Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
File: KovcnBJ_txjiQN-ydW9SAgNv49U.mft (raw, json)
Hash identifier: dqj2v83Lu34BXH0nGaGoFI7DSzurfY/dRyRpwG11Ipw=
Subject key identifier: 2C:0B:F3:E3:45:00:96:6F:6B:6E:AE:A5:7D:83:B7:F4:7E:8B:2F:57
Authority key identifier: 2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
Certificate issuer: /CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Certificate serial: 0198D6981645D3D0358A44CDC0E663F9C82B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 11:02:27 +0000
Manifest this update: Sat 23 Aug 2025 11:02:27 +0000
Manifest next update: Sun 24 Aug 2025 11:02:27 +0000
Files and hashes: 1: JA1Qmok16UVDdfZh6XKyNHXDBms.roa (hash: R2I0tDS2SffmNY3pvYLLZlvv4NZOrPOW0QqVh2PyubA=)
2: KovcnBJ_txjiQN-ydW9SAgNv49U.crl (hash: 3NUaAJkQnVcbZeqgj5v/w9IrsHxN4DfiH3c1Shfj/Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:16:45:d3:d0:35:8a:44:cd:c0:e6:63:f9:c8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Validity
Not Before: Aug 23 11:02:27 2025 GMT
Not After : Aug 24 11:02:27 2025 GMT
Subject: CN=2c0bf3e34500966f6b6eaea57d83b7f47e8b2f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8e:00:f4:db:7e:4c:15:f6:f3:6e:67:99:97:
b2:76:19:33:46:77:13:ae:f8:d2:96:77:84:e6:70:
00:95:1c:81:6d:ac:b3:b2:0a:ee:05:09:31:f5:5f:
45:ef:fd:b8:17:b3:51:0a:ec:29:36:64:85:ba:0a:
21:7a:61:75:84:7a:4a:f1:7e:48:f3:f8:b7:55:93:
30:59:ac:56:6d:eb:a8:0c:5e:18:eb:1d:26:5d:6d:
6c:0b:a6:ff:26:e3:19:cf:88:0b:a9:a1:23:55:1e:
a5:ba:2e:08:c2:36:88:d1:41:af:92:bd:35:5c:30:
78:7e:76:63:4b:19:4b:1e:eb:8b:4f:96:f6:a6:b4:
79:8f:d1:dd:57:95:6d:92:5b:c6:77:72:98:87:0a:
92:80:6c:ee:6a:dc:91:07:b4:64:2a:96:bb:24:8a:
4c:af:b7:3f:de:6a:f2:28:e9:fb:74:09:a5:60:63:
49:4a:bf:89:c9:fb:e5:9f:a4:92:97:1f:c7:80:4c:
47:4d:ec:fd:f7:7b:ba:50:e8:b8:a8:4b:8a:94:17:
58:02:c1:5b:eb:fe:6e:5e:ac:95:e7:e1:d4:40:98:
19:7c:de:bd:1d:b3:27:27:3a:0c:c9:3d:a6:92:2a:
e0:27:77:bf:59:cd:2c:85:da:6b:6a:dc:40:d3:0c:
cb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0B:F3:E3:45:00:96:6F:6B:6E:AE:A5:7D:83:B7:F4:7E:8B:2F:57
X509v3 Authority Key Identifier:
keyid:2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1a:58:e9:ed:6f:12:37:84:ee:c9:6b:1f:90:24:c3:fd:43:
28:09:aa:83:43:7d:c0:47:0a:4e:8c:df:43:6a:ae:15:cd:1d:
94:57:2b:cf:ff:86:53:91:35:2f:ac:db:82:31:e2:80:bf:3b:
e8:bc:f5:35:57:aa:2c:46:2f:4b:b8:83:30:aa:45:1b:36:5a:
40:f8:46:51:49:43:90:3d:c6:ae:19:16:bb:8f:5e:bf:67:f6:
96:65:89:06:82:1f:38:5e:28:18:03:de:b2:c5:e7:50:19:0e:
fc:8e:2b:c1:aa:ff:14:fb:b8:6c:e5:0e:6b:fc:d6:06:9d:03:
34:67:59:9c:4d:40:94:a2:29:a5:ac:ae:d1:99:8a:47:4a:f1:
91:c9:c4:11:65:19:34:0e:6b:92:a2:c9:5b:d8:9f:78:ef:3b:
80:01:ab:96:21:7b:df:a0:f9:a9:ea:96:55:cb:fa:d9:ad:39:
87:fa:92:4c:13:03:65:b1:d9:51:ef:47:a3:1f:8d:a4:0d:fa:
13:ec:18:ef:44:cf:f3:b7:b4:7e:2a:55:e2:2f:a7:2a:76:61:
c4:10:e7:4a:66:26:ed:73:bc:33:03:08:88:92:e8:32:3a:7b:
41:ec:73:67:52:61:a1:ba:1f:21:69:5b:6f:f9:97:db:67:7b:
60:e5:21:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmBZF09A1ikTNwOZj+cgrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOGJkYzljMTI3ZmI3MThlMjQwZGZiMjc1NmY1MjAyMDM2
ZmUzZDUwHhcNMjUwODIzMTEwMjI3WhcNMjUwODI0MTEwMjI3WjAzMTEwLwYDVQQD
EygyYzBiZjNlMzQ1MDA5NjZmNmI2ZWFlYTU3ZDgzYjdmNDdlOGIyZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0I4A9Nt+TBX2825nmZeydhkzRncT
rvjSlneE5nAAlRyBbayzsgruBQkx9V9F7/24F7NRCuwpNmSFugohemF1hHpK8X5I
8/i3VZMwWaxWbeuoDF4Y6x0mXW1sC6b/JuMZz4gLqaEjVR6lui4IwjaI0UGvkr01
XDB4fnZjSxlLHuuLT5b2prR5j9HdV5VtklvGd3KYhwqSgGzuatyRB7RkKpa7JIpM
r7c/3mryKOn7dAmlYGNJSr+Jyfvln6SSlx/HgExHTez993u6UOi4qEuKlBdYAsFb
6/5uXqyV5+HUQJgZfN69HbMnJzoMyT2mkirgJ3e/Wc0shdpratxA0wzLuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwL8+NFAJZva26upX2Dt/R+iy9XMB8GA1UdIwQY
MBaAFCqL3JwSf7cY4kDfsnVvUgIDb+PVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS292Y25CSl90eGppUU4teWRXOVNBZ052NDlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMjJjZGUtNWQ3NS00ZjUwLWE5NDUt
OGY1OWEzOTEwYmRkLzEvS292Y25CSl90eGppUU4teWRXOVNBZ052NDlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8zMjJjZGUtNWQ3NS00ZjUwLWE5NDUtOGY1OWEzOTEwYmRk
LzEvS292Y25CSl90eGppUU4teWRXOVNBZ052NDlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARpY6e1v
EjeE7slrH5Akw/1DKAmqg0N9wEcKTozfQ2quFc0dlFcrz/+GU5E1L6zbgjHigL87
6Lz1NVeqLEYvS7iDMKpFGzZaQPhGUUlDkD3GrhkWu49ev2f2lmWJBoIfOF4oGAPe
ssXnUBkO/I4rwar/FPu4bOUOa/zWBp0DNGdZnE1AlKIppayu0ZmKR0rxkcnEEWUZ
NA5rkqLJW9ifeO87gAGrliF736D5qeqWVcv62a05h/qSTBMDZbHZUe9Hox+NpA36
E+wY70TP87e0fipV4i+nKnZhxBDnSmYm7XO8MwMIiJLoMjp7QexzZ1JhobofIWlb
b/mX22d7YOUhFA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:10:44 2025 by rpki-client