
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier: ruozy6agqT4KKgTT+JJwNHj9H7PiGxNaSHEalcVer1E=
Subject key identifier: 1C:35:26:3D:58:6A:AC:D4:52:EC:CA:FC:FE:4F:F3:53:FD:34:90:6D
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 0198D54E7CC63A647C601CC2BC32FF06F067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number: 0AAE
Signing time: Sat 23 Aug 2025 05:02:27 +0000
Manifest this update: Sat 23 Aug 2025 05:02:27 +0000
Manifest next update: Sun 24 Aug 2025 05:02:27 +0000
Files and hashes: 1: 4Dd_oz2TtpOXQBrGavmGYMPXNlw.roa (hash: lEaJsZdsULkNE5Gu41TR5VUrs6XkOuSkB/MqNMbSRqE=)
2: 9CKQGKCQI-bIMlSOn18EkSByP_c.roa (hash: fUEwlGorb/53MsJAC9arcQFk2OY9saq26gPtLezc70o=)
3: Ehx_bk8hfbPb2wCCkbIFutyAoiQ.roa (hash: +HKiRGiNwcMbHRNsEOcJQScZZXduQOT3b8IfA7DUH+8=)
4: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: 3Vs0+FdTodVNZES8n3VlkCuYrgV1xpayr4b7dlyPb4E=)
5: azXA0zek1r4GjxGORUc5CbVhlro.roa (hash: dBG8mL0HT6A6TrmZTX65GYmNTUtlNHr3mHgXq8jXk/c=)
6: fawo1EoqRqBJwHjBpTPTmcGb0cM.roa (hash: F6clH7PVg2lpM3y/mX4Zj9CRymDOfHXzUQhjxqzwyxg=)
7: o9r3uR2f73He5KEKu4BwYPFzrZs.roa (hash: di2c5UqcUyXblOdBvGL8kM199QqPxFbroxHSs6c/vq8=)
8: qF7Yer0u7ziOGGwDeljcv2iin4k.roa (hash: ahTinSaOPP9oVbrP+xhco0U3iDA/GD0BuDeaOSksTIc=)
9: sd0jlwypX7mTRSVDcmbA2KcPRVw.roa (hash: YbZCCfMPY850ehWHI89VOAxoC5oI9QnHcBkGCUColGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:7c:c6:3a:64:7c:60:1c:c2:bc:32:ff:06:f0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Aug 23 05:02:27 2025 GMT
Not After : Aug 24 05:02:27 2025 GMT
Subject: CN=1c35263d586aacd452eccafcfe4ff353fd34906d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ef:ad:87:2a:f3:12:4d:73:1a:19:f6:44:20:
f1:d5:45:9c:8f:0b:96:06:f6:32:86:bc:1c:65:11:
17:48:32:14:2e:c0:2e:65:72:b7:c9:fc:0f:e0:72:
fb:de:67:f4:94:3a:0d:f2:5b:71:60:c8:61:7a:aa:
fc:e3:9e:82:2a:72:ef:84:ac:5e:68:82:78:95:12:
cd:0e:da:2d:cf:79:90:66:75:9f:10:e3:ec:62:99:
1a:d4:f6:b6:db:ea:23:eb:7e:14:20:0e:3f:83:86:
8f:e2:4c:2a:97:f0:3a:af:11:ac:20:2b:01:1e:3f:
b1:13:3c:3a:bd:32:bb:be:4d:40:81:87:19:6d:db:
7e:48:97:9a:c9:b3:65:c1:08:58:c3:bc:29:75:39:
4a:e7:0a:df:ed:18:92:2a:e5:07:28:66:06:7a:05:
ae:15:aa:0e:1d:7c:7d:98:ac:62:80:30:11:56:7b:
cb:e2:0a:35:82:f1:d6:67:00:de:b6:f0:fd:66:75:
04:a4:e9:79:29:de:b4:13:ae:36:ed:b6:43:30:84:
1b:16:f8:c3:70:42:0d:e2:95:aa:f5:18:ea:9e:84:
66:52:7c:f0:1f:b9:af:20:5e:36:41:90:90:9c:f6:
5a:be:c7:48:d6:c2:dd:5c:40:7b:be:d1:2f:3f:7c:
83:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:35:26:3D:58:6A:AC:D4:52:EC:CA:FC:FE:4F:F3:53:FD:34:90:6D
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:78:e9:58:11:c8:5d:c8:d2:9b:ea:29:4a:ed:12:77:f2:2f:
7a:79:64:68:27:31:17:d4:21:11:f8:59:0a:57:f1:b6:3a:32:
be:d7:fb:e5:53:f7:d6:ab:02:cc:3f:15:c6:e5:aa:d1:1a:2d:
02:4e:c9:95:5b:87:ec:84:7a:5f:cc:b1:22:6f:1b:37:21:de:
0b:4f:53:b3:fb:eb:18:a0:7a:ad:57:a2:9d:64:0a:09:82:60:
92:f3:15:63:32:2a:3d:5e:8a:3e:10:26:bf:8e:e3:63:8e:42:
10:bb:c4:c6:e6:d3:49:2e:ad:32:f6:e8:09:a7:0d:4f:30:67:
0a:89:ed:56:bb:c4:6a:35:1a:ae:64:f8:86:e5:54:b8:4b:c3:
39:34:53:a3:ee:2b:e8:6a:1d:99:c4:6b:9c:eb:af:87:b2:f0:
a3:92:85:4f:ab:71:4d:fe:26:2b:7b:da:c3:5d:3c:aa:e9:6b:
5e:3d:d1:63:a2:60:50:e2:b2:8d:3a:6a:2d:b2:9b:42:68:1e:
dd:c0:1e:74:2e:93:f3:ca:31:87:89:f9:b3:31:4c:24:72:f7:
c2:a7:fb:c1:18:05:cb:7f:b4:7a:1f:0f:98:62:e5:ed:3c:2c:
28:4f:ef:1f:78:d8:07:ce:d6:2d:28:55:6e:0f:0e:3f:6c:a2:
c3:63:a5:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTnzGOmR8YBzCvDL/BvBnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZmQ2NmU0M2ExMDQ2MzNiMjdiYWM1MzliOThiZGY4ZWJm
YWM5YWUwHhcNMjUwODIzMDUwMjI3WhcNMjUwODI0MDUwMjI3WjAzMTEwLwYDVQQD
EygxYzM1MjYzZDU4NmFhY2Q0NTJlY2NhZmNmZTRmZjM1M2ZkMzQ5MDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz++thyrzEk1zGhn2RCDx1UWcjwuW
BvYyhrwcZREXSDIULsAuZXK3yfwP4HL73mf0lDoN8ltxYMhheqr8456CKnLvhKxe
aIJ4lRLNDtotz3mQZnWfEOPsYpka1Pa22+oj634UIA4/g4aP4kwql/A6rxGsICsB
Hj+xEzw6vTK7vk1AgYcZbdt+SJeaybNlwQhYw7wpdTlK5wrf7RiSKuUHKGYGegWu
FaoOHXx9mKxigDARVnvL4go1gvHWZwDetvD9ZnUEpOl5Kd60E6427bZDMIQbFvjD
cEIN4pWq9RjqnoRmUnzwH7mvIF42QZCQnPZavsdI1sLdXEB7vtEvP3yDeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBw1Jj1YaqzUUuzK/P5P81P9NJBtMB8GA1UdIwQY
MBaAFCj9ZuQ6EEYzsnusU5uYvfjr+smuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYt
MjY3NjY5ZjM1NjQ4LzEvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYtMjY3NjY5ZjM1NjQ4
LzEvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3jpWBHI
XcjSm+opSu0Sd/IvenlkaCcxF9QhEfhZClfxtjoyvtf75VP31qsCzD8VxuWq0Rot
Ak7JlVuH7IR6X8yxIm8bNyHeC09Ts/vrGKB6rVeinWQKCYJgkvMVYzIqPV6KPhAm
v47jY45CELvExubTSS6tMvboCacNTzBnContVrvEajUarmT4huVUuEvDOTRTo+4r
6GodmcRrnOuvh7Lwo5KFT6txTf4mK3vaw108qulrXj3RY6JgUOKyjTpqLbKbQmge
3cAedC6T88oxh4n5szFMJHL3wqf7wRgFy3+0eh8PmGLl7TwsKE/vH3jYB87WLShV
bg8OP2yiw2Oleg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:35 2025 by rpki-client