
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
File: kv6qMsTg4Zca0NWLFyztFyEFaFw.mft (raw, json)
Hash identifier: T1UGhzlrLo2RnjcaGFjl4I3KlkNEQbCyNMFF7d1N+9c=
Subject key identifier: 2E:F4:89:FB:EF:AA:6E:14:7D:0D:6A:45:96:92:6C:2A:D5:28:4F:0E
Authority key identifier: 92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C
Certificate issuer: /CN=92feaa32c4e0e1971ad0d58b172ced172105685c
Certificate serial: 01987CE527BA6A43378D7C2481299E2AFE98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
Manifest number: 1618
Signing time: Wed 06 Aug 2025 01:00:49 +0000
Manifest this update: Wed 06 Aug 2025 01:00:49 +0000
Manifest next update: Thu 07 Aug 2025 01:00:49 +0000
Files and hashes: 1: kv6qMsTg4Zca0NWLFyztFyEFaFw.crl (hash: 8COTTIoFh/CG6xkrhLKdXYyFP92PSv6YiiPo23jpH4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:27:ba:6a:43:37:8d:7c:24:81:29:9e:2a:fe:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92feaa32c4e0e1971ad0d58b172ced172105685c
Validity
Not Before: Aug 6 01:00:49 2025 GMT
Not After : Aug 7 01:00:49 2025 GMT
Subject: CN=2ef489fbefaa6e147d0d6a4596926c2ad5284f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:84:c5:72:1d:09:db:81:d6:d5:af:15:7a:
5b:77:ab:46:6b:5b:26:af:f4:e5:24:a2:98:c6:58:
4b:96:0d:8f:39:28:e5:07:22:f1:ef:2b:55:f7:6d:
52:09:d0:30:20:03:89:1a:d1:bb:e1:75:86:2f:0c:
d6:0e:f0:d6:b9:8b:4a:d7:11:92:6e:5b:4c:a9:98:
16:9b:db:0e:bc:5a:d1:38:3f:e6:31:c5:fe:40:07:
c0:89:17:01:48:02:ad:3c:16:81:81:f6:1f:84:3c:
ee:a7:c6:f2:3b:ce:7c:f8:f6:aa:37:fb:9a:5d:76:
45:47:00:ef:a2:97:bf:7b:b4:f0:19:30:7a:bd:20:
a5:4d:e1:90:db:ad:9c:57:cd:db:9a:a9:33:e7:67:
59:08:86:41:37:57:26:94:f2:f0:14:12:7f:1b:30:
14:78:84:af:68:27:bc:45:46:7c:15:e4:67:11:fb:
e2:86:d0:21:09:3c:57:12:92:87:84:09:09:72:3c:
74:6e:7b:69:f6:14:a4:f1:a5:7c:01:71:a6:65:6a:
f5:82:1d:e8:e4:30:83:23:be:c8:4f:63:f5:a5:83:
df:19:a1:79:ca:2f:8c:99:8f:12:49:e4:de:13:78:
b3:fe:c8:e4:c6:c6:4f:4e:dc:f9:f4:cd:50:3a:15:
a8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F4:89:FB:EF:AA:6E:14:7D:0D:6A:45:96:92:6C:2A:D5:28:4F:0E
X509v3 Authority Key Identifier:
keyid:92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b3:39:82:c5:53:55:2f:81:46:7b:a9:15:cd:42:34:e6:75:
78:43:b3:21:94:f9:c8:49:96:74:a1:c6:22:0c:7d:f0:4e:11:
f8:30:97:59:41:15:89:36:3e:26:3c:9d:53:bb:21:3c:f8:cf:
