Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
File: K1ATo25hvsQKEqDkHEjxkYYwca8.mft (raw, json)
Hash identifier: MBMrL7n98xGQnVJExo4MQ3kAG6FYlUJRiDQSLeOi2m0=
Subject key identifier: A9:8B:6D:84:1C:92:F0:B0:75:37:EA:ED:74:3D:00:49:6C:69:1C:5D
Authority key identifier: 2B:50:13:A3:6E:61:BE:C4:0A:12:A0:E4:1C:48:F1:91:86:30:71:AF
Certificate issuer: /CN=2b5013a36e61bec40a12a0e41c48f191863071af
Certificate serial: 0198D65F68F32BFA0FF9062BDD2493DB2234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:00:33 +0000
Manifest this update: Sat 23 Aug 2025 10:00:33 +0000
Manifest next update: Sun 24 Aug 2025 10:00:33 +0000
Files and hashes: 1: K1ATo25hvsQKEqDkHEjxkYYwca8.crl (hash: Z/w6b4u172q7xBrsEdzH4QDZGYkOy1oYPg+Ih5yYx44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:68:f3:2b:fa:0f:f9:06:2b:dd:24:93:db:22:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5013a36e61bec40a12a0e41c48f191863071af
Validity
Not Before: Aug 23 10:00:33 2025 GMT
Not After : Aug 24 10:00:33 2025 GMT
Subject: CN=a98b6d841c92f0b07537eaed743d00496c691c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d4:7a:24:6c:8c:af:20:65:88:5c:a7:3a:d1:
90:8b:54:61:26:ff:13:b1:cc:13:00:c6:2e:bd:80:
1a:e7:f8:80:c3:02:1f:45:fd:f1:55:66:ab:53:8e:
db:49:2b:9a:be:23:2c:9b:7d:32:87:5c:6c:41:55:
aa:af:ca:09:f3:f2:24:f2:2e:5f:4e:c2:0d:8f:8d:
fb:df:29:e1:01:0f:b3:aa:05:46:0f:8b:15:94:e7:
10:a2:96:4b:81:3a:5b:3a:4b:3b:ad:24:10:df:4f:
0c:98:dc:cb:81:27:32:ac:38:5d:40:4b:fc:4c:23:
32:74:45:c2:1e:e2:73:a1:18:e3:14:78:be:37:c0:
02:f8:58:99:a8:94:24:dd:99:5e:0e:84:96:5b:6d:
e7:47:78:59:49:e3:94:3f:10:78:e6:f8:4a:b6:3b:
ea:aa:fc:7a:bb:f4:5d:19:00:b8:8e:dc:70:d4:7d:
4e:7c:6c:12:18:bf:a5:91:7d:a5:6e:0d:82:1f:39:
72:f2:37:45:9f:91:32:67:21:90:27:25:00:78:07:
0d:bd:4c:97:d0:5e:8c:97:f6:91:4f:d4:ac:89:d2:
8d:df:22:36:e4:87:f8:9d:18:10:7a:9a:90:d4:23:
dd:37:90:36:58:72:74:5b:ce:b7:dc:57:25:3a:4d:
ee:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8B:6D:84:1C:92:F0:B0:75:37:EA:ED:74:3D:00:49:6C:69:1C:5D
X509v3 Authority Key Identifier:
keyid:2B:50:13:A3:6E:61:BE:C4:0A:12:A0:E4:1C:48:F1:91:86:30:71:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f7:91:a6:d9:15:cb:d2:56:a2:df:b6:60:a5:ad:71:59:7a:
1a:10:72:89:11:ac:c9:fd:d9:76:db:14:3c:a4:8e:a4:79:b1:
b1:a1:a1:3d:21:55:e6:63:fb:c2:b1:3a:59:ad:83:d4:88:d6:
