Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft
File: KdlQvBhFV79QTPK3yUp9zsCHbWY.mft (raw, json)
Hash identifier: 1PaCYRb3wCmHALdWAxsbIC63b+2iDSlZhZkUi/nLR0U=
Subject key identifier: 0E:E7:1F:D3:0D:DD:9C:85:48:61:EC:6B:E8:79:41:77:FD:04:75:F0
Authority key identifier: 29:D9:50:BC:18:45:57:BF:50:4C:F2:B7:C9:4A:7D:CE:C0:87:6D:66
Certificate issuer: /CN=29d950bc184557bf504cf2b7c94a7dcec0876d66
Certificate serial: 0198D65FDA29A91A9FE98A688A3473C38579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:01:02 +0000
Manifest this update: Sat 23 Aug 2025 10:01:02 +0000
Manifest next update: Sun 24 Aug 2025 10:01:02 +0000
Files and hashes: 1: KdlQvBhFV79QTPK3yUp9zsCHbWY.crl (hash: n2NZSLvYIPu/JTf/X8lTRdS4Th7K/wkisfyZslUMcpY=)
2: zbr28h6G65Bn1Q6ZX_BmInmSKTE.roa (hash: ETLOFsK2osYgbAep7Hus0i1EKEQGmJzxLIzfnOkM508=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:da:29:a9:1a:9f:e9:8a:68:8a:34:73:c3:85:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d950bc184557bf504cf2b7c94a7dcec0876d66
Validity
Not Before: Aug 23 10:01:02 2025 GMT
Not After : Aug 24 10:01:02 2025 GMT
Subject: CN=0ee71fd30ddd9c854861ec6be8794177fd0475f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:86:d3:a2:f5:bf:e2:65:31:95:ba:cd:3c:
2b:d1:86:ef:3d:4d:9b:37:8c:c5:46:6e:01:08:f1:
b3:b2:d8:38:1c:2c:e0:98:cc:bc:eb:15:69:31:5e:
91:a0:59:87:14:8a:93:56:81:8e:eb:36:ee:5b:c4:
b7:7f:6b:42:e9:ea:d7:6b:5f:d8:40:b1:8f:61:64:
61:4f:e2:f5:d5:d6:9c:18:63:ed:5d:e1:a5:b6:71:
93:f7:fb:72:e2:7a:3d:ea:38:25:5d:7e:06:93:70:
f3:b0:73:bb:a3:c8:62:3d:9a:7f:95:49:c4:fa:b7:
d7:50:32:35:f1:f4:ec:29:27:d7:20:4d:a0:c5:f7:
42:62:b3:e7:e3:28:9c:0d:97:f7:ee:74:1c:a5:f8:
a0:95:0f:e7:6b:93:72:f3:fe:5c:43:cb:1b:0f:4e:
76:73:9c:81:05:29:72:6a:9c:35:b8:c8:c4:93:15:
19:70:4f:bb:72:d2:97:2d:55:8f:ff:f5:90:f9:0f:
a1:88:04:1c:52:31:48:b5:fd:76:3c:a6:10:bb:61:
3b:58:96:e3:df:80:d2:78:0d:bd:ca:fe:5a:e4:c8:
49:fb:fb:92:c6:f1:a2:f6:98:0e:79:05:4e:8e:59:
5d:02:07:bf:ae:d4:fa:e0:1a:7e:21:e6:ca:7e:5a:
57:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E7:1F:D3:0D:DD:9C:85:48:61:EC:6B:E8:79:41:77:FD:04:75:F0
X509v3 Authority Key Identifier:
keyid:29:D9:50:BC:18:45:57:BF:50:4C:F2:B7:C9:4A:7D:CE:C0:87:6D:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b7:3b:73:02:a3:e4:56:5e:20:c7:b9:11:7f:f6:e5:4a:4e:
37:45:6a:b4:d1:5b:30:c8:00:5e:af:04:c5:53:72:7f:80:d0:
5d:e4:b1:4a:bf:c9:0b:df:14:3d:0b:26:f9:27:47:75:f4:5e:
a6:7b:6e:ff:e2:fb:98:aa:c9:f9:0b:a9:ad:08:b8:24:4e:55:
bd:a9:9a:1b:52:45:52:d2:9f:82:a1:3f:c8:33:1d:85:dc:3f:
95:50:00:d6:55:df:18:b3:41:d6:89:7e:7c:cc:9e:a3:88:90:
4d:c9:94:2a:8f:95:32:cc:67:c4:73:72:62:a3:f5:70:ea:b0:
13:d8:07:21:50:cb:1b:7b:4e:61:e3:9a:02:cc:88:fc:6b:4a:
17:62:fb:41:b7:d4:b2:e9:a2:df:27:51:42:23:23:21:cc:9f:
7c:21:55:83:80:a0:f0:66:3e:99:37:17:0f:00:44:f6:d1:3c:
62:bd:4c:70:71:1c:ae:61:ea:b8:7d:dc:1a:c0:00:0a:fe:39:
58:ad:3f:92:94:c8:95:22:6b:54:90:73:11:b7:8c:d1:b4:aa:
a9:c8:b1:ba:35:bd:2b:6e:43:29:5b:a0:80:5e:9d:b4:13:2a:
ec:4a:46:f7:2c:58:a1:e6:03:97:5e:46:7b:c3:01:5e:3d:6b:
61:73:f8:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX9opqRqf6YpoijRzw4V5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDk1MGJjMTg0NTU3YmY1MDRjZjJiN2M5NGE3ZGNlYzA4
NzZkNjYwHhcNMjUwODIzMTAwMTAyWhcNMjUwODI0MTAwMTAyWjAzMTEwLwYDVQQD
EygwZWU3MWZkMzBkZGQ5Yzg1NDg2MWVjNmJlODc5NDE3N2ZkMDQ3NWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgaG06L1v+JlMZW6zTwr0YbvPU2b
N4zFRm4BCPGzstg4HCzgmMy86xVpMV6RoFmHFIqTVoGO6zbuW8S3f2tC6erXa1/Y
QLGPYWRhT+L11dacGGPtXeGltnGT9/ty4no96jglXX4Gk3DzsHO7o8hiPZp/lUnE
+rfXUDI18fTsKSfXIE2gxfdCYrPn4yicDZf37nQcpfiglQ/na5Ny8/5cQ8sbD052
c5yBBSlyapw1uMjEkxUZcE+7ctKXLVWP//WQ+Q+hiAQcUjFItf12PKYQu2E7WJbj
34DSeA29yv5a5MhJ+/uSxvGi9pgOeQVOjlldAge/rtT64Bp+IebKflpXjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7nH9MN3ZyFSGHsa+h5QXf9BHXwMB8GA1UdIwQY
MBaAFCnZULwYRVe/UEzyt8lKfc7Ah21mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RsUXZCaEZWNzlRVFBLM3lVcDl6c0NIYldZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi83NzJmZWEtNDcxNS00MDEwLThjMWUt
ZGVlNjZhMzU1MDZjLzEvS2RsUXZCaEZWNzlRVFBLM3lVcDl6c0NIYldZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi83NzJmZWEtNDcxNS00MDEwLThjMWUtZGVlNjZhMzU1MDZj
LzEvS2RsUXZCaEZWNzlRVFBLM3lVcDl6c0NIYldZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrc7cwKj
5FZeIMe5EX/25UpON0VqtNFbMMgAXq8ExVNyf4DQXeSxSr/JC98UPQsm+SdHdfRe
pntu/+L7mKrJ+QuprQi4JE5VvamaG1JFUtKfgqE/yDMdhdw/lVAA1lXfGLNB1ol+
fMyeo4iQTcmUKo+VMsxnxHNyYqP1cOqwE9gHIVDLG3tOYeOaAsyI/GtKF2L7QbfU
sumi3ydRQiMjIcyffCFVg4Cg8GY+mTcXDwBE9tE8Yr1McHEcrmHquH3cGsAACv45
WK0/kpTIlSJrVJBzEbeM0bSqqcixujW9K25DKVuggF6dtBMq7EpG9yxYoeYDl15G
e8MBXj1rYXP45Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:48 2025 by rpki-client