Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
File: K0q0wVF_cy34suyD3krSNo1Fz98.mft (raw, json)
Hash identifier: 9EGb0fCRi5Gjst3P4yzFWsCU327Nt0tm+csqzplyRhk=
Subject key identifier: 5E:F9:EE:DE:08:01:E5:7E:D9:39:8E:49:43:72:CF:EF:36:6A:2E:69
Authority key identifier: 2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF
Certificate issuer: /CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf
Certificate serial: 0198D4728FF6354F8418D87CCE1146BC154F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
Manifest number: 1522
Signing time: Sat 23 Aug 2025 01:02:14 +0000
Manifest this update: Sat 23 Aug 2025 01:02:14 +0000
Manifest next update: Sun 24 Aug 2025 01:02:14 +0000
Files and hashes: 1: K0q0wVF_cy34suyD3krSNo1Fz98.crl (hash: XsNQ8X5IyhrvzmwsLiQfZ6Q0/AohtChzt/szmvCGVFM=)
2: kUV5gNpaG9Xf3cZ7lRR3FP5Oag4.roa (hash: 2uQS8P+CjJocxImWDpdYZcJPqNgU1mCNOmTtqZK5rjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:8f:f6:35:4f:84:18:d8:7c:ce:11:46:bc:15:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf
Validity
Not Before: Aug 23 01:02:14 2025 GMT
Not After : Aug 24 01:02:14 2025 GMT
Subject: CN=5ef9eede0801e57ed9398e494372cfef366a2e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b4:11:02:f9:6d:e5:71:b2:35:aa:f8:8a:49:
28:69:9d:40:a2:e2:72:1a:35:94:54:9a:6e:22:81:
8f:f9:e5:27:64:6d:fb:9f:c3:56:88:59:5c:76:59:
72:67:1e:6e:83:30:ba:ce:5e:8d:ab:d1:83:3d:31:
1e:82:3d:e2:93:04:21:88:3d:e4:45:40:68:5c:b5:
df:03:90:7c:8c:87:c5:9c:26:62:d4:5a:ae:3a:bd:
ca:1e:5e:83:c2:36:38:24:05:35:6b:aa:98:fc:3b:
59:ca:d3:83:15:01:9f:61:b6:d5:26:62:8a:a9:5e:
47:ce:b7:a0:c1:f5:ed:26:fb:20:d4:6f:0a:d7:6b:
63:1c:c5:f4:75:d7:e4:93:5f:a9:de:57:85:15:12:
9c:aa:b9:fd:34:c1:74:b2:34:df:95:8d:b9:23:78:
84:e7:2a:0f:15:57:0d:62:7c:4e:a7:e4:bd:2c:be:
a3:15:1f:e9:31:15:be:ce:98:75:ad:55:36:d8:55:
d4:28:4f:42:de:49:76:8a:97:94:ed:80:6d:68:b2:
a8:0e:dd:97:b4:d3:67:6c:cf:3d:53:ac:eb:03:58:
c4:a3:16:c4:77:86:fc:e0:d0:95:54:1c:09:b0:01:
05:c6:b5:2b:06:26:be:f9:23:ea:3b:81:7e:2a:5e:
bb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F9:EE:DE:08:01:E5:7E:D9:39:8E:49:43:72:CF:EF:36:6A:2E:69
X509v3 Authority Key Identifier:
keyid:2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a1:a9:3d:65:16:e0:72:0b:a0:75:4c:e2:a1:d8:e6:7a:e8:
98:60:5e:b4:d4:44:2d:40:17:ba:a7:29:10:f6:b6:09:b0:46:
