Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
File: koAW21XmZLpyHhmumrQxbBDZZwg.mft (raw, json)
Hash identifier: oD+CoOA7V3e+6xGqRidj6G9TUk2i/vnEBMmPQyq6UVY=
Subject key identifier: 65:35:9C:E7:4C:ED:DC:AF:43:D7:21:BE:3D:3E:7C:5B:5C:3E:4B:D7
Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Certificate issuer: /CN=928016db55e664ba721e19ae9ab4316c10d96708
Certificate serial: 0198D6CD8200B0418EF6D2311DA8C7E1CFD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 12:00:48 +0000
Manifest this update: Sat 23 Aug 2025 12:00:48 +0000
Manifest next update: Sun 24 Aug 2025 12:00:48 +0000
Files and hashes: 1: koAW21XmZLpyHhmumrQxbBDZZwg.crl (hash: LDZcsFYo64H1EsmJX+jQXpKJA8k/oCK96+fmUQWxi/c=)
2: wzuPiDmhnP7Nv_Dp2QI7h5h3O-g.roa (hash: 1/0ldOLBPILSR69hThfIMtpZUKnlBM4vs1kLEHBC5Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:82:00:b0:41:8e:f6:d2:31:1d:a8:c7:e1:cf:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708
Validity
Not Before: Aug 23 12:00:48 2025 GMT
Not After : Aug 24 12:00:48 2025 GMT
Subject: CN=65359ce74ceddcaf43d721be3d3e7c5b5c3e4bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:84:c7:86:d6:a5:b1:5e:cf:a4:44:31:96:
27:bc:8a:32:89:f9:ac:0b:87:e1:d6:26:d4:0a:dd:
4e:3a:d0:f1:8c:da:a8:66:24:3a:7c:c9:55:e8:bc:
35:ed:cf:3e:cf:d6:95:d0:f5:14:62:85:ce:09:69:
c7:36:b1:2f:43:7a:91:ea:e4:1e:6a:2d:d7:45:4f:
82:33:6f:65:ea:5f:ec:05:6f:2e:6c:c0:77:20:bd:
c9:53:24:a7:c8:18:7f:54:23:8f:5e:0e:19:27:88:
72:77:e8:f3:bb:1e:5a:ef:0f:0c:5b:6b:2b:fd:61:
89:9b:a8:4c:65:c8:02:ea:d2:6c:1e:a0:04:2c:d1:
e3:5f:28:69:28:35:19:0d:8e:4c:fa:5d:0f:91:39:
f6:45:09:f1:17:42:35:63:92:28:5f:cb:8e:1b:b5:
42:c6:31:d5:d1:de:29:15:49:bb:b1:6d:82:23:87:
a8:07:56:9f:16:8d:75:9b:ed:39:76:64:17:da:1d:
f3:2a:69:81:8e:67:0d:da:7c:be:f2:e5:8b:e9:20:
bf:7c:3a:39:94:3d:bf:59:42:e5:5c:3a:78:db:2e:
3b:3e:ba:ba:f2:f7:9b:56:ae:3e:45:bd:7c:70:f9:
44:1a:10:ed:03:d3:ee:57:33:35:18:f6:8b:78:35:
49:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:35:9C:E7:4C:ED:DC:AF:43:D7:21:BE:3D:3E:7C:5B:5C:3E:4B:D7
X509v3 Authority Key Identifier:
keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:99:51:e0:50:91:a7:a0:c9:e4:6c:4e:32:92:02:e5:4b:c3:
50:33:21:7d:92:43:17:89:a1:5f:fc:16:18:47:8a:b4:0d:e5:
7d:ce:98:7e:89:0d:a3:49:dc:09:d0:e5:ea:db:00:3f:31:c4:
