Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
File: KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft (raw, json)
Hash identifier: 1q2jkUlD/KLRXXaVJdoy+JuzTAZuwJ5Mtf/SVNdqDC0=
Subject key identifier: 3F:56:E6:00:2A:BB:92:F9:F8:24:45:09:3C:B6:0E:B6:B2:D9:00:C4
Authority key identifier: 29:18:46:47:24:8B:55:52:39:99:CB:B7:FE:5B:20:A9:9F:E7:3B:E3
Certificate issuer: /CN=29184647248b55523999cbb7fe5b20a99fe73be3
Certificate serial: 01987BD294C54169E714D317C9A320427001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 20:00:54 +0000
Manifest this update: Tue 05 Aug 2025 20:00:54 +0000
Manifest next update: Wed 06 Aug 2025 20:00:54 +0000
Files and hashes: 1: KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl (hash: UXRGuvOROtnEJIytdI3vmrsgFpibStNbfiobS78ZNp4=)
2: vfgX0QM1-x_CfmwOuFEwuDR0qtE.roa (hash: VmApxfvV1fKRc5LBTSdDtZW6mm+Y06ANpvyiPSheTug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:94:c5:41:69:e7:14:d3:17:c9:a3:20:42:70:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29184647248b55523999cbb7fe5b20a99fe73be3
Validity
Not Before: Aug 5 20:00:54 2025 GMT
Not After : Aug 6 20:00:54 2025 GMT
Subject: CN=3f56e6002abb92f9f82445093cb60eb6b2d900c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:0d:9e:cd:1f:af:d9:8b:31:b4:f7:fc:8a:
43:0b:45:63:9d:95:06:96:d6:57:c1:78:b7:b4:2d:
3e:ae:0f:05:5c:cc:7a:f2:45:84:c1:c8:00:e9:28:
62:c4:37:0a:fe:18:e8:1c:be:79:94:54:50:1d:97:
5e:1c:8b:fb:1b:b9:3f:fb:91:c8:dd:9c:36:6d:4a:
89:cd:4a:d4:d0:d6:52:1d:52:4b:de:e7:a0:c7:ee:
5e:99:2d:55:5e:da:76:fb:e4:01:be:a2:ed:49:37:
42:5b:08:cd:43:45:2c:30:a3:f0:aa:7f:0a:4a:e7:
57:b1:1f:e4:04:19:0b:78:c9:da:42:8b:8d:e3:eb:
22:81:a7:20:4f:8a:89:1c:3d:41:59:ff:f8:1f:e2:
12:1b:b1:9c:fd:2a:a9:c4:ea:96:fa:30:9f:65:1e:
39:42:53:dd:31:12:b5:bf:cd:31:5b:30:3b:c3:33:
45:43:d7:e5:8e:b9:d2:65:86:46:88:68:3e:a8:41:
6c:5f:54:7b:4c:56:fe:fb:ee:02:8a:6e:92:b0:9c:
b6:b6:7a:1c:6e:b8:47:26:27:34:2f:ff:a4:e0:3c:
54:cb:d6:d8:ec:6c:77:cd:7e:e3:73:be:7d:af:45:
aa:15:63:76:76:b7:80:ea:e5:25:f1:5c:3d:8a:43:
9e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:56:E6:00:2A:BB:92:F9:F8:24:45:09:3C:B6:0E:B6:B2:D9:00:C4
X509v3 Authority Key Identifier:
keyid:29:18:46:47:24:8B:55:52:39:99:CB:B7:FE:5B:20:A9:9F:E7:3B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:94:69:f6:a0:94:36:31:6c:fc:d6:b4:9e:bf:77:f4:51:f9:
