Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
File: K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft (raw, json)
Hash identifier: OZc1C/F9cR/75lS1BfpnVsSHbIgRZuMqNk289GBnuh4=
Subject key identifier: B4:30:AE:DA:15:C1:4E:B6:30:42:CF:34:2C:A8:97:BB:45:94:EF:7E
Authority key identifier: 2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2
Certificate issuer: /CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2
Certificate serial: 0198801D5CE78412760A0ACD2E798D4523F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
Manifest number: 0D80
Signing time: Wed 06 Aug 2025 16:01:04 +0000
Manifest this update: Wed 06 Aug 2025 16:01:04 +0000
Manifest next update: Thu 07 Aug 2025 16:01:04 +0000
Files and hashes: 1: 1-Ctx0OlZ3RY1NyUcG6Kr2eKUErY.roa (hash: JkNd+tdZjJnr7jC7uh7724Mud2+QPZt/dAV8oEoWgb4=)
2: K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl (hash: 7TiHaDKjFWAcRym4CCQUhoOx9P0Z3JBIXm77XOZdK8o=)
3: UwN1BiytNRPdcWnqBjZDDgnoG8U.roa (hash: GAg0iRD5NjIqqH0MJGqVfIOd1Fcwz79I/HxN8NQjQ6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:1d:5c:e7:84:12:76:0a:0a:cd:2e:79:8d:45:23:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2
Validity
Not Before: Aug 6 16:01:04 2025 GMT
Not After : Aug 7 16:01:04 2025 GMT
Subject: CN=b430aeda15c14eb63042cf342ca897bb4594ef7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:02:08:82:93:a1:2f:49:06:fa:23:3b:ef:38:
f4:dc:d5:83:4c:05:11:04:79:0b:1d:09:55:a6:2c:
63:06:d9:c7:54:fe:25:86:00:8e:61:17:4e:8a:7f:
9b:2c:13:33:09:ed:e8:56:c8:74:3a:bc:8c:d2:91:
06:aa:f9:68:62:1d:dd:49:ae:d2:ba:4b:70:d6:2a:
e0:3a:1d:5c:c3:a7:ad:65:3c:a3:ed:b6:da:b8:ed:
30:c5:0a:b6:00:b7:7b:f8:aa:e0:71:bc:02:95:ed:
f9:93:1e:0f:b2:37:f5:bb:b2:43:b9:2c:aa:1e:a7:
0e:c1:51:33:76:a2:ba:a8:85:95:80:e8:d2:40:fc:
bf:d9:52:fe:56:45:60:5d:b2:3b:da:c6:ce:4f:c6:
c9:8e:35:37:9a:37:96:41:11:b0:e3:6e:7d:96:00:
1f:a0:97:06:2a:54:9d:d6:f9:4d:a9:e7:a7:ca:1d:
7d:04:01:a8:6d:9b:e8:47:39:66:5f:66:90:18:1c:
23:54:ba:01:a3:41:12:e5:12:c9:92:67:17:07:9f:
02:3d:28:34:e5:b3:fe:9c:f3:76:c3:52:bb:a7:1f:
3a:80:a5:e4:09:36:0d:7a:27:c3:de:f6:03:3c:45:
af:12:a0:75:fd:b2:a1:4e:54:f0:75:b0:d5:6a:b4:
7e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:30:AE:DA:15:C1:4E:B6:30:42:CF:34:2C:A8:97:BB:45:94:EF:7E
X509v3 Authority Key Identifier:
keyid:2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:53:48:c9:48:2f:56:82:e1:2d:89:78:93:13:82:cf:a1:ac:
c6:ad:a4:c0:99:84:8e:b3:fd:e9:92:1c:2a:ab:b5:b1:5f:df:
2d:86:f5:12:bc:ec:f3:f9:21:41:89:ab:b9:05:17:ea:63:18:
6b:46:5d:16:df:fa:9a:3d:55:d2:37:84:2f:df:b6:81:99:68:
3c:cf:1d:81:d6:ae:9e:c5:24:91:eb:c8:7f:b8:be:f0:2c:b6:
8e:20:0c:55:d8:a0:ce:b8:34:82:35:f2:e9:fa:85:4b:fd:b3:
e4:9a:81:fb:a1:76:1f:da:ba:a5:2d:b0:b2:e1:9d:08:14:a6:
0f:f2:48:0d:fb:78:24:4d:50:67:f9:49:00:17:95:6d:ef:7e:
1d:a8:14:5d:18:4a:99:f6:53:32:62:e3:1a:59:d6:71:d8:bc:
d6:b9:0f:06:c1:30:6b:88:f1:da:a4:7b:23:82:68:e4:19:9c:
b5:aa:7b:a8:e7:ac:09:84:f7:2a:00:1c:b2:00:0b:88:01:59:
3e:c0:a0:5e:b1:70:96:d1:ac:e1:98:7a:47:a5:62:3d:bb:09:
8e:f2:20:84:90:e5:92:87:9f:94:aa:8d:37:09:0a:63:b7:21:
9e:19:c9:45:e7:46:83:58:2f:ba:ea:10:54:1c:99:c4:83:05:
a8:d9:1f:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAHVznhBJ2CgrNLnmNRSP5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiN2FiNjU2OWRlNzhkM2M0YTA4MmZkZTZkZDFkNmEzZjBk
NTA5YzIwHhcNMjUwODA2MTYwMTA0WhcNMjUwODA3MTYwMTA0WjAzMTEwLwYDVQQD
EyhiNDMwYWVkYTE1YzE0ZWI2MzA0MmNmMzQyY2E4OTdiYjQ1OTRlZjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswIIgpOhL0kG+iM77zj03NWDTAUR
BHkLHQlVpixjBtnHVP4lhgCOYRdOin+bLBMzCe3oVsh0OryM0pEGqvloYh3dSa7S
uktw1irgOh1cw6etZTyj7bbauO0wxQq2ALd7+KrgcbwCle35kx4Psjf1u7JDuSyq
HqcOwVEzdqK6qIWVgOjSQPy/2VL+VkVgXbI72sbOT8bJjjU3mjeWQRGw4259lgAf
oJcGKlSd1vlNqeenyh19BAGobZvoRzlmX2aQGBwjVLoBo0ES5RLJkmcXB58CPSg0
5bP+nPN2w1K7px86gKXkCTYNeifD3vYDPEWvEqB1/bKhTlTwdbDVarR+VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQwrtoVwU62MELPNCyol7tFlO9+MB8GA1UdIwQY
MBaAFCt6tlad5408Sggv3m3R1qPw1QnCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzNxMlZwM25qVHhLQ0NfZWJkSFdvX0RWQ2NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82ZTQ1NDQtZTY1Zi00YmYwLTk0Yzgt
M2ZjOTY1OTRiNGM1LzEvSzNxMlZwM25qVHhLQ0NfZWJkSFdvX0RWQ2NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC82ZTQ1NDQtZTY1Zi00YmYwLTk0YzgtM2ZjOTY1OTRiNGM1
LzEvSzNxMlZwM25qVHhLQ0NfZWJkSFdvX0RWQ2NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVNIyUgv
VoLhLYl4kxOCz6Gsxq2kwJmEjrP96ZIcKqu1sV/fLYb1Erzs8/khQYmruQUX6mMY
a0ZdFt/6mj1V0jeEL9+2gZloPM8dgdaunsUkkevIf7i+8Cy2jiAMVdigzrg0gjXy
6fqFS/2z5JqB+6F2H9q6pS2wsuGdCBSmD/JIDft4JE1QZ/lJABeVbe9+HagUXRhK
mfZTMmLjGlnWcdi81rkPBsEwa4jx2qR7I4Jo5Bmctap7qOesCYT3KgAcsgALiAFZ
PsCgXrFwltGs4Zh6R6ViPbsJjvIghJDlkoeflKqNNwkKY7chnhnJRedGg1gvuuoQ
VByZxIMFqNkfZg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:25:41 2025 by rpki-client