Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
File: K_CgGXhoxtjDTdFrP0TezF5CNvU.mft (raw, json)
Hash identifier: xcqnAirsnyPRAjCWEt/6C60MQcF5s3VZ4SY3ejuO4H8=
Subject key identifier: 07:BA:B3:B2:93:F2:90:A3:27:43:B1:1A:36:68:2B:7F:50:51:AC:7C
Authority key identifier: 2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
Certificate issuer: /CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Certificate serial: 019892C996F356514FEF6A797AEA0C1B88AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
Manifest number: 0DDF
Signing time: Sun 10 Aug 2025 07:02:21 +0000
Manifest this update: Sun 10 Aug 2025 07:02:21 +0000
Manifest next update: Mon 11 Aug 2025 07:02:21 +0000
Files and hashes: 1: K_CgGXhoxtjDTdFrP0TezF5CNvU.crl (hash: jewbhVjOKpkLpu9km8uI7U7XFeUb6/qYWJt2mr2/ekY=)
2: cwewYqqUz_DTY7N101NBNvby5-A.roa (hash: 12Ilbr32JYBfPHCal30nzRY5XUe8GWiDmB7OIucWhgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:96:f3:56:51:4f:ef:6a:79:7a:ea:0c:1b:88:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Validity
Not Before: Aug 10 07:02:21 2025 GMT
Not After : Aug 11 07:02:21 2025 GMT
Subject: CN=07bab3b293f290a32743b11a36682b7f5051ac7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:5f:50:fd:ab:ac:d0:92:11:bc:09:6c:5c:
04:6c:27:7b:8e:d7:2d:70:be:95:81:09:ff:22:74:
4a:5e:a4:76:fd:a6:43:81:36:fe:54:00:b2:0c:f9:
f8:4e:48:a4:fb:33:ab:16:a3:73:1f:10:7c:fe:16:
c7:27:8b:da:8d:05:65:4d:15:f9:e2:09:c7:18:67:
d1:b0:28:88:0c:3e:2e:55:18:8c:cb:39:e7:d8:1f:
b7:58:3e:f8:2a:ec:14:60:d9:55:04:3c:60:3b:0e:
38:f4:4f:71:7e:ba:c2:68:0e:b6:82:ae:4c:71:10:
1a:69:03:50:23:92:6f:b2:d4:07:1b:19:ae:9d:09:
4c:89:5d:b1:23:c1:b1:07:ce:81:9b:41:83:f9:d1:
d9:49:a0:f2:75:5b:94:97:ee:8f:bb:a3:2d:20:5f:
38:56:39:ef:4f:78:0d:9d:33:a0:6a:30:54:c3:20:
bb:18:aa:5b:4f:74:c7:5c:25:10:54:47:b0:60:b3:
07:ca:91:63:b2:00:ba:01:02:f6:1a:36:aa:64:ed:
ec:50:ba:34:1a:a2:22:5c:70:bf:72:64:b0:9e:5e:
a0:85:6b:27:10:40:99:62:78:c1:cf:37:25:fb:0e:
3e:ab:25:00:3a:fd:91:a5:6d:5b:b9:c6:65:12:5c:
c9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BA:B3:B2:93:F2:90:A3:27:43:B1:1A:36:68:2B:7F:50:51:AC:7C
X509v3 Authority Key Identifier:
keyid:2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ca:a6:34:bb:c3:31:04:58:de:a0:aa:36:b5:ae:1b:1d:51:
d3:49:6d:17:5a:61:32:67:39:7c:a4:23:81:a8:cd:ae:0f:cd:
bc:f6:d0:73:52:44:22:45:c9:1f:22:be:a3:e9:c1:9d:a0:2c:
f9:79:8a:9a:87:67:17:a9:10:93:dc:6a:1d:c0:51:93:39:72:
ef:f6:ed:af:72:3e:03:1c:3d:73:33:11:e4:5c:40:0c:c6:5e:
bc:f6:41:e5:56:11:0b:98:47:b3:a3:a4:ee:b2:34:28:1d:42:
1a:ed:f3:9d:fe:f2:46:f4:70:98:bc:74:f4:1c:cd:06:f5:f8:
64:39:74:36:bb:2d:fd:30:66:c2:b1:0f:74:cd:43:ae:37:59:
74:8b:77:cb:86:82:11:61:a1:af:a2:ef:8c:57:c7:5e:a0:c4:
a8:f7:3b:b0:89:38:ca:94:44:9f:93:90:20:55:3a:94:50:de:
2e:c3:4e:b4:bc:63:9c:97:b5:9d:bc:42:54:7f:5b:29:0e:cb:
3f:53:cc:7e:fd:e7:ad:55:45:26:f1:52:73:14:5b:bc:ca:e4:
d1:c2:d1:ae:08:a9:87:c4:09:3c:ef:79:12:10:bf:3e:ec:30:
7f:f2:c5:fe:83:a6:c0:a6:c1:68:26:37:dc:4e:12:fc:ae:a6:
3c:88:cf:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSyZbzVlFP72p5euoMG4irMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZjBhMDE5Nzg2OGM2ZDhjMzRkZDE2YjNmNDRkZWNjNWU0
MjM2ZjUwHhcNMjUwODEwMDcwMjIxWhcNMjUwODExMDcwMjIxWjAzMTEwLwYDVQQD
EygwN2JhYjNiMjkzZjI5MGEzMjc0M2IxMWEzNjY4MmI3ZjUwNTFhYzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCZfUP2rrNCSEbwJbFwEbCd7jtct
cL6VgQn/InRKXqR2/aZDgTb+VACyDPn4Tkik+zOrFqNzHxB8/hbHJ4vajQVlTRX5
4gnHGGfRsCiIDD4uVRiMyznn2B+3WD74KuwUYNlVBDxgOw449E9xfrrCaA62gq5M
cRAaaQNQI5JvstQHGxmunQlMiV2xI8GxB86Bm0GD+dHZSaDydVuUl+6Pu6MtIF84
VjnvT3gNnTOgajBUwyC7GKpbT3THXCUQVEewYLMHypFjsgC6AQL2GjaqZO3sULo0
GqIiXHC/cmSwnl6ghWsnEECZYnjBzzcl+w4+qyUAOv2RpW1bucZlElzJ7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAe6s7KT8pCjJ0OxGjZoK39QUax8MB8GA1UdIwQY
MBaAFCvwoBl4aMbYw03Raz9E3sxeQjb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS19DZ0dYaG94dGpEVGRGclAwVGV6RjVDTnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80MGQyMjAtNjIxZC00NmZiLWFjOWMt
NDhiODM2NmZmMjNlLzEvS19DZ0dYaG94dGpEVGRGclAwVGV6RjVDTnZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80MGQyMjAtNjIxZC00NmZiLWFjOWMtNDhiODM2NmZmMjNl
LzEvS19DZ0dYaG94dGpEVGRGclAwVGV6RjVDTnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsqmNLvD
MQRY3qCqNrWuGx1R00ltF1phMmc5fKQjgajNrg/NvPbQc1JEIkXJHyK+o+nBnaAs
+XmKmodnF6kQk9xqHcBRkzly7/btr3I+Axw9czMR5FxADMZevPZB5VYRC5hHs6Ok
7rI0KB1CGu3znf7yRvRwmLx09BzNBvX4ZDl0Nrst/TBmwrEPdM1DrjdZdIt3y4aC
EWGhr6LvjFfHXqDEqPc7sIk4ypREn5OQIFU6lFDeLsNOtLxjnJe1nbxCVH9bKQ7L
P1PMfv3nrVVFJvFScxRbvMrk0cLRrgiph8QJPO95EhC/Puwwf/LF/oOmwKbBaCY3
3E4S/K6mPIjPhg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 15:56:40 2025 by rpki-client