Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
File: KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json)
Hash identifier: U1u313GDMGD+u15WDg20gaHuZJYWWYy/4zTyKyp8kpk=
Subject key identifier: 84:F2:2F:D3:02:DC:22:36:FC:E4:94:E0:FC:FD:12:30:F0:ED:35:DC
Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
Certificate issuer: /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Certificate serial: 0198D515E5605FA80E9561C0BA98079D75A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
Manifest number: 069A
Signing time: Sat 23 Aug 2025 04:00:38 +0000
Manifest this update: Sat 23 Aug 2025 04:00:38 +0000
Manifest next update: Sun 24 Aug 2025 04:00:38 +0000
Files and hashes: 1: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: zKYJ2Gcoynq0VdE3K2Rn5KAnXKqCNRRaLhKQi6B5RiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e5:60:5f:a8:0e:95:61:c0:ba:98:07:9d:75:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Validity
Not Before: Aug 23 04:00:38 2025 GMT
Not After : Aug 24 04:00:38 2025 GMT
Subject: CN=84f22fd302dc2236fce494e0fcfd1230f0ed35dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:0a:21:2c:06:cf:fb:49:23:c6:11:85:37:
13:e7:86:e1:4b:f0:20:af:87:f5:41:d5:54:5d:d9:
c3:a0:41:3b:3e:67:cc:e2:97:04:2b:cf:a2:df:86:
31:7c:98:e7:b8:8d:57:54:e3:41:88:23:6e:bd:d2:
f9:ef:e5:aa:87:2b:3b:37:86:ee:93:8c:b3:de:e5:
44:cd:d5:97:98:16:4f:82:de:f6:4a:e7:ad:67:1d:
f9:78:d1:cf:21:3f:43:6d:0b:de:bc:55:d6:66:97:
f8:9e:d8:a2:eb:6d:1a:d6:c9:12:c6:11:9d:c5:f9:
f6:90:ce:43:4c:df:7d:d8:e9:dd:6c:43:19:6a:0c:
ad:e2:e0:8a:5c:73:21:e1:28:9e:df:4c:5f:66:19:
84:6c:59:b3:dc:6f:dd:0a:43:d4:bc:ef:30:d7:1c:
fe:8a:33:71:df:94:d9:86:f7:0d:f7:e0:e3:0e:e8:
82:7b:79:5e:b5:c0:6a:d3:9c:29:c4:96:5a:cd:37:
24:04:c8:e4:4a:d5:6e:66:38:ba:8c:ca:39:1b:39:
bb:47:db:8f:fe:db:d3:c9:47:09:9e:9d:1b:52:bb:
a8:19:bc:16:f7:b9:3f:e0:22:01:0c:d3:12:ae:cf:
90:21:77:3b:37:b0:5c:0f:23:cf:6e:c7:3e:2f:09:
b0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F2:2F:D3:02:DC:22:36:FC:E4:94:E0:FC:FD:12:30:F0:ED:35:DC
X509v3 Authority Key Identifier:
keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c5:d0:40:36:f3:5c:37:e6:d0:9c:a6:67:9f:94:4b:57:64:
2b:d7:c8:8b:38:b5:f5:7b:21:1b:a7:89:2b:fc:67:aa:46:77:
d6:c0:91:f0:18:91:13:e9:81:12:96:01:53:01:d5:e6:ee:21:
62:21:28:52:2a:26:52:54:0c:98:9a:ed:18:6a:38:bb:bb:62:
48:e3:76:7a:cc:44:10:c3:7f:81:94:95:fe:7e:05:e8:96:e8:
bd:33:af:5f:3f:50:a3:f1:24:72:8c:66:b2:79:d9:48:36:eb:
79:b0:4f:16:ba:b7:f9:7a:34:3b:e7:4e:54:7d:a5:1e:54:cf:
76:e0:15:f0:d5:e0:8c:4d:53:c5:e1:c7:35:b1:88:c6:62:3b:
a4:1b:98:d3:65:db:d8:39:41:30:61:f0:f1:17:0a:86:fc:a7:
20:44:66:19:2f:6f:27:1f:f9:58:d2:48:34:c6:6f:6a:c2:51:
e4:df:ec:c1:23:4f:c3:08:18:22:61:41:d1:45:19:31:76:1c:
62:a5:5a:79:f5:45:8e:82:ec:88:09:52:d4:7a:3f:09:ec:5a:
f5:12:0f:20:e9:e6:e5:f9:8c:da:f9:65:6b:0e:c0:33:fd:a7:
96:de:cf:24:e2:b3:4b:25:dd:49:ce:cf:62:6b:fe:11:92:bd:
1a:88:e8:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFeVgX6gOlWHAupgHnXWmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NTc0NTc2ZTljZWEzOGVhM2Y2ZWViMjZjODMyNzUyOGEw
YTFiZmYwHhcNMjUwODIzMDQwMDM4WhcNMjUwODI0MDQwMDM4WjAzMTEwLwYDVQQD
Eyg4NGYyMmZkMzAyZGMyMjM2ZmNlNDk0ZTBmY2ZkMTIzMGYwZWQzNWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnYKISwGz/tJI8YRhTcT54bhS/Ag
r4f1QdVUXdnDoEE7PmfM4pcEK8+i34YxfJjnuI1XVONBiCNuvdL57+Wqhys7N4bu
k4yz3uVEzdWXmBZPgt72SuetZx35eNHPIT9DbQvevFXWZpf4ntii620a1skSxhGd
xfn2kM5DTN992OndbEMZagyt4uCKXHMh4Sie30xfZhmEbFmz3G/dCkPUvO8w1xz+
ijNx35TZhvcN9+DjDuiCe3letcBq05wpxJZazTckBMjkStVuZji6jMo5Gzm7R9uP
/tvTyUcJnp0bUruoGbwW97k/4CIBDNMSrs+QIXc7N7BcDyPPbsc+LwmwuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITyL9MC3CI2/OSU4Pz9EjDw7TXcMB8GA1UdIwQY
MBaAFClXRXbpzqOOo/busmyDJ1KKChv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZkRmR1bk9vNDZqOXU2eWJJTW5Vb29LR184LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iZDA1NTYtM2YzMy00NmRlLTkyOTEt
M2IzNDQyMGQ5MGQyLzEvS1ZkRmR1bk9vNDZqOXU2eWJJTW5Vb29LR184Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iZDA1NTYtM2YzMy00NmRlLTkyOTEtM2IzNDQyMGQ5MGQy
LzEvS1ZkRmR1bk9vNDZqOXU2eWJJTW5Vb29LR184LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqMXQQDbz
XDfm0JymZ5+US1dkK9fIizi19XshG6eJK/xnqkZ31sCR8BiRE+mBEpYBUwHV5u4h
YiEoUiomUlQMmJrtGGo4u7tiSON2esxEEMN/gZSV/n4F6JbovTOvXz9Qo/Ekcoxm
snnZSDbrebBPFrq3+Xo0O+dOVH2lHlTPduAV8NXgjE1TxeHHNbGIxmI7pBuY02Xb
2DlBMGHw8RcKhvynIERmGS9vJx/5WNJINMZvasJR5N/swSNPwwgYImFB0UUZMXYc
YqVaefVFjoLsiAlS1Ho/Cexa9RIPIOnm5fmM2vllaw7AM/2nlt7PJOKzSyXdSc7P
Ymv+EZK9GojoyA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:38:25 2025 by rpki-client