31:8b:77:30:1e:40:c0:66:c1:46:91:c4:7d:a9:cc:d9:36:9b:
58:d8:95:fe:a3:cc:cf:fa:08:53:11:cb:a6:41:87:77:3e:d3:
dc:d9:08:75:1b:ab:df:96:24:cb:75:00:22:d5:c5:82:81:27:
69:88:66:23:b3:5b:45:1e:d4:e1:35:b5:e5:8b:9b:23:db:8a:
9b:46:6b:c5:0d:f3:79:12:59:48:b6:15:10:1e:a9:71:22:93:
ba:5e:9a:44:7f:ec:de:a4:2c:d2:f7:a5:19:dc:5b:00:2f:0a:
b7:48:05:af:f4:49:1c:1b:a9:68:62:ab:c2:d5:02:b5:2c:11:
6d:81:73:42:1a:ea:6c:83:08:97:03:93:b1:de:8c:4f:28:13:
78:30:55:16:ce:83:7d:20:c6:e3:56:81:45:70:cd:15:85:40:
cc:a0:01:46:3e:7c:0f:75:b7:b0:e5:84:e0:93:d0:50:49:47:
e7:0a:1a:cb:f2:55:b2:25:be:c1:cf:d8:3a:d7:09:3c:2c:17:
55:00:44:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzYIAsEGO9tIxHajH4c/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyODAxNmRiNTVlNjY0YmE3MjFlMTlhZTlhYjQzMTZjMTBk
OTY3MDgwHhcNMjUwODIzMTIwMDQ4WhcNMjUwODI0MTIwMDQ4WjAzMTEwLwYDVQQD
Eyg2NTM1OWNlNzRjZWRkY2FmNDNkNzIxYmUzZDNlN2M1YjVjM2U0YmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8eEx4bWpbFez6REMZYnvIoyifms
C4fh1ibUCt1OOtDxjNqoZiQ6fMlV6Lw17c8+z9aV0PUUYoXOCWnHNrEvQ3qR6uQe
ai3XRU+CM29l6l/sBW8ubMB3IL3JUySnyBh/VCOPXg4ZJ4hyd+jzux5a7w8MW2sr
/WGJm6hMZcgC6tJsHqAELNHjXyhpKDUZDY5M+l0PkTn2RQnxF0I1Y5IoX8uOG7VC
xjHV0d4pFUm7sW2CI4eoB1afFo11m+05dmQX2h3zKmmBjmcN2ny+8uWL6SC/fDo5
lD2/WULlXDp42y47Prq68vebVq4+Rb18cPlEGhDtA9PuVzM1GPaLeDVJ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGU1nOdM7dyvQ9chvj0+fFtcPkvXMB8GA1UdIwQY
MBaAFJKAFttV5mS6ch4Zrpq0MWwQ2WcIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva29BVzIxWG1aTHB5SGhtdW1yUXhiQkRaWndnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83MjFhMWMtY2YzOS00NDQ4LTg4M2It
ZTg5Y2RhYjgyZTFjLzEva29BVzIxWG1aTHB5SGhtdW1yUXhiQkRaWndnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83MjFhMWMtY2YzOS00NDQ4LTg4M2ItZTg5Y2RhYjgyZTFj
LzEva29BVzIxWG1aTHB5SGhtdW1yUXhiQkRaWndnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJlR4FCR
p6DJ5GxOMpIC5UvDUDMhfZJDF4mhX/wWGEeKtA3lfc6YfokNo0ncCdDl6tsAPzHE
MYt3MB5AwGbBRpHEfanM2TabWNiV/qPMz/oIUxHLpkGHdz7T3NkIdRur35Yky3UA
ItXFgoEnaYhmI7NbRR7U4TW15YubI9uKm0ZrxQ3zeRJZSLYVEB6pcSKTul6aRH/s
3qQs0velGdxbAC8Kt0gFr/RJHBupaGKrwtUCtSwRbYFzQhrqbIMIlwOTsd6MTygT
eDBVFs6DfSDG41aBRXDNFYVAzKABRj58D3W3sOWE4JPQUElH5woay/JVsiW+wc/Y
OtcJPCwXVQBEAA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:45:26 2025 by rpki-client