Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
File: KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft (raw, json)
Hash identifier: RtFLAQ8SKuUYaZYE1VeZExAcj65MBu2cOoqMdDM4Fpo=
Subject key identifier: AF:27:AF:1F:FD:86:79:97:FD:9E:7D:50:7A:4D:E6:D0:6A:91:C9:7E
Authority key identifier: 29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
Certificate issuer: /CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Certificate serial: 0198744FDDF3ED66D2B09686649689B4AF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 09:00:47 +0000
Manifest this update: Mon 04 Aug 2025 09:00:47 +0000
Manifest next update: Tue 05 Aug 2025 09:00:47 +0000
Files and hashes: 1: KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl (hash: Xz94aDAT+APkSb2+Y2EkZ05uKSGIh/eAuuCYmCCWTyI=)
2: iinwbjaCpK6V8_stsXvEKtBkl8w.roa (hash: M1V1vtHFjPXfduw3ijubEwFy3tYmjuQ7qndUwyTCfGk=)
3: uJWKugGWqtQl6VVyKAzx1i_N0aA.roa (hash: BJfTtZgXbkNAvLFFTKLvaiDNDprXBJ4/kR9lJ8wjqSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:dd:f3:ed:66:d2:b0:96:86:64:96:89:b4:af:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Validity
Not Before: Aug 4 09:00:47 2025 GMT
Not After : Aug 5 09:00:47 2025 GMT
Subject: CN=af27af1ffd867997fd9e7d507a4de6d06a91c97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2d:9e:2d:81:a0:2c:09:67:a0:0b:c8:0b:41:
75:1d:36:23:b2:d0:c9:18:53:f2:ca:1b:79:9b:fa:
f4:5e:95:1d:2a:1f:07:5a:05:44:72:5e:d4:1e:16:
23:c7:9f:9c:96:f3:56:90:4f:58:37:6d:41:07:f3:
08:f2:5c:97:43:5f:e8:ba:98:c7:54:72:00:6b:d3:
26:c7:87:5c:ff:4e:6a:8d:9a:5a:c3:9a:45:bf:c2:
36:b3:59:69:d7:c6:83:f6:25:11:2a:1a:79:82:64:
eb:86:c0:a8:be:47:e2:dc:70:c9:4a:a3:9c:53:cb:
c0:e6:c4:6e:93:58:53:b2:87:85:6e:82:63:ce:64:
7b:71:53:3f:84:79:67:e8:2f:41:22:ac:87:f2:c3:
7d:c8:69:1a:97:7e:46:1d:6c:80:26:bc:cc:dc:25:
98:3c:ce:17:55:23:b2:3c:39:64:62:d2:a5:3d:51:
e6:81:80:f8:01:d5:a6:f2:f4:25:56:04:a6:db:85:
90:67:11:9d:88:ec:14:a9:21:b8:50:93:55:50:ef:
95:ce:c8:d8:60:10:be:ce:de:c4:d1:6d:d0:16:10:
f5:13:75:a0:b1:d7:49:7d:7e:22:ec:66:f0:b7:a7:
0b:d7:18:56:89:0b:dc:b7:f1:f7:02:bd:1b:26:51:
c0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:27:AF:1F:FD:86:79:97:FD:9E:7D:50:7A:4D:E6:D0:6A:91:C9:7E
X509v3 Authority Key Identifier:
keyid:29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b4:57:38:c3:a4:22:c4:32:0a:0f:e5:dd:c6:9f:ed:a8:42:
3a:59:f7:cc:33:5c:4c:17:6a:62:92:87:04:fc:cd:6d:f0:0b:
0b:f9:0c:80:8d:81:28:58:5e:b2:01:f5:6b:80:8b:f6:57:f7:
ed:90:4e:e8:74:42:72:12:2a:70:d5:1b:d0:aa:69:2a:99:68:
a0:e0:27:88:03:31:fe:64:07:cd:60:cb:eb:48:35:44:85:7b:
94:8a:8f:48:19:e9:de:8e:39:72:73:48:e2:8d:c8:f5:b6:a2:
72:ab:f8:35:fe:88:a0:1f:fc:71:d5:de:4b:9d:33:a3:0a:67:
64:33:65:37:7a:fa:ac:27:d0:2f:67:27:ad:ed:2f:6a:b2:75:
07:7a:9a:72:29:0b:4b:7b:a4:8d:09:49:01:c2:b6:22:13:1e:
53:63:23:63:e5:88:82:1a:6a:53:02:e4:de:d3:db:4c:7b:c6:
54:2b:6a:14:d2:b8:1c:ef:1e:a5:1c:0d:90:42:13:6c:b1:49:
25:31:d1:b0:bd:6c:31:3c:0d:67:81:9d:9d:ac:34:e8:47:1e:
40:48:bf:ee:9d:be:c1:2c:d2:3c:f1:73:c6:17:8c:38:30:29:
72:71:12:92:4f:96:61:85:16:33:d3:4b:3f:d6:c8:53:19:58:
e0:dd:7a:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0T93z7WbSsJaGZJaJtK8sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MTA5ZGE2NjJmOWQzMDJmZmYyYzVjNGI0YWZiOGY5NDdm
ZWMxYzAwHhcNMjUwODA0MDkwMDQ3WhcNMjUwODA1MDkwMDQ3WjAzMTEwLwYDVQQD
EyhhZjI3YWYxZmZkODY3OTk3ZmQ5ZTdkNTA3YTRkZTZkMDZhOTFjOTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC2eLYGgLAlnoAvIC0F1HTYjstDJ
GFPyyht5m/r0XpUdKh8HWgVEcl7UHhYjx5+clvNWkE9YN21BB/MI8lyXQ1/oupjH
VHIAa9Mmx4dc/05qjZpaw5pFv8I2s1lp18aD9iURKhp5gmTrhsCovkfi3HDJSqOc
U8vA5sRuk1hTsoeFboJjzmR7cVM/hHln6C9BIqyH8sN9yGkal35GHWyAJrzM3CWY
PM4XVSOyPDlkYtKlPVHmgYD4AdWm8vQlVgSm24WQZxGdiOwUqSG4UJNVUO+VzsjY
YBC+zt7E0W3QFhD1E3WgsddJfX4i7Gbwt6cL1xhWiQvct/H3Ar0bJlHA1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8nrx/9hnmX/Z59UHpN5tBqkcl+MB8GA1UdIwQY
MBaAFCkQnaZi+dMC//LFxLSvuPlH/sHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1JDZHBtTDUwd0xfOHNYRXRLLTQtVWYtd2NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85MzAyNzktMzE4Ny00N2E1LTgxMzct
ZjRmYjVjODgwNTA5LzEvS1JDZHBtTDUwd0xfOHNYRXRLLTQtVWYtd2NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS85MzAyNzktMzE4Ny00N2E1LTgxMzctZjRmYjVjODgwNTA5
LzEvS1JDZHBtTDUwd0xfOHNYRXRLLTQtVWYtd2NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYrRXOMOk
IsQyCg/l3caf7ahCOln3zDNcTBdqYpKHBPzNbfALC/kMgI2BKFhesgH1a4CL9lf3
7ZBO6HRCchIqcNUb0KppKplooOAniAMx/mQHzWDL60g1RIV7lIqPSBnp3o45cnNI
4o3I9baicqv4Nf6IoB/8cdXeS50zowpnZDNlN3r6rCfQL2cnre0varJ1B3qacikL
S3ukjQlJAcK2IhMeU2MjY+WIghpqUwLk3tPbTHvGVCtqFNK4HO8epRwNkEITbLFJ
JTHRsL1sMTwNZ4Gdnaw06EceQEi/7p2+wSzSPPFzxheMODApcnESkk+WYYUWM9NL
P9bIUxlY4N16wQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:20 2025 by rpki-client