Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/91e1b4-4a10-4897-bb89-a77a3b8bce92/1/K-Ncq0t0yo_1Lzwdnpv3atQJt6w.mft
File: K-Ncq0t0yo_1Lzwdnpv3atQJt6w.mft (raw, json)
Hash identifier: GpdPUPqY2SMTyxzTow+acFcQ395MmOQGIGwrlBdBzag=
Subject key identifier: 84:AF:BC:48:B8:53:3B:B8:4C:2A:9D:C9:93:3A:D8:25:0C:9F:DF:3D
Authority key identifier: 2B:E3:5C:AB:4B:74:CA:8F:F5:2F:3C:1D:9E:9B:F7:6A:D4:09:B7:AC
Certificate issuer: /CN=2be35cab4b74ca8ff52f3c1d9e9bf76ad409b7ac
Certificate serial: 0198D54EAF767FA5BCBBBB11D433149612A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-Ncq0t0yo_1Lzwdnpv3atQJt6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/91e1b4-4a10-4897-bb89-a77a3b8bce92/1/K-Ncq0t0yo_1Lzwdnpv3atQJt6w.mft
Manifest number: 0B
Signing time: Sat 23 Aug 2025 05:02:40 +0000
Manifest this update: Sat 23 Aug 2025 05:02:40 +0000
Manifest next update: Sun 24 Aug 2025 05:02:40 +0000
Files and hashes: 1: K-Ncq0t0yo_1Lzwdnpv3atQJt6w.crl (hash: cidzbIg/n+YkNlQI1lHo6bx27D9cVyvR///VhDiTN+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/91e1b4-4a10-4897-bb89-a77a3b8bce92/1/K-Ncq0t0yo_1Lzwdnpv3atQJt6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/91e1b4-4a10-4897-bb89-a77a3b8bce92/1/K-Ncq0t0yo_1Lzwdnpv3atQJt6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-Ncq0t0yo_1Lzwdnpv3atQJt6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:af:76:7f:a5:bc:bb:bb:11:d4:33:14:96:12:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be35cab4b74ca8ff52f3c1d9e9bf76ad409b7ac
Validity
Not Before: Aug 23 05:02:40 2025 GMT
Not After : Aug 24 05:02:40 2025 GMT
Subject: CN=84afbc48b8533bb84c2a9dc9933ad8250c9fdf3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:7f:05:f9:6b:2b:2f:03:4a:39:8a:98:0a:
8b:0e:fd:89:e3:09:91:6c:14:03:02:15:34:00:95:
53:67:35:d0:95:71:44:fa:d2:9e:9e:f8:e9:71:55:
6c:b5:fb:99:04:6e:20:25:c3:fc:0a:a4:56:47:69:
62:9d:67:b9:4f:8e:87:8b:39:9f:33:84:0a:94:9c:
ac:61:70:38:60:d9:02:02:20:e2:17:66:85:76:7e:
28:f3:41:5e:ec:1d:6e:94:9d:ed:ca:b6:db:da:97:
15:de:c0:38:9c:93:a0:40:56:6a:28:ef:7d:f8:25:
fb:1b:a5:b8:18:fe:5a:94:fe:88:d2:b3:d5:06:4a:
cb:c9:24:d3:f9:a0:39:06:6f:24:f6:c8:ff:3f:b5:
a2:86:73:52:ab:a3:f6:b2:71:d5:6d:d7:d4:84:e2:
99:b7:fe:7f:d0:b7:53:f6:fc:1d:d2:75:4d:7f:79:
63:06:1c:2a:7d:41:e8:30:47:6a:5a:48:3e:79:96:
95:59:70:93:ec:25:c2:29:e6:32:93:20:35:66:37:
79:49:5d:41:dc:93:79:7a:fa:55:1c:8b:cb:65:ca:
38:e0:30:2a:09:99:1e:71:87:d6:f4:e8:4f:47:1c:
c0:2e:3b:48:a3:2d:f4:a4:30:14:cd:63:82:83:62:
b8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AF:BC:48:B8:53:3B:B8:4C:2A:9D:C9:93:3A:D8:25:0C:9F:DF:3D
X509v3 Authority Key Identifier:
