Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
File: KqeI7abIDvkCuV1gOHAKXafW0Mw.mft (raw, json)
Hash identifier: /BZiHJl7uARsVJl52fj/x+Cxa5J2q9cuQoJb/sOwmlM=
Subject key identifier: 46:D4:70:B3:6A:92:CE:8A:1D:7E:47:76:9F:F3:1C:A2:8C:24:4D:AA
Authority key identifier: 2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
Certificate issuer: /CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Certificate serial: 0198D5F17261A50CD983FC505B645F1A5E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
Manifest number: 0360
Signing time: Sat 23 Aug 2025 08:00:27 +0000
Manifest this update: Sat 23 Aug 2025 08:00:27 +0000
Manifest next update: Sun 24 Aug 2025 08:00:27 +0000
Files and hashes: 1: 4F3kZ7GYIkoJqlMsPFZBwlzQSuw.roa (hash: ItB+wlPpdA+q/aEoNNR8SWZkkiYGjXwWKDPOB3X3e6A=)
2: KqeI7abIDvkCuV1gOHAKXafW0Mw.crl (hash: +e8VOoXl/wErjTKGOIXDE4wDxss6+z1XvkFWKbUJ29Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:72:61:a5:0c:d9:83:fc:50:5b:64:5f:1a:5e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Validity
Not Before: Aug 23 08:00:27 2025 GMT
Not After : Aug 24 08:00:27 2025 GMT
Subject: CN=46d470b36a92ce8a1d7e47769ff31ca28c244daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:db:92:5d:19:e7:fc:75:d4:ac:3c:64:96:
8e:62:7a:57:ea:89:b3:55:8b:5e:65:31:3d:95:09:
1f:5f:9e:2e:d3:14:10:26:28:62:26:63:6b:b3:7c:
5c:67:c1:27:21:58:31:aa:6e:b6:26:52:22:d5:70:
e8:9c:45:a1:a5:48:82:08:16:f8:cf:63:c0:27:74:
8f:34:c3:e1:6c:22:b7:ad:1e:1e:5d:b6:75:48:61:
e1:10:df:28:5c:0f:ae:d8:90:44:0f:87:c6:fd:dd:
19:36:a6:e9:98:7f:b5:a3:6b:79:87:71:79:4b:f9:
8c:74:2e:15:6e:ff:e0:42:89:9a:6c:d6:2b:04:50:
e1:12:a9:13:5e:51:66:a9:e6:e7:88:40:b5:91:85:
b9:52:48:42:b0:29:34:21:db:fe:b2:40:cf:d6:dd:
95:b1:aa:21:f7:ca:8c:2c:52:e3:42:c2:e1:c7:2a:
e4:58:f5:01:da:6f:96:5d:1c:6d:b8:25:77:6e:0d:
ac:59:44:d5:73:1c:64:27:5a:74:88:5d:5d:ed:43:
4a:66:6c:da:a0:22:0e:71:43:0a:1c:b4:97:6d:6e:
ba:fa:d6:25:fe:11:7c:57:ce:fe:ce:75:bd:cc:48:
23:1c:a9:bb:25:ac:3c:c3:21:aa:02:d7:fc:0d:a0:
41:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D4:70:B3:6A:92:CE:8A:1D:7E:47:76:9F:F3:1C:A2:8C:24:4D:AA
X509v3 Authority Key Identifier:
keyid:2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e4:38:ef:21:e9:63:ff:76:7e:6b:44:08:8b:dc:d0:f2:07:
24:53:04:3c:38:b3:45:7c:9d:06:30:a2:9c:5e:7e:b2:0d:53:
de:1d:54:b2:9f:76:11:46:85:f9:ce:14:5b:ba:cc:a4:0d:29:
9f:d3:33:70:3a:04:58:db:a4:e8:60:4f:ae:15:89:04:f2:19:
9d:7b:73:b4:7e:20:e0:50:52:e6:1f:33:3f:4e:a2:e2:b6:41:
b6:07:33:84:87:61:95:33:60:e7:6d:a9:e2:83:fc:31:e8:2e:
5a:66:f4:9b:5b:0b:3c:4c:05:03:86:ee:4c:8a:3c:aa:8f:f1:
af:2f:b7:0a:c9:1e:a6:98:9d:8d:3d:1a:b7:3b:cc:79:83:d2:
2b:60:15:ab:f2:04:aa:d9:8e:42:ad:f2:20:d1:74:fd:4e:fb:
62:e0:45:ef:79:36:37:c8:3d:61:cc:3e:79:b4:07:fc:96:36:
a5:f1:a2:35:c7:6a:fd:81:0a:e5:00:a1:c3:b4:19:fe:06:de:
72:99:0f:8a:47:b0:41:d4:ba:94:3b:7f:1d:63:1d:6b:39:fe:
66:c3:63:ef:57:e2:e3:2b:b9:a0:1f:d4:fa:40:7f:bb:fe:98:
be:78:f3:b7:48:3a:72:27:c4:dd:d4:f9:5e:2c:eb:b0:b0:be:
cc:f8:ad:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8XJhpQzZg/xQW2RfGl4CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTc4OGVkYTZjODBlZjkwMmI5NWQ2MDM4NzAwYTVkYTdk
NmQwY2MwHhcNMjUwODIzMDgwMDI3WhcNMjUwODI0MDgwMDI3WjAzMTEwLwYDVQQD
Eyg0NmQ0NzBiMzZhOTJjZThhMWQ3ZTQ3NzY5ZmYzMWNhMjhjMjQ0ZGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL7bkl0Z5/x11Kw8ZJaOYnpX6omz
VYteZTE9lQkfX54u0xQQJihiJmNrs3xcZ8EnIVgxqm62JlIi1XDonEWhpUiCCBb4
z2PAJ3SPNMPhbCK3rR4eXbZ1SGHhEN8oXA+u2JBED4fG/d0ZNqbpmH+1o2t5h3F5
S/mMdC4Vbv/gQomabNYrBFDhEqkTXlFmqebniEC1kYW5UkhCsCk0Idv+skDP1t2V
saoh98qMLFLjQsLhxyrkWPUB2m+WXRxtuCV3bg2sWUTVcxxkJ1p0iF1d7UNKZmza
oCIOcUMKHLSXbW66+tYl/hF8V87+znW9zEgjHKm7Jaw8wyGqAtf8DaBBzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbUcLNqks6KHX5Hdp/zHKKMJE2qMB8GA1UdIwQY
MBaAFCqniO2myA75ArldYDhwCl2n1tDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FlSTdhYklEdmtDdVYxZ09IQUtYYWZXME13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hNjU3NGQtZmI2ZC00N2RiLWJhMGMt
ZjE2ZjFlZTRmODkxLzEvS3FlSTdhYklEdmtDdVYxZ09IQUtYYWZXME13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9hNjU3NGQtZmI2ZC00N2RiLWJhMGMtZjE2ZjFlZTRmODkx
LzEvS3FlSTdhYklEdmtDdVYxZ09IQUtYYWZXME13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+Q47yHp
Y/92fmtECIvc0PIHJFMEPDizRXydBjCinF5+sg1T3h1Usp92EUaF+c4UW7rMpA0p
n9MzcDoEWNuk6GBPrhWJBPIZnXtztH4g4FBS5h8zP06i4rZBtgczhIdhlTNg522p
4oP8MeguWmb0m1sLPEwFA4buTIo8qo/xry+3CskeppidjT0atzvMeYPSK2AVq/IE
qtmOQq3yINF0/U77YuBF73k2N8g9Ycw+ebQH/JY2pfGiNcdq/YEK5QChw7QZ/gbe
cpkPikewQdS6lDt/HWMdazn+ZsNj71fi4yu5oB/U+kB/u/6Yvnjzt0g6cifE3dT5
XizrsLC+zPitWQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:03:24 2025 by rpki-client