Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: pFTXftBTxbQHvb2j49+28tK3YbP1uXYUtofJLPd/RMQ=
Subject key identifier: 20:5E:99:49:BD:11:B3:D8:35:9D:24:65:91:BF:4C:88:FE:71:31:75
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 0198D583827C1970F5C530FBD558D32C42E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 0720
Signing time: Sat 23 Aug 2025 06:00:22 +0000
Manifest this update: Sat 23 Aug 2025 06:00:22 +0000
Manifest next update: Sun 24 Aug 2025 06:00:22 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: 5+MpJQkRK8jTtfReHjFTEly/V9soiLtYPh6VyXM1hAU=)
2: z3h-H5HBZcjmh2dP-uTIZcL8mqs.roa (hash: UbD7o5RQ7Yy/qV+kWLLXW0biF8q9IDLYH8QBkrKYQu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:82:7c:19:70:f5:c5:30:fb:d5:58:d3:2c:42:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: Aug 23 06:00:22 2025 GMT
Not After : Aug 24 06:00:22 2025 GMT
Subject: CN=205e9949bd11b3d8359d246591bf4c88fe713175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:05:ad:3a:95:5f:78:f6:f3:ee:49:26:e9:0c:
24:e4:af:9d:18:21:4e:28:07:6b:f9:80:ba:c5:47:
77:d1:28:90:12:d3:dd:d7:e7:de:74:43:e0:08:12:
9d:db:6f:01:32:1a:52:53:3d:4d:56:9a:ef:29:89:
92:91:39:93:f2:a4:d7:57:8a:ae:49:02:fa:3b:2f:
9e:51:d7:b4:4c:6b:40:c5:96:d1:09:e0:5c:70:25:
40:0d:a0:25:e4:06:cc:c6:64:c3:8c:0e:d4:3b:99:
77:04:ed:a0:bb:11:ab:07:8e:01:5b:dd:cc:1f:12:
7d:0c:73:b5:e5:06:c2:6c:46:ce:52:ea:95:85:d9:
61:7e:88:42:52:06:30:73:b7:19:ee:6d:e3:d7:ce:
13:bf:ce:9e:ad:d0:6d:a8:2e:7a:b2:43:14:ae:10:
dd:c9:48:8f:22:8c:0b:14:ff:df:2e:a3:89:88:53:
6f:af:f1:4e:9c:d4:cb:22:89:e6:a8:df:f1:10:da:
be:6e:31:87:82:49:e6:de:e0:2d:d3:55:1c:0a:28:
dc:c2:52:a1:e2:cd:a7:be:0b:e2:4b:06:d7:79:e4:
10:3d:c1:63:b9:3f:d1:2f:38:8b:e1:a1:75:be:d1:
88:89:d7:27:07:35:df:79:ff:06:eb:fc:c1:6d:0b:
8d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5E:99:49:BD:11:B3:D8:35:9D:24:65:91:BF:4C:88:FE:71:31:75
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:22:79:85:fb:51:23:71:f2:f4:62:dc:8b:b5:de:49:f2:8d:
92:65:fa:e5:6b:9a:13:9a:3f:5a:04:fe:83:51:25:16:26:c7:
e2:1d:9e:65:c4:cd:a5:8e:55:48:5a:1a:2a:02:a1:a0:ac:10:
9e:27:46:d6:61:a7:9f:b1:43:af:7f:c2:10:c0:99:aa:59:a7:
4e:1d:ef:21:f7:f7:85:50:1f:7d:5d:3d:b9:e5:61:2c:ae:4c:
ea:f7:a9:8e:86:57:7a:87:c9:17:e0:a7:52:14:e1:ab:a6:5b:
e4:72:03:ac:73:25:0c:8a:a8:33:52:72:c4:63:b2:a2:5d:75:
9b:30:64:8a:0e:c5:91:12:f0:f6:46:22:89:85:89:a9:d9:4f:
b8:75:bb:e5:3a:6c:f0:31:00:4a:c0:e2:0e:d3:4b:f8:45:7b:
63:74:54:88:c8:62:18:d7:0c:1f:5e:63:3e:65:66:61:86:ec:
30:ba:a0:63:44:71:08:a9:29:cf:8d:7e:94:bb:00:02:05:4c:
fd:fb:61:c0:d6:01:43:e3:e1:b8:0f:29:d1:86:8d:d2:a3:5f:
aa:67:00:03:3b:e3:cc:94:7d:4e:d9:2e:8b:03:c0:20:75:be:
4a:e9:84:5b:7d:7f:cb:d3:f9:4e:32:44:6f:e8:47:f7:1f:ec:
1f:4c:2b:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg4J8GXD1xTD71VjTLELmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYjkxZTNkZWQ4MjBjNzBiOGFjZTg5YWVhZmZmYWJlZTZi
ZmE1NTMwHhcNMjUwODIzMDYwMDIyWhcNMjUwODI0MDYwMDIyWjAzMTEwLwYDVQQD
EygyMDVlOTk0OWJkMTFiM2Q4MzU5ZDI0NjU5MWJmNGM4OGZlNzEzMTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQWtOpVfePbz7kkm6Qwk5K+dGCFO
KAdr+YC6xUd30SiQEtPd1+fedEPgCBKd228BMhpSUz1NVprvKYmSkTmT8qTXV4qu
SQL6Oy+eUde0TGtAxZbRCeBccCVADaAl5AbMxmTDjA7UO5l3BO2guxGrB44BW93M
HxJ9DHO15QbCbEbOUuqVhdlhfohCUgYwc7cZ7m3j184Tv86erdBtqC56skMUrhDd
yUiPIowLFP/fLqOJiFNvr/FOnNTLIonmqN/xENq+bjGHgknm3uAt01UcCijcwlKh
4s2nvgviSwbXeeQQPcFjuT/RLziL4aF1vtGIidcnBzXfef8G6/zBbQuNDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBemUm9EbPYNZ0kZZG/TIj+cTF1MB8GA1UdIwQY
MBaAFCq5Hj3tggxwuKzomur/+r7mv6VTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2Mt
NjFkZTIxZjUxNDM0LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2MtNjFkZTIxZjUxNDM0
LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiJ5hftR
I3Hy9GLci7XeSfKNkmX65WuaE5o/WgT+g1ElFibH4h2eZcTNpY5VSFoaKgKhoKwQ
nidG1mGnn7FDr3/CEMCZqlmnTh3vIff3hVAffV09ueVhLK5M6vepjoZXeofJF+Cn
UhThq6Zb5HIDrHMlDIqoM1JyxGOyol11mzBkig7FkRLw9kYiiYWJqdlPuHW75Tps
8DEASsDiDtNL+EV7Y3RUiMhiGNcMH15jPmVmYYbsMLqgY0RxCKkpz41+lLsAAgVM
/fthwNYBQ+PhuA8p0YaN0qNfqmcAAzvjzJR9TtkuiwPAIHW+SumEW31/y9P5TjJE
b+hH9x/sH0wrQg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:04 2025 by rpki-client