Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
File: KgV9tw5HTrSgd_oT875N17Y4C1Q.mft (raw, json)
Hash identifier: f1ofMJ3oUyELjef1LsB/d6IiL9o1qSeUY7OforfyTwA=
Subject key identifier: 44:9E:23:CA:90:4D:F2:7D:B1:DC:5A:24:FF:75:6D:7E:8C:23:D8:A1
Authority key identifier: 2A:05:7D:B7:0E:47:4E:B4:A0:77:FA:13:F3:BE:4D:D7:B6:38:0B:54
Certificate issuer: /CN=2a057db70e474eb4a077fa13f3be4dd7b6380b54
Certificate serial: 01987B9D2436DD83F83443F19B51F07F1C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
Manifest number: 1013
Signing time: Tue 05 Aug 2025 19:02:32 +0000
Manifest this update: Tue 05 Aug 2025 19:02:32 +0000
Manifest next update: Wed 06 Aug 2025 19:02:32 +0000
Files and hashes: 1: KgV9tw5HTrSgd_oT875N17Y4C1Q.crl (hash: zdJdEsxFWIWti5wDNbUVUCdAFW1QHmZUr2rEosfeZJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:24:36:dd:83:f8:34:43:f1:9b:51:f0:7f:1c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a057db70e474eb4a077fa13f3be4dd7b6380b54
Validity
Not Before: Aug 5 19:02:32 2025 GMT
Not After : Aug 6 19:02:32 2025 GMT
Subject: CN=449e23ca904df27db1dc5a24ff756d7e8c23d8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d3:32:7c:f4:f1:4b:8a:44:62:8c:a7:2f:90:
cb:35:75:ad:31:53:3e:90:5c:16:60:e5:9a:73:3d:
87:f3:d5:3a:9f:4a:7d:65:f4:3d:8f:4a:11:ab:a3:
14:00:8b:a6:6e:04:7e:ca:16:47:25:17:0b:96:ed:
49:32:b1:2d:01:72:8b:e5:2d:51:3f:6d:73:56:6f:
04:d1:ae:db:d4:a4:81:5e:ba:b9:4d:db:91:94:23:
11:c8:2f:29:ae:27:ba:49:8f:d5:4a:27:e8:ee:66:
fb:ea:95:eb:db:63:2e:2b:9b:70:61:5e:46:b9:1c:
26:22:03:5c:54:91:07:3a:3f:19:eb:e1:61:89:83:
bf:f5:05:71:74:b2:74:5a:b7:e8:2a:c1:f3:9b:2b:
6e:f5:11:db:2d:82:d6:1d:54:13:e6:5a:cb:09:ed:
8d:d5:ba:96:ca:6e:0a:f2:77:3b:fb:47:c1:c4:6c:
49:77:dc:1b:84:49:c1:6e:6a:89:6f:41:e5:c7:71:
29:62:ab:02:4e:7a:9a:55:23:56:b6:b4:85:40:ba:
fc:72:75:90:30:31:b4:57:52:0d:1b:9d:45:57:66:
e7:24:77:05:d3:2d:77:63:49:45:e4:84:60:55:d1:
4e:cb:99:cf:6b:2a:4c:82:19:45:e7:57:94:5b:4c:
24:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9E:23:CA:90:4D:F2:7D:B1:DC:5A:24:FF:75:6D:7E:8C:23:D8:A1
X509v3 Authority Key Identifier:
keyid:2A:05:7D:B7:0E:47:4E:B4:A0:77:FA:13:F3:BE:4D:D7:B6:38:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:80:74:35:d1:35:54:54:47:b1:d1:d1:9e:99:90:b8:1c:00:
30:45:69:9d:e2:6c:b4:c9:7e:a8:b3:75:f0:92:43:c5:7e:72:
0f:28:78:32:ee:b8:0e:ff:aa:44:60:fc:b4:e4:45:c7:90:00:
b4:48:69:1d:74:77:f8:55:a1:26:cd:b4:95:47:a1:80:85:5c:
24:99:85:6c:d5:37:c6:0e:66:d6:6d:5d:61:59:b6:8f:2a:e9:
1e:3e:e2:10:be:0f:f6:78:2e:ad:74:67:79:47:db:5a:17:be:
63:42:8e:da:19:57:12:73:20:88:e0:36:86:09:91:8d:07:c9:
dc:ca:6c:7b:31:78:f8:f4:86:99:a8:a0:3f:28:ec:89:42:3e:
7d:8d:ab:60:d4:3a:44:85:ff:a0:72:96:0c:d2:0a:5d:d3:b4:
77:e3:04:4c:32:a0:79:8d:b1:2f:1d:81:d7:00:d9:8a:4e:34:
17:9b:bf:db:ea:63:82:32:35:01:d3:8e:9b:b9:1e:5a:c6:c8:
15:e5:46:18:48:28:44:6b:7f:82:0d:94:17:f1:77:de:e8:54:
5a:87:14:52:9f:6a:56:e7:14:af:f4:b7:b4:b8:33:ab:c6:5b:
de:da:71:29:6e:be:5f:59:f5:f2:ed:f9:61:1c:89:ef:82:f9:
20:83:82:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7nSQ23YP4NEPxm1HwfxwrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMDU3ZGI3MGU0NzRlYjRhMDc3ZmExM2YzYmU0ZGQ3YjYz
ODBiNTQwHhcNMjUwODA1MTkwMjMyWhcNMjUwODA2MTkwMjMyWjAzMTEwLwYDVQQD
Eyg0NDllMjNjYTkwNGRmMjdkYjFkYzVhMjRmZjc1NmQ3ZThjMjNkOGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdMyfPTxS4pEYoynL5DLNXWtMVM+
kFwWYOWacz2H89U6n0p9ZfQ9j0oRq6MUAIumbgR+yhZHJRcLlu1JMrEtAXKL5S1R
P21zVm8E0a7b1KSBXrq5TduRlCMRyC8prie6SY/VSifo7mb76pXr22MuK5twYV5G
uRwmIgNcVJEHOj8Z6+FhiYO/9QVxdLJ0WrfoKsHzmytu9RHbLYLWHVQT5lrLCe2N
1bqWym4K8nc7+0fBxGxJd9wbhEnBbmqJb0Hlx3EpYqsCTnqaVSNWtrSFQLr8cnWQ
MDG0V1ING51FV2bnJHcF0y13Y0lF5IRgVdFOy5nPaypMghlF51eUW0wk1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESeI8qQTfJ9sdxaJP91bX6MI9ihMB8GA1UdIwQY
MBaAFCoFfbcOR060oHf6E/O+Tde2OAtUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2dWOXR3NUhUclNnZF9vVDg3NU4xN1k0QzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kOTc4ZmYtNzRhMS00OTE1LTk1OWEt
YzAzNTY4ZGMwOGIzLzEvS2dWOXR3NUhUclNnZF9vVDg3NU4xN1k0QzFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kOTc4ZmYtNzRhMS00OTE1LTk1OWEtYzAzNTY4ZGMwOGIz
LzEvS2dWOXR3NUhUclNnZF9vVDg3NU4xN1k0QzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4B0NdE1
VFRHsdHRnpmQuBwAMEVpneJstMl+qLN18JJDxX5yDyh4Mu64Dv+qRGD8tORFx5AA
tEhpHXR3+FWhJs20lUehgIVcJJmFbNU3xg5m1m1dYVm2jyrpHj7iEL4P9ngurXRn
eUfbWhe+Y0KO2hlXEnMgiOA2hgmRjQfJ3MpsezF4+PSGmaigPyjsiUI+fY2rYNQ6
RIX/oHKWDNIKXdO0d+METDKgeY2xLx2B1wDZik40F5u/2+pjgjI1AdOOm7keWsbI
FeVGGEgoRGt/gg2UF/F33uhUWocUUp9qVucUr/S3tLgzq8Zb3tpxKW6+X1n18u35
YRyJ74L5IIOC+g==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:55:27 2025 by rpki-client