Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
File: KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft (raw, json)
Hash identifier: U4ZVp7i4PwPB560Ks/FF0qMg5tcVhUDM0u06nJ0ZbK0=
Subject key identifier: 2E:47:6A:6E:BE:2B:C2:F3:1E:D1:EF:94:81:45:59:2E:9E:20:59:EB
Authority key identifier: 28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
Certificate issuer: /CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Certificate serial: 019897B74ECA2A35FA9CBFA56F5CF430C2FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
Manifest number: 1527
Signing time: Mon 11 Aug 2025 06:00:29 +0000
Manifest this update: Mon 11 Aug 2025 06:00:29 +0000
Manifest next update: Tue 12 Aug 2025 06:00:29 +0000
Files and hashes: 1: KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl (hash: gbBYe0hKr5iFNq81q7MkjU1SXII8gkS9rGzql3MQFFk=)
2: zzN2Fg2txvi4HpK8ys6lkpN5ODw.roa (hash: xRdPuuQI3JcVUeXoif3h7qYjCY0yxLycmnxRLYfe7Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b7:4e:ca:2a:35:fa:9c:bf:a5:6f:5c:f4:30:c2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Validity
Not Before: Aug 11 06:00:29 2025 GMT
Not After : Aug 12 06:00:29 2025 GMT
Subject: CN=2e476a6ebe2bc2f31ed1ef948145592e9e2059eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:63:6f:89:a1:df:8d:be:2d:fc:05:4a:97:80:
d8:0d:69:48:36:56:f5:df:66:f5:8b:05:07:16:9b:
15:9a:ce:56:5e:27:cf:c2:30:87:0c:66:7d:4f:3a:
72:61:73:8b:19:e4:fd:e1:d0:2c:91:97:30:e5:5e:
16:7b:b7:31:09:2d:16:41:b0:53:7a:91:f7:a1:6a:
89:32:cc:80:f8:a1:5e:a5:3a:0c:f3:38:24:26:b0:
9b:d5:26:8e:40:bf:aa:34:8b:a7:e9:ca:5a:5b:07:
20:9e:0a:3c:ad:18:6d:19:2b:e5:14:e0:d5:8f:05:
fb:c5:4d:19:2f:7e:ac:36:6e:93:00:e0:22:49:9f:
c0:4a:47:d7:20:da:b0:3d:60:19:56:2b:02:79:9a:
bc:7b:95:a4:57:41:17:72:d6:6e:55:f2:7d:c4:e8:
81:1a:21:56:bd:6c:ed:3d:d0:a2:e0:ae:2c:10:28:
06:fa:1e:6d:a6:73:2e:df:ed:85:51:83:0b:ff:b3:
f4:66:58:9f:b2:1f:98:1b:a2:75:b3:ad:00:5f:05:
9e:4d:39:f8:50:6e:66:ed:9c:f1:ee:7b:fd:53:d4:
32:3b:da:d4:c9:88:2d:87:dd:f2:67:a2:20:c2:ba:
3b:ee:e9:11:80:fb:bd:90:c7:4d:82:e8:93:c3:ab:
e4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:47:6A:6E:BE:2B:C2:F3:1E:D1:EF:94:81:45:59:2E:9E:20:59:EB
X509v3 Authority Key Identifier:
keyid:28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3d:6e:35:2e:eb:a2:37:02:63:01:23:72:bb:dc:a2:fd:77:
ba:2c:a4:d5:ae:9e:76:da:a9:f1:f9:a5:f5:86:15:40:2c:44:
