Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
File: kr0ltrnzz-B4X_1OXlQCgztKT40.mft (raw, json)
Hash identifier: jQuT/dnRO88rzhp1NRRK1DNc00alPls3kuwHrzFfa6o=
Subject key identifier: A8:02:39:BC:CA:2A:42:9B:F6:AA:BC:98:32:EF:C2:09:2B:58:6C:B6
Authority key identifier: 92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
Certificate issuer: /CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Certificate serial: 0198D5BC266B56DDB0B9ECD977F4247197AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:02:14 +0000
Manifest this update: Sat 23 Aug 2025 07:02:14 +0000
Manifest next update: Sun 24 Aug 2025 07:02:14 +0000
Files and hashes: 1: bOAoo9Xlbcl-PK-rbfwF58rAKlc.roa (hash: Vn8yXcKwSTNwIZccCZWqjun9GvkjZC8dYUcNBhWRmco=)
2: kr0ltrnzz-B4X_1OXlQCgztKT40.crl (hash: 3DprNJIDACgSQY8ttuMItV/FMMjmiYYlmVkkxt3xrKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:26:6b:56:dd:b0:b9:ec:d9:77:f4:24:71:97:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Validity
Not Before: Aug 23 07:02:14 2025 GMT
Not After : Aug 24 07:02:14 2025 GMT
Subject: CN=a80239bcca2a429bf6aabc9832efc2092b586cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:65:43:a2:23:ba:44:3d:46:7d:21:c1:67:58:
39:c1:5c:f2:b5:ca:83:e3:0b:71:46:9b:7f:c9:9e:
38:a5:a7:bd:28:41:23:f4:00:0f:73:6a:34:dd:31:
ca:7c:6b:d4:d9:e2:44:d4:a6:a2:f3:68:e8:92:8f:
d0:fc:8d:30:47:e8:1a:1e:7b:c2:89:a6:10:f5:16:
9f:fc:93:f4:40:5f:85:46:1b:b3:48:a4:a0:f4:25:
4e:81:09:af:82:b3:eb:9a:62:33:1e:70:bf:87:6a:
05:d8:41:cb:30:00:a6:8e:bf:13:9a:27:13:b4:f3:
b1:c3:3a:1d:40:83:b8:da:21:71:bc:a8:0f:bc:72:
52:77:6b:85:ea:6d:8e:50:92:c5:27:05:eb:98:b4:
f1:50:43:f1:9d:3b:af:c0:92:24:37:6e:bb:0a:b6:
00:b6:d1:b2:23:05:6a:d9:2c:49:a4:dc:fd:cd:b6:
18:3f:13:db:92:ce:92:4c:a2:7e:23:c6:55:31:4b:
6f:b1:14:b7:46:80:1d:53:5d:84:73:ef:9b:48:cf:
ea:37:41:6f:18:d9:d1:40:0a:30:8a:3b:6b:d0:c1:
70:dc:a0:54:d7:38:fa:b8:fe:e4:b1:36:a3:d4:86:
47:79:e4:db:f6:10:9a:15:dc:64:b8:a9:36:cb:fc:
17:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:02:39:BC:CA:2A:42:9B:F6:AA:BC:98:32:EF:C2:09:2B:58:6C:B6
X509v3 Authority Key Identifier:
keyid:92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2d:41:99:d6:7d:41:a7:fe:3c:41:24:98:c8:b4:fa:32:e8:
2c:b2:11:49:c0:84:a3:c8:76:37:e0:51:4e:97:23:df:72:aa:
18:71:25:fb:fc:d8:7d:81:e3:14:59:63:47:84:fa:41:a4:97:
af:0d:ca:d5:a0:84:5f:84:ba:e7:f4:18:94:c7:95:eb:dd:f3:
d2:39:42:07:87:e3:28:37:b4:67:84:ea:c0:e9:fc:97:cd:c9:
30:32:e8:88:bb:8f:b3:5c:28:51:38:8f:db:4e:67:b8:51:19:
c0:ec:ae:3b:fa:5a:16:f0:ee:1b:36:f1:2e:28:23:51:6f:ce:
4b:ff:81:d3:6c:8d:12:b3:6a:51:e4:93:b1:13:88:15:ad:03:
33:1f:fb:79:50:4e:58:17:da:32:11:28:f3:bc:66:cd:09:ef:
ed:3b:08:28:b9:e2:be:30:85:bd:67:6e:fb:c9:11:7c:07:24:
f3:97:9d:8a:1f:e4:d3:3c:4e:45:38:76:50:9e:7a:44:ed:36:
b0:da:d1:cd:60:c0:12:61:2f:1a:2d:28:10:46:1f:73:ba:30:
8f:7e:15:f0:93:6e:a5:45:37:eb:04:85:a2:87:f3:fe:fc:d2:
92:ef:c4:65:4a:20:09:f8:f9:6d:aa:1e:01:0e:be:94:71:9f:
93:99:65:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvCZrVt2wuezZd/QkcZerMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYmQyNWI2YjlmM2NmZTA3ODVmZmQ0ZTVlNTQwMjgzM2I0
YTRmOGQwHhcNMjUwODIzMDcwMjE0WhcNMjUwODI0MDcwMjE0WjAzMTEwLwYDVQQD
EyhhODAyMzliY2NhMmE0MjliZjZhYWJjOTgzMmVmYzIwOTJiNTg2Y2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWVDoiO6RD1GfSHBZ1g5wVzytcqD
4wtxRpt/yZ44pae9KEEj9AAPc2o03THKfGvU2eJE1Kai82joko/Q/I0wR+gaHnvC
iaYQ9Raf/JP0QF+FRhuzSKSg9CVOgQmvgrPrmmIzHnC/h2oF2EHLMACmjr8TmicT
tPOxwzodQIO42iFxvKgPvHJSd2uF6m2OUJLFJwXrmLTxUEPxnTuvwJIkN267CrYA
ttGyIwVq2SxJpNz9zbYYPxPbks6STKJ+I8ZVMUtvsRS3RoAdU12Ec++bSM/qN0Fv
GNnRQAowijtr0MFw3KBU1zj6uP7ksTaj1IZHeeTb9hCaFdxkuKk2y/wX8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgCObzKKkKb9qq8mDLvwgkrWGy2MB8GA1UdIwQY
MBaAFJK9Jba588/geF/9Tl5UAoM7Sk+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3IwbHRybnp6LUI0WF8xT1hsUUNnenRLVDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wMmM2OGItY2VkZi00MzE3LTgyYjgt
MmNkOGM5MTM5MDMwLzEva3IwbHRybnp6LUI0WF8xT1hsUUNnenRLVDQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8wMmM2OGItY2VkZi00MzE3LTgyYjgtMmNkOGM5MTM5MDMw
LzEva3IwbHRybnp6LUI0WF8xT1hsUUNnenRLVDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADS1BmdZ9
Qaf+PEEkmMi0+jLoLLIRScCEo8h2N+BRTpcj33KqGHEl+/zYfYHjFFljR4T6QaSX
rw3K1aCEX4S65/QYlMeV693z0jlCB4fjKDe0Z4TqwOn8l83JMDLoiLuPs1woUTiP
205nuFEZwOyuO/paFvDuGzbxLigjUW/OS/+B02yNErNqUeSTsROIFa0DMx/7eVBO
WBfaMhEo87xmzQnv7TsIKLnivjCFvWdu+8kRfAck85edih/k0zxORTh2UJ56RO02
sNrRzWDAEmEvGi0oEEYfc7owj34V8JNupUU36wSFoofz/vzSku/EZUogCfj5baoe
AQ6+lHGfk5llrg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:40 2025 by rpki-client