Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
File: rkZkQGbOrznTr7D9c1sBnOydo2Q.mft (raw, json)
Hash identifier: HKbVx4SpeAPtazhZ88T2V+xY8r3m2mS19ZxbWpKlavI=
Subject key identifier: 10:1B:02:31:26:11:07:5D:BB:DB:AA:D9:8A:67:37:B2:8C:F1:B5:8B
Authority key identifier: AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
Certificate issuer: /CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Certificate serial: 0198D4A7E2644581093E9CCBA9DAC6363210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
Manifest number: 02C9
Signing time: Sat 23 Aug 2025 02:00:28 +0000
Manifest this update: Sat 23 Aug 2025 02:00:28 +0000
Manifest next update: Sun 24 Aug 2025 02:00:28 +0000
Files and hashes: 1: CON1qItWtbrKIYXRdV_TEeDuWKQ.roa (hash: krT8XWx87IlYD5e3RTY90vBER8rVmDuOSR/mGg/Tnd4=)
2: rkZkQGbOrznTr7D9c1sBnOydo2Q.crl (hash: OJ7NPWHjYMjFhtmGag8WS/zddnLJ/1Ls05tN+rmL5uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:e2:64:45:81:09:3e:9c:cb:a9:da:c6:36:32:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Validity
Not Before: Aug 23 02:00:28 2025 GMT
Not After : Aug 24 02:00:28 2025 GMT
Subject: CN=101b02312611075dbbdbaad98a6737b28cf1b58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:91:23:94:27:26:0e:20:7d:89:4b:a5:c3:bf:
7d:c6:f4:ad:35:12:4a:04:9e:e0:52:9b:37:f7:a8:
06:6b:01:fa:10:a9:3c:d3:59:d1:de:cf:1a:6f:ec:
85:7e:1a:bb:67:cf:02:00:26:50:1e:87:ed:ce:03:
20:55:3e:6a:03:50:ff:44:53:73:ef:be:3b:21:42:
8c:a1:c3:b4:b9:c9:eb:f4:6a:66:77:56:dc:14:10:
82:60:c2:74:29:1d:8f:6b:e2:d9:f7:5e:af:fe:a7:
8c:89:3f:c7:3e:73:2a:f5:11:46:6d:96:f7:32:58:
37:86:24:1e:0d:3b:8a:08:e5:55:e4:ef:95:da:51:
7a:b9:34:1a:68:2b:0c:9f:fd:61:2d:35:91:8e:4f:
99:be:89:62:87:7b:e5:92:83:f2:45:48:f9:3d:2f:
2e:2d:5f:ca:84:2a:45:c5:65:25:b5:44:73:21:9b:
31:27:b6:4d:46:4a:c2:3e:5b:1b:93:75:97:74:d2:
7d:d8:f3:a9:78:9c:b0:10:b7:86:e2:93:50:d0:39:
23:b0:18:9e:73:a6:81:e7:09:d4:fe:92:b7:d2:31:
55:9d:92:99:6c:99:5e:20:2f:61:c0:47:08:cd:63:
83:06:07:e2:0f:35:b9:f2:4f:c3:82:13:5c:27:bd:
c9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1B:02:31:26:11:07:5D:BB:DB:AA:D9:8A:67:37:B2:8C:F1:B5:8B
X509v3 Authority Key Identifier:
keyid:AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c8:b0:0a:22:b5:2f:eb:19:25:21:40:14:78:4b:70:3c:78:
23:44:c3:f5:6c:df:42:d6:6a:96:12:d0:ae:25:c3:e0:c9:5d:
07:f8:07:c2:9e:c9:af:b3:71:a3:40:9f:2c:8f:62:bc:bd:a3:
1e:14:46:aa:a3:40:34:6d:1d:72:40:87:3f:07:08:e4:9e:a0:
8f:cc:6f:03:51:a7:59:c1:22:42:ae:1d:c0:92:67:e4:97:98:
e7:c2:f8:04:4a:81:3e:22:e3:42:ca:f9:32:ea:90:1c:2f:67:
12:11:14:2f:5f:56:78:ef:5c:20:8b:9c:5f:d6:69:55:cd:1b:
1f:21:79:1f:5c:c6:6d:c5:06:1e:1a:26:e4:ac:7c:aa:69:af:
8a:7a:78:a2:88:ec:00:5e:f6:7c:84:9f:a8:3b:cf:0b:0a:63:
34:13:89:eb:99:a0:8e:37:50:a3:32:2b:5e:d3:fd:bd:b8:de:
e0:39:c7:26:1d:e7:eb:f9:c1:a6:96:c2:c9:be:cd:7a:1e:c0:
8a:bf:4a:8c:dc:38:c1:26:dd:4c:be:dc:dd:2e:2f:09:f3:e3:
fb:c0:65:8c:10:18:ca:a9:f9:b4:38:2b:5e:2a:01:c1:ef:1a:
2d:c4:cd:c3:48:4c:98:33:cf:3f:3d:fa:92:48:46:3d:68:ea:
3c:8f:a4:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp+JkRYEJPpzLqdrGNjIQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNDY2NDQwNjZjZWFmMzlkM2FmYjBmZDczNWIwMTljZWM5
ZGEzNjQwHhcNMjUwODIzMDIwMDI4WhcNMjUwODI0MDIwMDI4WjAzMTEwLwYDVQQD
EygxMDFiMDIzMTI2MTEwNzVkYmJkYmFhZDk4YTY3MzdiMjhjZjFiNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupEjlCcmDiB9iUulw799xvStNRJK
BJ7gUps396gGawH6EKk801nR3s8ab+yFfhq7Z88CACZQHoftzgMgVT5qA1D/RFNz
7747IUKMocO0ucnr9Gpmd1bcFBCCYMJ0KR2Pa+LZ916v/qeMiT/HPnMq9RFGbZb3
Mlg3hiQeDTuKCOVV5O+V2lF6uTQaaCsMn/1hLTWRjk+Zvolih3vlkoPyRUj5PS8u
LV/KhCpFxWUltURzIZsxJ7ZNRkrCPlsbk3WXdNJ92POpeJywELeG4pNQ0DkjsBie
c6aB5wnU/pK30jFVnZKZbJleIC9hwEcIzWODBgfiDzW58k/DghNcJ73JSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAbAjEmEQddu9uq2YpnN7KM8bWLMB8GA1UdIwQY
MBaAFK5GZEBmzq8506+w/XNbAZzsnaNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iYzE3OGUtOWRjMC00Njg4LWEyZTMt
OGQ5ZjExZjkxNmU5LzEvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iYzE3OGUtOWRjMC00Njg4LWEyZTMtOGQ5ZjExZjkxNmU5
LzEvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8iwCiK1
L+sZJSFAFHhLcDx4I0TD9WzfQtZqlhLQriXD4MldB/gHwp7Jr7Nxo0CfLI9ivL2j
HhRGqqNANG0dckCHPwcI5J6gj8xvA1GnWcEiQq4dwJJn5JeY58L4BEqBPiLjQsr5
MuqQHC9nEhEUL19WeO9cIIucX9ZpVc0bHyF5H1zGbcUGHhom5Kx8qmmvinp4oojs
AF72fISfqDvPCwpjNBOJ65mgjjdQozIrXtP9vbje4DnHJh3n6/nBppbCyb7Neh7A
ir9KjNw4wSbdTL7c3S4vCfPj+8BljBAYyqn5tDgrXioBwe8aLcTNw0hMmDPPPz36
kkhGPWjqPI+k3w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:45 2025 by rpki-client