Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
File: kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json)
Hash identifier: cF54kGdBDwTLY9LPAGe6Sj06tLZhHt3te8bWuKXGZoY=
Subject key identifier: BF:D5:20:F0:FF:80:21:EE:EA:32:5F:77:20:91:85:19:E7:F2:F3:FC
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial: 0198D4A782E09182ADCBDDB003D307C898C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 02:00:04 +0000
Manifest this update: Sat 23 Aug 2025 02:00:04 +0000
Manifest next update: Sun 24 Aug 2025 02:00:04 +0000
Files and hashes: 1: 9kHCDEYZPWH5aik7KavJ0sDUmNA.roa (hash: ijJR9ND92QYljIrNDlxEINq6c8DaInEaO2V/WhuFgzU=)
2: Mdtn2WNSBNsE9Aa9ivpouspTZzc.roa (hash: S9ae068y1S4PtOCQAT0sFXCH1rFhFv4f3zsh6JDJIEk=)
3: ZgG20-53jQJwsyA9Uj-HDlUNiyA.roa (hash: r4Yw7FV6MragLYSnWbxNhJIL4Bz5tpt7zooYhdKRX2U=)
4: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: A+CJHGKvQf/FmIYxKP5/cU/J5oy0TCBrVpgA0GqnjuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:82:e0:91:82:ad:cb:dd:b0:03:d3:07:c8:98:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
Validity
Not Before: Aug 23 02:00:04 2025 GMT
Not After : Aug 24 02:00:04 2025 GMT
Subject: CN=bfd520f0ff8021eeea325f7720918519e7f2f3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7c:1a:c1:39:3a:36:2b:15:44:e2:81:a1:9f:
d6:b5:ae:9a:45:15:55:76:93:85:ab:fb:4a:7b:09:
de:4f:e6:34:b1:a7:ad:e5:64:a9:64:41:d0:65:c1:
c5:c4:25:68:03:35:33:2a:5c:e8:5c:15:6c:70:f4:
7e:84:0c:66:94:2f:f1:6f:69:b0:97:57:79:3c:67:
49:79:87:a6:b7:a6:e2:73:25:78:29:3c:66:ef:e0:
75:7b:26:52:da:56:70:a3:0f:83:d8:79:c9:d9:7a:
e1:28:0b:34:21:e1:76:90:ca:2a:e8:b3:ae:7d:c8:
11:b0:89:f7:dd:85:bc:7c:7e:c0:1d:59:62:33:4a:
8b:f4:7e:c2:85:94:d4:36:d0:6a:7c:b5:14:b5:8b:
bc:9d:0b:9d:89:fe:e6:2e:42:d8:f5:b6:91:76:f5:
b8:df:40:c7:2f:72:f9:7f:71:62:c6:19:05:c9:e7:
2e:e5:93:6a:b7:ae:82:e7:9f:d7:8e:13:ba:f2:78:
8d:af:85:a0:86:db:fa:e8:b0:c8:48:5a:7b:b4:38:
7d:2b:16:5c:22:4f:c1:77:86:23:a0:67:16:86:bb:
00:d9:8f:b1:4d:7d:2f:2d:e5:cf:2e:3e:b6:7b:1e:
37:b5:1d:99:95:f2:a7:b1:10:a6:a4:af:f8:ba:91:
05:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D5:20:F0:FF:80:21:EE:EA:32:5F:77:20:91:85:19:E7:F2:F3:FC
X509v3 Authority Key Identifier:
keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:89:a4:f9:93:30:18:75:92:d5:2d:72:94:b6:6e:47:e4:f4:
5f:b6:ec:68:60:61:bc:5c:53:17:af:ab:e5:2e:da:d3:be:b5:
95:1c:a8:1d:b3:47:a9:a7:0f:67:b8:ad:17:2c:42:62:9f:4d:
6b:06:ca:5b:2a:70:47:03:2b:6f:10:87:6d:8e:6c:fa:56:91:
b4:f5:1f:1b:92:26:78:72:92:73:3b:a0:4e:56:0b:0f:a5:dd:
57:9e:79:ea:19:36:5f:8a:50:a1:f6:07:2a:d8:2c:b3:3c:94:
dc:83:ac:6c:85:8f:de:e0:15:5c:e8:ec:c2:3d:fd:d4:8f:8a:
0b:01:66:8e:c2:ca:97:2b:5f:b1:2b:ab:5a:fb:7c:60:df:d1:
44:d9:33:db:da:94:c1:51:92:cd:56:5b:a4:26:21:07:0d:b6:
5d:dc:ef:25:72:10:d9:61:64:74:df:9a:1a:e7:55:c2:2b:63:
db:fb:87:a7:19:f9:6a:b1:fa:c0:fe:dd:b8:c1:77:8e:39:6c:
58:26:54:f1:18:90:c4:b6:e2:0c:ff:6b:7b:03:f1:aa:c7:a8:
af:ba:db:09:7e:80:37:3b:f1:9c:88:47:6f:19:14:a8:dc:75:
25:57:f9:81:54:60:64:c0:00:ba:95:04:65:61:e3:55:8b:12:
41:67:e6:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp4LgkYKty92wA9MHyJjIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyM2EyYjNkZDc2NjcyNzVmMDk4ODZkZjdkYTA3OWY3NTVj
ZWVkNTkwHhcNMjUwODIzMDIwMDA0WhcNMjUwODI0MDIwMDA0WjAzMTEwLwYDVQQD
EyhiZmQ1MjBmMGZmODAyMWVlZWEzMjVmNzcyMDkxODUxOWU3ZjJmM2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznwawTk6NisVROKBoZ/Wta6aRRVV
dpOFq/tKewneT+Y0saet5WSpZEHQZcHFxCVoAzUzKlzoXBVscPR+hAxmlC/xb2mw
l1d5PGdJeYemt6bicyV4KTxm7+B1eyZS2lZwow+D2HnJ2XrhKAs0IeF2kMoq6LOu
fcgRsIn33YW8fH7AHVliM0qL9H7ChZTUNtBqfLUUtYu8nQudif7mLkLY9baRdvW4
30DHL3L5f3FixhkFyecu5ZNqt66C55/XjhO68niNr4Wghtv66LDISFp7tDh9KxZc
Ik/Bd4YjoGcWhrsA2Y+xTX0vLeXPLj62ex43tR2ZlfKnsRCmpK/4upEFuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/VIPD/gCHu6jJfdyCRhRnn8vP8MB8GA1UdIwQY
MBaAFJI6Kz3XZnJ18JiG332gefdVzu1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iNzk2ZjQtMmU4OC00ZWFhLWEyNjkt
MjczOGJjYjQzZDZkLzEva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iNzk2ZjQtMmU4OC00ZWFhLWEyNjktMjczOGJjYjQzZDZk
LzEva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUomk+ZMw
GHWS1S1ylLZuR+T0X7bsaGBhvFxTF6+r5S7a0761lRyoHbNHqacPZ7itFyxCYp9N
awbKWypwRwMrbxCHbY5s+laRtPUfG5ImeHKSczugTlYLD6XdV5556hk2X4pQofYH
KtgsszyU3IOsbIWP3uAVXOjswj391I+KCwFmjsLKlytfsSurWvt8YN/RRNkz29qU
wVGSzVZbpCYhBw22XdzvJXIQ2WFkdN+aGudVwitj2/uHpxn5arH6wP7duMF3jjls
WCZU8RiQxLbiDP9rewPxqseor7rbCX6ANzvxnIhHbxkUqNx1JVf5gVRgZMAAupUE
ZWHjVYsSQWfmeA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:08 2025 by rpki-client