Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
File: Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft (raw, json)
Hash identifier: GMcoB9vh5Ub4lB+t+aEagmcE6at9sTeCfjmQTIrpuOU=
Subject key identifier: 2E:11:5A:A2:05:BA:C3:71:72:F3:B9:0D:DD:B5:EC:01:98:3F:26:D4
Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
Certificate issuer: /CN=2a7df35d41b4062c10fc118189de47da27096db8
Certificate serial: 01987BD248B08F83EF42EB89E1469B0079A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
Manifest number: 0700
Signing time: Tue 05 Aug 2025 20:00:35 +0000
Manifest this update: Tue 05 Aug 2025 20:00:35 +0000
Manifest next update: Wed 06 Aug 2025 20:00:35 +0000
Files and hashes: 1: Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl (hash: 7gsTKolAmDFVDDAvUWcE9YbKjZNiRCqwSrS07NUVC+E=)
2: Wky7GIO48q5Am7lt9_maGgpqgJU.roa (hash: zVs1sI4WsKaD65jBAnhtkrYGwGsMw1WHVF/3i95RTn0=)
3: fEeq-E1sxHOFQUJWiqwG8VrB7mI.roa (hash: /r8rCHZ/j6Q+/dPG2IPSlLzNTFQayT8a7Qiqlbqm++I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:48:b0:8f:83:ef:42:eb:89:e1:46:9b:00:79:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8
Validity
Not Before: Aug 5 20:00:35 2025 GMT
Not After : Aug 6 20:00:35 2025 GMT
Subject: CN=2e115aa205bac37172f3b90dddb5ec01983f26d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:1a:91:dc:e1:2e:39:47:52:c5:c2:07:89:
15:be:b9:ed:85:b1:8b:e3:c9:e2:31:2f:d3:fe:b0:
90:1c:7a:c0:ac:62:62:58:c3:5d:54:0e:af:8f:36:
b5:74:9d:c6:36:4c:0d:96:dd:29:44:8f:2d:e0:5a:
9f:b3:29:62:9d:1a:00:2e:29:52:8a:3f:2b:1c:61:
37:49:b2:75:b5:8d:ae:86:2e:96:18:d4:6f:e0:06:
fb:3a:7e:88:4a:21:76:9d:35:8b:56:a0:de:59:76:
f5:fc:0a:ae:f3:31:6b:0d:cf:30:c1:2e:63:94:5c:
ed:f0:60:25:e7:73:64:0d:2d:76:ed:97:bf:44:fe:
67:c6:ec:67:0a:68:24:b4:b1:e9:06:24:b6:00:0b:
f8:c2:05:c1:db:1a:02:55:13:0f:b7:07:88:ed:e4:
fd:cc:38:59:6f:2d:e0:5d:65:dc:aa:8a:6f:40:1b:
94:75:a1:72:0a:99:de:d8:ed:0c:76:8a:88:eb:a8:
7f:ad:69:33:33:07:98:e2:2c:b3:73:c8:b9:f2:b0:
4f:ec:02:46:10:53:5a:f6:5d:39:46:12:77:b9:14:
dc:11:8e:04:ef:2f:5b:f4:33:f9:3b:10:f5:37:07:
b3:22:75:45:25:ac:cb:2a:23:36:2a:c4:c1:25:40:
46:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:11:5A:A2:05:BA:C3:71:72:F3:B9:0D:DD:B5:EC:01:98:3F:26:D4
X509v3 Authority Key Identifier:
keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:31:9a:c9:3d:5f:33:77:94:4b:80:4f:a8:42:48:ab:5e:38:
97:1f:d0:26:81:d5:68:fa:88:d5:da:18:d4:80:70:eb:43:9c:
cc:48:3e:49:9b:c7:a4:6f:bb:9f:93:55:48:b0:92:51:cb:c4:
56:84:66:a7:5f:8a:a1:5c:e0:72:0b:7a:44:35:2f:ce:d3:c5:
4d:93:84:5a:f2:03:0f:23:20:31:2e:18:e3:99:75:fb:9a:70:
a1:93:a1:34:2d:bf:af:79:ec:9a:8d:5c:f9:1c:97:09:e1:1a:
8f:17:82:b6:2f:00:7e:a2:2a:9e:75:e2:d8:3c:45:e6:2f:91:
35:d4:de:5e:64:ef:51:ed:4d:79:92:d9:f1:7c:b6:0a:58:c2:
c6:0e:22:a7:23:28:f2:4c:2f:e6:87:dd:fb:4d:a5:46:6e:a2:
e0:1e:5d:b3:f8:38:ca:57:50:15:25:78:ea:57:4e:09:38:a9:
ea:02:3f:62:30:fb:43:37:9b:38:41:26:3c:ce:a9:12:44:79:
9d:a4:27:26:cf:d4:ed:da:ed:b3:ed:0e:01:e3:c4:35:77:95:
12:cd:69:3b:e6:dd:59:04:a3:72:12:b6:52:c9:7d:6a:be:89:
b9:9b:3b:09:46:d1:3b:16:9c:5f:9a:fa:b9:50:fa:1f:91:8f:
eb:1a:0d:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh70kiwj4PvQuuJ4UabAHmlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhN2RmMzVkNDFiNDA2MmMxMGZjMTE4MTg5ZGU0N2RhMjcw
OTZkYjgwHhcNMjUwODA1MjAwMDM1WhcNMjUwODA2MjAwMDM1WjAzMTEwLwYDVQQD
EygyZTExNWFhMjA1YmFjMzcxNzJmM2I5MGRkZGI1ZWMwMTk4M2YyNmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqMakdzhLjlHUsXCB4kVvrnthbGL
48niMS/T/rCQHHrArGJiWMNdVA6vjza1dJ3GNkwNlt0pRI8t4FqfsylinRoALilS
ij8rHGE3SbJ1tY2uhi6WGNRv4Ab7On6ISiF2nTWLVqDeWXb1/Aqu8zFrDc8wwS5j
lFzt8GAl53NkDS127Ze/RP5nxuxnCmgktLHpBiS2AAv4wgXB2xoCVRMPtweI7eT9
zDhZby3gXWXcqopvQBuUdaFyCpne2O0MdoqI66h/rWkzMweY4iyzc8i58rBP7AJG
EFNa9l05RhJ3uRTcEY4E7y9b9DP5OxD1NwezInVFJazLKiM2KsTBJUBGJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4RWqIFusNxcvO5Dd217AGYPybUMB8GA1UdIwQY
MBaAFCp9811BtAYsEPwRgYneR9onCW24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS24zelhVRzBCaXdRX0JHQmlkNUgyaWNKYmJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lZDMzNGMtZDc5Ny00MjVhLTkzYTEt
YTljYzg5ZDQ0YjI1LzEvS24zelhVRzBCaXdRX0JHQmlkNUgyaWNKYmJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9lZDMzNGMtZDc5Ny00MjVhLTkzYTEtYTljYzg5ZDQ0YjI1
LzEvS24zelhVRzBCaXdRX0JHQmlkNUgyaWNKYmJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDGayT1f
M3eUS4BPqEJIq144lx/QJoHVaPqI1doY1IBw60OczEg+SZvHpG+7n5NVSLCSUcvE
VoRmp1+KoVzgcgt6RDUvztPFTZOEWvIDDyMgMS4Y45l1+5pwoZOhNC2/r3nsmo1c
+RyXCeEajxeCti8AfqIqnnXi2DxF5i+RNdTeXmTvUe1NeZLZ8Xy2CljCxg4ipyMo
8kwv5ofd+02lRm6i4B5ds/g4yldQFSV46ldOCTip6gI/YjD7QzebOEEmPM6pEkR5
naQnJs/U7drts+0OAePENXeVEs1pO+bdWQSjchK2Usl9ar6JuZs7CUbROxacX5r6
uVD6H5GP6xoN1A==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:17:24 2025 by rpki-client