Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
File: kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft (raw, json)
Hash identifier: 1Yo9FE+9fOCBEtLRhHFGMq6nw7AJcwUClMWgXm68h+k=
Subject key identifier: 0F:DC:37:D3:C1:40:8D:24:44:6B:38:13:2C:1C:15:4A:3A:62:19:B0
Authority key identifier: 91:D2:76:7A:A9:10:E9:57:DC:53:58:02:50:26:E6:C3:70:57:0A:2D
Certificate issuer: /CN=91d2767aa910e957dc5358025026e6c370570a2d
Certificate serial: 01989411A68C9D0FDA95DEBA707249ECE55E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
Manifest number: 49
Signing time: Sun 10 Aug 2025 13:00:41 +0000
Manifest this update: Sun 10 Aug 2025 13:00:41 +0000
Manifest next update: Mon 11 Aug 2025 13:00:41 +0000
Files and hashes: 1: kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl (hash: Wdfl80r1ncHPRUgpqJt0a9f7O1K8xdywM4vsBUbt01c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:a6:8c:9d:0f:da:95:de:ba:70:72:49:ec:e5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d2767aa910e957dc5358025026e6c370570a2d
Validity
Not Before: Aug 10 13:00:41 2025 GMT
Not After : Aug 11 13:00:41 2025 GMT
Subject: CN=0fdc37d3c1408d24446b38132c1c154a3a6219b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:90:3e:70:36:ff:80:c2:d9:e6:2c:3c:65:7b:
a7:8e:90:48:9c:8e:02:c6:0e:c0:35:d5:78:72:81:
db:82:a8:53:72:ca:e0:9f:0b:9b:55:90:10:de:b1:
a9:8a:0d:76:e6:3c:91:32:2f:ea:e9:58:2d:4a:77:
7f:7f:da:e6:83:53:89:ae:09:fb:59:62:9c:cd:23:
37:b8:ae:47:a9:6d:ea:50:37:4b:8a:ff:63:a1:7a:
4b:a0:70:3f:f7:86:9c:87:37:1d:f7:3f:5a:ee:82:
fd:15:66:c5:0e:e9:55:ca:a5:5b:ec:0e:6b:9a:4e:
b2:2a:40:ca:97:f8:99:06:1b:b7:4d:f1:66:d8:5c:
1f:fa:1e:ca:39:3a:86:05:77:dc:90:61:33:16:e8:
57:e6:21:d6:94:f8:ed:19:3f:99:7d:85:97:b7:e5:
8e:77:ec:7f:5c:a3:c4:59:8b:6e:6d:91:d0:ae:ed:
0d:0c:c1:0c:56:a2:ca:06:ae:b6:7a:9a:97:08:e4:
df:28:5a:4f:fd:60:8c:50:d0:84:b2:9f:75:1e:fa:
5f:ca:ac:ad:da:92:21:cd:00:2a:18:5e:0d:88:50:
bf:56:d5:e0:e6:24:9b:83:22:d4:f3:0c:9b:9e:3e:
3e:99:85:be:33:ee:67:ed:61:6e:f6:ff:25:cf:d0:
14:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DC:37:D3:C1:40:8D:24:44:6B:38:13:2C:1C:15:4A:3A:62:19:B0
X509v3 Authority Key Identifier:
keyid:91:D2:76:7A:A9:10:E9:57:DC:53:58:02:50:26:E6:C3:70:57:0A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:fb:56:ad:59:dd:3c:0a:55:4b:ab:0e:b5:5f:1f:b8:c0:c3:
df:02:1f:b8:63:f4:84:16:8e:71:56:bb:c5:70:1b:86:35:0d:
db:e7:80:eb:9c:a4:6b:88:e8:74:99:41:31:c4:c1:48:7c:a6:
ca:c6:a0:ff:1f:c0:f5:3a:f3:78:ce:e9:f2:01:64:3a:70:76:
fa:24:17:1f:7a:70:96:c0:a2:7d:99:c8:a8:ab:f6:47:d1:08:
f0:46:36:2b:de:b2:92:3f:9a:14:9c:0f:92:96:d3:5e:f9:b4:
5f:f4:8d:f0:1e:a9:60:a6:4c:91:d7:20:9e:71:cc:00:6b:ab:
6b:b4:68:18:cd:6d:e0:19:74:66:6f:0f:2c:12:09:01:cf:5f:
34:91:4a:95:90:89:de:b3:66:47:35:3e:71:b1:d1:d1:9b:9e:
8d:57:1b:a6:fd:99:18:ba:7d:c0:c5:f5:45:da:46:82:d1:b5:
2f:6a:b9:a2:45:1a:4f:93:15:54:f1:e0:c2:6d:c6:4f:bc:9f:
cd:02:54:bd:1d:bd:c0:6b:ac:49:00:09:f8:73:45:6b:86:9e:
95:10:ef:b1:95:41:bc:cb:ec:84:35:c4:ce:63:3f:4f:ef:c6:
16:69:5c:c2:e8:9e:b7:7d:36:35:46:2e:d7:b7:30:08:b9:b4:
c4:b0:51:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUEaaMnQ/ald66cHJJ7OVeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZDI3NjdhYTkxMGU5NTdkYzUzNTgwMjUwMjZlNmMzNzA1
NzBhMmQwHhcNMjUwODEwMTMwMDQxWhcNMjUwODExMTMwMDQxWjAzMTEwLwYDVQQD
EygwZmRjMzdkM2MxNDA4ZDI0NDQ2YjM4MTMyYzFjMTU0YTNhNjIxOWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJA+cDb/gMLZ5iw8ZXunjpBInI4C
xg7ANdV4coHbgqhTcsrgnwubVZAQ3rGpig125jyRMi/q6VgtSnd/f9rmg1OJrgn7
WWKczSM3uK5HqW3qUDdLiv9joXpLoHA/94achzcd9z9a7oL9FWbFDulVyqVb7A5r
mk6yKkDKl/iZBhu3TfFm2Fwf+h7KOTqGBXfckGEzFuhX5iHWlPjtGT+ZfYWXt+WO
d+x/XKPEWYtubZHQru0NDMEMVqLKBq62epqXCOTfKFpP/WCMUNCEsp91Hvpfyqyt
2pIhzQAqGF4NiFC/VtXg5iSbgyLU8wybnj4+mYW+M+5n7WFu9v8lz9AUEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/cN9PBQI0kRGs4EywcFUo6YhmwMB8GA1UdIwQY
MBaAFJHSdnqpEOlX3FNYAlAm5sNwVwotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2RKMmVxa1E2VmZjVTFnQ1VDYm13M0JYQ2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80NGZhYTItNjAzYi00Mzc2LWI4N2Qt
YzQ3NTUyNTQ5NzQxLzEva2RKMmVxa1E2VmZjVTFnQ1VDYm13M0JYQ2kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC80NGZhYTItNjAzYi00Mzc2LWI4N2QtYzQ3NTUyNTQ5NzQx
LzEva2RKMmVxa1E2VmZjVTFnQ1VDYm13M0JYQ2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvtWrVnd
PApVS6sOtV8fuMDD3wIfuGP0hBaOcVa7xXAbhjUN2+eA65yka4jodJlBMcTBSHym
ysag/x/A9TrzeM7p8gFkOnB2+iQXH3pwlsCifZnIqKv2R9EI8EY2K96ykj+aFJwP
kpbTXvm0X/SN8B6pYKZMkdcgnnHMAGura7RoGM1t4Bl0Zm8PLBIJAc9fNJFKlZCJ
3rNmRzU+cbHR0ZuejVcbpv2ZGLp9wMX1RdpGgtG1L2q5okUaT5MVVPHgwm3GT7yf
zQJUvR29wGusSQAJ+HNFa4aelRDvsZVBvMvshDXEzmM/T+/GFmlcwuiet302NUYu
17cwCLm0xLBRww==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:32 2025 by rpki-client