keyid:2B:E3:5C:AB:4B:74:CA:8F:F5:2F:3C:1D:9E:9B:F7:6A:D4:09:B7:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-Ncq0t0yo_1Lzwdnpv3atQJt6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/91e1b4-4a10-4897-bb89-a77a3b8bce92/1/K-Ncq0t0yo_1Lzwdnpv3atQJt6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/91e1b4-4a10-4897-bb89-a77a3b8bce92/1/K-Ncq0t0yo_1Lzwdnpv3atQJt6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:83:a6:31:48:d2:47:44:0b:03:d9:92:fe:85:c8:0b:36:5d:
8a:2b:18:97:70:60:5f:19:a9:94:ac:1b:c1:7c:35:a7:89:6c:
45:12:0f:17:f8:ed:48:81:f2:84:47:08:2b:67:80:78:02:f6:
0e:f2:27:d6:cc:cf:24:4b:aa:54:c8:a1:97:be:39:7c:46:99:
64:f7:fe:bd:fe:a9:4f:e9:c9:75:0c:f6:aa:80:b3:3a:2e:59:
8a:07:1b:3b:1a:91:b5:5e:f2:fc:7d:98:e1:c0:82:5d:ce:e7:
70:07:c6:1b:9f:7b:65:b9:91:44:7b:b5:16:27:04:ab:3a:dc:
a4:d5:f8:71:4c:1e:f9:18:0d:b4:e0:c5:e0:3c:17:15:fc:e9:
df:61:e8:10:96:3a:95:6d:af:14:ab:c5:1a:b3:93:99:2c:95:
f4:d4:dc:e3:26:aa:a7:11:fc:1f:58:49:dc:ea:af:2c:18:f6:
de:a9:59:50:5e:02:06:3b:d5:14:77:75:54:4a:c2:59:1c:cc:
b0:aa:7b:e2:16:5b:90:29:7f:d6:f3:30:cf:00:b3:69:a8:ed:
b1:6b:0a:94:fd:95:26:0e:aa:a6:5b:f6:f4:75:91:f8:6e:f7:
4b:b2:59:d2:e3:05:44:8e:6f:9b:d5:2a:c4:7e:16:2f:9c:04:
78:49:61:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTq92f6W8u7sR1DMUlhKnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZTM1Y2FiNGI3NGNhOGZmNTJmM2MxZDllOWJmNzZhZDQw
OWI3YWMwHhcNMjUwODIzMDUwMjQwWhcNMjUwODI0MDUwMjQwWjAzMTEwLwYDVQQD
Eyg4NGFmYmM0OGI4NTMzYmI4NGMyYTlkYzk5MzNhZDgyNTBjOWZkZjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwh/BflrKy8DSjmKmAqLDv2J4wmR
bBQDAhU0AJVTZzXQlXFE+tKenvjpcVVstfuZBG4gJcP8CqRWR2linWe5T46Hizmf
M4QKlJysYXA4YNkCAiDiF2aFdn4o80Fe7B1ulJ3tyrbb2pcV3sA4nJOgQFZqKO99
+CX7G6W4GP5alP6I0rPVBkrLySTT+aA5Bm8k9sj/P7WihnNSq6P2snHVbdfUhOKZ
t/5/0LdT9vwd0nVNf3ljBhwqfUHoMEdqWkg+eZaVWXCT7CXCKeYykyA1Zjd5SV1B
3JN5evpVHIvLZco44DAqCZkecYfW9OhPRxzALjtIoy30pDAUzWOCg2K4fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISvvEi4Uzu4TCqdyZM62CUMn989MB8GA1UdIwQY
MBaAFCvjXKtLdMqP9S88HZ6b92rUCbesMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSy1OY3EwdDB5b18xTHp3ZG5wdjNhdFFKdDZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85MWUxYjQtNGExMC00ODk3LWJiODkt
YTc3YTNiOGJjZTkyLzEvSy1OY3EwdDB5b18xTHp3ZG5wdjNhdFFKdDZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85MWUxYjQtNGExMC00ODk3LWJiODktYTc3YTNiOGJjZTky
LzEvSy1OY3EwdDB5b18xTHp3ZG5wdjNhdFFKdDZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIOmMUjS
R0QLA9mS/oXICzZdiisYl3BgXxmplKwbwXw1p4lsRRIPF/jtSIHyhEcIK2eAeAL2
DvIn1szPJEuqVMihl745fEaZZPf+vf6pT+nJdQz2qoCzOi5ZigcbOxqRtV7y/H2Y
4cCCXc7ncAfGG597ZbmRRHu1FicEqzrcpNX4cUwe+RgNtODF4DwXFfzp32HoEJY6
lW2vFKvFGrOTmSyV9NTc4yaqpxH8H1hJ3OqvLBj23qlZUF4CBjvVFHd1VErCWRzM
sKp74hZbkCl/1vMwzwCzaajtsWsKlP2VJg6qplv29HWR+G73S7JZ0uMFRI5vm9Uq
xH4WL5wEeElhaQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:37:42 2025 by rpki-client