Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
File: kkGtDn_CK_urVnvon2PZgF5euao.mft (raw, json)
Hash identifier: pUTuFm1ErIPr/hZ3pk45p+TRAjDNL9ahJMUrbUgtM9I=
Subject key identifier: EB:E9:3C:73:88:4F:31:EB:3D:EC:BD:1B:08:12:1C:85:20:42:1C:D1
Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
Certificate issuer: /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Certificate serial: 0198D58381EB5F943178065DDA0FB634DC42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 06:00:22 +0000
Manifest this update: Sat 23 Aug 2025 06:00:22 +0000
Manifest next update: Sun 24 Aug 2025 06:00:22 +0000
Files and hashes: 1: Fu58RJgsZ5Us0AAevq0rVOWRRzg.roa (hash: ng5uPev1pyRZi4kTfCBU+j8vTTj6PtE4Pb5wITUaj0Y=)
2: kkGtDn_CK_urVnvon2PZgF5euao.crl (hash: b0P1G5255MAAqoPAYNbYjOP8YMRsdpB1IkDMsAMidtY=)
3: qthrebr-v1IWeqSrT9AeYqstaDk.roa (hash: DPL9WcMNI+TsTDagJsEchXMuxd7Nz1dhpWlTxjl+984=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:81:eb:5f:94:31:78:06:5d:da:0f:b6:34:dc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Validity
Not Before: Aug 23 06:00:22 2025 GMT
Not After : Aug 24 06:00:22 2025 GMT
Subject: CN=ebe93c73884f31eb3decbd1b08121c8520421cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a7:f9:27:a6:0b:de:24:2d:d5:d3:ff:1d:f1:
7c:72:9e:5c:bf:16:19:fe:74:01:73:36:1d:79:4f:
7d:03:fb:5f:6b:03:dd:d1:1a:70:72:aa:ca:72:ae:
17:5f:15:6b:58:6b:ba:2b:d9:ed:71:b8:e7:2c:41:
01:8e:81:b1:f6:69:b4:c9:b5:e8:b3:de:dd:aa:1f:
1d:10:33:41:86:8c:53:b0:80:9c:a3:f1:8f:c1:8c:
67:8b:90:26:e3:f1:7e:82:84:71:ff:c8:64:f4:9a:
db:19:e2:4b:73:41:8d:58:7c:03:21:67:68:b3:2c:
b0:c8:bd:75:ab:68:33:17:a3:7a:2c:ca:ff:d9:ba:
b0:49:35:c5:14:31:00:b5:5e:c4:ce:3e:c5:02:0e:
ee:06:1d:79:69:ff:59:b4:3d:c4:93:fb:21:e6:8a:
e9:92:23:ca:bd:47:9d:d3:fe:11:64:09:a5:d5:f2:
9e:d7:dc:0e:5a:b3:aa:f1:f1:ff:68:20:90:46:2a:
8b:ce:00:62:c8:ff:14:4b:72:4b:81:9c:39:05:3a:
ba:8e:f0:e3:c2:86:27:10:2e:76:32:77:fa:30:e0:
3a:f5:0a:c5:42:de:41:a7:fd:48:68:a3:93:82:1d:
e3:18:95:1a:2c:e0:35:1a:14:c8:9d:56:91:11:2e:
7a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E9:3C:73:88:4F:31:EB:3D:EC:BD:1B:08:12:1C:85:20:42:1C:D1
X509v3 Authority Key Identifier:
keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:af:55:ee:05:fc:92:5a:ea:6c:b9:df:5a:23:8d:4b:56:76:
b5:1b:07:cb:e1:dc:4c:21:fa:9f:90:65:bd:5f:0e:47:2e:a1:
6e:be:8f:58:e0:83:bf:58:90:52:91:ba:44:82:b3:b9:5b:81:
ab:45:0b:71:8f:4f:12:7d:09:4a:26:e8:95:c5:63:52:3d:46:
23:df:d3:b9:d0:82:7f:a3:9f:74:d5:a1:95:3c:12:59:fa:fa:
d6:cc:2c:35:53:85:4b:f0:b2:a6:f6:7c:d8:97:f2:72:87:49:
80:06:51:3d:98:d0:14:dc:ab:c1:db:b1:12:d0:b4:ec:2e:ee:
0a:39:c6:58:d8:5c:5d:5f:ad:38:8c:1c:5f:2e:e6:6b:06:e9:
ea:fd:d9:4b:e2:6b:f4:49:94:a2:e1:d3:3d:66:3d:ff:32:b0:
3f:15:6b:b2:6c:97:31:22:38:54:68:2e:28:f5:98:19:e9:c1:
0c:bc:4e:ba:f1:76:b2:dc:58:c2:c5:13:e8:97:8d:26:1f:61:
35:df:e9:5d:75:55:be:6f:c8:b2:f9:f7:52:0c:4d:c2:01:31:
e6:a6:e5:aa:97:34:17:f7:ea:9c:05:3e:ae:b2:c4:41:e3:63:
91:ad:9c:26:8c:eb:d3:d7:4a:b7:f1:79:14:25:99:e4:34:11:
f7:4c:f2:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg4HrX5QxeAZd2g+2NNxCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDFhZDBlN2ZjMjJiZmJhYjU2N2JlODlmNjNkOTgwNWU1
ZWI5YWEwHhcNMjUwODIzMDYwMDIyWhcNMjUwODI0MDYwMDIyWjAzMTEwLwYDVQQD
EyhlYmU5M2M3Mzg4NGYzMWViM2RlY2JkMWIwODEyMWM4NTIwNDIxY2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqf5J6YL3iQt1dP/HfF8cp5cvxYZ
/nQBczYdeU99A/tfawPd0RpwcqrKcq4XXxVrWGu6K9ntcbjnLEEBjoGx9mm0ybXo
s97dqh8dEDNBhoxTsICco/GPwYxni5Am4/F+goRx/8hk9JrbGeJLc0GNWHwDIWdo
syywyL11q2gzF6N6LMr/2bqwSTXFFDEAtV7Ezj7FAg7uBh15af9ZtD3Ek/sh5orp
kiPKvUed0/4RZAml1fKe19wOWrOq8fH/aCCQRiqLzgBiyP8US3JLgZw5BTq6jvDj
woYnEC52Mnf6MOA69QrFQt5Bp/1IaKOTgh3jGJUaLOA1GhTInVaRES567wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvpPHOITzHrPey9GwgSHIUgQhzRMB8GA1UdIwQY
MBaAFJJBrQ5/wiv7q1Z76J9j2YBeXrmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mYjFhNmQtNDEzOC00YzRmLWFlZDkt
NDU0NGM2MTA5NzI5LzEva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9mYjFhNmQtNDEzOC00YzRmLWFlZDktNDU0NGM2MTA5NzI5
LzEva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALa9V7gX8
klrqbLnfWiONS1Z2tRsHy+HcTCH6n5BlvV8ORy6hbr6PWOCDv1iQUpG6RIKzuVuB
q0ULcY9PEn0JSibolcVjUj1GI9/TudCCf6OfdNWhlTwSWfr61swsNVOFS/CypvZ8
2JfycodJgAZRPZjQFNyrwduxEtC07C7uCjnGWNhcXV+tOIwcXy7mawbp6v3ZS+Jr
9EmUouHTPWY9/zKwPxVrsmyXMSI4VGguKPWYGenBDLxOuvF2stxYwsUT6JeNJh9h
Nd/pXXVVvm/Isvn3UgxNwgEx5qblqpc0F/fqnAU+rrLEQeNjka2cJozr09dKt/F5
FCWZ5DQR90zyIQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:51 2025 by rpki-client