Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
File: KUv7SsSIYBHwbZ3E79RVMyZO14g.mft (raw, json)
Hash identifier: SyYvISsYqmDXpHQvXfBgEJmKvCiIAYFvKcmXWcX6XPk=
Subject key identifier: F0:2D:5D:2B:63:49:69:CB:52:CD:0B:FF:D4:EC:5A:4D:32:3B:26:56
Authority key identifier: 29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
Certificate issuer: /CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Certificate serial: 0198737469EE2C31E895B047568A621BBFE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
Manifest number: 1010
Signing time: Mon 04 Aug 2025 05:01:05 +0000
Manifest this update: Mon 04 Aug 2025 05:01:05 +0000
Manifest next update: Tue 05 Aug 2025 05:01:05 +0000
Files and hashes: 1: KUv7SsSIYBHwbZ3E79RVMyZO14g.crl (hash: y6mRRbO6vJEsOnm8Ej7M4E+rMOo8Gtb5GCp9dYJPnoc=)
2: vUzTxQRZNE5WBxRpFY_1BvR6nb8.roa (hash: 4IGQdOA0rNIT3SYgWTgAAmM5+gTsF90wOn17b+OWr8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:69:ee:2c:31:e8:95:b0:47:56:8a:62:1b:bf:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Validity
Not Before: Aug 4 05:01:05 2025 GMT
Not After : Aug 5 05:01:05 2025 GMT
Subject: CN=f02d5d2b634969cb52cd0bffd4ec5a4d323b2656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d2:dc:1b:d7:10:2c:dd:b0:40:94:e9:28:82:
31:84:0e:b7:4a:9c:a9:30:c6:92:d0:17:c2:7b:d3:
6d:5c:71:5f:11:49:bd:7b:5f:cc:61:4c:ef:ba:b1:
88:f8:b5:76:3b:52:99:39:ac:27:d8:94:fa:7c:72:
7d:d8:e6:e1:9d:1f:8d:55:f2:36:ab:6d:7f:62:23:
f9:87:95:50:52:c4:3a:22:86:d0:41:bd:8e:cc:55:
40:33:68:33:ea:2b:5e:aa:ff:be:b3:bb:f9:7a:50:
2f:c0:23:34:94:19:60:73:d4:cb:6e:b8:c3:5f:a4:
5a:f8:56:1e:0b:32:36:06:41:0e:59:1e:cc:29:93:
45:d6:2b:41:5f:ab:71:0a:35:fd:fa:64:86:cd:dd:
8f:14:af:1f:63:2c:27:cc:c9:1d:e1:f8:18:dc:e3:
df:ae:d9:f4:94:f5:37:da:b3:29:dd:3b:1a:dc:49:
27:17:e9:9a:a2:58:14:f8:ba:3f:59:9b:b7:83:fc:
ee:42:d8:e7:b0:3b:14:cd:ad:e7:a4:22:72:d0:b3:
5d:0e:34:c9:ca:74:e1:a0:70:ac:f8:22:58:f7:c0:
30:71:ea:e3:f2:0c:4a:8a:ab:9c:d7:d5:69:40:34:
67:b9:15:0d:92:e8:e6:ac:98:e6:cf:24:1c:09:6c:
37:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2D:5D:2B:63:49:69:CB:52:CD:0B:FF:D4:EC:5A:4D:32:3B:26:56
X509v3 Authority Key Identifier:
keyid:29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ba:7a:e6:e5:75:b1:66:34:2b:cb:87:13:f6:43:5e:a6:9c:
fa:fa:cf:50:f1:30:8f:e2:c8:ba:e9:9f:25:f6:52:91:ed:4c:
a2:aa:0f:10:d6:0f:c6:e7:98:24:15:c9:b9:5a:87:d0:e5:1b:
2f:cd:03:16:c0:59:84:ac:8a:7e:cd:73:84:87:43:07:be:d8:
6b:e4:5c:c1:f6:98:b5:ed:24:1d:d6:26:7c:89:56:90:ef:c1:
20:f9:f5:70:77:16:cf:5f:2e:b1:4c:cd:be:f7:06:b4:45:88:
9b:09:a5:42:cb:a7:0b:ee:4f:dc:5f:c3:fc:d7:24:c3:30:f7:
32:7b:9d:1c:8e:89:2e:68:60:23:36:f2:b2:9d:08:45:fd:3b:
87:e7:44:ec:9e:6d:36:31:d1:cc:56:41:d4:9d:33:7d:bf:b1:
fa:6a:f6:87:bf:cf:a0:dc:7a:97:2b:99:04:36:4e:b3:7e:b5:
83:57:2d:c8:a2:d5:b9:11:a3:a2:8a:ad:7f:1f:59:38:5a:7c:
1e:39:90:0f:08:e8:c5:2c:35:3e:c8:b9:16:12:72:92:69:d4:
f7:df:2f:87:a3:70:0b:d1:b3:fd:d0:df:03:8f:e5:c7:19:bf:
96:28:d0:5e:ef:73:37:7e:02:61:e5:16:49:11:3f:81:65:1a:
0f:9c:36:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdGnuLDHolbBHVopiG7/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NGJmYjRhYzQ4ODYwMTFmMDZkOWRjNGVmZDQ1NTMzMjY0
ZWQ3ODgwHhcNMjUwODA0MDUwMTA1WhcNMjUwODA1MDUwMTA1WjAzMTEwLwYDVQQD
EyhmMDJkNWQyYjYzNDk2OWNiNTJjZDBiZmZkNGVjNWE0ZDMyM2IyNjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktLcG9cQLN2wQJTpKIIxhA63Spyp
MMaS0BfCe9NtXHFfEUm9e1/MYUzvurGI+LV2O1KZOawn2JT6fHJ92ObhnR+NVfI2
q21/YiP5h5VQUsQ6IobQQb2OzFVAM2gz6iteqv++s7v5elAvwCM0lBlgc9TLbrjD
X6Ra+FYeCzI2BkEOWR7MKZNF1itBX6txCjX9+mSGzd2PFK8fYywnzMkd4fgY3OPf
rtn0lPU32rMp3Tsa3EknF+maolgU+Lo/WZu3g/zuQtjnsDsUza3npCJy0LNdDjTJ
ynThoHCs+CJY98Awcerj8gxKiquc19VpQDRnuRUNkujmrJjmzyQcCWw3kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAtXStjSWnLUs0L/9TsWk0yOyZWMB8GA1UdIwQY
MBaAFClL+0rEiGAR8G2dxO/UVTMmTteIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1V2N1NzU0lZQkh3YlozRTc5UlZNeVpPMTRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iMGRhMDYtMWJhNy00OWYwLWE1Njkt
OTA5ZmU3YzgwZDk4LzEvS1V2N1NzU0lZQkh3YlozRTc5UlZNeVpPMTRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iMGRhMDYtMWJhNy00OWYwLWE1NjktOTA5ZmU3YzgwZDk4
LzEvS1V2N1NzU0lZQkh3YlozRTc5UlZNeVpPMTRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArbp65uV1
sWY0K8uHE/ZDXqac+vrPUPEwj+LIuumfJfZSke1MoqoPENYPxueYJBXJuVqH0OUb
L80DFsBZhKyKfs1zhIdDB77Ya+RcwfaYte0kHdYmfIlWkO/BIPn1cHcWz18usUzN
vvcGtEWImwmlQsunC+5P3F/D/NckwzD3MnudHI6JLmhgIzbysp0IRf07h+dE7J5t
NjHRzFZB1J0zfb+x+mr2h7/PoNx6lyuZBDZOs361g1ctyKLVuRGjooqtfx9ZOFp8
HjmQDwjoxSw1Psi5FhJykmnU998vh6NwC9Gz/dDfA4/lxxm/lijQXu9zN34CYeUW
SRE/gWUaD5w2KA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:39 2025 by rpki-client