Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
File: KR2Dw_S4d899CEy1MMSp42_PetA.mft (raw, json)
Hash identifier: KxropCd4vcJMAjGQ88IAE0vTCBYcl54/HO6zWUUE6XY=
Subject key identifier: AB:A6:AE:EE:91:42:BE:6B:EE:E6:83:1C:88:C4:F8:5B:43:6E:2D:CD
Authority key identifier: 29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
Certificate issuer: /CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Certificate serial: 0198D6CD8FD36C119111C22E31A1B1C1F223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
Manifest number: 1358
Signing time: Sat 23 Aug 2025 12:00:52 +0000
Manifest this update: Sat 23 Aug 2025 12:00:52 +0000
Manifest next update: Sun 24 Aug 2025 12:00:52 +0000
Files and hashes: 1: KR2Dw_S4d899CEy1MMSp42_PetA.crl (hash: +fJgGN5ZE7osPnnbHdtW2Gpm+BKCXMOxBFa7JkkfMOo=)
2: UtENKEhEm8aI0Ou7bKpM_GJZgfw.roa (hash: uJUKEvtya4FeDlxGJPwjMFWIfPRKUsKW7PNJHjdDHAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:8f:d3:6c:11:91:11:c2:2e:31:a1:b1:c1:f2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Validity
Not Before: Aug 23 12:00:52 2025 GMT
Not After : Aug 24 12:00:52 2025 GMT
Subject: CN=aba6aeee9142be6beee6831c88c4f85b436e2dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d7:1d:54:4e:12:df:dc:44:b8:cf:9d:47:e4:
e5:54:0f:8c:3f:e7:f7:29:ce:c4:ee:69:16:45:7e:
93:ae:33:49:4f:6a:e8:d9:96:64:24:b0:83:97:59:
75:b4:ba:02:61:de:32:b2:ef:5f:1f:66:26:83:24:
f9:34:b2:8e:3a:e8:18:db:2e:15:9a:e1:9c:17:2b:
e2:b0:cf:08:fc:be:e8:37:d3:92:b2:3f:a9:85:9d:
66:fc:95:14:bf:18:01:18:e7:c0:dc:0f:a6:37:8a:
31:b0:e3:30:d5:d4:6b:ae:af:29:43:dc:2d:8d:dd:
10:a1:71:9f:51:de:0f:a5:0e:6e:c8:ba:1f:89:81:
1d:0e:16:13:33:65:58:fa:70:8a:52:10:e2:04:f2:
0d:70:98:84:e4:81:a3:33:b9:ac:4d:96:1a:97:4b:
8b:8a:6c:f5:8d:41:52:76:83:c0:72:24:49:e8:6d:
ea:82:20:29:0e:3a:ed:44:df:4c:cb:52:8a:f1:f5:
08:f3:57:97:00:ae:7b:4c:5c:a4:a0:45:3e:8a:d3:
8a:69:6b:08:92:7b:5c:48:bd:31:a3:80:d9:4f:6f:
cd:b4:2f:87:40:24:5c:d1:14:3b:d2:bd:50:ac:63:
18:cd:2b:35:d6:4c:65:bc:4d:4e:cc:d7:0b:1c:7b:
ab:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A6:AE:EE:91:42:BE:6B:EE:E6:83:1C:88:C4:F8:5B:43:6E:2D:CD
X509v3 Authority Key Identifier:
keyid:29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f2:a9:d7:16:4e:f6:3f:5d:3f:b2:c5:5a:aa:2e:03:23:41:
0f:ea:df:92:82:82:fd:6d:f0:75:61:b4:24:ed:fd:b6:14:8d:
93:25:6f:94:fb:ae:d2:09:31:81:37:7d:bb:69:c0:30:74:7f:
cd:49:17:4b:43:19:65:0c:32:2a:a8:95:9f:5f:fa:4e:2a:43:
02:d9:c3:83:a0:5d:bd:64:39:2e:8a:9f:9a:d9:bb:a6:83:1b:
59:c1:31:ae:b1:44:d9:1a:75:67:6d:ed:a8:2c:40:99:e7:93:
2b:e6:65:f9:82:fe:b8:f3:43:65:00:0b:11:be:44:d5:b1:c9:
b2:8d:de:92:92:b7:22:6f:45:38:3d:3a:5a:fa:fe:97:22:7b:
2b:86:3b:21:5f:5b:fc:11:9e:48:b6:ac:0d:a9:9b:d0:da:d3:
eb:4e:4c:14:b7:c9:ee:8a:ef:d3:11:1a:21:12:c8:8c:70:04:
a3:5a:d8:1c:fc:f1:3f:f0:54:f9:20:a6:c2:4b:6f:5d:78:38:
88:e5:53:c4:b9:84:48:e9:de:f4:dd:06:e4:ad:44:96:84:cf:
d6:71:a1:0b:29:22:9e:88:ae:0e:04:68:a0:6e:57:92:bc:b4:
58:09:a0:02:1c:6d:be:c7:8c:1c:f3:99:15:23:78:27:f8:f6:
24:20:63:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzY/TbBGREcIuMaGxwfIjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MWQ4M2MzZjRiODc3Y2Y3ZDA4NGNiNTMwYzRhOWUzNmZj
ZjdhZDAwHhcNMjUwODIzMTIwMDUyWhcNMjUwODI0MTIwMDUyWjAzMTEwLwYDVQQD
EyhhYmE2YWVlZTkxNDJiZTZiZWVlNjgzMWM4OGM0Zjg1YjQzNmUyZGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNcdVE4S39xEuM+dR+TlVA+MP+f3
Kc7E7mkWRX6TrjNJT2ro2ZZkJLCDl1l1tLoCYd4ysu9fH2YmgyT5NLKOOugY2y4V
muGcFyvisM8I/L7oN9OSsj+phZ1m/JUUvxgBGOfA3A+mN4oxsOMw1dRrrq8pQ9wt
jd0QoXGfUd4PpQ5uyLofiYEdDhYTM2VY+nCKUhDiBPINcJiE5IGjM7msTZYal0uL
imz1jUFSdoPAciRJ6G3qgiApDjrtRN9My1KK8fUI81eXAK57TFykoEU+itOKaWsI
kntcSL0xo4DZT2/NtC+HQCRc0RQ70r1QrGMYzSs11kxlvE1OzNcLHHurOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKumru6RQr5r7uaDHIjE+FtDbi3NMB8GA1UdIwQY
MBaAFCkdg8P0uHfPfQhMtTDEqeNvz3rQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81OTQ1NjktNmYxOC00NjBhLWExOTYt
ZmZjZDQ3NzM0OWZjLzEvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS81OTQ1NjktNmYxOC00NjBhLWExOTYtZmZjZDQ3NzM0OWZj
LzEvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvKp1xZO
9j9dP7LFWqouAyNBD+rfkoKC/W3wdWG0JO39thSNkyVvlPuu0gkxgTd9u2nAMHR/
zUkXS0MZZQwyKqiVn1/6TipDAtnDg6BdvWQ5Loqfmtm7poMbWcExrrFE2Rp1Z23t
qCxAmeeTK+Zl+YL+uPNDZQALEb5E1bHJso3ekpK3Im9FOD06Wvr+lyJ7K4Y7IV9b
/BGeSLasDamb0NrT605MFLfJ7orv0xEaIRLIjHAEo1rYHPzxP/BU+SCmwktvXXg4
iOVTxLmESOne9N0G5K1EloTP1nGhCykinoiuDgRooG5Xkry0WAmgAhxtvseMHPOZ
FSN4J/j2JCBjkg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:23:03 2025 by rpki-client