15:56:dd:29:cb:52:
de:34:fa:32:f4:5b:52:1f:d8:9a:54:25:64:66:cd:
b1:20:63:71:a9:dd:ad:54:35:25:74:d2:99:f1:42:
49:f9:b8:70:6a:22:8e:91:02:85:34:ca:72:29:3c:
78:a8:ca:ea:57:d3:63:88:bd:0c:27:a5:bf:d6:cc:
e0:99:a4:3d:e6:18:16:6f:6e:c6:d2:b9:48:08:ca:
84:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:06:FC:48:7E:85:5F:C1:FE:19:FB:0E:38:5F:4B:17:BB:B2:48:B2
X509v3 Authority Key Identifier:
keyid:28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ef:d4:76:9d:93:ad:48:35:a7:f4:6b:cf:e8:3e:9d:73:56:
ef:87:72:55:cd:7f:a8:6c:d2:84:67:27:ac:b5:c3:fe:e4:6f:
69:b3:f7:dd:40:b4:fd:60:9b:35:3e:87:33:34:f4:4f:7d:a9:
7f:fb:1f:97:53:10:ae:e4:91:c1:8a:e0:b5:75:97:53:f3:71:
41:70:40:f2:a6:b3:73:8e:8a:32:4c:94:43:7d:68:c1:74:07:
82:f5:1e:03:25:11:62:6c:40:88:1f:f7:57:17:99:16:f7:b2:
61:f1:6d:c7:7b:1c:23:df:49:70:90:d1:90:6a:ab:1f:04:0a:
fe:9b:75:14:53:68:2a:aa:65:2d:27:a6:e0:e1:54:53:b3:f2:
a7:8f:6b:52:17:05:05:5d:3b:5e:42:b2:23:f4:e4:e8:48:cc:
ae:c7:24:04:48:31:cb:46:80:8a:cc:97:54:40:e8:47:63:d8:
13:df:bb:44:cf:a4:e6:67:d9:b5:87:e9:9f:85:45:08:8c:0d:
ba:7a:77:d4:67:0f:18:43:b0:89:bf:c9:9f:96:2d:99:a3:ce:
91:b6:6e:a1:dc:ac:a9:e9:90:b0:73:db:12:ef:31:11:83:18:
08:3e:57:0a:89:22:64:21:34:59:f8:65:b1:88:06:db:c6:95:
ab:5d:04:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiMWAe5I2OhRwz1jOr2XEZ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YmViZDQ2NTg2MTg0NzNlZDRjODM3NjdjNTFkZThlMjMz
YzMyOTIwHhcNMjUwODA5MDEwMDM1WhcNMjUwODEwMDEwMDM1WjAzMTEwLwYDVQQD
Eyg2ZTA2ZmM0ODdlODU1ZmMxZmUxOWZiMGUzODVmNGIxN2JiYjI0OGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvjHHmbnUogdwqI/uTQhXV51Kahr
KyUphxSTuo6N+FDcSfZNxJqJgnmz2ChJqtnf6ribqMErUd7gmgYERyxHOtyrh48D
kTIa4xEiBAv8aVN6EEtkucpSr8d/mCZzstNKMccMadq3u+o+XIsMhrR6LXwQYr40
GOTVLytPhKSydfiJImI8K6opr0vkJh5x6V5GUkWDzTHJ+gQB2/+IuP3qWBaBlVnP
4KrN0RcKAkYVVt0py1LeNPoy9FtSH9iaVCVkZs2xIGNxqd2tVDUldNKZ8UJJ+bhw
aiKOkQKFNMpyKTx4qMrqV9NjiL0MJ6W/1szgmaQ95hgWb27G0rlICMqE8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4G/Eh+hV/B/hn7DjhfSxe7skiyMB8GA1UdIwQY
MBaAFCi+vUZYYYRz7UyDdnxR3o4jPDKSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0w2OVJsaGhoSFB0VElOMmZGSGVqaU04TXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hYTk3NWMtYjliNS00NjUxLWJjNWIt
YmE3OTU2YjBmMmRkLzEvS0w2OVJsaGhoSFB0VElOMmZGSGVqaU04TXBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9hYTk3NWMtYjliNS00NjUxLWJjNWItYmE3OTU2YjBmMmRk
LzEvS0w2OVJsaGhoSFB0VElOMmZGSGVqaU04TXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+/Udp2T
rUg1p/Rrz+g+nXNW74dyVc1/qGzShGcnrLXD/uRvabP33UC0/WCbNT6HMzT0T32p
f/sfl1MQruSRwYrgtXWXU/NxQXBA8qazc46KMkyUQ31owXQHgvUeAyURYmxAiB/3
VxeZFveyYfFtx3scI99JcJDRkGqrHwQK/pt1FFNoKqplLSem4OFUU7Pyp49rUhcF
BV07XkKyI/Tk6EjMrsckBEgxy0aAisyXVEDoR2PYE9+7RM+k5mfZtYfpn4VFCIwN
unp31GcPGEOwib/Jn5YtmaPOkbZuodysqemQsHPbEu8xEYMYCD5XCokiZCE0Wfhl
sYgG28aVq10EnA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:50 2025 by rpki-client