Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
File: KYijxojo6x_vBsN0p6pc-P13jg8.mft (raw, json)
Hash identifier: TbAYN68pSRmwFN38jlB8lIQZ9Ak6pbYkhLBvHT4BMac=
Subject key identifier: 17:35:61:32:3C:E9:6D:E8:6E:19:B6:7D:DC:A0:D3:60:16:7F:8C:31
Authority key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
Certificate issuer: /CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Certificate serial: 0198D54E4E466D5046840D7C20A24BD79567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
Manifest number: 1597
Signing time: Sat 23 Aug 2025 05:02:15 +0000
Manifest this update: Sat 23 Aug 2025 05:02:15 +0000
Manifest next update: Sun 24 Aug 2025 05:02:15 +0000
Files and hashes: 1: KYijxojo6x_vBsN0p6pc-P13jg8.crl (hash: BgOZdip0E9Oo3jtpaYGW1IbnrFMaEuh9avpprNJ7MH8=)
2: fXGb1AdmtKED61MI3C4rhXBHP4g.roa (hash: eR+whMFm4iqXvD16fqLVfHjrwLVKXZG15LaXEU0R7b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:4e:46:6d:50:46:84:0d:7c:20:a2:4b:d7:95:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Validity
Not Before: Aug 23 05:02:15 2025 GMT
Not After : Aug 24 05:02:15 2025 GMT
Subject: CN=173561323ce96de86e19b67ddca0d360167f8c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:cd:b4:eb:85:92:57:ba:a2:88:d5:8f:f1:
bc:75:80:9e:7f:9f:be:ba:d8:f3:1b:9d:9f:72:95:
2a:f3:9e:29:75:86:95:7e:6b:f8:04:37:4b:70:bf:
f5:29:30:1e:87:87:cc:af:2b:1e:e0:1a:71:35:fc:
98:89:a7:64:43:70:fb:d7:98:ff:41:82:e8:14:f4:
dc:1c:1d:da:01:81:f1:f7:90:4e:c5:0a:1b:f1:d8:
c3:a9:c6:44:c4:8c:fc:a5:a7:63:a6:3b:49:83:f2:
f4:23:f1:8b:9d:5e:99:a7:87:dd:44:de:fc:07:9b:
c2:8e:c1:bf:0a:77:96:82:90:92:9c:93:69:7d:0d:
b5:45:05:00:95:72:65:61:91:f6:f9:66:27:dd:25:
22:6f:99:79:f2:13:ab:5b:26:b7:59:de:89:d9:b0:
f0:41:bb:f9:f2:89:65:bd:50:2f:df:e2:8e:95:d0:
2f:57:a3:ff:ef:af:47:90:8d:53:c1:a8:31:d0:e5:
e0:1d:29:31:6d:62:fe:c1:65:95:11:69:b9:55:07:
ef:24:de:45:66:70:8e:e4:34:b6:1f:43:ca:a9:1a:
f0:88:7e:32:c6:ca:4c:7c:b2:ef:b2:b0:b2:77:20:
74:94:63:90:bd:f1:a3:f9:5a:94:5e:09:f7:eb:9f:
84:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:35:61:32:3C:E9:6D:E8:6E:19:B6:7D:DC:A0:D3:60:16:7F:8C:31
X509v3 Authority Key Identifier:
keyid:29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b4:f0:70:4a:e3:73:79:20:1d:30:6c:68:c8:fa:22:d4:57:
c8:01:d2:5e:91:d3:c4:24:f8:ce:62:a7:5a:ac:dd:d2:37:54:
