Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
File: kNPlNxtkq5QtbcugSt_yrnq3xxI.mft (raw, json)
Hash identifier: +enAV8pM6oD6J1qPc77rlRahj8x6SUw1stpt8vjPoDc=
Subject key identifier: 20:F8:CB:9C:CF:42:D2:51:F1:2F:E4:86:2A:2E:F8:13:54:20:03:50
Authority key identifier: 90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
Certificate issuer: /CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712
Certificate serial: 0198D6606187B91D6DDC43A3569BDABB1887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:01:37 +0000
Manifest this update: Sat 23 Aug 2025 10:01:37 +0000
Manifest next update: Sun 24 Aug 2025 10:01:37 +0000
Files and hashes: 1: 8qr5TNtGc99EM-QMiEzlHX-eukY.roa (hash: dcTHPs/n6VDmLIgcktF37rlPg3cwpYptx2bPoNDPRlM=)
2: kNPlNxtkq5QtbcugSt_yrnq3xxI.crl (hash: Iz62YdwAxbTsHH341PR+ZRivKoFhMhXlCoeYOkEGfBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:61:87:b9:1d:6d:dc:43:a3:56:9b:da:bb:18:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712
Validity
Not Before: Aug 23 10:01:37 2025 GMT
Not After : Aug 24 10:01:37 2025 GMT
Subject: CN=20f8cb9ccf42d251f12fe4862a2ef81354200350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2d:bc:b0:90:97:7b:4a:08:c4:36:97:ed:9e:
e1:55:1f:1f:9d:ce:b8:0b:8d:80:49:aa:d8:e7:23:
b7:e5:d5:1a:28:06:ae:0f:36:fd:41:07:c2:c2:4b:
a3:f0:a0:fb:f4:fe:ec:be:98:58:c3:45:7d:73:f8:
bc:da:8a:06:5c:71:ac:38:62:20:ad:2d:b0:a1:08:
a9:de:da:43:77:6b:5f:98:9b:d4:17:47:5c:66:dc:
7c:35:66:06:b0:1a:9f:b0:17:56:aa:1b:b0:fc:f9:
90:84:a2:75:0a:3c:55:52:85:5e:f3:a4:79:0f:28:
b2:66:fa:0a:5c:bf:87:7b:81:f9:16:53:b8:61:5f:
fe:08:4a:99:88:cd:24:15:32:d6:d6:ea:36:9e:26:
3a:0a:6a:cb:f4:c2:94:5e:eb:14:78:c3:21:08:93:
df:4b:8d:76:4f:0e:5b:a1:ac:26:79:57:01:42:74:
25:1e:09:fd:a5:05:5e:4e:9c:08:24:9b:b0:05:5b:
8f:86:bc:b6:f9:a6:d7:bb:76:68:45:72:55:d8:3e:
7e:9a:c3:d2:6c:5f:50:e3:f0:73:bd:be:2c:ea:3d:
47:66:96:45:d4:34:cb:8f:91:70:5c:4d:59:37:98:
63:72:3f:65:c7:80:5b:b1:b9:02:72:11:40:c9:a6:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F8:CB:9C:CF:42:D2:51:F1:2F:E4:86:2A:2E:F8:13:54:20:03:50
X509v3 Authority Key Identifier:
keyid:90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:be:e5:6b:90:11:aa:19:b7:4e:d3:18:f9:f1:57:e0:46:7d:
0c:2e:20:9c:da:ba:fa:d2:7d:dd:b8:b4:1d:b3:7f:15:4a:35:
b6:2b:82:58:c3:3f:1a:8e:86:e1:ba:6a:1c:d3:30:b1:c0:a7:
