Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
File: KJDadlqZn3GYdcUe7PTH1hSKG9k.mft (raw, json)
Hash identifier: bQDuHPA35lKtNofyvhQ5EHvJJ/rVpjVALoFzkzS/ppE=
Subject key identifier: 02:A2:5E:A9:2E:A8:83:39:71:7F:2D:1D:C0:38:01:AE:2B:CC:03:B7
Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
Certificate issuer: /CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Certificate serial: 0198D5F1DDEBB6833C248DF55B3EFC33063F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
Manifest number: 0D72
Signing time: Sat 23 Aug 2025 08:00:54 +0000
Manifest this update: Sat 23 Aug 2025 08:00:54 +0000
Manifest next update: Sun 24 Aug 2025 08:00:54 +0000
Files and hashes: 1: HMBy97dklkxPQBrLpsbW-ZNRc7U.roa (hash: lqft+CvpsJy14zKD+aRqKJHCgA+Rv0wI4PijqNi8qGo=)
2: IYTFbsH2zrYimow5PfBhyISAXgE.roa (hash: 3Ol+0d4dyS1miwyxB+aBgXHbVV5ki9Vv7rh4KQYX/5Y=)
3: KJDadlqZn3GYdcUe7PTH1hSKG9k.crl (hash: kD/uorcy5ilEysjVtoydXnUHq+xDFytWNcrGVp5qMqA=)
4: ruoDX0K9VhdXmRyoyMx7Kq-ps0U.roa (hash: zYFHs9Pc2fRsxf2yR98ieoabL4bJzJtKnSudDrvjoY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:dd:eb:b6:83:3c:24:8d:f5:5b:3e:fc:33:06:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Validity
Not Before: Aug 23 08:00:54 2025 GMT
Not After : Aug 24 08:00:54 2025 GMT
Subject: CN=02a25ea92ea88339717f2d1dc03801ae2bcc03b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ab:7b:67:30:66:ed:b1:58:1c:30:07:39:ab:
37:d2:f0:a1:b7:5a:d9:ab:7c:2c:0c:c2:9f:06:dc:
f9:7c:37:13:77:01:07:30:4e:7a:cf:81:7e:a3:26:
a8:29:4f:d1:42:1a:46:97:36:5c:16:dd:b2:08:46:
59:55:2a:2d:6d:3d:20:81:a4:57:a7:53:5c:0d:c3:
57:28:7a:68:cc:81:8b:9a:13:26:e1:5f:b8:5f:44:
07:38:09:b9:74:df:71:e3:82:a0:a5:ec:89:d1:d7:
68:e3:b2:9b:e4:e4:25:53:b0:55:b8:26:d2:96:33:
b4:47:1f:ad:ec:7e:d6:07:b6:92:b5:51:c5:a4:59:
88:4e:01:2b:37:6a:ff:cb:d8:50:a2:72:4f:c9:85:
8d:01:8e:4c:b6:d1:fa:f7:cc:ad:6b:38:0e:c5:2f:
fa:52:7c:23:e7:1f:28:b9:08:b5:65:08:3e:db:14:
30:48:24:75:6a:16:9c:77:9d:4b:64:b7:38:af:28:
da:d5:c8:6d:29:1d:55:53:d3:7e:b8:c5:9e:55:2e:
81:5b:7b:4e:40:f3:63:ad:0f:79:2c:db:11:3a:42:
5b:30:db:8f:ce:6b:d1:53:0a:d2:d3:a5:66:b7:fd:
69:f8:8c:0b:fe:5a:24:b3:c0:91:b7:ca:ac:e2:bd:
20:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A2:5E:A9:2E:A8:83:39:71:7F:2D:1D:C0:38:01:AE:2B:CC:03:B7
X509v3 Authority Key Identifier:
keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ca:d7:20:93:09:28:0c:3b:d2:eb:f6:27:e9:e8:03:fb:84:
