Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
File: kkUytPdDz5XL7BhoG6Z6xduFTzM.mft (raw, json)
Hash identifier: gf9+U4QN6Pt52t3qk9k/EMT5mh+dyFra7wrGETSAjmc=
Subject key identifier: A8:AA:9E:8F:7D:DF:3A:3E:D5:86:4B:EC:65:8B:91:ED:C0:BA:1E:17
Authority key identifier: 92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
Certificate issuer: /CN=924532b4f743cf95cbec18681ba67ac5db854f33
Certificate serial: 0198D4E02B1265D8E2DCCB83447D66D6DD20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
Manifest number: 09E7
Signing time: Sat 23 Aug 2025 03:01:57 +0000
Manifest this update: Sat 23 Aug 2025 03:01:57 +0000
Manifest next update: Sun 24 Aug 2025 03:01:57 +0000
Files and hashes: 1: 1-nmX1WTJ49yJbme7KYE3jeC7q4Y.roa (hash: zAEWgizXd30YPkGAc5Kl/PvBR6kbJd2FV8oWGwFvE/I=)
2: kkUytPdDz5XL7BhoG6Z6xduFTzM.crl (hash: 0ujubn1FWCtiw79by1G1QdG5dXA1P4yOCRywt1nfHLA=)
3: qJnDw_Xmq2bfel2_89lbdiftBRQ.roa (hash: O4ff3v5t1d6BKPF64qTARMkRfucrOU0EI+MHTwPLMTc=)
4: yyVSocue_VD1x2HepimmN6bExsc.roa (hash: 6+QKFhEGkikap65WiEFQ9q79rIkGnFuCa6iQx/4KnWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:2b:12:65:d8:e2:dc:cb:83:44:7d:66:d6:dd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924532b4f743cf95cbec18681ba67ac5db854f33
Validity
Not Before: Aug 23 03:01:57 2025 GMT
Not After : Aug 24 03:01:57 2025 GMT
Subject: CN=a8aa9e8f7ddf3a3ed5864bec658b91edc0ba1e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:87:cb:d4:0d:b9:5f:36:08:46:2e:3e:6e:
b8:4a:9c:72:ab:d3:d4:94:ec:09:9a:e5:d3:dd:7b:
a9:f4:86:61:08:33:e6:60:69:12:45:2f:54:8f:31:
d0:3c:f7:e5:07:34:74:d3:76:81:38:f5:99:8a:62:
13:7b:cc:2c:32:76:df:81:94:cc:4a:bd:7b:b3:12:
93:57:63:30:33:db:43:39:4d:38:21:12:af:4b:38:
55:71:4b:55:bd:43:29:6a:dc:91:fa:c2:45:e7:c3:
86:38:3e:6f:44:45:27:ad:da:5a:02:0a:2f:8b:6f:
d0:56:60:fb:28:02:f1:77:12:86:6f:8c:45:60:99:
ac:18:75:27:ab:ae:b3:be:9b:4a:3a:4f:d6:81:4c:
fe:67:27:32:c6:bd:bf:47:e7:e5:45:75:e1:b8:91:
75:07:82:a9:25:22:af:94:23:37:ee:7c:fe:72:e4:
ca:7e:29:61:7c:b9:67:c7:eb:1e:e7:9e:1f:ff:96:
5f:e2:b1:d7:eb:65:51:33:26:ee:e0:1e:06:e7:68:
eb:a3:4d:a2:23:b6:8e:a5:4b:d1:35:95:41:ea:1c:
ce:47:67:13:20:44:79:2f:d3:1e:1b:73:43:8a:f1:
ff:19:44:19:59:b1:49:1f:52:94:b1:d4:00:f6:8d:
15:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AA:9E:8F:7D:DF:3A:3E:D5:86:4B:EC:65:8B:91:ED:C0:BA:1E:17
X509v3 Authority Key Identifier:
keyid:92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:4b:87:26:c5:b1:b4:9c:27:29:21:15:4a:41:c4:8d:59:83:
d6:87:bc:ec:4c:73:aa:ff:e5:2d:b0:53:42:bf:72:8b:28:74:
5d:d0:50:32:a1:9d:f7:1b:45:25:8f:f7:79:ee:a8:21:b3:49:
60:29:b2:0c:9a:66:5a:c4:47:8c:89:6b:74:61:6f:16:38:3f:
fc:ca:7b:44:16:69:a2:f4:54:61:7b:dc:1e:d8:d8:47:9c:37:
bf:40:04:d4:83:89:15:72:44:9d:7d:32:a9:12:73:06:44:32:
10:77:a8:fb:25:1c:ba:c6:fb:04:85:f4:e3:ae:05:b1:41:c9:
fe:f1:f8:03:bf:10:74:64:2d:2f:ea:83:06:ee:36:01:2a:3f:
e9:ab:40:83:66:0d:06:43:39:9d:7f:4e:f9:fc:f9:ba:02:8f:
c5:06:df:b2:0c:4f:02:6a:60:92:6c:90:be:b5:d5:41:90:a5:
81:a1:eb:52:ff:1a:fe:61:47:dc:eb:7e:2b:80:6f:91:4f:29:
52:19:e2:0c:45:53:f4:fe:40:84:4a:5f:f3:35:23:be:62:bd:
a4:0b:e8:21:50:9b:2b:4f:04:8f:34:8a:bb:d3:e2:c8:d4:25:
8f:a4:f5:14:e8:c2:c0:e3:5f:ad:56:15:93:e5:2e:77:c5:dd:
e3:4b:c9:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4CsSZdji3MuDRH1m1t0gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDUzMmI0Zjc0M2NmOTVjYmVjMTg2ODFiYTY3YWM1ZGI4
NTRmMzMwHhcNMjUwODIzMDMwMTU3WhcNMjUwODI0MDMwMTU3WjAzMTEwLwYDVQQD
EyhhOGFhOWU4ZjdkZGYzYTNlZDU4NjRiZWM2NThiOTFlZGMwYmExZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIWHy9QNuV82CEYuPm64Spxyq9PU
lOwJmuXT3Xup9IZhCDPmYGkSRS9UjzHQPPflBzR003aBOPWZimITe8wsMnbfgZTM
Sr17sxKTV2MwM9tDOU04IRKvSzhVcUtVvUMpatyR+sJF58OGOD5vREUnrdpaAgov
i2/QVmD7KALxdxKGb4xFYJmsGHUnq66zvptKOk/WgUz+Zycyxr2/R+flRXXhuJF1
B4KpJSKvlCM37nz+cuTKfilhfLlnx+se554f/5Zf4rHX62VRMybu4B4G52jro02i
I7aOpUvRNZVB6hzOR2cTIER5L9MeG3NDivH/GUQZWbFJH1KUsdQA9o0VcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiqno993zo+1YZL7GWLke3Auh4XMB8GA1UdIwQY
MBaAFJJFMrT3Q8+Vy+wYaBumesXbhU8zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2tVeXRQZER6NVhMN0Job0c2WjZ4ZHVGVHpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yYjlmMDEtYTU2ZS00YmU5LWFkMzIt
MzhlZDcxNTU5OTVjLzEva2tVeXRQZER6NVhMN0Job0c2WjZ4ZHVGVHpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yYjlmMDEtYTU2ZS00YmU5LWFkMzItMzhlZDcxNTU5OTVj
LzEva2tVeXRQZER6NVhMN0Job0c2WjZ4ZHVGVHpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw0uHJsWx
tJwnKSEVSkHEjVmD1oe87Exzqv/lLbBTQr9yiyh0XdBQMqGd9xtFJY/3ee6oIbNJ
YCmyDJpmWsRHjIlrdGFvFjg//Mp7RBZpovRUYXvcHtjYR5w3v0AE1IOJFXJEnX0y
qRJzBkQyEHeo+yUcusb7BIX0464FsUHJ/vH4A78QdGQtL+qDBu42ASo/6atAg2YN
BkM5nX9O+fz5ugKPxQbfsgxPAmpgkmyQvrXVQZClgaHrUv8a/mFH3Ot+K4BvkU8p
UhniDEVT9P5AhEpf8zUjvmK9pAvoIVCbK08EjzSKu9PiyNQlj6T1FOjCwONfrVYV
k+Uud8Xd40vJ5Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:36 2025 by rpki-client