Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
File: k9t6NCzZOS76XNM4lHQcqKW09Cs.mft (raw, json)
Hash identifier: wljVq16aNwHbtz1BcS2A265ortjzAHavFZYwjFkl4g4=
Subject key identifier: 3B:12:3D:13:8B:BC:E8:1E:60:AD:8E:10:A9:29:26:B2:92:AA:89:14
Authority key identifier: 93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B
Certificate issuer: /CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
Certificate serial: 0198D54DEA6CACBA587E3A02BB9CFA8DEB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
Manifest number: 134E
Signing time: Sat 23 Aug 2025 05:01:49 +0000
Manifest this update: Sat 23 Aug 2025 05:01:49 +0000
Manifest next update: Sun 24 Aug 2025 05:01:49 +0000
Files and hashes: 1: C0l1kbYeZRM84TKToVwBlk7pBo4.roa (hash: ICfWfDWeurFnZl2wkXnfN6jvCsTCoCZA5TA91nRjfW4=)
2: k9t6NCzZOS76XNM4lHQcqKW09Cs.crl (hash: JihGPNYRsSAepnNc21NzprVwWyp+IXKk+qynad+jJmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ea:6c:ac:ba:58:7e:3a:02:bb:9c:fa:8d:eb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
Validity
Not Before: Aug 23 05:01:49 2025 GMT
Not After : Aug 24 05:01:49 2025 GMT
Subject: CN=3b123d138bbce81e60ad8e10a92926b292aa8914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:89:0d:71:0e:12:3d:b1:48:57:d7:65:ad:57:
83:ab:97:7d:92:b6:8a:97:34:81:8f:67:ec:2b:b8:
2c:3b:85:2a:01:9c:ca:22:76:74:c7:dc:85:8f:87:
9b:d3:53:12:db:8e:0f:24:3f:16:10:3a:23:f0:b5:
72:8f:b9:9e:18:2d:b0:29:5b:1d:50:2f:d2:fc:47:
72:75:08:cd:74:ef:1e:63:76:94:1d:84:fe:67:4a:
e6:e5:aa:b8:90:23:2b:1a:7e:8c:73:e0:31:7a:6b:
b1:e8:ce:7b:ed:93:d5:26:dd:4a:0c:2e:ca:06:77:
b4:ed:0d:98:21:06:fd:7e:1b:47:d6:bf:ae:d8:b3:
53:67:f8:98:5a:5e:1b:5d:8d:ea:33:f2:9c:36:18:
00:db:67:3e:08:06:ac:ea:ae:c8:1d:e5:58:78:09:
d8:01:f6:35:a6:1f:9b:b1:0b:14:cf:62:29:59:cb:
37:80:bc:c7:b1:1e:ae:ea:4d:6c:0f:d9:ee:38:3e:
b8:1e:45:8d:86:74:68:81:7e:f9:2e:9f:00:f8:80:
5f:66:92:0e:1f:aa:e7:3f:61:63:b3:17:9f:12:b9:
3d:a4:bd:4a:dd:12:15:2f:49:11:db:da:e5:8a:80:
8c:4f:c9:59:d7:2f:25:ea:8c:dc:53:5d:c2:2a:38:
ae:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:12:3D:13:8B:BC:E8:1E:60:AD:8E:10:A9:29:26:B2:92:AA:89:14
X509v3 Authority Key Identifier:
keyid:93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:60:c6:3f:87:33:01:db:d5:6c:64:57:12:47:f2:60:b4:f4:
2d:78:6b:18:30:74:1c:c3:31:89:49:ba:ca:c3:43:23:fd:e0:
52:35:6a:b3:86:74:e9:6d:10:fb:f5:7b:d7:b2:31:a0:cc:a0:
98:8b:b0:8c:31:b2:eb:30:91:ff:c1:68:d6:70:cf:5e:69:74:
e6:7c:28:13:28:25:e3:f7:a0:a8:10:8c:f6:b5:24:ec:47:63:
76:c3:e6:72:80:aa:11:7b:44:85:e4:24:4e:05:52:83:a5:d7:
fa:9a:2c:9c:83:47:61:de:66:79:49:e7:16:55:9e:69:72:66:
ef:a5:29:cd:e3:71:a1:4c:e9:6e:fd:84:ab:8e:5c:c7:44:b0:
d7:f1:d9:31:8f:54:0a:6f:2b:53:dc:75:1e:24:98:32:70:3c:
80:ea:f7:f7:a0:c0:e0:22:05:2a:a0:0d:83:6d:dc:4c:93:ec:
f3:e9:fd:f2:c7:19:e2:c9:60:9b:8e:e6:5d:ba:71:0a:c3:ca:
e3:d3:af:9e:9f:f7:ad:9d:c4:4b:c8:8a:c8:34:a9:5a:65:58:
7a:03:57:28:3b:25:ed:04:ec:53:c4:95:ac:64:af:1c:57:3b:
2b:e8:07:fc:a6:3e:04:a0:6a:54:cf:c4:32:36:7b:be:8b:54:
08:88:77:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTepsrLpYfjoCu5z6jetoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZGI3YTM0MmNkOTM5MmVmYTVjZDMzODk0NzQxY2E4YTVi
NGY0MmIwHhcNMjUwODIzMDUwMTQ5WhcNMjUwODI0MDUwMTQ5WjAzMTEwLwYDVQQD
EygzYjEyM2QxMzhiYmNlODFlNjBhZDhlMTBhOTI5MjZiMjkyYWE4OTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4kNcQ4SPbFIV9dlrVeDq5d9kraK
lzSBj2fsK7gsO4UqAZzKInZ0x9yFj4eb01MS244PJD8WEDoj8LVyj7meGC2wKVsd
UC/S/EdydQjNdO8eY3aUHYT+Z0rm5aq4kCMrGn6Mc+Axemux6M577ZPVJt1KDC7K
Bne07Q2YIQb9fhtH1r+u2LNTZ/iYWl4bXY3qM/KcNhgA22c+CAas6q7IHeVYeAnY
AfY1ph+bsQsUz2IpWcs3gLzHsR6u6k1sD9nuOD64HkWNhnRogX75Lp8A+IBfZpIO
H6rnP2FjsxefErk9pL1K3RIVL0kR29rlioCMT8lZ1y8l6ozcU13CKjiuowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsSPROLvOgeYK2OEKkpJrKSqokUMB8GA1UdIwQY
MBaAFJPbejQs2Tku+lzTOJR0HKiltPQrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazl0Nk5DelpPUzc2WE5NNGxIUWNxS1cwOUNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zMDhmNTMtOGJmZi00OTkwLThkN2It
ZTcxODVjZGVjY2QzLzEvazl0Nk5DelpPUzc2WE5NNGxIUWNxS1cwOUNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8zMDhmNTMtOGJmZi00OTkwLThkN2ItZTcxODVjZGVjY2Qz
LzEvazl0Nk5DelpPUzc2WE5NNGxIUWNxS1cwOUNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmDGP4cz
AdvVbGRXEkfyYLT0LXhrGDB0HMMxiUm6ysNDI/3gUjVqs4Z06W0Q+/V717IxoMyg
mIuwjDGy6zCR/8Fo1nDPXml05nwoEygl4/egqBCM9rUk7EdjdsPmcoCqEXtEheQk
TgVSg6XX+posnINHYd5meUnnFlWeaXJm76UpzeNxoUzpbv2Eq45cx0Sw1/HZMY9U
Cm8rU9x1HiSYMnA8gOr396DA4CIFKqANg23cTJPs8+n98scZ4slgm47mXbpxCsPK
49Ovnp/3rZ3ES8iKyDSpWmVYegNXKDsl7QTsU8SVrGSvHFc7K+gH/KY+BKBqVM/E
MjZ7votUCIh3Sw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:34:58 2025 by rpki-client