Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json)
Hash identifier: IdU2K3gyC7q4zVaVb8/zU1eJd1d1fKYiMX3PhJmvizo=
Subject key identifier: 1A:EA:C3:CA:3A:4B:4A:A2:11:A9:DB:93:58:68:DD:BD:34:7D:7D:45
Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Certificate serial: 0198D583628FBCEE3885281ADD7484C424D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
Manifest number: 0747
Signing time: Sat 23 Aug 2025 06:00:14 +0000
Manifest this update: Sat 23 Aug 2025 06:00:14 +0000
Manifest next update: Sun 24 Aug 2025 06:00:14 +0000
Files and hashes: 1: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: 3ldvtIJTn+efPdT1y2qlSNk9axWfB17JaFTsftskwnc=)
2: cp4lFEUau2mk3J8khN5tWSq6-qA.roa (hash: D4rIJ31bhlRPk+jgypW/dYYRdpcgCFWhZ+etBWhqECE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:62:8f:bc:ee:38:85:28:1a:dd:74:84:c4:24:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Validity
Not Before: Aug 23 06:00:14 2025 GMT
Not After : Aug 24 06:00:14 2025 GMT
Subject: CN=1aeac3ca3a4b4aa211a9db935868ddbd347d7d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:91:21:f0:8e:a5:21:d0:21:ea:3c:ef:99:53:
17:f1:76:20:e1:39:65:4a:52:d8:d6:15:5b:59:ca:
96:43:c3:e6:78:76:bc:94:8e:5a:4c:8f:ad:d3:f2:
17:b4:49:c7:40:7d:38:34:d8:a8:72:a0:17:a2:c2:
77:a2:7f:6b:d2:d3:a5:e6:ed:b1:27:95:48:8f:5c:
ac:9a:a4:b0:f7:0e:0b:7b:32:39:5e:5f:2b:c6:2d:
a0:36:10:25:69:8c:ce:ab:3c:f4:89:27:cd:a5:b0:
71:a5:39:9f:7a:dd:25:f8:7e:09:c9:2f:5d:54:dd:
f0:97:a5:8f:1f:db:dd:39:c4:ee:6b:22:57:70:b5:
4c:cf:68:5b:24:fc:d6:65:b1:b8:f0:94:9a:89:f0:
6b:b9:49:0e:6b:d4:2e:b2:b4:16:6a:25:4a:71:db:
8b:10:e7:ab:a7:c1:50:62:27:45:20:c6:3b:e1:3d:
a8:0c:d1:33:cc:e0:fd:c0:bc:4c:c0:a9:37:3f:a6:
ab:cb:d2:9a:85:1a:aa:a3:6e:5b:21:7c:39:0b:f0:
2b:19:10:d3:45:e9:44:93:11:80:ce:89:0f:a3:ba:
5d:00:76:73:c3:bd:cd:5b:fc:2e:62:17:31:78:cb:
be:91:d4:1f:86:29:dc:71:95:c8:5d:07:a1:95:53:
29:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EA:C3:CA:3A:4B:4A:A2:11:A9:DB:93:58:68:DD:BD:34:7D:7D:45
X509v3 Authority Key Identifier:
keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0a:56:ca:ab:67:be:3f:ac:da:94:a0:6c:a4:56:7a:42:c0:
3c:b9:11:2a:55:4c:24:66:cc:92:55:1d:b4:8e:34:ff:87:4c:
22:99:a0:ad:74:41:c2:4d:1b:d1:15:b8:51:86:55:15:0d:d4:
6a:eb:4e:39:97:e3:1d:47:a3:17:7e:8a:bf:a1:d2:3e:d6:35:
20:4c:7f:f2:2a:f9:fe:6f:be:c2:fa:f2:fc:df:c4:9e:d9:f9:
3c:77:93:84:d9:d8:e9:f2:bc:da:fe:9f:c4:1b:80:fb:b8:85:
ef:9c:af:2f:36:b2:f1:d4:5c:23:5f:ce:93:f0:c9:ca:09:a6:
1b:1e:15:91:fe:4b:59:76:99:51:54:8b:6e:52:72:92:24:12:
67:d9:f6:e2:64:de:2b:1f:71:cd:88:88:7a:ab:7b:76:51:c9:
12:49:fc:02:ea:54:95:3f:a5:1f:e9:94:62:7c:7e:2c:2c:05:
84:df:d1:1d:98:82:60:0a:27:e5:90:8e:c1:20:ad:77:5f:a3:
72:f9:34:65:b5:ee:95:15:de:cd:71:09:6b:91:bd:0f:3d:7e:
e2:a4:39:5b:b0:7b:09:83:c6:22:f5:c7:59:f5:b9:47:e7:b9:
ca:8c:5e:df:37:1c:e5:d3:03:e2:a6:5e:a8:21:d7:40:37:cd:
9e:03:dc:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg2KPvO44hSga3XSExCTWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZDU5OTk0ZjJhZjc5NTk5Y2ZiM2ZmMmUzZTk4ZTUxOGY5
MTRmYmEwHhcNMjUwODIzMDYwMDE0WhcNMjUwODI0MDYwMDE0WjAzMTEwLwYDVQQD
EygxYWVhYzNjYTNhNGI0YWEyMTFhOWRiOTM1ODY4ZGRiZDM0N2Q3ZDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZEh8I6lIdAh6jzvmVMX8XYg4Tll
SlLY1hVbWcqWQ8PmeHa8lI5aTI+t0/IXtEnHQH04NNiocqAXosJ3on9r0tOl5u2x
J5VIj1ysmqSw9w4LezI5Xl8rxi2gNhAlaYzOqzz0iSfNpbBxpTmfet0l+H4JyS9d
VN3wl6WPH9vdOcTuayJXcLVMz2hbJPzWZbG48JSaifBruUkOa9QusrQWaiVKcduL
EOerp8FQYidFIMY74T2oDNEzzOD9wLxMwKk3P6ary9KahRqqo25bIXw5C/ArGRDT
RelEkxGAzokPo7pdAHZzw73NW/wuYhcxeMu+kdQfhinccZXIXQehlVMp1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrqw8o6S0qiEanbk1ho3b00fX1FMB8GA1UdIwQY
MBaAFCrVmZTyr3lZnPs/8uPpjlGPkU+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yYmNmMzEtNjI3Ny00ZTg3LWEwMDct
YmJlMmM0ZDg4YzJmLzEvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yYmNmMzEtNjI3Ny00ZTg3LWEwMDctYmJlMmM0ZDg4YzJm
LzEvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgpWyqtn
vj+s2pSgbKRWekLAPLkRKlVMJGbMklUdtI40/4dMIpmgrXRBwk0b0RW4UYZVFQ3U
autOOZfjHUejF36Kv6HSPtY1IEx/8ir5/m++wvry/N/Entn5PHeThNnY6fK82v6f
xBuA+7iF75yvLzay8dRcI1/Ok/DJygmmGx4Vkf5LWXaZUVSLblJykiQSZ9n24mTe
Kx9xzYiIeqt7dlHJEkn8AupUlT+lH+mUYnx+LCwFhN/RHZiCYAon5ZCOwSCtd1+j
cvk0ZbXulRXezXEJa5G9Dz1+4qQ5W7B7CYPGIvXHWfW5R+e5yoxe3zcc5dMD4qZe
qCHXQDfNngPcBQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:45 2025 by rpki-client