Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
File: KtNUu6DgTX5arSd5J4n8Jt3W31E.mft (raw, json)
Hash identifier: IUrNOF6v2MccsvE5KVFbeUYJ4NXespdD/8U/I7iP7mY=
Subject key identifier: 68:07:7D:01:C3:8A:B5:FB:F4:12:23:AF:73:3A:09:F1:70:0B:8B:02
Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
Certificate issuer: /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Certificate serial: 0198D6612071FA19784A52FC33705EA5491C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
Manifest number: 106A
Signing time: Sat 23 Aug 2025 10:02:26 +0000
Manifest this update: Sat 23 Aug 2025 10:02:26 +0000
Manifest next update: Sun 24 Aug 2025 10:02:26 +0000
Files and hashes: 1: KtNUu6DgTX5arSd5J4n8Jt3W31E.crl (hash: vbi9l1jVdmOqOrH4Z6aMd8IVRnqE2CNZbh0+oVJT/Vo=)
2: ybOe8ZqyigG4FWAsCMbOcL0c5L0.roa (hash: eOMsv1LZ5Dq7SSni9aMR0p8V/nr5wD1XrXlWWtuivxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:20:71:fa:19:78:4a:52:fc:33:70:5e:a5:49:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Validity
Not Before: Aug 23 10:02:26 2025 GMT
Not After : Aug 24 10:02:26 2025 GMT
Subject: CN=68077d01c38ab5fbf41223af733a09f1700b8b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8b:f5:53:db:f6:e9:7b:73:9d:9c:d1:4b:08:
82:2d:10:52:2b:e5:3c:39:f1:d2:fe:37:11:34:4b:
18:de:d6:61:00:fb:ef:d2:41:13:19:af:28:f2:ae:
c9:8b:cc:b6:ed:3f:3b:f1:4a:75:4b:d4:4d:c9:c8:
a6:98:38:84:fb:8c:3f:b9:e4:ee:3e:66:58:21:8f:
e2:a4:49:55:2e:d7:a4:9c:95:fd:cc:b9:43:3c:60:
42:16:1b:6b:e9:58:dc:8d:39:93:66:49:bd:76:bd:
5c:c9:0d:aa:b1:15:ed:c8:2f:68:a8:03:38:eb:40:
68:09:2c:6b:ff:51:ba:fb:69:00:c7:b2:8a:1d:da:
c1:d6:4c:11:59:30:98:9b:a3:30:13:45:a5:2c:02:
b0:0c:9d:b5:65:59:2e:e9:b8:bd:7f:4b:98:00:9c:
46:49:fb:fc:43:ec:fa:cb:8d:f5:32:17:e8:96:b7:
82:4a:02:76:c9:81:81:90:57:99:b4:9e:22:d7:2f:
97:a4:50:0f:bd:54:ab:8b:70:4e:d0:d7:24:57:bc:
c9:91:a1:76:37:84:c9:9b:11:e7:8b:74:b0:32:0c:
98:a0:f2:b0:37:ac:96:c4:51:fc:35:b2:47:a4:02:
b5:72:60:26:5a:c4:bf:8e:95:ed:7a:58:42:4e:76:
a9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:07:7D:01:C3:8A:B5:FB:F4:12:23:AF:73:3A:09:F1:70:0B:8B:02
X509v3 Authority Key Identifier:
keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3f:c6:4c:03:72:4b:a5:f4:04:f3:98:65:70:b8:5e:82:5d:
b1:f5:3c:a1:79:b5:e6:78:c2:96:f2:a9:25:87:17:ab:e3:0a:
ed:27:c1:e8:45:5e:6d:c0:35:ff:e1:78:c4:75:ac:64:e7:b0:
63:1b:18:8b:ba:42:24:3a:c8:3b:a4:1a:71:41:6b:41:c7:ed:
e5:0f:d1:21:d2:f4:22:14:ba:c9:db:c8:34:19:f7:3d:e1:7f:
5b:7d:3f:dc:d1:3f:42:e9:a9:56:9e:6c:59:60:75:0c:cd:44:
e3:3a:08:7c:24:50:eb:b4:2f:7f:3a:9f:a6:70:e2:05:68:42:
78:40:39:d0:db:4e:e4:03:66:b6:e9:40:a4:9b:0b:24:e8:b3:
d0:a6:2f:f7:65:d9:8f:7b:8f:d5:67:81:03:54:52:29:b2:f4:
dc:87:16:0c:2d:3e:b5:27:b4:f5:96:53:7e:10:72:69:18:cf:
82:30:c7:6d:62:9c:fa:7a:7a:14:52:46:e8:a9:07:e9:e1:75:
49:48:e3:60:bd:9e:46:ed:f4:8b:10:f3:71:09:8a:36:59:2f:
56:77:6c:dc:fc:c6:00:26:20:32:64:cc:81:e3:ad:7d:56:e8:
22:e2:d1:fc:f6:0a:17:e0:9d:17:5c:98:dc:a6:78:c9:39:de:
a5:2c:94:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYSBx+hl4SlL8M3BepUkcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZDM1NGJiYTBlMDRkN2U1YWFkMjc3OTI3ODlmYzI2ZGRk
NmRmNTEwHhcNMjUwODIzMTAwMjI2WhcNMjUwODI0MTAwMjI2WjAzMTEwLwYDVQQD
Eyg2ODA3N2QwMWMzOGFiNWZiZjQxMjIzYWY3MzNhMDlmMTcwMGI4YjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4v1U9v26XtznZzRSwiCLRBSK+U8
OfHS/jcRNEsY3tZhAPvv0kETGa8o8q7Ji8y27T878Up1S9RNycimmDiE+4w/ueTu
PmZYIY/ipElVLteknJX9zLlDPGBCFhtr6VjcjTmTZkm9dr1cyQ2qsRXtyC9oqAM4
60BoCSxr/1G6+2kAx7KKHdrB1kwRWTCYm6MwE0WlLAKwDJ21ZVku6bi9f0uYAJxG
Sfv8Q+z6y431MhfolreCSgJ2yYGBkFeZtJ4i1y+XpFAPvVSri3BO0NckV7zJkaF2
N4TJmxHni3SwMgyYoPKwN6yWxFH8NbJHpAK1cmAmWsS/jpXtelhCTnapPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgHfQHDirX79BIjr3M6CfFwC4sCMB8GA1UdIwQY
MBaAFCrTVLug4E1+Wq0neSeJ/Cbd1t9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3ROVXU2RGdUWDVhclNkNUo0bjhKdDNXMzFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS83OTlmMGQtYTRmMS00YTViLThjYzAt
M2E3MDM3ODliMDNiLzEvS3ROVXU2RGdUWDVhclNkNUo0bjhKdDNXMzFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS83OTlmMGQtYTRmMS00YTViLThjYzAtM2E3MDM3ODliMDNi
LzEvS3ROVXU2RGdUWDVhclNkNUo0bjhKdDNXMzFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWD/GTANy
S6X0BPOYZXC4XoJdsfU8oXm15njClvKpJYcXq+MK7SfB6EVebcA1/+F4xHWsZOew
YxsYi7pCJDrIO6QacUFrQcft5Q/RIdL0IhS6ydvINBn3PeF/W30/3NE/QumpVp5s
WWB1DM1E4zoIfCRQ67QvfzqfpnDiBWhCeEA50NtO5ANmtulApJsLJOiz0KYv92XZ
j3uP1WeBA1RSKbL03IcWDC0+tSe09ZZTfhByaRjPgjDHbWKc+np6FFJG6KkH6eF1
SUjjYL2eRu30ixDzcQmKNlkvVnds3PzGACYgMmTMgeOtfVboIuLR/PYKF+CdF1yY
3KZ4yTnepSyUCg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:00:23 2025 by rpki-client