c4:e1:56:c6:93:ac:e1:0e:e2:52:14:05:32:f4:ae:9d:de:15:
7b:2d:2a:5b:18:f3:6f:46:a4:1f:5d:29:1f:05:2a:23:c9:40:
ef:4e:a5:e2:66:e0:71:4e:4f:70:49:ac:ae:e9:52:d3:e0:78:
10:de:54:77:26:a7:ae:81:20:f1:84:a2:44:61:e4:c3:ed:94:
cb:cc:a0:2a:c1:7c:93:58:3d:bb:4b:2f:b0:a9:2f:c9:5a:35:
1b:20:b3:c6:5f:e0:49:6b:8c:31:2f:fa:44:32:d8:5b:53:72:
3a:aa:1a:f5:20:80:c4:92:ca:ab:4e:b6:7e:ef:fd:2c:41:c3:
13:af:1c:33:f8:ac:d7:13:83:db:6f:5b:26:b4:b6:ff:e1:16:
a6:eb:4b:10:c7:d5:2a:13:37:84:4c:e2:6a:41:4b:b9:9a:63:
71:f7:59:ba:e4:b3:a9:37:16:50:06:31:a7:8a:26:37:98:b7:
d4:fb:19:70:74:0a:0c:9b:6d:40:e0:7d:92:e6:92:66:d4:40:
a3:52:71:67:ac:02:5e:79:cc:1b:8e:89:45:8e:8a:33:d2:8d:
2f:bb:bc:3c:e4:9f:3f:d1:6e:56:25:3c:ed:cb:fa:7e:4b:9c:
28:d0:5b:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8d3rtoM8JI31Wz78MwY/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTBkYTc2NWE5OTlmNzE5ODc1YzUxZWVjZjRjN2Q2MTQ4
YTFiZDkwHhcNMjUwODIzMDgwMDU0WhcNMjUwODI0MDgwMDU0WjAzMTEwLwYDVQQD
EygwMmEyNWVhOTJlYTg4MzM5NzE3ZjJkMWRjMDM4MDFhZTJiY2MwM2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqt7ZzBm7bFYHDAHOas30vCht1rZ
q3wsDMKfBtz5fDcTdwEHME56z4F+oyaoKU/RQhpGlzZcFt2yCEZZVSotbT0ggaRX
p1NcDcNXKHpozIGLmhMm4V+4X0QHOAm5dN9x44KgpeyJ0ddo47Kb5OQlU7BVuCbS
ljO0Rx+t7H7WB7aStVHFpFmITgErN2r/y9hQonJPyYWNAY5MttH698ytazgOxS/6
Unwj5x8ouQi1ZQg+2xQwSCR1ahacd51LZLc4ryja1chtKR1VU9N+uMWeVS6BW3tO
QPNjrQ95LNsROkJbMNuPzmvRUwrS06Vmt/1p+IwL/loks8CRt8qs4r0gyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKiXqkuqIM5cX8tHcA4Aa4rzAO3MB8GA1UdIwQY
MBaAFCiQ2nZamZ9xmHXFHuz0x9YUihvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0pEYWRscVpuM0dZZGNVZTdQVEgxaFNLRzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yYmJjZDQtZWRhYi00OGVlLWE0MTEt
MjhmYzcwNjNkOTUyLzEvS0pEYWRscVpuM0dZZGNVZTdQVEgxaFNLRzlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yYmJjZDQtZWRhYi00OGVlLWE0MTEtMjhmYzcwNjNkOTUy
LzEvS0pEYWRscVpuM0dZZGNVZTdQVEgxaFNLRzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8rXIJMJ
KAw70uv2J+noA/uExOFWxpOs4Q7iUhQFMvSund4Vey0qWxjzb0akH10pHwUqI8lA
706l4mbgcU5PcEmsrulS0+B4EN5UdyanroEg8YSiRGHkw+2Uy8ygKsF8k1g9u0sv
sKkvyVo1GyCzxl/gSWuMMS/6RDLYW1NyOqoa9SCAxJLKq062fu/9LEHDE68cM/is
1xOD229bJrS2/+EWputLEMfVKhM3hEziakFLuZpjcfdZuuSzqTcWUAYxp4omN5i3
1PsZcHQKDJttQOB9kuaSZtRAo1JxZ6wCXnnMG46JRY6KM9KNL7u8POSfP9FuViU8
7cv6fkucKNBb1Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:09 2025 by rpki-client