Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier: 11pubkANsHb+EDox94zP3t2XUNDoWBLmFFNvkLOoSNs=
Subject key identifier: DA:27:B0:22:39:5D:A5:6E:4A:08:59:25:C9:2C:87:29:27:AC:49:37
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: 0197B5FBB4BAA26527950B9944976245DE9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number: 0EC3
Signing time: Sat 28 Jun 2025 10:01:01 +0000
Manifest this update: Sat 28 Jun 2025 10:01:01 +0000
Manifest next update: Sun 29 Jun 2025 10:01:01 +0000
Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: AxxJBZi/Lf8lCZ2NKith9zG9LndEf2hmPXkNpnPtacU=)
2: z5t3MUctHGLyNYnasAsmy7myIE0.roa (hash: mO/iLAoYiC6aPBgVm4fsRrMygy6NYm/K/6/lkuaPce4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:b4:ba:a2:65:27:95:0b:99:44:97:62:45:de:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: Jun 28 10:01:01 2025 GMT
Not After : Jun 29 10:01:01 2025 GMT
Subject: CN=da27b022395da56e4a085925c92c872927ac4937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:be:ba:ec:e0:52:d5:f8:f9:7c:60:b2:bb:8e:
5c:73:80:b3:82:46:60:93:3c:32:65:e9:d4:c3:d1:
d4:05:28:4a:1c:3d:4e:1d:e1:3c:c4:c5:62:b6:6b:
00:bf:21:a6:cc:93:63:91:c2:80:5b:cb:8b:f9:4e:
17:ca:fd:de:07:32:e3:46:99:2e:fe:ef:b6:05:78:
b2:fd:e7:de:22:ca:09:f8:bf:76:33:e3:6d:a7:04:
a1:e5:04:78:d0:25:18:44:36:1c:fb:20:1f:c9:02:
ea:0b:b7:00:3a:69:e8:85:9b:12:e9:5f:9e:49:7b:
95:e5:82:d6:97:a4:42:cd:80:f6:e5:7d:49:20:46:
d9:b3:e5:d9:bb:ed:ab:49:27:65:eb:e3:04:0c:e7:
09:e7:94:f1:92:79:47:3b:76:9a:8d:50:63:e3:38:
51:e6:b1:94:4a:7d:05:5b:91:d6:fa:1f:4d:e8:71:
06:b9:f7:a9:36:6a:f5:4b:e7:3d:13:9d:d8:ea:09:
1a:b8:f9:4d:26:d4:53:b2:3e:d8:d6:06:e7:4e:02:
27:ee:27:1d:94:52:49:24:da:af:53:73:fa:11:69:
17:70:eb:9e:7d:38:86:d9:a6:51:c9:37:44:ea:fb:
69:e1:65:6a:2d:f0:63:29:2a:1e:c7:a6:d7:a2:5c:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:27:B0:22:39:5D:A5:6E:4A:08:59:25:C9:2C:87:29:27:AC:49:37
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:01:65:d1:a2:3e:78:7c:41:74:7a:0c:98:03:10:e0:df:43:
ad:c2:b4:17:8e:28:d0:4f:1f:92:4c:c4:7e:67:ca:da:55:00:
e7:45:68:5b:4b:33:45:db:c2:09:de:35:60:ed:f0:33:9c:eb:
f3:8a:a2:e3:da:84:71:e2:04:28:1d:e4:1a:f7:bd:d6:ab:71:
0a:56:11:c0:34:0f:6c:93:19:51:3c:45:c0:c8:54:95:96:33:
2a:2e:bd:7c:52:8b:00:70:46:2d:82:fa:d6:6a:61:4e:ca:f3:
43:75:1a:7a:9a:99:a0:c3:ad:80:75:25:13:36:1d:22:b3:ff:
c1:3f:d7:0a:5f:57:cc:c0:6f:cb:48:89:d4:b4:2b:d8:21:50:
8f:53:ad:c1:5d:a2:8e:1c:d1:c0:32:1b:d1:b0:67:18:5a:a2:
99:80:07:5f:0e:e2:3a:ca:2d:5c:75:18:06:d7:82:1b:e2:67:
36:43:47:68:46:9f:1e:62:58:af:c5:33:a8:ad:4d:18:5c:bc:
c6:df:2d:7d:df:5c:94:09:68:38:c1:e2:5e:93:76:2d:e8:c4:
0f:80:65:c7:dd:01:dc:a8:6c:20:d4:f6:10:60:8b:1b:15:a8:
7f:01:38:3c:ec:9f:cf:00:05:a0:1f:7d:63:73:1f:9d:b0:e1:
66:18:3f:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1+7S6omUnlQuZRJdiRd6bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MDY5YjRlYzA0N2M2YzJkODBhNDk5MmU0MjI4YjMxN2Nj
OGIyMGMwHhcNMjUwNjI4MTAwMTAxWhcNMjUwNjI5MTAwMTAxWjAzMTEwLwYDVQQD
EyhkYTI3YjAyMjM5NWRhNTZlNGEwODU5MjVjOTJjODcyOTI3YWM0OTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr667OBS1fj5fGCyu45cc4CzgkZg
kzwyZenUw9HUBShKHD1OHeE8xMVitmsAvyGmzJNjkcKAW8uL+U4Xyv3eBzLjRpku
/u+2BXiy/efeIsoJ+L92M+NtpwSh5QR40CUYRDYc+yAfyQLqC7cAOmnohZsS6V+e
SXuV5YLWl6RCzYD25X1JIEbZs+XZu+2rSSdl6+MEDOcJ55TxknlHO3aajVBj4zhR
5rGUSn0FW5HW+h9N6HEGufepNmr1S+c9E53Y6gkauPlNJtRTsj7Y1gbnTgIn7icd
lFJJJNqvU3P6EWkXcOuefTiG2aZRyTdE6vtp4WVqLfBjKSoex6bXolwYFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNonsCI5XaVuSghZJckshyknrEk3MB8GA1UdIwQY
MBaAFCgGm07AR8bC2ApJkuQiizF8yLIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODct
ZGY3YjQ1YmU0NmM3LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODctZGY3YjQ1YmU0NmM3
LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwFl0aI+
eHxBdHoMmAMQ4N9DrcK0F44o0E8fkkzEfmfK2lUA50VoW0szRdvCCd41YO3wM5zr
84qi49qEceIEKB3kGve91qtxClYRwDQPbJMZUTxFwMhUlZYzKi69fFKLAHBGLYL6
1mphTsrzQ3UaepqZoMOtgHUlEzYdIrP/wT/XCl9XzMBvy0iJ1LQr2CFQj1OtwV2i
jhzRwDIb0bBnGFqimYAHXw7iOsotXHUYBteCG+JnNkNHaEafHmJYr8UzqK1NGFy8
xt8tfd9clAloOMHiXpN2LejED4Blx90B3KhsINT2EGCLGxWofwE4POyfzwAFoB99
Y3MfnbDhZhg/bQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:37 2025 by rpki-client