Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
File: KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft (raw, json)
Hash identifier: d3/v/aGtheKW2NbWnwiTuoOXOFwvzMbCi/5l2Pu+D3s=
Subject key identifier: 68:C3:53:35:9F:68:74:DF:86:F9:67:58:F6:32:AD:7D:C0:B9:E6:70
Authority key identifier: 2A:52:75:AD:89:C9:97:6B:51:03:0C:5B:D2:56:79:9B:79:26:56:0C
Certificate issuer: /CN=2a5275ad89c9976b51030c5bd256799b7926560c
Certificate serial: 0198D65F18D700723C080F6CDCED46CC5E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
Manifest number: 09FA
Signing time: Sat 23 Aug 2025 10:00:13 +0000
Manifest this update: Sat 23 Aug 2025 10:00:13 +0000
Manifest next update: Sun 24 Aug 2025 10:00:13 +0000
Files and hashes: 1: KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl (hash: C+8uWU1UpRa2VNbCN0aCAg8uIX7IjNMgptyslm9L4a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:18:d7:00:72:3c:08:0f:6c:dc:ed:46:cc:5e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5275ad89c9976b51030c5bd256799b7926560c
Validity
Not Before: Aug 23 10:00:13 2025 GMT
Not After : Aug 24 10:00:13 2025 GMT
Subject: CN=68c353359f6874df86f96758f632ad7dc0b9e670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:14:42:8d:37:33:44:83:25:9b:c2:a4:15:c8:
3a:c8:0b:dc:dc:8f:72:fe:16:60:30:be:5f:92:b9:
92:5d:86:b0:27:0d:39:3c:ca:07:ee:e2:b5:43:47:
01:5a:42:e0:6c:2d:ea:f8:fc:8e:7c:36:ac:df:67:
3d:32:5a:cf:76:e0:ee:67:d2:05:bf:e1:93:a0:54:
fe:90:32:91:41:ca:ac:98:b7:08:2e:50:cb:e3:42:
45:19:87:4c:ea:30:fa:30:1e:57:b3:43:3b:e9:f4:
23:12:72:a2:15:a5:75:fd:57:a6:bd:18:04:93:7b:
4e:5c:f8:a8:72:3c:6d:fb:9e:89:58:52:9c:91:6f:
d5:05:89:cd:13:57:86:bd:fe:73:42:cf:db:be:18:
f2:c9:9d:58:61:7c:27:c0:11:03:16:10:0a:e9:5e:
0f:52:69:f3:e0:24:08:61:f9:13:f8:15:90:6f:81:
cf:77:11:87:4e:b3:84:ac:fd:2b:6c:05:30:69:9b:
1e:70:71:97:76:ae:05:55:07:c4:f3:e0:b8:94:c3:
17:20:8f:70:da:ee:c8:1f:3c:e6:13:48:9a:b9:ac:
b7:99:54:5a:5a:d0:00:01:e9:08:87:a4:0a:5f:c0:
2a:ff:26:18:de:98:bd:3b:79:af:4d:39:ef:e9:f1:
b1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C3:53:35:9F:68:74:DF:86:F9:67:58:F6:32:AD:7D:C0:B9:E6:70
X509v3 Authority Key Identifier:
keyid:2A:52:75:AD:89:C9:97:6B:51:03:0C:5B:D2:56:79:9B:79:26:56:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ef:c8:2a:9c:e3:8a:73:10:90:a5:6d:b7:07:7a:26:34:bb:
68:9f:4c:af:fa:e9:cf:12:82:a7:7e:32:16:5c:84:65:6f:d4:
