Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
File: kBewvZCCfeCNJP72G8xEhiAkv34.mft (raw, json)
Hash identifier: 8i9qqUIZQZSxFBy+V1+05wXDiewPFWXaMQhLDVweVWQ=
Subject key identifier: 67:5B:C1:B1:66:63:3B:46:25:BE:F9:AE:2A:F8:97:F1:B6:07:87:28
Authority key identifier: 90:17:B0:BD:90:82:7D:E0:8D:24:FE:F6:1B:CC:44:86:20:24:BF:7E
Certificate issuer: /CN=9017b0bd90827de08d24fef61bcc44862024bf7e
Certificate serial: 019880540CEB60732D6281523DA71D5EC6CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kBewvZCCfeCNJP72G8xEhiAkv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
Manifest number: 0CB2
Signing time: Wed 06 Aug 2025 17:00:48 +0000
Manifest this update: Wed 06 Aug 2025 17:00:48 +0000
Manifest next update: Thu 07 Aug 2025 17:00:48 +0000
Files and hashes: 1: GDngKunQly0rXAZJTM9K6ouZldE.roa (hash: srWtclzCrCIl56nGBNOU8VqqYjtRTWRgnKIo2g1oYz4=)
2: kBewvZCCfeCNJP72G8xEhiAkv34.crl (hash: +Y58pkVyFvh/iHpzr5lWqj2lkbuqQS3wzryRkdVBPA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
rsync://rpki.ripe.net/repository/DEFAULT/kBewvZCCfeCNJP72G8xEhiAkv34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:0c:eb:60:73:2d:62:81:52:3d:a7:1d:5e:c6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9017b0bd90827de08d24fef61bcc44862024bf7e
Validity
Not Before: Aug 6 17:00:48 2025 GMT
Not After : Aug 7 17:00:48 2025 GMT
Subject: CN=675bc1b166633b4625bef9ae2af897f1b6078728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:43:16:13:6a:a1:90:a4:a0:18:a6:87:8f:07:
24:d9:60:48:92:3e:6a:47:7f:74:70:10:3c:96:12:
65:7b:40:58:00:29:0d:fa:cf:9a:10:30:bb:90:b1:
dd:d7:29:5e:b8:9c:f0:ac:79:f1:92:b1:48:42:6d:
e0:a0:a5:89:e6:3b:57:f9:65:2f:88:7c:73:5f:e7:
ca:0e:3f:b5:e1:2b:d5:17:38:76:85:b3:e6:fd:1b:
c0:be:21:df:74:72:d1:97:e9:b2:71:09:c3:62:1c:
ab:70:ef:5b:f0:c9:6c:b2:e1:6c:6b:bf:ed:33:3d:
59:ec:c2:e0:16:0e:9e:a5:35:b7:4e:cb:dd:84:74:
3e:04:3b:d7:af:0e:11:03:04:bf:ed:4c:79:90:63:
64:3d:d9:71:e0:0e:14:4e:60:f6:38:b7:17:d6:90:
55:e5:50:9e:46:7a:2c:16:ca:97:7b:a3:8e:d0:bc:
39:a0:42:34:e9:7c:b8:7c:4d:95:f1:48:8e:4e:38:
df:ff:4d:3e:37:fc:47:9f:f5:39:bb:f5:39:64:9b:
f9:04:c8:e1:a3:aa:c8:a4:b7:61:27:b8:df:17:ee:
f0:24:2a:d5:b6:60:95:85:ba:4c:72:b4:bb:45:54:
7e:ca:ad:91:d8:56:be:ca:59:5e:a4:b3:64:82:f0:
93:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5B:C1:B1:66:63:3B:46:25:BE:F9:AE:2A:F8:97:F1:B6:07:87:28
X509v3 Authority Key Identifier:
keyid:90:17:B0:BD:90:82:7D:E0:8D:24:FE:F6:1B:CC:44:86:20:24:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kBewvZCCfeCNJP72G8xEhiAkv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9a:54:a6:8c:94:01:1a:c9:17:9a:e9:02:81:d9:9e:53:80:
