Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json)
Hash identifier: 9IKicSI46OHyi0Elph4y8LIgIdzQwXhPlnnppmvl4Gw=
Subject key identifier: AB:D3:83:1D:11:EA:B3:40:DB:9D:37:A5:1E:8A:52:2D:7D:46:96:0A
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 0197B77C29979CD5962CA70D379355E92264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
Manifest number: 133A
Signing time: Sat 28 Jun 2025 17:00:56 +0000
Manifest this update: Sat 28 Jun 2025 17:00:56 +0000
Manifest next update: Sun 29 Jun 2025 17:00:56 +0000
Files and hashes: 1: HFzLX8JfB09bMiykDXTNNVwsa28.roa (hash: RkC66kEQrpDYwov3VUFFbJbKcNeYjT04dJ6fhWE8V94=)
2: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: JNoZDzndhuyiK5w9z4EkcYysamfRO5A3dGMHurHpL48=)
3: _C12IjEOj75oE5QypNCeEnRnlyI.roa (hash: EBWCxN3qkCMZlfAoAwH4ZzgBiUuNGMo8jh7xQFNJR1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:29:97:9c:d5:96:2c:a7:0d:37:93:55:e9:22:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Jun 28 17:00:56 2025 GMT
Not After : Jun 29 17:00:56 2025 GMT
Subject: CN=abd3831d11eab340db9d37a51e8a522d7d46960a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:41:d7:73:75:c2:25:e2:92:e2:1e:03:c9:
4a:b3:08:f5:42:0e:bd:b9:f8:5d:e8:e8:3e:b4:f3:
a7:99:0b:9b:81:da:de:68:e4:5d:12:c5:f5:f0:5a:
89:2e:47:6a:dc:c6:8b:ad:d7:69:7b:27:6f:f6:ed:
83:a9:62:13:3d:65:9f:f8:cd:97:6a:b7:d1:59:be:
51:7e:7d:65:32:66:f1:01:3e:fa:7e:f8:c6:1e:c9:
16:b8:9a:30:a1:f1:00:b1:35:e1:b8:51:b8:3c:10:
7b:d7:8e:15:13:78:da:2f:fc:cf:a9:1f:1e:f5:42:
6d:b9:83:5f:c2:68:2d:ee:6a:96:f2:4f:2e:eb:c4:
5d:0b:9f:fa:5d:ca:30:7b:19:fa:c0:8c:5a:a9:15:
67:d5:a1:a5:26:c0:c0:91:61:25:2e:08:04:d0:2b:
20:6c:3d:58:28:61:cf:f4:db:c3:43:b2:33:92:d8:
5f:0c:e7:ab:97:1f:6f:cf:bc:75:f1:29:40:0b:b6:
64:49:51:dd:ea:92:c5:14:cd:5d:2c:93:e3:fe:14:
44:6e:43:bc:9d:15:1a:c6:e6:ab:e1:a6:70:1e:88:
5f:25:38:cf:76:42:be:41:12:07:7e:d9:3e:24:62:
3c:d6:5b:da:37:60:75:17:da:f1:e4:0d:79:a3:72:
9f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D3:83:1D:11:EA:B3:40:DB:9D:37:A5:1E:8A:52:2D:7D:46:96:0A
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:84:97:a1:f7:db:5b:5a:bf:0e:8a:d7:f8:4f:a3:68:99:86:
14:9a:e5:ae:5f:22:f4:38:a1:9c:e1:83:df:c4:5d:ae:d0:61:
e6:b0:e2:2f:c9:55:ad:31:a2:40:7c:93:7a:68:13:09:9e:77:
c8:24:1a:8c:d3:c9:68:fc:14:1d:55:d2:d7:26:e9:a1:65:2a:
37:22:01:25:7f:93:0c:9f:f2:af:49:d6:96:f8:2a:7a:14:41:
5e:d7:0f:ac:32:51:1f:0f:58:f8:58:f9:1c:34:9f:16:b5:19:
53:f9:19:c0:3f:fd:cd:9c:3b:e0:b7:e3:02:af:b9:55:f2:7a:
8d:cf:58:99:36:a8:9c:bf:b9:d0:13:4d:ca:8b:8a:4a:cf:22:
eb:ab:38:e6:55:7c:47:95:9b:d5:a6:0d:ea:61:32:0b:20:8a:
66:12:3a:d6:e2:f2:b9:e6:e2:e3:b3:bd:99:c5:2e:b3:9d:46:
d4:2a:1d:76:b7:d9:68:c2:96:73:8a:e1:e7:21:63:32:21:8c:
62:a0:81:f8:f5:5b:d6:18:d7:e5:c6:65:f8:00:f3:e6:fe:a5:
6b:6c:f3:e0:be:10:19:d7:47:1f:f8:8a:8e:a9:cf:d4:73:bc:
92:92:b3:77:39:42:d3:06:24:b9:29:9c:26:a3:28:6f:84:82:
78:d1:bf:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fCmXnNWWLKcNN5NV6SJkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YzIxMDNmZDI0MTdjODg2OTE0NTYxN2RlOTRmY2M5MTNi
MDg1ZWYwHhcNMjUwNjI4MTcwMDU2WhcNMjUwNjI5MTcwMDU2WjAzMTEwLwYDVQQD
EyhhYmQzODMxZDExZWFiMzQwZGI5ZDM3YTUxZThhNTIyZDdkNDY5NjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYJB13N1wiXikuIeA8lKswj1Qg69
ufhd6Og+tPOnmQubgdreaORdEsX18FqJLkdq3MaLrddpeydv9u2DqWITPWWf+M2X
arfRWb5Rfn1lMmbxAT76fvjGHskWuJowofEAsTXhuFG4PBB7144VE3jaL/zPqR8e
9UJtuYNfwmgt7mqW8k8u68RdC5/6Xcowexn6wIxaqRVn1aGlJsDAkWElLggE0Csg
bD1YKGHP9NvDQ7IzkthfDOerlx9vz7x18SlAC7ZkSVHd6pLFFM1dLJPj/hREbkO8
nRUaxuar4aZwHohfJTjPdkK+QRIHftk+JGI81lvaN2B1F9rx5A15o3Kf6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvTgx0R6rNA2503pR6KUi19RpYKMB8GA1UdIwQY
MBaAFCnCED/SQXyIaRRWF96U/MkTsIXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yYjhkODItMzlmYi00YTU2LTg5YzUt
OWQ1NjU3NTEzZTIwLzEvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yYjhkODItMzlmYi00YTU2LTg5YzUtOWQ1NjU3NTEzZTIw
LzEvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARISXoffb
W1q/DorX+E+jaJmGFJrlrl8i9DihnOGD38RdrtBh5rDiL8lVrTGiQHyTemgTCZ53
yCQajNPJaPwUHVXS1ybpoWUqNyIBJX+TDJ/yr0nWlvgqehRBXtcPrDJRHw9Y+Fj5
HDSfFrUZU/kZwD/9zZw74LfjAq+5VfJ6jc9YmTaonL+50BNNyouKSs8i66s45lV8
R5Wb1aYN6mEyCyCKZhI61uLyuebi47O9mcUus51G1CoddrfZaMKWc4rh5yFjMiGM
YqCB+PVb1hjX5cZl+ADz5v6la2zz4L4QGddHH/iKjqnP1HO8kpKzdzlC0wYkuSmc
JqMob4SCeNG/DQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:23 2025 by rpki-client