Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
File: KJJ3dbRNuHnp85wpd72u1ipP8k0.mft (raw, json)
Hash identifier: Lz5eJQtYH1bauD1cHofw731uRK7VZl5ot4HKiufv8gQ=
Subject key identifier: 4A:22:56:56:91:B8:17:27:21:8E:0B:4C:32:04:F8:0A:9F:5B:61:83
Authority key identifier: 28:92:77:75:B4:4D:B8:79:E9:F3:9C:29:77:BD:AE:D6:2A:4F:F2:4D
Certificate issuer: /CN=28927775b44db879e9f39c2977bdaed62a4ff24d
Certificate serial: 0198D54E78C9B5838E10EB5DD87E67487B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
Manifest number: 0D2A
Signing time: Sat 23 Aug 2025 05:02:26 +0000
Manifest this update: Sat 23 Aug 2025 05:02:26 +0000
Manifest next update: Sun 24 Aug 2025 05:02:26 +0000
Files and hashes: 1: KJJ3dbRNuHnp85wpd72u1ipP8k0.crl (hash: xmdfckxBE0cvM67vWw6m/ApVXUpghaT32mnbSXMdfD8=)
2: saiCyIGJOWPs1K9_Ew_s8P6lgY4.roa (hash: e/erISXLnvRZkY9KcM4YsZzd9BZRvEUZNZ5EqmwF75Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:78:c9:b5:83:8e:10:eb:5d:d8:7e:67:48:7b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28927775b44db879e9f39c2977bdaed62a4ff24d
Validity
Not Before: Aug 23 05:02:26 2025 GMT
Not After : Aug 24 05:02:26 2025 GMT
Subject: CN=4a22565691b81727218e0b4c3204f80a9f5b6183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:a7:9f:e6:18:7a:6f:4b:bd:27:19:cf:61:
47:f4:76:e0:7a:de:64:2e:c2:20:51:77:a6:28:b4:
49:2f:37:15:a7:ad:ed:80:c2:86:b3:bf:7a:60:f1:
e4:3f:e8:87:5e:2e:fb:55:c9:42:45:d7:19:84:1d:
4f:48:6c:77:49:74:25:99:01:06:f1:3d:db:b6:ed:
2d:1f:ed:05:a8:ca:7c:7f:47:d1:30:10:99:1b:94:
e5:71:3a:73:a4:7f:de:7f:ba:df:3d:42:ef:8d:a7:
c5:9f:8a:31:8f:c5:a8:b9:90:a1:22:9e:31:eb:21:
3e:74:0b:1f:02:02:ac:50:91:eb:f0:12:53:fb:4a:
2f:e7:fd:56:aa:4d:de:b6:92:5c:b3:de:44:44:7f:
96:d8:84:4e:81:69:27:bb:f7:56:d4:b1:23:19:1f:
af:8a:4e:29:7a:22:1a:6c:d0:3b:0b:12:d1:d0:09:
de:0e:06:e2:02:bb:5c:5d:35:d1:08:94:2f:ee:54:
24:7c:10:ec:e8:3a:c7:78:dd:05:d7:13:2f:ba:6f:
80:ca:b0:5a:5b:cc:03:f1:03:bf:bf:f5:41:87:ad:
79:07:02:ea:e2:fc:82:ff:0d:98:2f:43:4c:74:5c:
21:05:46:78:12:1c:97:d4:dd:5d:09:b4:b7:d3:f3:
c1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:22:56:56:91:B8:17:27:21:8E:0B:4C:32:04:F8:0A:9F:5B:61:83
X509v3 Authority Key Identifier:
keyid:28:92:77:75:B4:4D:B8:79:E9:F3:9C:29:77:BD:AE:D6:2A:4F:F2:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8f:27:70:0b:a9:24:6a:6b:74:c7:b7:8f:c4:2c:1b:12:28:
8d:c5:7b:a8:38:bd:20:ca:56:a6:5b:c4:d2:b2:ee:72:34:68:
a7:99:76:19:50:8a:85:21:94:71:1d:09:91:ba:8a:96:40:c2:
d9:2e:5a:07:a4:fc:4e:94:b7:f7:63:16:51:e1:8d:2a:76:cf:
93:65:59:06:80:c2:c7:31:61:40:98:3a:7b:de:6a:de:24:9d:
5d:fa:e4:7c:05:87:43:fa:b0:fa:d2:95:b4:5d:70:8a:ff:6c:
e0:a0:25:91:eb:74:86:a6:7d:c2:0b:af:27:80:7b:a3:bf:04:
c6:de:36:40:f5:28:1b:d0:a4:07:99:81:e2:3c:0d:0f:6b:27:
f8:46:9f:a1:1a:59:24:03:ab:f1:ae:c4:50:d3:8e:b1:78:1d:
a6:53:b8:14:51:0c:95:81:e6:62:4a:6d:b1:af:dd:60:5a:b9:
71:dd:e0:f6:26:29:61:21:d6:b4:da:53:20:23:96:a3:e0:b9:
ae:8f:79:57:0d:c2:f5:a4:90:64:b0:2b:6f:dc:af:c9:c4:07:
93:3f:0f:be:f6:a1:23:3e:29:0b:24:2f:13:a2:e5:60:23:a6:
6e:c5:1e:87:bc:e8:fd:6f:70:09:91:ad:dd:e7:c4:7b:36:03:
ce:8d:2b:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTnjJtYOOEOtd2H5nSHueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTI3Nzc1YjQ0ZGI4NzllOWYzOWMyOTc3YmRhZWQ2MmE0
ZmYyNGQwHhcNMjUwODIzMDUwMjI2WhcNMjUwODI0MDUwMjI2WjAzMTEwLwYDVQQD
Eyg0YTIyNTY1NjkxYjgxNzI3MjE4ZTBiNGMzMjA0ZjgwYTlmNWI2MTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHOnn+YYem9LvScZz2FH9Hbget5k
LsIgUXemKLRJLzcVp63tgMKGs796YPHkP+iHXi77VclCRdcZhB1PSGx3SXQlmQEG
8T3btu0tH+0FqMp8f0fRMBCZG5TlcTpzpH/ef7rfPULvjafFn4oxj8WouZChIp4x
6yE+dAsfAgKsUJHr8BJT+0ov5/1Wqk3etpJcs95ERH+W2IROgWknu/dW1LEjGR+v
ik4peiIabNA7CxLR0AneDgbiArtcXTXRCJQv7lQkfBDs6DrHeN0F1xMvum+AyrBa
W8wD8QO/v/VBh615BwLq4vyC/w2YL0NMdFwhBUZ4EhyX1N1dCbS30/PBbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoiVlaRuBcnIY4LTDIE+AqfW2GDMB8GA1UdIwQY
MBaAFCiSd3W0Tbh56fOcKXe9rtYqT/JNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0pKM2RiUk51SG5wODV3cGQ3MnUxaXBQOGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi83ZWYzZTMtMjQyZC00Y2IzLWE1MjQt
YzQ0YzZiZWVmMzgyLzEvS0pKM2RiUk51SG5wODV3cGQ3MnUxaXBQOGswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi83ZWYzZTMtMjQyZC00Y2IzLWE1MjQtYzQ0YzZiZWVmMzgy
LzEvS0pKM2RiUk51SG5wODV3cGQ3MnUxaXBQOGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoI8ncAup
JGprdMe3j8QsGxIojcV7qDi9IMpWplvE0rLucjRop5l2GVCKhSGUcR0JkbqKlkDC
2S5aB6T8TpS392MWUeGNKnbPk2VZBoDCxzFhQJg6e95q3iSdXfrkfAWHQ/qw+tKV
tF1wiv9s4KAlket0hqZ9wguvJ4B7o78Ext42QPUoG9CkB5mB4jwND2sn+EafoRpZ
JAOr8a7EUNOOsXgdplO4FFEMlYHmYkptsa/dYFq5cd3g9iYpYSHWtNpTICOWo+C5
ro95Vw3C9aSQZLArb9yvycQHkz8PvvahIz4pCyQvE6LlYCOmbsUeh7zo/W9wCZGt
3efEezYDzo0rVA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:45 2025 by rpki-client