e1:cc:65:1c:45:b4:54:62:de:51:b1:5b:2c:b6:a7:b1:53:2e:
a4:32:ca:b4:02:fd:cf:64:70:87:5e:f6:b2:72:b8:a2:8b:c8:
ab:cc:68:63:62:0d:5d:48:2c:fd:d4:df:d1:3e:3e:ff:64:0d:
0d:0a:d6:a3:2d:68:2c:03:8c:e0:e2:c9:4b:fe:65:37:a5:a3:
07:ab:12:24:dd:45:53:c7:09:ff:c4:c3:8c:05:08:31:08:32:
b9:2c:2b:dc:22:bb:41:30:9f:9a:b2:de:91:b4:7b:d2:7e:d2:
81:d8:71:1d:28:a3:63:ea:c6:82:a6:52:99:2c:67:99:c7:12:
d2:84:4e:f6:ea:ef:bd:28:76:b1:9a:8c:8d:ca:56:bd:16:d1:
6d:2c:96:f5:97:51:f5:23:3a:9f:fe:92:30:d4:df:73:dc:85:
c9:db:4d:ea:d9:c4:ba:65:7d:12:6d:92:82:07:87:ef:94:d3:
53:a6:db:2f:8a:d5:07:c2:52:1b:ac:11:5e:b9:3f:52:8b:f8:
28:a3:9b:13:8f:a1:60:bf:0f:0f:d5:d4:77:26:56:0a:7c:6b:
30:9d:e1:26:ca:5b:e4:10:2d:63:e5:bd:42:3e:7e:71:8a:73:
7e:17:77:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAVAzrYHMtYoFSPacdXsbOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwMTdiMGJkOTA4MjdkZTA4ZDI0ZmVmNjFiY2M0NDg2MjAy
NGJmN2UwHhcNMjUwODA2MTcwMDQ4WhcNMjUwODA3MTcwMDQ4WjAzMTEwLwYDVQQD
Eyg2NzViYzFiMTY2NjMzYjQ2MjViZWY5YWUyYWY4OTdmMWI2MDc4NzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkMWE2qhkKSgGKaHjwck2WBIkj5q
R390cBA8lhJle0BYACkN+s+aEDC7kLHd1yleuJzwrHnxkrFIQm3goKWJ5jtX+WUv
iHxzX+fKDj+14SvVFzh2hbPm/RvAviHfdHLRl+mycQnDYhyrcO9b8MlssuFsa7/t
Mz1Z7MLgFg6epTW3TsvdhHQ+BDvXrw4RAwS/7Ux5kGNkPdlx4A4UTmD2OLcX1pBV
5VCeRnosFsqXe6OO0Lw5oEI06Xy4fE2V8UiOTjjf/00+N/xHn/U5u/U5ZJv5BMjh
o6rIpLdhJ7jfF+7wJCrVtmCVhbpMcrS7RVR+yq2R2Fa+yllepLNkgvCTAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdbwbFmYztGJb75rir4l/G2B4coMB8GA1UdIwQY
MBaAFJAXsL2Qgn3gjST+9hvMRIYgJL9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0Jld3ZaQ0NmZUNOSlA3Mkc4eEVoaUFrdjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9iYjU2MGEtNDI4NC00ZmMwLWIwNWQt
YThiZTk5MzJhYTg5LzEva0Jld3ZaQ0NmZUNOSlA3Mkc4eEVoaUFrdjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9iYjU2MGEtNDI4NC00ZmMwLWIwNWQtYThiZTk5MzJhYTg5
LzEva0Jld3ZaQ0NmZUNOSlA3Mkc4eEVoaUFrdjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5pUpoyU
ARrJF5rpAoHZnlOA4cxlHEW0VGLeUbFbLLansVMupDLKtAL9z2Rwh172snK4oovI
q8xoY2INXUgs/dTf0T4+/2QNDQrWoy1oLAOM4OLJS/5lN6WjB6sSJN1FU8cJ/8TD
jAUIMQgyuSwr3CK7QTCfmrLekbR70n7SgdhxHSijY+rGgqZSmSxnmccS0oRO9urv
vSh2sZqMjcpWvRbRbSyW9ZdR9SM6n/6SMNTfc9yFydtN6tnEumV9Em2SggeH75TT
U6bbL4rVB8JSG6wRXrk/Uov4KKObE4+hYL8PD9XUdyZWCnxrMJ3hJspb5BAtY+W9
Qj5+cYpzfhd3Vw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:27:54 2025 by rpki-client