Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
File: kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft (raw, json)
Hash identifier: YFVY9mmAStXnRH+fwosUFaWop/Zu8ujwLUW6450kLlw=
Subject key identifier: 5D:1E:77:98:F7:B6:1E:2C:1D:A7:51:82:46:8E:AA:9C:2E:67:63:E2
Authority key identifier: 92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6
Certificate issuer: /CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
Certificate serial: 0199FCC61F05E47395CCDD80E314A4B2242D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
Manifest number: 01D2
Signing time: Sun 19 Oct 2025 14:01:06 +0000
Manifest this update: Sun 19 Oct 2025 14:01:06 +0000
Manifest next update: Mon 20 Oct 2025 14:01:06 +0000
Files and hashes: 1: 1-7F7uRrzkG49KON0y5p0a13vs8Q.roa (hash: kEJxDITGpSCiq2yfNEGAfr3dH9UBq24wh61zctycgJ0=)
2: kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl (hash: qZQf+/gRAEyi+MzxZVRPM6YdJWzuz7KnV0arVxiEEtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:1f:05:e4:73:95:cc:dd:80:e3:14:a4:b2:24:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
Validity
Not Before: Oct 19 14:01:06 2025 GMT
Not After : Oct 20 14:01:06 2025 GMT
Subject: CN=5d1e7798f7b61e2c1da75182468eaa9c2e6763e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9e:97:14:99:82:ff:1c:30:7a:a7:d2:34:ab:
13:b0:e3:a5:5f:e2:fe:21:3c:56:16:81:d3:cf:35:
78:27:33:dd:b6:f4:d4:35:61:ad:ba:48:2a:73:e4:
4f:90:4e:96:ab:43:85:fc:c9:39:c8:fb:e0:19:10:
df:76:38:6c:88:e1:6b:5d:00:fe:e7:29:e8:db:96:
55:ae:da:a3:08:ee:d2:a6:b6:cc:37:e4:58:2c:0a:
35:5f:a4:4b:fa:6d:25:30:22:10:20:2b:a2:1c:98:
65:b4:f1:c2:c8:05:15:3a:cf:7f:59:61:40:e2:5f:
3b:54:a2:07:23:48:88:fe:a3:bd:c1:36:a6:ef:3c:
c3:51:73:6b:1e:0b:5c:c8:73:8b:f7:ff:2b:c8:9b:
66:81:58:25:30:da:88:e9:16:5b:16:25:31:1a:71:
3a:e7:9c:4e:d8:52:1e:6e:5f:89:e0:92:56:78:65:
c6:3f:47:1b:7e:98:e3:18:6d:d7:21:d3:b2:bb:e6:
7a:63:cd:77:9b:f0:2b:6a:7c:ce:eb:78:ac:5a:de:
9c:9e:60:65:62:6e:41:4d:68:46:bf:3c:3d:39:2f:
21:37:cd:f2:f7:19:f7:1b:7d:af:89:b6:01:6d:e8:
6c:aa:57:42:44:ca:b8:28:3c:9f:83:df:03:2a:cb:
f3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1E:77:98:F7:B6:1E:2C:1D:A7:51:82:46:8E:AA:9C:2E:67:63:E2
X509v3 Authority Key Identifier:
keyid:92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ee:34:2a:64:2b:db:28:99:13:83:96:05:45:e8:f1:51:b3:
58:14:3b:09:5b:5a:b2:7e:be:49:60:99:ac:16:c9:6c:11:61:
c3:4b:7a:15:cd:14:9f:59:95:65:ac:ba:16:7f:b0:3d:86:6b:
ed:17:44:6a:8a:58:4a:1d:50:24:c2:6f:30:2a:fd:3a:be:f6:
45:22:66:7b:3e:56:5e:8e:5b:9a:c9:69:6b:93:1e:5b:34:d8:
52:bd:90:26:c0:de:cc:9f:d6:94:db:78:69:a7:af:66:b7:dd:
63:43:a0:ac:06:3f:eb:13:30:99:85:3b:1a:1b:88:44:ad:5c:
6e:dc:61:bf:bc:d6:15:ef:93:1e:d8:87:30:19:e2:05:c8:d4:
b3:08:80:38:90:69:ce:10:ff:06:e2:e1:49:df:7b:fd:b2:a0:
91:53:16:5d:f3:98:e9:61:e8:b3:7f:c0:c2:44:9f:8f:86:83:
6a:8f:b1:66:90:33:cb:03:05:e1:b9:b5:45:7f:c4:51:ae:76:
cf:8a:1f:b1:d0:c9:50:49:48:e9:50:9a:dd:e4:2c:07:f4:e9:
f0:21:8a:c1:88:e7:2a:71:91:85:dd:7a:77:cc:18:da:4a:41:
b1:0f:79:2a:be:0d:00:90:72:8f:dd:93:a4:ca:19:6b:ce:85:
2a:b7:eb:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xh8F5HOVzN2A4xSksiQtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDhmMTMxYjFlMTIwN2ZiNDkwODJiMGUwNjQyZmQxYTYz
ZTFhYTYwHhcNMjUxMDE5MTQwMTA2WhcNMjUxMDIwMTQwMTA2WjAzMTEwLwYDVQQD
Eyg1ZDFlNzc5OGY3YjYxZTJjMWRhNzUxODI0NjhlYWE5YzJlNjc2M2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ6XFJmC/xwweqfSNKsTsOOlX+L+
ITxWFoHTzzV4JzPdtvTUNWGtukgqc+RPkE6Wq0OF/Mk5yPvgGRDfdjhsiOFrXQD+
5yno25ZVrtqjCO7SprbMN+RYLAo1X6RL+m0lMCIQICuiHJhltPHCyAUVOs9/WWFA
4l87VKIHI0iI/qO9wTam7zzDUXNrHgtcyHOL9/8ryJtmgVglMNqI6RZbFiUxGnE6
55xO2FIebl+J4JJWeGXGP0cbfpjjGG3XIdOyu+Z6Y813m/AranzO63isWt6cnmBl
Ym5BTWhGvzw9OS8hN83y9xn3G32vibYBbehsqldCRMq4KDyfg98DKsvz5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0ed5j3th4sHadRgkaOqpwuZ2PiMB8GA1UdIwQY
MBaAFJJI8TGx4SB/tJCCsOBkL9GmPhqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83NzUzNWYtNDczYi00M2QzLWFmNDMt
ZTQ4MTc1MWQ2ODRmLzEva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC83NzUzNWYtNDczYi00M2QzLWFmNDMtZTQ4MTc1MWQ2ODRm
LzEva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVO40KmQr
2yiZE4OWBUXo8VGzWBQ7CVtasn6+SWCZrBbJbBFhw0t6Fc0Un1mVZay6Fn+wPYZr
7RdEaopYSh1QJMJvMCr9Or72RSJmez5WXo5bmslpa5MeWzTYUr2QJsDezJ/WlNt4
aaevZrfdY0OgrAY/6xMwmYU7GhuIRK1cbtxhv7zWFe+THtiHMBniBcjUswiAOJBp
zhD/BuLhSd97/bKgkVMWXfOY6WHos3/AwkSfj4aDao+xZpAzywMF4bm1RX/EUa52
z4ofsdDJUElI6VCa3eQsB/Tp8CGKwYjnKnGRhd16d8wY2kpBsQ95Kr4NAJByj92T
pMoZa86FKrfrxw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:29 2025 by rpki-client