e7:5f:92:a6:94:ad:7c:c5:89:f6:0d:76:8f:12:e6:5d:83:78:
11:0a:a6:f9:95:bc:39:14:ea:4f:0a:13:42:1b:30:3c:fa:b3:
15:7d:6c:76:96:c4:d0:41:d8:3c:18:e7:db:76:15:24:12:4f:
84:eb:8b:29:fc:3c:ba:3f:2e:8e:d1:a6:2d:6e:0c:e6:55:c7:
38:f9:8f:71:e1:7b:6f:11:1e:cf:98:d2:83:9b:08:4a:b9:b8:
b6:c9:7d:aa:9a:0c:ec:3f:4e:ea:e9:46:d8:77:d9:55:07:04:
82:6c:00:85:65:2f:06:8b:3d:4f:01:3c:7c:f5:25:b6:66:c4:
63:07:40:d4:c9:f0:f9:b9:34:cf:29:d0:f8:a0:0a:88:a4:35:
dd:92:30:17:81:e9:83:99:df:80:ca:4f:76:6a:9c:13:cb:35:
7d:0b:6e:0f:67:dc:01:00:6a:9b:38:69:d0:18:62:73:ef:ae:
97:c7:0b:d5:ef:9e:a4:39:f5:52:58:19:4f:5f:ca:c4:c6:ac:
b9:6a:04:99:64:19:a9:87:4f:f2:56:93:51:0c:24:61:28:6c:
fc:16:8a:aa:eb:35:94:1f:4e:22:64:cf:4e:22:c3:5e:ee:cd:
ff:3a:4f:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh70pTFQWnnFNMXyaMgQnABMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MTg0NjQ3MjQ4YjU1NTIzOTk5Y2JiN2ZlNWIyMGE5OWZl
NzNiZTMwHhcNMjUwODA1MjAwMDU0WhcNMjUwODA2MjAwMDU0WjAzMTEwLwYDVQQD
EygzZjU2ZTYwMDJhYmI5MmY5ZjgyNDQ1MDkzY2I2MGViNmIyZDkwMGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulcNns0fr9mLMbT3/IpDC0VjnZUG
ltZXwXi3tC0+rg8FXMx68kWEwcgA6ShixDcK/hjoHL55lFRQHZdeHIv7G7k/+5HI
3Zw2bUqJzUrU0NZSHVJL3uegx+5emS1VXtp2++QBvqLtSTdCWwjNQ0UsMKPwqn8K
SudXsR/kBBkLeMnaQouN4+sigacgT4qJHD1BWf/4H+ISG7Gc/SqpxOqW+jCfZR45
QlPdMRK1v80xWzA7wzNFQ9fljrnSZYZGiGg+qEFsX1R7TFb+++4Cim6SsJy2tnoc
brhHJic0L/+k4DxUy9bY7Gx3zX7jc759r0WqFWN2dreA6uUl8Vw9ikOeXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9W5gAqu5L5+CRFCTy2Dray2QDEMB8GA1UdIwQY
MBaAFCkYRkcki1VSOZnLt/5bIKmf5zvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1JoR1J5U0xWVkk1bWN1M19sc2dxWl9uTy1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS81NjAzNmItMjNkOC00YjM3LWI1NDYt
OGZjMjM3M2ZjMjZlLzEvS1JoR1J5U0xWVkk1bWN1M19sc2dxWl9uTy1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS81NjAzNmItMjNkOC00YjM3LWI1NDYtOGZjMjM3M2ZjMjZl
LzEvS1JoR1J5U0xWVkk1bWN1M19sc2dxWl9uTy1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5Rp9qCU
NjFs/Na0nr939FH551+SppStfMWJ9g12jxLmXYN4EQqm+ZW8ORTqTwoTQhswPPqz
FX1sdpbE0EHYPBjn23YVJBJPhOuLKfw8uj8ujtGmLW4M5lXHOPmPceF7bxEez5jS
g5sISrm4tsl9qpoM7D9O6ulG2HfZVQcEgmwAhWUvBos9TwE8fPUltmbEYwdA1Mnw
+bk0zynQ+KAKiKQ13ZIwF4Hpg5nfgMpPdmqcE8s1fQtuD2fcAQBqmzhp0Bhic++u
l8cL1e+epDn1UlgZT1/KxMasuWoEmWQZqYdP8laTUQwkYShs/BaKqus1lB9OImTP
TiLDXu7N/zpPQg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:44:22 2025 by rpki-client