3d:d5:36:d7:74:3d:c7:41:07:de:a9:9f:5f:e3:d9:32:91:c2:
33:ee:e0:fc:1b:61:d0:64:1e:df:3f:a3:09:b2:31:cb:d9:82:
9e:7f:0d:d4:41:0e:86:90:9e:e5:65:b5:92:ca:bb:aa:d9:a9:
d9:14:0a:c4:7f:b1:ba:f4:4c:50:2c:59:4f:c6:ae:9e:be:45:
0b:c5:82:7a:50:06:8a:f0:90:c0:fe:8a:87:dd:4d:4d:d3:3e:
38:a3:00:b2:d5:ed:f0:17:f1:5f:0a:05:45:b5:7c:21:55:eb:
5e:da:35:c0:00:9e:f7:d8:16:1f:41:b4:2b:7d:cf:28:71:77:
25:b8:57:cc:46:3a:3a:0a:d0:ed:bf:18:56:29:80:31:42:4a:
dc:8d:b8:7f:e3:61:5b:7b:f3:99:16:a6:2b:a5:79:cd:bb:7b:
7d:f7:77:dd:ee:46:db:46:c2:91:df:7e:bd:cc:26:c8:e0:a8:
2f:c1:df:a0:a6:1e:29:ab:df:85:6e:c8:d4:1e:1f:52:8b:47:
4b:b9:f6:d4:bc:f9:80:17:a9:46:32:04:43:3b:03:f1:fd:80:
a7:5a:cd:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXxjXAHI8CA9s3O1GzF4vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNTI3NWFkODljOTk3NmI1MTAzMGM1YmQyNTY3OTliNzky
NjU2MGMwHhcNMjUwODIzMTAwMDEzWhcNMjUwODI0MTAwMDEzWjAzMTEwLwYDVQQD
Eyg2OGMzNTMzNTlmNjg3NGRmODZmOTY3NThmNjMyYWQ3ZGMwYjllNjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRRCjTczRIMlm8KkFcg6yAvc3I9y
/hZgML5fkrmSXYawJw05PMoH7uK1Q0cBWkLgbC3q+PyOfDas32c9MlrPduDuZ9IF
v+GToFT+kDKRQcqsmLcILlDL40JFGYdM6jD6MB5Xs0M76fQjEnKiFaV1/VemvRgE
k3tOXPiocjxt+56JWFKckW/VBYnNE1eGvf5zQs/bvhjyyZ1YYXwnwBEDFhAK6V4P
Umnz4CQIYfkT+BWQb4HPdxGHTrOErP0rbAUwaZsecHGXdq4FVQfE8+C4lMMXII9w
2u7IHzzmE0iauay3mVRaWtAAAekIh6QKX8Aq/yYY3pi9O3mvTTnv6fGxWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjDUzWfaHTfhvlnWPYyrX3AueZwMB8GA1UdIwQY
MBaAFCpSda2JyZdrUQMMW9JWeZt5JlYMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2xKMXJZbkpsMnRSQXd4YjBsWjVtM2ttVmd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85YmMyZDgtOTMyMC00YTMxLWE3ZDQt
MTE1NjY5MGE0M2I1LzEvS2xKMXJZbkpsMnRSQXd4YjBsWjVtM2ttVmd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC85YmMyZDgtOTMyMC00YTMxLWE3ZDQtMTE1NjY5MGE0M2I1
LzEvS2xKMXJZbkpsMnRSQXd4YjBsWjVtM2ttVmd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoe/IKpzj
inMQkKVttwd6JjS7aJ9Mr/rpzxKCp34yFlyEZW/UPdU213Q9x0EH3qmfX+PZMpHC
M+7g/Bth0GQe3z+jCbIxy9mCnn8N1EEOhpCe5WW1ksq7qtmp2RQKxH+xuvRMUCxZ
T8aunr5FC8WCelAGivCQwP6Kh91NTdM+OKMAstXt8BfxXwoFRbV8IVXrXto1wACe
99gWH0G0K33PKHF3JbhXzEY6OgrQ7b8YVimAMUJK3I24f+NhW3vzmRamK6V5zbt7
ffd33e5G20bCkd9+vcwmyOCoL8HfoKYeKavfhW7I1B4fUotHS7n21Lz5gBepRjIE
QzsD8f2Ap1rNxA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:09:54 2025 by rpki-client