d1:79:fd:c8:76:f1:71:49:a0:63:3d:74:d3:25:5d:69:a0:e0:
d5:da:fa:68:3c:da:bb:75:1d:00:b7:6b:e1:1c:40:b0:db:72:
e3:93:0d:e6:5d:d9:68:89:d1:4a:54:76:23:9d:a0:a3:98:26:
4b:2a:35:17:04:94:e2:03:82:9b:23:e3:d2:b0:96:44:a6:ed:
cb:e0:ee:25:80:d5:5e:24:36:06:0f:f6:0c:9c:be:d0:5a:f4:
61:7c:3c:14:59:5e:7a:78:9d:47:5c:a6:dd:97:bd:6b:88:8f:
a9:79:5d:19:47:d9:f0:ce:ab:c6:f1:8e:80:e4:cf:9c:84:58:
a7:95:95:3b:b6:6c:8e:c3:2f:5f:4a:6f:41:c3:8c:0d:7a:e4:
26:fa:cd:df:3f:52:16:97:7c:0f:c1:0d:63:a5:4a:a9:bb:0f:
56:88:68:28:6b:db:0e:7d:6a:96:10:16:fb:e0:3c:9a:4a:86:
c1:e0:73:fc:4e:be:4c:58:1a:75:e0:91:06:12:fe:80:8b:16:
18:59:d1:68:ee:27:64:a2:8a:68:6f:a8:9a:ac:b3:11:26:e1:
35:dc:35:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTk5GbVBGhA18IKJL15VnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODhhM2M2ODhlOGViMWZlZjA2YzM3NGE3YWE1Y2Y4ZmQ3
NzhlMGYwHhcNMjUwODIzMDUwMjE1WhcNMjUwODI0MDUwMjE1WjAzMTEwLwYDVQQD
EygxNzM1NjEzMjNjZTk2ZGU4NmUxOWI2N2RkY2EwZDM2MDE2N2Y4YzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozDNtOuFkle6oojVj/G8dYCef5++
utjzG52fcpUq854pdYaVfmv4BDdLcL/1KTAeh4fMryse4BpxNfyYiadkQ3D715j/
QYLoFPTcHB3aAYHx95BOxQob8djDqcZExIz8padjpjtJg/L0I/GLnV6Zp4fdRN78
B5vCjsG/CneWgpCSnJNpfQ21RQUAlXJlYZH2+WYn3SUib5l58hOrWya3Wd6J2bDw
Qbv58ollvVAv3+KOldAvV6P/769HkI1Twagx0OXgHSkxbWL+wWWVEWm5VQfvJN5F
ZnCO5DS2H0PKqRrwiH4yxspMfLLvsrCydyB0lGOQvfGj+VqUXgn365+EjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBc1YTI86W3obhm2fdyg02AWf4wxMB8GA1UdIwQY
MBaAFCmIo8aI6Osf7wbDdKeqXPj9d44PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lpanhvam82eF92QnNOMHA2cGMtUDEzamc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85ZjUyZDEtYzk1ZC00NTViLWFmMDgt
Y2VjMGRiYzhkMjQ2LzEvS1lpanhvam82eF92QnNOMHA2cGMtUDEzamc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85ZjUyZDEtYzk1ZC00NTViLWFmMDgtY2VjMGRiYzhkMjQ2
LzEvS1lpanhvam82eF92QnNOMHA2cGMtUDEzamc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7TwcErj
c3kgHTBsaMj6ItRXyAHSXpHTxCT4zmKnWqzd0jdU0Xn9yHbxcUmgYz100yVdaaDg
1dr6aDzau3UdALdr4RxAsNty45MN5l3ZaInRSlR2I52go5gmSyo1FwSU4gOCmyPj
0rCWRKbty+DuJYDVXiQ2Bg/2DJy+0Fr0YXw8FFleenidR1ym3Ze9a4iPqXldGUfZ
8M6rxvGOgOTPnIRYp5WVO7ZsjsMvX0pvQcOMDXrkJvrN3z9SFpd8D8ENY6VKqbsP
VohoKGvbDn1qlhAW++A8mkqGweBz/E6+TFgadeCRBhL+gIsWGFnRaO4nZKKKaG+o
mqyzESbhNdw1Ng==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:18:42 2025 by rpki-client