3b:03:a5:1e:9b:7d:80:42:8c:ed:a2:d6:71:c9:c4:97:39:e2:
34:92:1b:31:31:a0:84:ee:6f:ca:2d:b5:40:a7:0f:d6:a3:51:
de:fb:8e:c5:32:f3:0f:8e:07:fc:f5:36:93:c5:be:b1:f7:da:
d2:8b:2b:cb:c3:bf:71:b3:83:69:fd:8f:ff:6b:3d:c6:b6:dd:
69:24:85:f9:85:4b:49:a2:99:03:b0:10:2b:1e:61:f6:c8:1a:
f2:fa:a5:4c:3e:32:b5:26:ac:4c:36:61:31:9e:c5:3c:04:9a:
09:21:b4:eb:e0:cf:22:f0:44:4a:97:6d:cb:c1:b8:b2:ca:cc:
d9:b5:3c:3d:e2:35:43:d1:28:ab:1b:42:11:0c:2a:f1:8c:9a:
cd:d3:5a:af:88:57:f9:87:56:6b:40:5a:bb:15:98:92:a3:a1:
0f:12:e3:d3:a3:ab:0d:5d:f8:11:bd:b2:28:e6:d6:f8:9f:2c:
35:77:8d:3f:69:b1:af:65:77:c9:e2:43:22:18:90:0d:30:d2:
72:93:3f:44:76:25:4c:e2:e9:90:fd:79:96:01:78:67:05:31:
ce:23:ea:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUco/2NU+EGNh8zhFGvBVPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNGFiNGMxNTE3ZjczMmRmOGIyZWM4M2RlNGFkMjM2OGQ0
NWNmZGYwHhcNMjUwODIzMDEwMjE0WhcNMjUwODI0MDEwMjE0WjAzMTEwLwYDVQQD
Eyg1ZWY5ZWVkZTA4MDFlNTdlZDkzOThlNDk0MzcyY2ZlZjM2NmEyZTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37QRAvlt5XGyNar4ikkoaZ1AouJy
GjWUVJpuIoGP+eUnZG37n8NWiFlcdllyZx5ugzC6zl6Nq9GDPTEegj3ikwQhiD3k
RUBoXLXfA5B8jIfFnCZi1FquOr3KHl6DwjY4JAU1a6qY/DtZytODFQGfYbbVJmKK
qV5HzregwfXtJvsg1G8K12tjHMX0ddfkk1+p3leFFRKcqrn9NMF0sjTflY25I3iE
5yoPFVcNYnxOp+S9LL6jFR/pMRW+zph1rVU22FXUKE9C3kl2ipeU7YBtaLKoDt2X
tNNnbM89U6zrA1jEoxbEd4b84NCVVBwJsAEFxrUrBia++SPqO4F+Kl67yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF757t4IAeV+2TmOSUNyz+82ai5pMB8GA1UdIwQY
MBaAFCtKtMFRf3Mt+LLsg95K0jaNRc/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzBxMHdWRl9jeTM0c3V5RDNrclNObzFGejk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yN2M3YTMtOTQzYy00YjI5LWJkODIt
ZTdhYmNmMjIzNzE1LzEvSzBxMHdWRl9jeTM0c3V5RDNrclNObzFGejk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yN2M3YTMtOTQzYy00YjI5LWJkODItZTdhYmNmMjIzNzE1
LzEvSzBxMHdWRl9jeTM0c3V5RDNrclNObzFGejk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfaGpPWUW
4HILoHVM4qHY5nromGBetNRELUAXuqcpEPa2CbBGOwOlHpt9gEKM7aLWccnElzni
NJIbMTGghO5vyi21QKcP1qNR3vuOxTLzD44H/PU2k8W+sffa0osry8O/cbODaf2P
/2s9xrbdaSSF+YVLSaKZA7AQKx5h9sga8vqlTD4ytSasTDZhMZ7FPASaCSG06+DP
IvBESpdty8G4ssrM2bU8PeI1Q9EoqxtCEQwq8YyazdNar4hX+YdWa0BauxWYkqOh
DxLj06OrDV34Eb2yKObW+J8sNXeNP2mxr2V3yeJDIhiQDTDScpM/RHYlTOLpkP15
lgF4ZwUxziPqKA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:51 2025 by rpki-client