Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File: kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier: 6sKR9CohKti3sTUn5kHydia6xGmxt9CuSgmRmxllVG0=
Subject key identifier: 07:BF:D9:D1:7C:A0:5A:23:5F:D3:BC:57:60:8A:5C:74:8D:E9:2A:C0
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer: /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial: 019873E3380257EB1C1CEDF2532DF8301720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number: 0F73
Signing time: Mon 04 Aug 2025 07:02:07 +0000
Manifest this update: Mon 04 Aug 2025 07:02:07 +0000
Manifest next update: Tue 05 Aug 2025 07:02:07 +0000
Files and hashes: 1: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: TAGeEMAXBwi3E/6Dr9crm4KkNIQ7dGGNCFTc/KBk7Rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:38:02:57:eb:1c:1c:ed:f2:53:2d:f8:30:17:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Validity
Not Before: Aug 4 07:02:07 2025 GMT
Not After : Aug 5 07:02:07 2025 GMT
Subject: CN=07bfd9d17ca05a235fd3bc57608a5c748de92ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:20:7e:13:7b:27:2e:68:7a:3f:c1:6e:30:ba:
08:ff:2a:a8:38:57:61:39:23:62:62:0e:85:86:89:
8c:f1:8a:93:8c:13:27:19:6b:bc:8e:db:be:d2:70:
c9:8d:91:1d:32:a6:84:f9:a4:c9:0e:3c:f9:1b:d2:
f9:a9:8e:db:6c:ef:d5:54:18:8a:9c:e2:0d:b8:f1:
4a:76:e5:06:3d:cb:10:1d:68:4a:22:3d:37:9c:ef:
22:c2:65:54:0f:9b:23:05:82:a8:ba:bb:f5:e1:1e:
d8:f4:2e:34:e1:86:47:cf:f9:69:d3:e0:93:ad:2e:
af:73:01:ca:b8:18:de:d9:95:01:05:0e:3b:8e:43:
00:8f:f2:a7:64:36:e9:bc:bf:4b:2b:a3:6f:e6:12:
31:35:b5:8d:40:9b:9a:75:00:48:b7:05:83:d3:e2:
11:b7:71:8a:b8:4f:e5:5b:7c:d8:06:b0:d9:4c:e1:
39:c5:49:ce:1b:55:7e:a5:30:e9:60:89:24:e1:32:
b0:ff:fa:7c:6c:28:02:7c:94:b4:ca:66:64:8d:39:
e8:8c:6c:c9:1b:04:08:0b:2b:a1:69:b7:a7:2f:92:
14:67:51:26:e8:4f:e7:24:80:c2:66:61:bf:a0:cd:
a8:fd:f4:8e:da:80:df:32:c8:ad:f8:34:d3:bd:33:
b4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BF:D9:D1:7C:A0:5A:23:5F:D3:BC:57:60:8A:5C:74:8D:E9:2A:C0
X509v3 Authority Key Identifier:
keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:eb:75:8b:fb:05:a1:c9:12:9a:96:7f:60:0e:0c:00:8d:3a:
75:dc:32:62:f6:3a:27:27:5f:1d:4f:61:8d:2a:70:70:bc:75:
df:fe:66:0c:24:7a:6a:d0:f3:38:c3:4a:38:f6:8d:c3:54:17:
3d:7f:8c:dd:04:62:fc:2e:b1:57:a8:a2:2b:90:b7:28:30:df:
6c:78:a7:a5:bb:66:c3:af:42:74:a7:9f:31:70:0e:8b:cb:87:
c4:cb:a5:6d:58:f3:ba:80:82:3e:13:54:67:9f:96:26:8c:a9:
26:82:58:9a:2b:a5:7c:05:80:75:fc:af:53:d6:eb:ba:8b:0f:
bd:f1:d8:bb:d2:eb:16:84:84:3b:fb:37:dc:07:3c:92:ca:1b:
29:2c:b0:84:30:9d:a3:af:a0:1d:03:5a:da:55:0d:d4:ef:30:
d9:84:a6:99:6f:77:3d:03:89:e0:da:f7:64:de:cc:2b:94:69:
07:1c:b8:a0:2e:6b:bb:08:24:f0:6f:12:8c:b0:1f:ce:eb:a2:
fc:03:7c:b1:5c:a5:d7:43:31:5b:6a:56:ec:a7:ba:91:13:a5:
4a:61:1f:26:14:b5:25:72:eb:cf:e3:52:10:01:41:4a:a2:e1:
f0:59:c8:7b:3d:71:f4:91:a2:1f:8b:fe:1d:3f:fe:de:5e:a0:
d8:b6:f0:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4zgCV+scHO3yUy34MBcgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMzkxNjc3YWRlZjdhMmU5YjBiMGU0MGU5M2IyYzRhZmM0
ZGIzNWUwHhcNMjUwODA0MDcwMjA3WhcNMjUwODA1MDcwMjA3WjAzMTEwLwYDVQQD
EygwN2JmZDlkMTdjYTA1YTIzNWZkM2JjNTc2MDhhNWM3NDhkZTkyYWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iB+E3snLmh6P8FuMLoI/yqoOFdh
OSNiYg6FhomM8YqTjBMnGWu8jtu+0nDJjZEdMqaE+aTJDjz5G9L5qY7bbO/VVBiK
nOINuPFKduUGPcsQHWhKIj03nO8iwmVUD5sjBYKourv14R7Y9C404YZHz/lp0+CT
rS6vcwHKuBje2ZUBBQ47jkMAj/KnZDbpvL9LK6Nv5hIxNbWNQJuadQBItwWD0+IR
t3GKuE/lW3zYBrDZTOE5xUnOG1V+pTDpYIkk4TKw//p8bCgCfJS0ymZkjTnojGzJ
GwQICyuhabenL5IUZ1Em6E/nJIDCZmG/oM2o/fSO2oDfMsit+DTTvTO0VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAe/2dF8oFojX9O8V2CKXHSN6SrAMB8GA1UdIwQY
MBaAFJE5Fnet73oumwsOQOk7LEr8TbNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1RrV2Q2M3ZlaTZiQ3c1QTZUc3NTdnhOczE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9jZmRlZjQtMDMyOS00OGQxLWEzYzMt
NDZiY2IzNmRmNGIzLzEva1RrV2Q2M3ZlaTZiQ3c1QTZUc3NTdnhOczE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9jZmRlZjQtMDMyOS00OGQxLWEzYzMtNDZiY2IzNmRmNGIz
LzEva1RrV2Q2M3ZlaTZiQ3c1QTZUc3NTdnhOczE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+t1i/sF
ockSmpZ/YA4MAI06ddwyYvY6JydfHU9hjSpwcLx13/5mDCR6atDzOMNKOPaNw1QX
PX+M3QRi/C6xV6iiK5C3KDDfbHinpbtmw69CdKefMXAOi8uHxMulbVjzuoCCPhNU
Z5+WJoypJoJYmiulfAWAdfyvU9bruosPvfHYu9LrFoSEO/s33Ac8ksobKSywhDCd
o6+gHQNa2lUN1O8w2YSmmW93PQOJ4Nr3ZN7MK5RpBxy4oC5ruwgk8G8SjLAfzuui
/AN8sVyl10MxW2pW7Ke6kROlSmEfJhS1JXLrz+NSEAFBSqLh8FnIez1x9JGiH4v+
HT/+3l6g2Lbw3w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:41 2025 by rpki-client