Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
File: K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft (raw, json)
Hash identifier: qLWOYgL524IFaj/bN9mm+OcRB/GZxIJ44ImkeaAQby4=
Subject key identifier: 1A:7A:A8:05:D4:9B:F5:54:59:C4:52:0D:BB:93:C5:FF:05:40:71:AB
Authority key identifier: 2B:57:B0:DB:00:16:FE:62:50:95:DF:0C:6E:57:FE:07:F1:CF:28:9F
Certificate issuer: /CN=2b57b0db0016fe625095df0c6e57fe07f1cf289f
Certificate serial: 0199FBEADC53DFBFEEB0399FC089058FDEFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
Manifest number: 07FB
Signing time: Sun 19 Oct 2025 10:01:36 +0000
Manifest this update: Sun 19 Oct 2025 10:01:36 +0000
Manifest next update: Mon 20 Oct 2025 10:01:36 +0000
Files and hashes: 1: K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl (hash: 5s66QcKJkLhUB1wyhbZKHeXquKm5r+XNBjeqv0xLoLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:dc:53:df:bf:ee:b0:39:9f:c0:89:05:8f:de:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b57b0db0016fe625095df0c6e57fe07f1cf289f
Validity
Not Before: Oct 19 10:01:36 2025 GMT
Not After : Oct 20 10:01:36 2025 GMT
Subject: CN=1a7aa805d49bf55459c4520dbb93c5ff054071ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:02:f1:96:f3:25:12:c1:a6:bf:55:e5:4a:9e:
13:c8:3a:c0:27:02:04:72:11:fa:5f:35:b1:1c:a1:
70:55:0a:ff:4d:67:a6:23:37:9b:33:0b:5b:99:58:
d8:29:cb:2b:b5:5a:ea:0b:48:a2:70:a3:92:3c:d9:
2d:35:c5:5e:61:23:25:40:8b:63:c2:19:04:23:3b:
ca:f7:65:26:e9:40:4c:e9:ef:20:84:0e:05:80:8c:
5e:05:a2:cf:12:63:e9:74:7d:e7:ac:e0:af:6e:00:
71:fc:62:72:4f:d4:7c:8c:07:d2:8e:25:ce:15:25:
b3:89:08:b7:33:97:b5:f5:18:ed:80:54:d5:59:e8:
c1:97:fb:8b:b7:22:7a:f4:d3:dd:73:d1:26:ad:aa:
0a:f9:5e:d6:dc:51:81:a4:7b:00:b8:07:f3:bc:ac:
5c:08:19:8c:83:0b:ef:1c:56:5b:d7:10:58:63:31:
d0:83:0a:d6:69:c7:0a:46:31:22:09:9f:da:b3:57:
04:40:16:81:0f:ab:96:fe:33:9b:c2:9d:91:34:aa:
b8:cc:c8:9a:54:68:20:ea:2f:24:50:73:71:2d:c6:
96:28:2c:0d:25:e1:0c:78:bf:dc:80:33:ff:13:da:
dd:7b:a2:55:60:57:ac:dd:78:ab:b2:74:14:48:ec:
83:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7A:A8:05:D4:9B:F5:54:59:C4:52:0D:BB:93:C5:FF:05:40:71:AB
X509v3 Authority Key Identifier:
keyid:2B:57:B0:DB:00:16:FE:62:50:95:DF:0C:6E:57:FE:07:F1:CF:28:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:76:58:52:87:3b:07:9c:09:06:e6:8c:77:1a:de:e8:e6:fc:
4f:36:03:93:39:c1:c9:19:8d:f5:9d:53:b7:e6:c6:31:a8:78:
