Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
File: K0lf5W80diAmqUA18yDwqQt6JWY.mft (raw, json)
Hash identifier: ORPZ5brjl+zVuqIuDrgtm/qeyVkNht52WJ4XMTlaDVM=
Subject key identifier: 2F:03:BF:BD:43:2D:38:43:3B:1F:01:43:1F:B4:59:27:ED:8C:BE:77
Authority key identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
Certificate issuer: /CN=2b495fe56f34762026a94035f320f0a90b7a2566
Certificate serial: 0198D5BBE82CB0E58ACE5D9127B15C7ADE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 07:01:58 +0000
Manifest this update: Sat 23 Aug 2025 07:01:58 +0000
Manifest next update: Sun 24 Aug 2025 07:01:58 +0000
Files and hashes: 1: K0lf5W80diAmqUA18yDwqQt6JWY.crl (hash: vkzMvfoIXi2U3tlq+k9VzSOoFlFmp/GYLPHZo6mXPX0=)
2: xWy_WK3zN7U168-WlDV1tLOFxms.roa (hash: 1F+oH+DvxsXdBv6L+suStKLkTpWpU6OO0n2cflrUK4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e8:2c:b0:e5:8a:ce:5d:91:27:b1:5c:7a:de:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b495fe56f34762026a94035f320f0a90b7a2566
Validity
Not Before: Aug 23 07:01:58 2025 GMT
Not After : Aug 24 07:01:58 2025 GMT
Subject: CN=2f03bfbd432d38433b1f01431fb45927ed8cbe77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:77:85:05:db:97:7c:34:d7:42:45:73:79:
0d:fd:eb:1a:b2:0a:fe:6e:40:88:20:f6:64:ce:68:
ef:59:d7:06:d7:da:ba:a0:39:32:eb:ba:fd:55:96:
68:b4:12:b6:e6:17:93:d9:53:f3:e3:11:1d:ad:e0:
f9:20:e0:2c:9a:ee:23:d3:e4:a9:99:67:cf:cd:36:
5b:29:1c:ab:5e:4d:cf:ac:87:aa:d1:04:33:60:76:
72:c9:54:fe:d7:6a:28:1d:0e:2b:a3:66:19:aa:5b:
68:41:8e:02:47:3f:97:0a:83:76:6a:58:c6:35:d3:
96:4b:94:84:97:3a:cf:bb:b5:b5:a2:53:1b:22:1b:
66:cc:78:77:4c:f6:93:c5:d4:99:00:34:ea:c9:c5:
8a:7a:f8:99:0c:ea:5f:c2:e3:71:84:2f:9f:4b:80:
69:be:50:de:d1:ba:38:06:0e:f6:53:79:b3:2c:de:
70:8c:80:5f:18:27:4f:26:8d:58:04:84:aa:c3:ea:
78:bb:ec:d5:ca:97:ed:b3:69:94:0f:eb:54:99:25:
c1:32:53:f4:e0:cc:7a:8d:eb:b4:1b:1c:68:4b:82:
97:94:72:33:55:53:b8:ca:02:e8:51:bf:f7:44:77:
cd:4b:6c:b9:ab:64:b7:eb:92:87:8c:80:48:30:6a:
0d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:03:BF:BD:43:2D:38:43:3B:1F:01:43:1F:B4:59:27:ED:8C:BE:77
X509v3 Authority Key Identifier:
keyid:2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c9:b3:88:06:73:6f:11:05:0d:e2:74:77:ca:01:0b:fe:c2:
10:bb:2c:02:e5:58:4f:56:44:9c:31:d7:2a:b6:d8:04:ee:a1:
3e:51:52:55:b7:0a:79:f5:7a:82:5c:7e:95:94:ad:64:bb:4b:
9f:46:9b:22:f1:99:d0:9e:8e:dc:54:48:60:dd:32:83:de:24:
21:41:ba:4f:ba:c0:b1:6a:0c:ad:dd:6f:15:84:d8:9b:58:a7:
a1:cc:b5:d3:6f:27:dc:f0:75:5e:d9:03:6a:97:9a:76:bc:dc:
60:e7:fd:ce:3a:02:7d:3d:07:57:79:5e:8a:a3:9a:73:a7:35:
79:22:bc:c3:54:b9:ef:e2:01:79:76:9f:c0:d4:29:52:87:19:
f7:81:4b:68:51:39:7a:94:a2:af:d5:75:29:1d:fb:7e:aa:4a:
8f:70:6e:cd:9d:36:90:38:28:b0:84:dd:15:4d:eb:20:83:ac:
3f:01:e9:23:de:53:d8:88:2a:e1:68:0a:21:ee:69:99:6e:11:
1b:1f:7a:61:e6:af:4d:0e:c9:a9:78:75:1c:f4:d5:b3:6f:ab:
bf:64:10:b5:0f:4e:e2:ad:3c:a1:7f:d2:b1:af:9d:57:48:60:
83:6a:9f:30:f4:8a:f5:87:e8:51:ac:b6:cb:98:9d:a9:62:78:
0b:45:77:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu+gssOWKzl2RJ7Fcet6cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNDk1ZmU1NmYzNDc2MjAyNmE5NDAzNWYzMjBmMGE5MGI3
YTI1NjYwHhcNMjUwODIzMDcwMTU4WhcNMjUwODI0MDcwMTU4WjAzMTEwLwYDVQQD
EygyZjAzYmZiZDQzMmQzODQzM2IxZjAxNDMxZmI0NTkyN2VkOGNiZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSh3hQXbl3w010JFc3kN/esasgr+
bkCIIPZkzmjvWdcG19q6oDky67r9VZZotBK25heT2VPz4xEdreD5IOAsmu4j0+Sp
mWfPzTZbKRyrXk3PrIeq0QQzYHZyyVT+12ooHQ4ro2YZqltoQY4CRz+XCoN2aljG
NdOWS5SElzrPu7W1olMbIhtmzHh3TPaTxdSZADTqycWKeviZDOpfwuNxhC+fS4Bp
vlDe0bo4Bg72U3mzLN5wjIBfGCdPJo1YBISqw+p4u+zVypfts2mUD+tUmSXBMlP0
4Mx6jeu0GxxoS4KXlHIzVVO4ygLoUb/3RHfNS2y5q2S365KHjIBIMGoN/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8Dv71DLThDOx8BQx+0WSftjL53MB8GA1UdIwQY
MBaAFCtJX+VvNHYgJqlANfMg8KkLeiVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80ZDI0YzctNzQ3Ny00ZjdmLWE4YjQt
OWQ2Mzc5NTIxMWQzLzEvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80ZDI0YzctNzQ3Ny00ZjdmLWE4YjQtOWQ2Mzc5NTIxMWQz
LzEvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsmziAZz
bxEFDeJ0d8oBC/7CELssAuVYT1ZEnDHXKrbYBO6hPlFSVbcKefV6glx+lZStZLtL
n0abIvGZ0J6O3FRIYN0yg94kIUG6T7rAsWoMrd1vFYTYm1inocy1028n3PB1XtkD
apeadrzcYOf9zjoCfT0HV3leiqOac6c1eSK8w1S57+IBeXafwNQpUocZ94FLaFE5
epSir9V1KR37fqpKj3BuzZ02kDgosITdFU3rIIOsPwHpI95T2Igq4WgKIe5pmW4R
Gx96YeavTQ7JqXh1HPTVs2+rv2QQtQ9O4q08oX/Ssa+dV0hgg2qfMPSK9YfoUay2
y5idqWJ4C0V3lQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:26:49 2025 by rpki-client