Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
File: KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft (raw, json)
Hash identifier: aa9XXNYHZlV73Fk706dVCJRPQQLUzX50Al6yBP4bRTA=
Subject key identifier: 5F:9F:F3:B1:3F:76:3C:B6:58:32:1D:92:3E:D5:7E:08:75:AD:34:29
Authority key identifier: 29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
Certificate issuer: /CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Certificate serial: 01989034DE0EDE58CE3B427120A3D7492183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
Manifest number: 135B
Signing time: Sat 09 Aug 2025 19:00:40 +0000
Manifest this update: Sat 09 Aug 2025 19:00:40 +0000
Manifest next update: Sun 10 Aug 2025 19:00:40 +0000
Files and hashes: 1: KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl (hash: zZ4O0fCHehCptjSuyNtPl4lyEcUdJimVHjgFijxbuDs=)
2: Lc2MOeHrhJYACH3DTtJSFK-up5U.roa (hash: jsqmE6guApHIEUr5xOYbDvIqn7++Rg1hChyQTZ/F2xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:34:de:0e:de:58:ce:3b:42:71:20:a3:d7:49:21:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Validity
Not Before: Aug 9 19:00:40 2025 GMT
Not After : Aug 10 19:00:40 2025 GMT
Subject: CN=5f9ff3b13f763cb658321d923ed57e0875ad3429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:dd:8e:5f:ee:e2:51:a8:51:d5:e3:37:fa:96:
51:32:8a:8d:0e:92:99:09:d5:91:b7:41:8a:30:62:
23:67:1c:59:32:8a:8c:92:62:c2:25:d1:47:54:bb:
32:92:0a:31:96:9c:0e:23:52:88:24:d0:b3:e7:4a:
12:c6:f7:de:56:6d:6d:30:1e:fb:3c:b0:4a:c0:ce:
9b:b2:f9:73:b0:66:d4:4e:2f:7b:8c:a8:47:34:4d:
24:5c:1b:5b:8d:16:8a:e0:43:63:75:6a:6d:04:91:
fb:b1:26:bf:cc:42:2f:8f:7a:4e:b7:70:f1:76:ad:
16:a7:3e:d7:e2:04:6c:71:9f:78:53:95:06:16:35:
52:0f:85:0d:c6:23:78:a8:31:4d:23:4d:eb:1d:b1:
96:0a:ab:75:7a:55:a4:ef:78:cb:86:8b:83:80:56:
3d:e0:e2:49:a3:e5:57:3f:ec:73:57:f4:2a:cb:cd:
28:a5:4c:5b:1d:07:f7:63:24:58:5e:98:67:aa:11:
07:be:85:d5:2e:ee:d4:6e:40:d6:dc:09:e2:f9:5f:
5a:12:8a:08:e5:a7:cf:31:14:c5:fa:72:c7:9b:c0:
5c:cc:f1:d3:ab:b7:30:24:8e:2c:80:5f:b4:51:be:
2d:e2:4e:d5:c1:05:6e:79:ea:10:db:e2:c8:8a:8b:
40:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9F:F3:B1:3F:76:3C:B6:58:32:1D:92:3E:D5:7E:08:75:AD:34:29
X509v3 Authority Key Identifier:
keyid:29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:45:94:2a:34:06:fd:38:65:e4:38:45:73:0a:23:da:9d:55:
4b:ea:60:e1:74:11:75:8e:ce:a1:d7:16:61:eb:95:fe:44:bc:
cc:e3:4f:7e:b0:36:c0:05:34:d7:90:45:a0:62:b6:89:8e:02:
70:7b:77:f5:63:6b:e4:bd:fd:03:44:d1:da:78:9c:fe:ff:08:
12:d1:4e:67:1f:cb:8d:03:59:08:e1:10:ce:53:00:fc:28:70:
d3:b6:7b:72:7a:e2:bf:fa:ba:b4:73:ee:f6:4d:cf:a4:b7:3f:
78:cf:79:ed:e1:77:30:de:dc:a8:ca:a9:e8:19:07:06:f5:a0:
78:52:07:60:e9:b7:31:bb:de:6d:19:c1:fe:d1:df:91:c4:7b:
c5:0c:00:39:88:0b:5f:6d:e7:06:66:fc:73:a5:39:ab:d0:85:
a3:a6:c7:dc:ef:aa:be:4d:cb:51:da:ad:20:93:eb:d5:a3:0b:
15:c2:4b:ce:0e:66:3d:68:df:e4:ff:56:10:5c:5e:f2:1e:a4:
9d:13:3d:07:c2:92:ce:06:9d:7a:22:f2:2e:91:a6:fa:fc:ed:
b9:a7:3b:a2:e2:60:5f:85:52:72:83:a2:54:67:b3:cd:a7:5a:
9c:f9:20:44:6a:35:98:c3:13:82:74:84:c2:a7:e5:f7:65:37:
88:e5:f0:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQNN4O3ljOO0JxIKPXSSGDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5M2YyZWM3NGI0MDY2YWM2N2E4NzY4ZDhlMzg2MDZlZmNk
NjQwMTMwHhcNMjUwODA5MTkwMDQwWhcNMjUwODEwMTkwMDQwWjAzMTEwLwYDVQQD
Eyg1ZjlmZjNiMTNmNzYzY2I2NTgzMjFkOTIzZWQ1N2UwODc1YWQzNDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4d2OX+7iUahR1eM3+pZRMoqNDpKZ
CdWRt0GKMGIjZxxZMoqMkmLCJdFHVLsykgoxlpwOI1KIJNCz50oSxvfeVm1tMB77
PLBKwM6bsvlzsGbUTi97jKhHNE0kXBtbjRaK4ENjdWptBJH7sSa/zEIvj3pOt3Dx
dq0Wpz7X4gRscZ94U5UGFjVSD4UNxiN4qDFNI03rHbGWCqt1elWk73jLhouDgFY9
4OJJo+VXP+xzV/Qqy80opUxbHQf3YyRYXphnqhEHvoXVLu7UbkDW3Ani+V9aEooI
5afPMRTF+nLHm8BczPHTq7cwJI4sgF+0Ub4t4k7VwQVueeoQ2+LIiotAoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+f87E/djy2WDIdkj7Vfgh1rTQpMB8GA1UdIwQY
MBaAFCk/LsdLQGasZ6h2jY44YG781kATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OTA0NWEtYTViMS00ZTU5LTk3MTct
MjNmMjI2M2I5YmQyLzEvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC82OTA0NWEtYTViMS00ZTU5LTk3MTctMjNmMjI2M2I5YmQy
LzEvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANEWUKjQG
/Thl5DhFcwoj2p1VS+pg4XQRdY7OodcWYeuV/kS8zONPfrA2wAU015BFoGK2iY4C
cHt39WNr5L39A0TR2nic/v8IEtFOZx/LjQNZCOEQzlMA/Chw07Z7cnriv/q6tHPu
9k3PpLc/eM957eF3MN7cqMqp6BkHBvWgeFIHYOm3MbvebRnB/tHfkcR7xQwAOYgL
X23nBmb8c6U5q9CFo6bH3O+qvk3LUdqtIJPr1aMLFcJLzg5mPWjf5P9WEFxe8h6k
nRM9B8KSzgadeiLyLpGm+vztuac7ouJgX4VScoOiVGezzadanPkgRGo1mMMTgnSE
wqfl92U3iOXwpQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:39:35 2025 by rpki-client