Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier: KgXFDjPR2OWtvs+7QgUGSdw+sOLgAkOux09F6YzuQFw=
Subject key identifier: 21:D0:42:A9:95:37:2E:FF:E5:75:5C:10:A9:F9:04:38:63:EE:25:4D
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 0198D69823B88FDB5D667D02D27A130B46EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 11:02:31 +0000
Manifest this update: Sat 23 Aug 2025 11:02:31 +0000
Manifest next update: Sun 24 Aug 2025 11:02:31 +0000
Files and hashes: 1: CbRY4qO4S-WijK05eY2wCnYoQJU.roa (hash: +mTf7r6+zK/TdKHsfZ88i/cXxb9cvH9lfgC3dCfABuE=)
2: fJrFHPzcXBxu52oPqkGqKY4yJAk.roa (hash: 3hc352skG2gtrO+VgjnqkDCcrrWK6vetRgA/AknDSz8=)
3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: dEyMNW73fTa3ZcG+gsBtT3HS6qgxsVvtL0TL4utmSfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:23:b8:8f:db:5d:66:7d:02:d2:7a:13:0b:46:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Aug 23 11:02:31 2025 GMT
Not After : Aug 24 11:02:31 2025 GMT
Subject: CN=21d042a995372effe5755c10a9f9043863ee254d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:7a:48:65:00:dc:dd:ab:b6:02:05:8c:fd:
16:27:b1:a9:63:bf:7d:8e:87:77:79:d2:41:05:76:
d2:46:e7:82:7d:d0:3c:48:6b:11:76:19:44:13:55:
87:c9:1b:5b:16:41:d8:cd:0f:3d:3b:b0:99:4a:a9:
22:19:91:f4:a2:64:45:af:91:67:93:9c:90:47:59:
06:36:b6:7d:97:74:67:c9:e3:40:a0:5f:dc:b9:c1:
42:02:0e:29:9e:67:89:88:c7:05:54:73:cf:e9:5d:
35:e9:c4:84:3a:24:89:e9:0a:13:17:f1:a2:ae:e6:
8d:e0:f9:a2:57:82:75:c8:7b:fb:92:3d:d8:5a:92:
a1:aa:85:ac:9e:29:13:dc:6b:cf:c4:91:da:61:97:
98:b2:a1:28:29:4e:b5:53:82:4c:5d:5f:db:78:8b:
a3:2f:db:7e:7c:09:de:d7:92:e7:8f:23:bc:f2:e6:
75:1c:6b:c4:16:98:73:d8:03:a4:eb:2a:29:78:01:
6f:26:b2:89:e8:40:b3:c0:bf:27:5a:e4:74:6c:96:
0d:bc:94:8a:b8:6c:ec:8f:4a:59:2a:e7:f0:37:d8:
bf:49:89:e9:b9:16:0a:0b:57:2f:a4:77:08:af:40:
8a:2b:32:c7:c6:3f:5f:dc:5d:a8:d2:ca:af:ba:94:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D0:42:A9:95:37:2E:FF:E5:75:5C:10:A9:F9:04:38:63:EE:25:4D
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8b:f6:ba:b7:8f:0c:44:62:db:fd:f2:60:27:f1:fc:dc:60:
54:30:af:7d:72:ba:df:29:36:c1:6c:1e:e8:6b:4d:e4:5d:78:
07:2d:e4:8f:18:b0:4a:7b:94:80:6d:92:5c:db:34:3b:db:37:
79:58:0e:0e:e9:5c:4a:ba:01:f5:9e:e9:9e:40:6a:3a:26:d4:
b7:32:81:43:8c:d6:4d:1b:a2:6f:93:24:13:e5:04:ec:4d:5e:
c0:fb:01:4e:1c:a2:ea:54:54:13:23:b7:29:42:50:92:d0:4d:
1c:6f:48:89:bb:a8:ec:43:ea:3d:de:ca:35:9c:05:7d:ea:74:
01:65:c1:c2:ed:98:9b:3d:4f:ff:2d:e5:fc:24:75:14:7e:fa:
88:9e:23:9f:a1:e9:c2:97:13:d7:88:bd:3e:94:e8:6a:a4:91:
28:85:b2:e7:14:8e:38:32:f5:c8:ff:f8:10:7b:d5:23:36:6a:
8b:d8:63:99:67:fd:35:7c:b3:68:1b:23:a0:14:9e:42:aa:87:
40:d9:36:a9:9c:3c:bf:3f:f0:36:3e:9c:35:9f:b0:eb:6f:3f:
b6:d7:81:b4:b8:36:d6:ae:72:8a:17:e3:16:70:29:c0:76:47:
f3:84:d4:57:6a:b9:49:0e:f4:ea:f9:86:77:54:20:e4:d2:2b:
4c:01:8f:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmCO4j9tdZn0C0noTC0bqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMWUzYzhkZTBhZGQ5ZGE5NWNmNDRkODlmNTBiZmRlN2Fl
MTlhNTcwHhcNMjUwODIzMTEwMjMxWhcNMjUwODI0MTEwMjMxWjAzMTEwLwYDVQQD
EygyMWQwNDJhOTk1MzcyZWZmZTU3NTVjMTBhOWY5MDQzODYzZWUyNTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUB6SGUA3N2rtgIFjP0WJ7GpY799
jod3edJBBXbSRueCfdA8SGsRdhlEE1WHyRtbFkHYzQ89O7CZSqkiGZH0omRFr5Fn
k5yQR1kGNrZ9l3RnyeNAoF/cucFCAg4pnmeJiMcFVHPP6V016cSEOiSJ6QoTF/Gi
ruaN4PmiV4J1yHv7kj3YWpKhqoWsnikT3GvPxJHaYZeYsqEoKU61U4JMXV/beIuj
L9t+fAne15LnjyO88uZ1HGvEFphz2AOk6yopeAFvJrKJ6ECzwL8nWuR0bJYNvJSK
uGzsj0pZKufwN9i/SYnpuRYKC1cvpHcIr0CKKzLHxj9f3F2o0sqvupQ+QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHQQqmVNy7/5XVcEKn5BDhj7iVNMB8GA1UdIwQY
MBaAFJMePI3grdnalc9E2J9Qv9564ZpXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84NTJjZmQtZDU5Mi00YzJkLTk0Y2Yt
YjljYTc1NTVjMmM1LzEva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi84NTJjZmQtZDU5Mi00YzJkLTk0Y2YtYjljYTc1NTVjMmM1
LzEva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVYv2ureP
DERi2/3yYCfx/NxgVDCvfXK63yk2wWwe6GtN5F14By3kjxiwSnuUgG2SXNs0O9s3
eVgODulcSroB9Z7pnkBqOibUtzKBQ4zWTRuib5MkE+UE7E1ewPsBThyi6lRUEyO3
KUJQktBNHG9Iibuo7EPqPd7KNZwFfep0AWXBwu2Ymz1P/y3l/CR1FH76iJ4jn6Hp
wpcT14i9PpToaqSRKIWy5xSOODL1yP/4EHvVIzZqi9hjmWf9NXyzaBsjoBSeQqqH
QNk2qZw8vz/wNj6cNZ+w628/tteBtLg21q5yihfjFnApwHZH84TUV2q5SQ706vmG
d1Qg5NIrTAGPUQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:33:19 2025 by rpki-client