85:2d:9c:40:2d:1c:81:bd:a9:9c:77:5b:5b:d2:73:f4:21:7e:
92:05:16:36:f2:5f:e1:f0:0c:fb:8d:b5:db:3a:48:0b:44:7e:
b0:71:10:98:14:8b:63:c2:aa:3b:41:5d:28:c4:be:12:a1:2d:
9c:7f:35:3e:52:ae:6d:35:29:47:b6:b4:f9:97:f1:b7:7e:f3:
57:8b:ea:3f:83:9a:15:f6:8d:fa:a7:79:66:6d:26:87:cd:68:
35:e5:e4:7e:fb:77:c2:6e:ac:71:1a:f1:3b:9f:df:d4:30:56:
39:eb:de:24:6d:0a:49:84:a3:5b:d9:4d:f9:5d:38:bf:47:ca:
aa:fc:0c:d4:0f:0c:3d:04:3c:a2:67:85:75:f3:ea:f0:47:f0:
2c:d8:0f:f4:83:cb:ad:3b:de:75:2c:dc:d2:77:2b:1e:6e:fa:
98:c6:b2:9f:0a:db:68:e5:a5:8f:a7:aa:cd:c8:ff:f3:0b:6a:
b7:af:47:85:46:10:e9:3d:29:cf:27:7a:a0:d3:11:47:9f:a0:
d8:a0:78:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYGGHuR1t3EOjVpvauxiHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZDNlNTM3MWI2NGFiOTQyZDZkY2JhMDRhZGZmMmFlN2Fi
N2M3MTIwHhcNMjUwODIzMTAwMTM3WhcNMjUwODI0MTAwMTM3WjAzMTEwLwYDVQQD
EygyMGY4Y2I5Y2NmNDJkMjUxZjEyZmU0ODYyYTJlZjgxMzU0MjAwMzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7C28sJCXe0oIxDaX7Z7hVR8fnc64
C42ASarY5yO35dUaKAauDzb9QQfCwkuj8KD79P7svphYw0V9c/i82ooGXHGsOGIg
rS2woQip3tpDd2tfmJvUF0dcZtx8NWYGsBqfsBdWqhuw/PmQhKJ1CjxVUoVe86R5
DyiyZvoKXL+He4H5FlO4YV/+CEqZiM0kFTLW1uo2niY6CmrL9MKUXusUeMMhCJPf
S412Tw5boawmeVcBQnQlHgn9pQVeTpwIJJuwBVuPhry2+abXu3ZoRXJV2D5+msPS
bF9Q4/Bzvb4s6j1HZpZF1DTLj5FwXE1ZN5hjcj9lx4BbsbkCchFAyaYztQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCD4y5zPQtJR8S/khiou+BNUIANQMB8GA1UdIwQY
MBaAFJDT5TcbZKuULW3LoErf8q56t8cSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva05QbE54dGtxNVF0YmN1Z1N0X3lybnEzeHhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jMTM5YTQtNmRhMi00MzI5LWFhZTIt
YTE3ODgyYjkyNmEwLzEva05QbE54dGtxNVF0YmN1Z1N0X3lybnEzeHhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9jMTM5YTQtNmRhMi00MzI5LWFhZTItYTE3ODgyYjkyNmEw
LzEva05QbE54dGtxNVF0YmN1Z1N0X3lybnEzeHhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZL7la5AR
qhm3TtMY+fFX4EZ9DC4gnNq6+tJ93bi0HbN/FUo1tiuCWMM/Go6G4bpqHNMwscCn
hS2cQC0cgb2pnHdbW9Jz9CF+kgUWNvJf4fAM+4212zpIC0R+sHEQmBSLY8KqO0Fd
KMS+EqEtnH81PlKubTUpR7a0+Zfxt37zV4vqP4OaFfaN+qd5Zm0mh81oNeXkfvt3
wm6scRrxO5/f1DBWOeveJG0KSYSjW9lN+V04v0fKqvwM1A8MPQQ8omeFdfPq8Efw
LNgP9IPLrTvedSzc0ncrHm76mMaynwrbaOWlj6eqzcj/8wtqt69HhUYQ6T0pzyd6
oNMRR5+g2KB4Xw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:46:24 2025 by rpki-client