Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
File: kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft (raw, json)
Hash identifier: KApKy43ZcSkaq3OC9lmfVRj126n2pLaaXfPT29Xd98s=
Subject key identifier: 34:A5:C9:66:44:DA:20:FB:57:F3:8A:E8:84:B6:EA:AB:D3:EA:03:63
Authority key identifier: 91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62
Certificate issuer: /CN=91362d3c0953e8c933f0092a589b75494904f962
Certificate serial: 0198D4E0C108D35933F9A079AB9B6C73717C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
Manifest number: 14FA
Signing time: Sat 23 Aug 2025 03:02:35 +0000
Manifest this update: Sat 23 Aug 2025 03:02:35 +0000
Manifest next update: Sun 24 Aug 2025 03:02:35 +0000
Files and hashes: 1: gF4h3hPUiQwbrFzucTsw-cGzGHQ.roa (hash: EmUyYOWtfES7R4OmRJxOMl7sM7cF9x8yLjgV5Oo/MqY=)
2: kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl (hash: AcgPJisKj5VKksDuavgXazSgy3wFPi4lDIdC9F9YgoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:c1:08:d3:59:33:f9:a0:79:ab:9b:6c:73:71:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91362d3c0953e8c933f0092a589b75494904f962
Validity
Not Before: Aug 23 03:02:35 2025 GMT
Not After : Aug 24 03:02:35 2025 GMT
Subject: CN=34a5c96644da20fb57f38ae884b6eaabd3ea0363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:3b:e0:5f:c5:38:95:5d:4c:e5:22:6f:aa:
48:5c:ae:81:73:88:2c:84:60:91:6a:fe:df:50:e1:
32:db:35:4e:34:80:42:0b:28:25:b5:d9:33:b5:8d:
30:ee:36:1e:c6:4c:ab:48:a7:e9:75:29:69:ae:84:
4e:a1:4e:8e:20:ce:22:95:8d:42:29:9b:aa:7e:81:
1f:58:21:e9:9c:99:0d:9a:3d:83:fd:c9:a4:83:cf:
2c:d6:e1:b0:e6:2b:4c:fd:aa:c5:cc:00:ff:0b:89:
a1:56:67:22:dd:6f:b6:1c:e8:ed:51:f3:66:0c:d9:
14:82:6b:6c:9e:b3:a9:42:0d:a4:1a:8b:f9:10:af:
e3:54:c4:43:c6:6f:69:e6:d2:97:b4:3d:8d:fa:1d:
5f:ce:c8:ca:f1:2d:36:3a:d0:8c:dd:95:21:0a:a2:
1e:b8:67:0c:bb:47:0b:1b:25:e1:4e:c3:92:6a:79:
b5:cf:be:2d:b6:17:e9:01:24:70:85:f7:9b:29:f8:
2d:ea:f0:9f:58:74:ec:de:2a:09:41:31:60:99:a4:
ef:da:cf:fa:b4:a9:b1:4a:ca:ed:c2:0e:63:a6:e3:
f5:48:dd:6f:54:3a:c7:f2:e8:3b:09:6e:67:b0:24:
9c:5c:9b:91:78:f0:51:6e:f6:90:ad:ed:99:d5:af:
2f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A5:C9:66:44:DA:20:FB:57:F3:8A:E8:84:B6:EA:AB:D3:EA:03:63
X509v3 Authority Key Identifier:
keyid:91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:19:bc:98:86:7b:7a:58:a5:11:d0:e8:2c:9a:23:fa:db:f8:
60:dd:d4:27:8e:ee:e4:1b:33:49:1c:28:4e:38:2a:63:db:f8:
73:78:50:4e:3c:69:3a:47:17:20:0c:e2:e3:b5:2e:91:08:5e:
9d:f6:95:ca:ca:44:5a:13:ef:3e:11:a8:0d:ec:65:85:4f:59:
b3:0f:c1:5d:2c:b4:2a:11:c1:44:8f:ac:18:ca:1c:83:5d:a1:
51:65:31:e4:3f:9c:cd:43:fb:83:cb:36:6d:10:e9:31:84:7a:
07:70:33:f0:77:d0:f2:ed:7f:cd:bf:d1:6a:08:64:1a:7b:94:
f3:75:95:da:bc:d8:58:ea:e3:de:85:cc:5b:52:01:c2:43:1f:
e3:6a:25:2f:48:4d:b8:d6:86:5e:58:31:9c:02:65:e0:59:59:
7a:a9:c4:2f:57:aa:a8:5c:94:0a:c5:4d:d7:2d:31:98:98:f0:
80:cc:df:7c:34:29:95:d3:91:ca:ee:9f:7f:e4:b6:d9:7f:29:
a0:d2:3e:51:5b:ce:86:63:81:3b:c1:1f:97:71:03:98:24:ec:
15:7e:31:00:32:76:9a:2d:4d:96:54:28:2b:f4:a2:62:05:a3:
be:56:eb:48:ae:06:53:45:b0:32:59:49:ee:2e:73:9d:7e:27:
e6:dc:1a:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4MEI01kz+aB5q5tsc3F8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMzYyZDNjMDk1M2U4YzkzM2YwMDkyYTU4OWI3NTQ5NDkw
NGY5NjIwHhcNMjUwODIzMDMwMjM1WhcNMjUwODI0MDMwMjM1WjAzMTEwLwYDVQQD
EygzNGE1Yzk2NjQ0ZGEyMGZiNTdmMzhhZTg4NGI2ZWFhYmQzZWEwMzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsI74F/FOJVdTOUib6pIXK6Bc4gs
hGCRav7fUOEy2zVONIBCCygltdkztY0w7jYexkyrSKfpdSlproROoU6OIM4ilY1C
KZuqfoEfWCHpnJkNmj2D/cmkg88s1uGw5itM/arFzAD/C4mhVmci3W+2HOjtUfNm
DNkUgmtsnrOpQg2kGov5EK/jVMRDxm9p5tKXtD2N+h1fzsjK8S02OtCM3ZUhCqIe
uGcMu0cLGyXhTsOSanm1z74tthfpASRwhfebKfgt6vCfWHTs3ioJQTFgmaTv2s/6
tKmxSsrtwg5jpuP1SN1vVDrH8ug7CW5nsCScXJuRePBRbvaQre2Z1a8voQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSlyWZE2iD7V/OK6IS26qvT6gNjMB8GA1UdIwQY
MBaAFJE2LTwJU+jJM/AJKlibdUlJBPliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1RZdFBBbFQ2TWt6OEFrcVdKdDFTVWtFLVdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wMjJlZTQtNDRkZS00MDA0LTk4Mzkt
YTQ0OWNlNDZhOWIxLzEva1RZdFBBbFQ2TWt6OEFrcVdKdDFTVWtFLVdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8wMjJlZTQtNDRkZS00MDA0LTk4MzktYTQ0OWNlNDZhOWIx
LzEva1RZdFBBbFQ2TWt6OEFrcVdKdDFTVWtFLVdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABRm8mIZ7
elilEdDoLJoj+tv4YN3UJ47u5BszSRwoTjgqY9v4c3hQTjxpOkcXIAzi47UukQhe
nfaVyspEWhPvPhGoDexlhU9Zsw/BXSy0KhHBRI+sGMocg12hUWUx5D+czUP7g8s2
bRDpMYR6B3Az8HfQ8u1/zb/RaghkGnuU83WV2rzYWOrj3oXMW1IBwkMf42olL0hN
uNaGXlgxnAJl4FlZeqnEL1eqqFyUCsVN1y0xmJjwgMzffDQpldORyu6ff+S22X8p
oNI+UVvOhmOBO8Efl3EDmCTsFX4xADJ2mi1NllQoK/SiYgWjvlbrSK4GU0WwMllJ
7i5znX4n5twa7A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:46 2025 by rpki-client