cb:26:9b:bf:69:5b:6c:dc:75:25:0d:e0:0a:4c:e1:02:32:fb:
bc:60:21:85:6d:cc:17:b6:69:92:e0:1a:16:25:be:ba:71:94:
2b:d1:ec:3d:7f:17:0d:58:f6:27:b6:57:0a:e7:13:e2:25:8a:
c6:c4:5a:79:a9:ee:8a:1b:56:9d:21:e4:bc:71:73:aa:79:9c:
bb:25:c4:ee:5e:f0:df:e4:73:b4:97:e9:e2:6b:77:f2:3b:e8:
3a:4c:78:c5:18:ff:5d:f5:0e:0b:f6:d1:e0:2a:8e:4a:2e:79:
80:86:c9:fa:a1:5d:31:7e:7c:8e:eb:b7:7e:98:a0:10:98:9c:
7b:af:57:de:b9:84:a6:59:d6:26:f8:3a:01:7e:76:45:dc:54:
4e:0a:11:e1:de:ec:9e:69:e2:dd:f1:35:d1:39:a6:2a:48:74:
81:18:69:e3:f0:57:f7:96:c8:f0:56:35:95:6e:b6:e1:25:04:
6f:5b:db:6e:f9:eb:78:bc:06:c5:2d:e5:0d:57:f1:e2:4f:62:
82:35:5d:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh85Se6akM3jXwkgSmeKv6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZmVhYTMyYzRlMGUxOTcxYWQwZDU4YjE3MmNlZDE3MjEw
NTY4NWMwHhcNMjUwODA2MDEwMDQ5WhcNMjUwODA3MDEwMDQ5WjAzMTEwLwYDVQQD
EygyZWY0ODlmYmVmYWE2ZTE0N2QwZDZhNDU5NjkyNmMyYWQ1Mjg0ZjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy6ExXIdCduB1tWvFXpbd6tGa1sm
r/TlJKKYxlhLlg2POSjlByLx7ytV921SCdAwIAOJGtG74XWGLwzWDvDWuYtK1xGS
bltMqZgWm9sOvFrROD/mMcX+QAfAiRcBSAKtPBaBgfYfhDzup8byO858+PaqN/ua
XXZFRwDvope/e7TwGTB6vSClTeGQ262cV83bmqkz52dZCIZBN1cmlPLwFBJ/GzAU
eISvaCe8RUZ8FeRnEfvihtAhCTxXEpKHhAkJcjx0bntp9hSk8aV8AXGmZWr1gh3o
5DCDI77IT2P1pYPfGaF5yi+MmY8SSeTeE3iz/sjkxsZPTtz59M1QOhWo1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC70ifvvqm4UfQ1qRZaSbCrVKE8OMB8GA1UdIwQY
MBaAFJL+qjLE4OGXGtDVixcs7RchBWhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3Y2cU1zVGc0WmNhME5XTEZ5enRGeUVGYUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9kZjc2ZWEtZjc1Zi00ZWYzLTgwNmEt
MDVlYTIyZGRkNzIzLzEva3Y2cU1zVGc0WmNhME5XTEZ5enRGeUVGYUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9kZjc2ZWEtZjc1Zi00ZWYzLTgwNmEtMDVlYTIyZGRkNzIz
LzEva3Y2cU1zVGc0WmNhME5XTEZ5enRGeUVGYUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLM5gsVT
VS+BRnupFc1CNOZ1eEOzIZT5yEmWdKHGIgx98E4R+DCXWUEViTY+JjydU7shPPjP
yyabv2lbbNx1JQ3gCkzhAjL7vGAhhW3MF7ZpkuAaFiW+unGUK9HsPX8XDVj2J7ZX
CucT4iWKxsRaeanuihtWnSHkvHFzqnmcuyXE7l7w3+RztJfp4mt38jvoOkx4xRj/
XfUOC/bR4CqOSi55gIbJ+qFdMX58juu3fpigEJice69X3rmEplnWJvg6AX52RdxU
TgoR4d7snmni3fE10TmmKkh0gRhp4/BX95bI8FY1lW624SUEb1vbbvnreLwGxS3l
DVfx4k9igjVd2A==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:14:06 2025 by rpki-client