Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
File: KslDUX9eO3R-dTAyB4mgNES0ORI.mft (raw, json)
Hash identifier: 0UWaTvCrVerp0oQJUvbbqCvT3UQQvtfqGrusPxuGUew=
Subject key identifier: CA:56:26:45:94:70:62:94:24:AF:0A:46:69:78:22:96:F7:EC:AE:7E
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 0198D4A82075A5B3712B786B61AC79640742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
Manifest number: 0F38
Signing time: Sat 23 Aug 2025 02:00:44 +0000
Manifest this update: Sat 23 Aug 2025 02:00:44 +0000
Manifest next update: Sun 24 Aug 2025 02:00:44 +0000
Files and hashes: 1: KslDUX9eO3R-dTAyB4mgNES0ORI.crl (hash: WBHWpyRAk/UVHHWVPTb4lF1Pq+XEDix8GNI7BTWGAFQ=)
2: hRopNkKlsL4OwqAqAiJ3QXD2oug.roa (hash: NMdRr2OaOIcyhizjr1sKy4ahHmQgfdQZAiHU+pJ6knM=)
3: wXKkmEzVnT6wH-e4RUZ5ISziflM.roa (hash: 0ibg6oISPGaXyJMIkBYpRfjFyr2Dyc5Kyu9O/zaq9rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:20:75:a5:b3:71:2b:78:6b:61:ac:79:64:07:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Aug 23 02:00:44 2025 GMT
Not After : Aug 24 02:00:44 2025 GMT
Subject: CN=ca5626459470629424af0a4669782296f7ecae7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:54:35:a0:40:b3:59:4c:bf:6d:a7:c6:27:ea:
7b:c2:f8:8e:0d:78:3c:9f:e2:0b:3e:e6:f3:4e:12:
7f:28:fa:f1:ea:64:a2:74:b9:98:51:bc:31:30:a5:
00:06:84:fe:d7:16:ce:05:a4:90:1e:d1:8f:e4:9a:
77:ec:6f:60:5b:ee:ac:bd:f0:3b:6c:d8:71:9a:68:
4c:82:67:8a:97:d4:8d:cf:41:8f:cb:cb:e2:12:62:
04:2c:b9:a8:41:95:4b:a5:67:f6:47:35:71:25:67:
66:f0:ed:1f:d9:db:29:c0:cd:b9:dc:9a:63:5a:b8:
8f:08:7a:1c:d7:27:f9:5c:52:56:20:08:48:4d:5d:
96:d9:83:90:1d:f8:4e:8d:6b:5b:34:3e:ad:4e:56:
fa:59:93:a1:87:6c:cc:8e:b9:86:b7:1b:7f:88:c9:
f3:f8:33:0c:45:08:e3:2a:a5:ec:cd:f8:1e:b5:b9:
f8:a5:f3:a2:1c:a4:78:2c:e5:6a:2f:e3:d1:2d:19:
11:ae:95:54:9c:bf:01:78:76:50:b9:5b:b3:87:3e:
c5:f7:82:7c:f1:e6:ad:1c:e9:48:21:e9:00:11:ac:
09:d8:b7:12:a1:1d:0f:26:63:c6:5b:e7:5f:e1:68:
9f:4f:e8:50:ad:7d:ae:46:f5:da:a6:e6:53:3e:69:
d7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:56:26:45:94:70:62:94:24:AF:0A:46:69:78:22:96:F7:EC:AE:7E
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:74:87:97:b4:8e:62:be:81:07:9b:9c:83:9e:a5:a4:f1:85:
d7:7d:29:b2:7f:11:50:97:67:98:b5:a3:17:95:7a:58:ef:b4:
0d:3d:c2:5f:3d:57:af:8a:79:66:6d:db:d2:1c:59:3e:9d:b6:
87:6c:2c:9e:fc:92:94:26:90:63:55:4d:a7:5d:ae:13:35:fa:
48:eb:16:e5:af:9e:bf:d8:8f:ab:f7:a5:1d:ea:e1:de:7b:30:
e1:cf:67:cd:cb:aa:5e:52:73:85:ae:03:5e:0c:01:54:d9:29:
85:0f:eb:22:57:94:ac:4d:27:4f:73:c1:5f:f8:4e:04:d6:e1:
f5:7a:44:39:5e:92:be:34:7c:10:2a:40:4a:3c:a7:63:20:61:
2d:a0:79:da:ce:29:e5:c2:de:c1:4b:04:c2:c6:ad:27:21:81:
95:90:a2:2e:9e:96:a7:77:0c:35:bc:62:12:a5:b7:26:4f:b4:
24:14:ec:79:eb:84:98:60:5e:c1:b6:ea:f8:3a:81:4d:3b:89:
ff:1f:06:11:bf:15:35:11:0c:ec:7c:4e:c1:52:2e:76:64:91:
76:99:05:37:27:2e:91:54:10:99:6a:27:18:5c:96:db:7e:81:
c8:16:1d:52:ca:01:ed:77:1b:51:02:c2:b1:b6:3a:d8:74:93:
a2:81:cf:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqCB1pbNxK3hrYax5ZAdCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzk0MzUxN2Y1ZTNiNzQ3ZTc1MzAzMjA3ODlhMDM0NDRi
NDM5MTIwHhcNMjUwODIzMDIwMDQ0WhcNMjUwODI0MDIwMDQ0WjAzMTEwLwYDVQQD
EyhjYTU2MjY0NTk0NzA2Mjk0MjRhZjBhNDY2OTc4MjI5NmY3ZWNhZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVQ1oECzWUy/bafGJ+p7wviODXg8
n+ILPubzThJ/KPrx6mSidLmYUbwxMKUABoT+1xbOBaSQHtGP5Jp37G9gW+6svfA7
bNhxmmhMgmeKl9SNz0GPy8viEmIELLmoQZVLpWf2RzVxJWdm8O0f2dspwM253Jpj
WriPCHoc1yf5XFJWIAhITV2W2YOQHfhOjWtbND6tTlb6WZOhh2zMjrmGtxt/iMnz
+DMMRQjjKqXszfgetbn4pfOiHKR4LOVqL+PRLRkRrpVUnL8BeHZQuVuzhz7F94J8
8eatHOlIIekAEawJ2LcSoR0PJmPGW+df4WifT+hQrX2uRvXapuZTPmnXPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpWJkWUcGKUJK8KRml4Ipb37K5+MB8GA1UdIwQY
MBaAFCrJQ1F/Xjt0fnUwMgeJoDREtDkSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xOTUxMWQtNTM3ZS00MjQxLWEwZDgt
MmQ5MWNmZDdhYWY0LzEvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xOTUxMWQtNTM3ZS00MjQxLWEwZDgtMmQ5MWNmZDdhYWY0
LzEvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3SHl7SO
Yr6BB5ucg56lpPGF130psn8RUJdnmLWjF5V6WO+0DT3CXz1Xr4p5Zm3b0hxZPp22
h2wsnvySlCaQY1VNp12uEzX6SOsW5a+ev9iPq/elHerh3nsw4c9nzcuqXlJzha4D
XgwBVNkphQ/rIleUrE0nT3PBX/hOBNbh9XpEOV6SvjR8ECpASjynYyBhLaB52s4p
5cLewUsEwsatJyGBlZCiLp6Wp3cMNbxiEqW3Jk+0JBTseeuEmGBewbbq+DqBTTuJ
/x8GEb8VNREM7HxOwVIudmSRdpkFNycukVQQmWonGFyW236ByBYdUsoB7XcbUQLC
sbY62HSTooHPpw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:51:56 2025 by rpki-client