c9:db:34:e2:a3:79:60:c6:87:3e:5f:8a:85:ba:ee:5c:c7:ab:
e7:1f:0c:15:3c:00:c5:bc:d9:9a:f1:64:9c:e8:91:27:c8:72:
36:0e:d6:9f:f6:3e:6f:a5:ea:4c:71:5c:73:95:90:37:59:84:
1c:21:46:76:25:8b:cd:ff:da:82:ef:bd:74:d3:d3:b6:f5:9d:
3f:22:a0:18:fa:6b:b9:c5:eb:94:ff:c1:d7:d3:aa:f2:4c:d7:
8c:fd:f4:12:9e:a6:ef:eb:28:e8:aa:38:31:fe:53:7f:d3:98:
a1:73:b1:5c:10:5c:7c:23:64:1e:fe:bb:2d:37:59:19:d7:98:
b9:c8:86:2d:b8:5f:9d:88:e7:a6:a0:53:e2:44:fd:9b:ec:22:
7a:b8:49:59:7b:a9:14:87:00:a4:50:1e:7d:a0:4a:86:d9:8c:
ba:1c:0c:a8:56:60:a3:58:41:6a:0a:d5:3b:42:d9:b3:e1:d7:
7c:a7:02:77:7c:74:fc:19:ce:da:76:e5:d0:a5:79:06:7f:df:
8c:41:34:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX2jzK/oP+QYr3SST2yI0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNTAxM2EzNmU2MWJlYzQwYTEyYTBlNDFjNDhmMTkxODYz
MDcxYWYwHhcNMjUwODIzMTAwMDMzWhcNMjUwODI0MTAwMDMzWjAzMTEwLwYDVQQD
EyhhOThiNmQ4NDFjOTJmMGIwNzUzN2VhZWQ3NDNkMDA0OTZjNjkxYzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dR6JGyMryBliFynOtGQi1RhJv8T
scwTAMYuvYAa5/iAwwIfRf3xVWarU47bSSuaviMsm30yh1xsQVWqr8oJ8/Ik8i5f
TsINj4373ynhAQ+zqgVGD4sVlOcQopZLgTpbOks7rSQQ308MmNzLgScyrDhdQEv8
TCMydEXCHuJzoRjjFHi+N8AC+FiZqJQk3ZleDoSWW23nR3hZSeOUPxB45vhKtjvq
qvx6u/RdGQC4jtxw1H1OfGwSGL+lkX2lbg2CHzly8jdFn5EyZyGQJyUAeAcNvUyX
0F6Ml/aRT9SsidKN3yI25If4nRgQepqQ1CPdN5A2WHJ0W8633FclOk3uCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmLbYQckvCwdTfq7XQ9AElsaRxdMB8GA1UdIwQY
MBaAFCtQE6NuYb7EChKg5BxI8ZGGMHGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzFBVG8yNWh2c1FLRXFEa0hFanhrWVl3Y2E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8xNmFkOGYtMWYxMy00NjlhLWE3ZjUt
ZjQzMmU5ZDhjNGQ3LzEvSzFBVG8yNWh2c1FLRXFEa0hFanhrWVl3Y2E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8xNmFkOGYtMWYxMy00NjlhLWE3ZjUtZjQzMmU5ZDhjNGQ3
LzEvSzFBVG8yNWh2c1FLRXFEa0hFanhrWVl3Y2E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfeRptkV
y9JWot+2YKWtcVl6GhByiRGsyf3ZdtsUPKSOpHmxsaGhPSFV5mP7wrE6Wa2D1IjW
yds04qN5YMaHPl+KhbruXMer5x8MFTwAxbzZmvFknOiRJ8hyNg7Wn/Y+b6XqTHFc
c5WQN1mEHCFGdiWLzf/agu+9dNPTtvWdPyKgGPprucXrlP/B19Oq8kzXjP30Ep6m
7+so6Ko4Mf5Tf9OYoXOxXBBcfCNkHv67LTdZGdeYuciGLbhfnYjnpqBT4kT9m+wi
erhJWXupFIcApFAefaBKhtmMuhwMqFZgo1hBagrVO0LZs+HXfKcCd3x0/BnO2nbl
0KV5Bn/fjEE0pA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:09:56 2025 by rpki-client