Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
File: KfNCRmRyXVgguqeCcTFDozB2kfM.mft (raw, json)
Hash identifier: PunSwtmrPKPbbmDO46buIH0Zwr/A1yQSqwL/W/8KyTg=
Subject key identifier: C4:F0:E4:5F:4C:A0:03:0D:C0:69:CA:7F:3F:56:88:40:83:9C:02:78
Authority key identifier: 29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
Certificate issuer: /CN=29f3424664725d5820baa782713143a3307691f3
Certificate serial: 01988FFE23F60A774CC4A38CB1B7939FEED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
Manifest number: 80
Signing time: Sat 09 Aug 2025 18:00:53 +0000
Manifest this update: Sat 09 Aug 2025 18:00:53 +0000
Manifest next update: Sun 10 Aug 2025 18:00:53 +0000
Files and hashes: 1: KfNCRmRyXVgguqeCcTFDozB2kfM.crl (hash: FOLDFUr5OFZTEzAn73JkMGMGA9J/AyvLXffiCR3EY8M=)
2: lvisyME0LlQajyGS5pMcYDKFR08.roa (hash: 31DzKjH8PvmlicGQvfn7fIzRcBCmYUXLsghB5MjrccU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:23:f6:0a:77:4c:c4:a3:8c:b1:b7:93:9f:ee:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f3424664725d5820baa782713143a3307691f3
Validity
Not Before: Aug 9 18:00:53 2025 GMT
Not After : Aug 10 18:00:53 2025 GMT
Subject: CN=c4f0e45f4ca0030dc069ca7f3f568840839c0278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:87:0e:96:fd:8e:dd:1a:0a:35:e7:ba:6b:40:
99:b7:75:11:c6:1a:51:83:7b:e5:9a:b3:a5:8d:ab:
9b:2d:f9:95:b5:a0:68:83:db:83:17:a5:c3:17:75:
44:67:20:d8:e9:5b:41:4e:62:de:cc:5e:6f:58:52:
07:ae:f5:ce:29:77:c6:39:f1:d8:99:57:0b:2f:be:
cf:84:44:ff:88:46:35:17:b0:2f:96:b1:8d:cf:bb:
a7:1b:02:e7:a5:23:42:2e:bc:a5:7a:a2:e8:f6:24:
0d:79:01:09:ed:eb:79:f7:92:bf:c8:7d:5d:72:d6:
24:1c:28:8d:f9:da:86:81:33:41:a4:d6:de:b8:e5:
88:0a:08:a7:c5:68:f5:d8:e5:cf:5d:63:40:6f:4d:
5a:85:26:aa:29:1d:37:e2:3f:bb:3d:69:56:23:7e:
da:14:80:f8:a7:14:08:f1:1d:6a:0d:35:0e:d7:3b:
04:e6:07:39:f0:bc:a2:59:38:cd:80:e0:8e:9a:0a:
58:1c:94:8c:cf:5e:94:92:95:dd:e8:62:f4:a1:f9:
5d:98:46:31:bf:10:6c:0c:31:1b:04:76:a5:15:ce:
d6:d5:75:d1:f4:95:58:2d:cb:b2:cb:d2:01:ef:b7:
cc:95:f3:95:98:18:2e:75:db:35:79:3e:3e:18:78:
83:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F0:E4:5F:4C:A0:03:0D:C0:69:CA:7F:3F:56:88:40:83:9C:02:78
X509v3 Authority Key Identifier:
keyid:29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c4:11:79:f7:4f:94:9b:cc:b0:da:8c:f9:84:29:8b:8e:f5:
79:2e:1e:bf:79:78:ab:c7:e3:5f:8b:63:73:74:67:60:d5:3b:
03:56:ae:f7:da:ee:56:4d:cd:34:01:ce:8a:14:8e:76:a7:57:
bb:38:17:63:cc:c8:9a:82:6c:cf:1a:26:4d:fb:ab:08:eb:fd:
54:64:a1:88:06:2d:f8:c0:20:d1:6b:b1:8a:6d:45:55:a7:e7:
7f:59:8c:41:6a:1f:7f:8c:63:9a:83:e9:0a:a7:ba:a7:0f:f7:
74:4d:47:ac:b4:a4:ac:ab:f2:53:61:a4:db:46:38:ef:d6:99:
27:b2:f3:63:58:30:9a:dc:a1:37:00:cd:c7:5d:79:93:e3:63:
a6:72:a1:63:66:92:69:ef:b7:42:68:3c:18:8f:ff:a1:c0:3d:
74:04:e5:9d:26:96:d7:ff:a8:77:36:09:bf:8f:c2:8d:be:21:
6c:f5:15:46:4e:74:b7:9a:99:a4:f3:c4:aa:ce:90:72:bc:93:
5c:bf:fd:9d:22:77:e6:48:87:6d:f3:e8:3f:f0:56:3e:54:cf:
b2:5c:17:ab:ec:1c:53:72:62:31:6f:ef:f2:e1:13:79:a9:eb:
f5:50:45:2a:76:5f:c2:1a:30:2c:ec:27:33:71:07:95:da:4e:
5a:0b:bf:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiP/iP2CndMxKOMsbeTn+7TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZjM0MjQ2NjQ3MjVkNTgyMGJhYTc4MjcxMzE0M2EzMzA3
NjkxZjMwHhcNMjUwODA5MTgwMDUzWhcNMjUwODEwMTgwMDUzWjAzMTEwLwYDVQQD
EyhjNGYwZTQ1ZjRjYTAwMzBkYzA2OWNhN2YzZjU2ODg0MDgzOWMwMjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYcOlv2O3RoKNee6a0CZt3URxhpR
g3vlmrOljaubLfmVtaBog9uDF6XDF3VEZyDY6VtBTmLezF5vWFIHrvXOKXfGOfHY
mVcLL77PhET/iEY1F7AvlrGNz7unGwLnpSNCLryleqLo9iQNeQEJ7et595K/yH1d
ctYkHCiN+dqGgTNBpNbeuOWICginxWj12OXPXWNAb01ahSaqKR034j+7PWlWI37a
FID4pxQI8R1qDTUO1zsE5gc58LyiWTjNgOCOmgpYHJSMz16UkpXd6GL0ofldmEYx
vxBsDDEbBHalFc7W1XXR9JVYLcuyy9IB77fMlfOVmBgudds1eT4+GHiDkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTw5F9MoAMNwGnKfz9WiECDnAJ4MB8GA1UdIwQY
MBaAFCnzQkZkcl1YILqngnExQ6MwdpHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2ZOQ1JtUnlYVmdndXFlQ2NURkRvekIya2ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xMjk4ZTEtYTFlNC00YWJjLWFiMWYt
NjQ5ZDI1YTk1OTA3LzEvS2ZOQ1JtUnlYVmdndXFlQ2NURkRvekIya2ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8xMjk4ZTEtYTFlNC00YWJjLWFiMWYtNjQ5ZDI1YTk1OTA3
LzEvS2ZOQ1JtUnlYVmdndXFlQ2NURkRvekIya2ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcQRefdP
lJvMsNqM+YQpi471eS4ev3l4q8fjX4tjc3RnYNU7A1au99ruVk3NNAHOihSOdqdX
uzgXY8zImoJszxomTfurCOv9VGShiAYt+MAg0Wuxim1FVafnf1mMQWoff4xjmoPp
Cqe6pw/3dE1HrLSkrKvyU2Gk20Y479aZJ7LzY1gwmtyhNwDNx115k+NjpnKhY2aS
ae+3Qmg8GI//ocA9dATlnSaW1/+odzYJv4/Cjb4hbPUVRk50t5qZpPPEqs6QcryT
XL/9nSJ35kiHbfPoP/BWPlTPslwXq+wcU3JiMW/v8uETeanr9VBFKnZfwhowLOwn
M3EHldpOWgu/mA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:31:45 2025 by rpki-client