0f:84:7b:f2:9c:de:6e:56:e4:59:bc:3a:3e:60:e1:db:ec:0d:
db:be:d1:ee:ca:78:9c:8d:f3:f6:09:2d:1c:27:18:cb:4f:a4:
09:bb:a7:2e:bd:f8:5c:9b:24:b3:d4:14:78:59:19:92:2d:18:
a8:54:db:db:94:25:e3:37:11:b4:19:98:58:5f:90:c7:da:bb:
b0:fe:69:38:df:19:bd:01:09:fc:e8:62:27:df:65:8e:c0:38:
61:13:ec:f4:76:a8:36:dc:e5:92:94:99:e9:5b:4d:31:ee:db:
89:a6:66:ac:52:e7:a0:c1:a8:65:5f:fe:44:db:9e:8f:a3:f2:
56:41:b3:00:86:9c:f6:1f:87:11:9d:b2:36:29:0e:6d:ed:f8:
8f:23:4a:fb:aa:9d:33:9a:89:9f:ef:9b:c8:f2:81:b1:41:1c:
fb:b1:4a:7c:0f:23:2c:4e:76:41:43:4c:87:f5:3d:e3:27:74:
b8:9d:ef:d0:8b:c5:eb:15:1d:de:56:dc:a9:26:2a:85:db:9e:
2d:c9:82:3a:cc:9b:60:ba:dc:93:36:92:63:5e:5b:93:c5:60:
c2:a0:cc:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76txT37/usDmfwIkFj976MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNTdiMGRiMDAxNmZlNjI1MDk1ZGYwYzZlNTdmZTA3ZjFj
ZjI4OWYwHhcNMjUxMDE5MTAwMTM2WhcNMjUxMDIwMTAwMTM2WjAzMTEwLwYDVQQD
EygxYTdhYTgwNWQ0OWJmNTU0NTljNDUyMGRiYjkzYzVmZjA1NDA3MWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwLxlvMlEsGmv1XlSp4TyDrAJwIE
chH6XzWxHKFwVQr/TWemIzebMwtbmVjYKcsrtVrqC0iicKOSPNktNcVeYSMlQItj
whkEIzvK92Um6UBM6e8ghA4FgIxeBaLPEmPpdH3nrOCvbgBx/GJyT9R8jAfSjiXO
FSWziQi3M5e19RjtgFTVWejBl/uLtyJ69NPdc9EmraoK+V7W3FGBpHsAuAfzvKxc
CBmMgwvvHFZb1xBYYzHQgwrWaccKRjEiCZ/as1cEQBaBD6uW/jObwp2RNKq4zMia
VGgg6i8kUHNxLcaWKCwNJeEMeL/cgDP/E9rde6JVYFes3XirsnQUSOyDdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBp6qAXUm/VUWcRSDbuTxf8FQHGrMB8GA1UdIwQY
MBaAFCtXsNsAFv5iUJXfDG5X/gfxzyifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzFldzJ3QVdfbUpRbGQ4TWJsZi1CX0hQS0o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMjc0NmUtY2FjOC00NWQzLWEyNTgt
ZjQ0ZjM1YjdhOTVkLzEvSzFldzJ3QVdfbUpRbGQ4TWJsZi1CX0hQS0o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yMjc0NmUtY2FjOC00NWQzLWEyNTgtZjQ0ZjM1YjdhOTVk
LzEvSzFldzJ3QVdfbUpRbGQ4TWJsZi1CX0hQS0o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHZYUoc7
B5wJBuaMdxre6Ob8TzYDkznByRmN9Z1Tt+bGMah4D4R78pzeblbkWbw6PmDh2+wN
277R7sp4nI3z9gktHCcYy0+kCbunLr34XJsks9QUeFkZki0YqFTb25Ql4zcRtBmY
WF+Qx9q7sP5pON8ZvQEJ/OhiJ99ljsA4YRPs9HaoNtzlkpSZ6VtNMe7biaZmrFLn
oMGoZV/+RNuej6PyVkGzAIac9h+HEZ2yNikObe34jyNK+6qdM5qJn++byPKBsUEc
+7FKfA8jLE52QUNMh/U94yd0uJ3v0IvF6xUd3lbcqSYqhdueLcmCOsybYLrckzaS
Y15bk8VgwqDMoA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:18 2025 by rpki-client