Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
File: 00KrFW1a4VOtFlKOh9nIR53ApKU.mft (raw, json)
Hash identifier: cb985xagPivEsH5+AvaC0usxgbEqKYB+7t2XjyxvyMo=
Subject key identifier: EA:65:50:14:DC:F9:11:75:96:75:52:24:FD:58:63:47:AF:13:D1:77
Authority key identifier: D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
Certificate issuer: /CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Certificate serial: 0198D4A79F9D0327BDBF81670B932ECF4D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:11 +0000
Manifest this update: Sat 23 Aug 2025 02:00:11 +0000
Manifest next update: Sun 24 Aug 2025 02:00:11 +0000
Files and hashes: 1: 00KrFW1a4VOtFlKOh9nIR53ApKU.crl (hash: cuETS2LRETOj7cxPZFyw8mLGMsHfrwh3ft88ckpjcCc=)
2: YzWazfZkDmpS6lnGJouGiR4vMgw.roa (hash: g+4T1wjwDSXCQUkHT41UwModEGJm2ijdNXqnxLEPkqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:9f:9d:03:27:bd:bf:81:67:0b:93:2e:cf:4d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Validity
Not Before: Aug 23 02:00:11 2025 GMT
Not After : Aug 24 02:00:11 2025 GMT
Subject: CN=ea655014dcf9117596755224fd586347af13d177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:5f:33:54:39:62:aa:b7:7a:2e:1d:08:3d:
73:df:da:0b:44:5a:0a:43:e2:e4:14:1c:44:64:72:
50:2e:45:cd:2b:65:7b:df:6f:bc:11:74:86:a4:ea:
96:05:13:13:25:5a:04:ea:a8:3a:2c:37:55:89:af:
7a:dc:1d:64:94:12:0a:eb:f0:3a:2e:28:3c:fd:39:
7f:e0:57:bc:ac:08:02:0d:f2:40:1d:2b:8b:5a:61:
1f:7a:1c:a9:d6:5d:23:8a:5e:3a:8a:42:54:62:33:
18:da:74:d0:60:8b:71:32:af:c6:8a:50:09:3c:51:
0e:47:28:b1:3d:e1:f9:44:18:31:0b:a2:eb:c5:f9:
fe:a7:9e:04:aa:22:cf:b5:32:ae:41:99:6f:7a:88:
97:20:96:75:5b:d6:c8:bd:7b:fa:9d:d3:09:b7:d1:
60:b5:b5:d9:6a:93:d8:30:fd:2f:52:73:16:4a:f1:
2d:cd:fd:20:93:17:7e:58:a3:38:3d:16:98:22:09:
8c:a9:92:f5:35:ef:b7:8f:3c:3f:9a:33:80:f2:75:
5a:c7:b9:28:be:c2:01:ab:75:73:86:fb:86:3a:f3:
84:e1:37:76:cf:69:d0:f9:b3:f6:3b:6e:df:a9:14:
4c:73:f5:7a:78:05:07:45:b0:25:85:46:c5:ae:75:
b2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:65:50:14:DC:F9:11:75:96:75:52:24:FD:58:63:47:AF:13:D1:77
X509v3 Authority Key Identifier:
keyid:D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7b:a5:d9:91:55:8d:c6:33:e4:11:61:24:ce:2f:2d:12:c0:
9c:5e:2b:99:4b:bc:13:30:60:51:a5:de:68:3f:73:fe:6b:0f:
a1:cc:c6:3c:97:d9:c7:f3:aa:92:40:56:4c:d5:f8:3c:7f:11:
c9:2f:60:a6:5a:0b:50:73:b9:3f:42:c3:d1:28:89:62:24:52:
90:84:82:0b:aa:ae:0a:f2:46:db:31:27:d5:6e:66:09:30:e0:
e2:7c:ef:74:e7:6e:db:8a:6f:76:9d:21:e7:49:6a:f0:8e:98:
06:ea:1a:54:96:57:dc:6f:33:59:90:85:65:c9:3c:6b:30:4d:
9b:11:01:be:10:b7:86:27:54:5d:6b:2d:50:6d:76:2f:dd:81:
21:68:29:1b:1b:6c:87:c2:c6:07:75:2d:af:bb:8b:23:d3:97:
a1:a9:e4:a5:d1:7e:ae:62:14:5c:fd:44:06:7c:18:0c:0c:e7:
17:38:88:a2:e5:01:58:69:7c:74:67:f6:5a:83:2a:8f:1f:20:
2f:27:5c:db:0c:ee:9e:a5:03:73:1d:c9:8b:b1:f3:f8:5f:62:
00:00:0d:6e:54:8f:2b:9f:72:dc:58:c0:a8:af:e9:74:67:03:
28:b4:61:a8:e6:bf:ef:4e:cd:10:6a:82:ac:93:df:08:1a:8b:
6b:da:78:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp5+dAye9v4FnC5Muz01JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNDJhYjE1NmQ1YWUxNTNhZDE2NTI4ZTg3ZDljODQ3OWRj
MGE0YTUwHhcNMjUwODIzMDIwMDExWhcNMjUwODI0MDIwMDExWjAzMTEwLwYDVQQD
EyhlYTY1NTAxNGRjZjkxMTc1OTY3NTUyMjRmZDU4NjM0N2FmMTNkMTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiRfM1Q5Yqq3ei4dCD1z39oLRFoK
Q+LkFBxEZHJQLkXNK2V732+8EXSGpOqWBRMTJVoE6qg6LDdVia963B1klBIK6/A6
Lig8/Tl/4Fe8rAgCDfJAHSuLWmEfehyp1l0jil46ikJUYjMY2nTQYItxMq/GilAJ
PFEORyixPeH5RBgxC6Lrxfn+p54EqiLPtTKuQZlveoiXIJZ1W9bIvXv6ndMJt9Fg
tbXZapPYMP0vUnMWSvEtzf0gkxd+WKM4PRaYIgmMqZL1Ne+3jzw/mjOA8nVax7ko
vsIBq3VzhvuGOvOE4Td2z2nQ+bP2O27fqRRMc/V6eAUHRbAlhUbFrnWyEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOplUBTc+RF1lnVSJP1YY0evE9F3MB8GA1UdIwQY
MBaAFNNCqxVtWuFTrRZSjofZyEedwKSlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yNjM0NDctMGM4MC00Y2RhLWI5MTUt
MDgxYTYzN2Y3MDNlLzEvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yNjM0NDctMGM4MC00Y2RhLWI5MTUtMDgxYTYzN2Y3MDNl
LzEvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO3ul2ZFV
jcYz5BFhJM4vLRLAnF4rmUu8EzBgUaXeaD9z/msPoczGPJfZx/OqkkBWTNX4PH8R
yS9gploLUHO5P0LD0SiJYiRSkISCC6quCvJG2zEn1W5mCTDg4nzvdOdu24pvdp0h
50lq8I6YBuoaVJZX3G8zWZCFZck8azBNmxEBvhC3hidUXWstUG12L92BIWgpGxts
h8LGB3Utr7uLI9OXoankpdF+rmIUXP1EBnwYDAznFziIouUBWGl8dGf2WoMqjx8g
Lydc2wzunqUDcx3Ji7Hz+F9iAAANblSPK59y3FjAqK/pdGcDKLRhqOa/707NEGqC
rJPfCBqLa9p42A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:53:05 2025 by rpki-client