f0:44:3d:ab:f5:ca:f6:60:42:ae:56:43:82:ab:59:8f:00:8f:
58:68:4f:a7:23:73:5b:5e:e2:bb:a5:1b:75:d7:9b:32:6f:f2:
90:c5:dc:84:70:4d:e2:0d:54:24:a0:5a:e9:db:fb:87:57:33:
b8:f1:a5:29:2f:21:19:6a:9b:45:c8:8c:22:a5:aa:16:65:32:
9a:45:d9:31:91:10:97:08:68:22:18:e2:69:86:44:7c:25:a7:
96:ee:39:2b:0f:26:7c:6e:16:97:6b:53:4a:5f:10:c1:c3:40:
b8:ba:6b:fd:3d:c7:cc:9c:6f:a4:61:8f:49:e0:16:cf:92:17:
21:fc:d4:19:72:68:9c:72:ae:a8:dc:ef:6d:72:25:8d:5d:2b:
f4:49:87:65:fe:5c:94:fd:49:60:12:a7:51:b2:4d:ff:fd:43:
df:3a:b5:ab:b8:5c:2d:de:9d:b8:43:1e:b4:41:d5:b3:70:22:
2b:e3:63:86:59:29:41:c0:f8:9c:7c:c5:36:63:8d:83:b5:3e:
45:0f:3a:5d:40:5c:56:38:12:da:fd:fe:88:09:14:8e:0e:d7:
ef:d7:c5:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXt07KKjX6nL+lb1z0MML/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTVmYmNiY2Y4OGQxYWQ5YjE5ZmM0MmM3YWExMWFkM2Qy
YTdlYTAwHhcNMjUwODExMDYwMDI5WhcNMjUwODEyMDYwMDI5WjAzMTEwLwYDVQQD
EygyZTQ3NmE2ZWJlMmJjMmYzMWVkMWVmOTQ4MTQ1NTkyZTllMjA1OWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GNviaHfjb4t/AVKl4DYDWlINlb1
32b1iwUHFpsVms5WXifPwjCHDGZ9TzpyYXOLGeT94dAskZcw5V4We7cxCS0WQbBT
epH3oWqJMsyA+KFepToM8zgkJrCb1SaOQL+qNIun6cpaWwcgngo8rRhtGSvlFODV
jwX7xU0ZL36sNm6TAOAiSZ/ASkfXINqwPWAZVisCeZq8e5WkV0EXctZuVfJ9xOiB
GiFWvWztPdCi4K4sECgG+h5tpnMu3+2FUYML/7P0Zlifsh+YG6J1s60AXwWeTTn4
UG5m7Zzx7nv9U9QyO9rUyYgth93yZ6Igwro77ukRgPu9kMdNguiTw6vk/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5Ham6+K8LzHtHvlIFFWS6eIFnrMB8GA1UdIwQY
MBaAFCiV+8vPiNGtmxn8QseqEa09Kn6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0pYN3k4LUkwYTJiR2Z4Q3g2b1JyVDBxZnFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lNWI1YWItNmFmNS00M2Q1LWI0ZTIt
NDk2NmIzY2ZjODdkLzEvS0pYN3k4LUkwYTJiR2Z4Q3g2b1JyVDBxZnFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9lNWI1YWItNmFmNS00M2Q1LWI0ZTItNDk2NmIzY2ZjODdk
LzEvS0pYN3k4LUkwYTJiR2Z4Q3g2b1JyVDBxZnFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUj1uNS7r
ojcCYwEjcrvcov13uiyk1a6edtqp8fml9YYVQCxE8EQ9q/XK9mBCrlZDgqtZjwCP
WGhPpyNzW17iu6UbddebMm/ykMXchHBN4g1UJKBa6dv7h1czuPGlKS8hGWqbRciM
IqWqFmUymkXZMZEQlwhoIhjiaYZEfCWnlu45Kw8mfG4Wl2tTSl8QwcNAuLpr/T3H
zJxvpGGPSeAWz5IXIfzUGXJonHKuqNzvbXIljV0r9EmHZf5clP1JYBKnUbJN//1D
3zq1q7hcLd6duEMetEHVs3AiK+NjhlkpQcD4nHzFNmONg7U+RQ86XUBcVjgS2v3+
iAkUjg7X79fFpw==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:07 2025 by rpki-client