Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
File: K5KAl9yfiaejqKKWp4pPnQy84X8.mft (raw, json)
Hash identifier: 0ddnBMMFZyw6rEjqYH9vpDJCqGGq0brqKxwLQWI7h2k=
Subject key identifier: C3:46:CA:18:76:09:AC:B5:4B:E8:6F:C2:3B:72:41:40:37:C5:B7:56
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial: 0198D473B22C113C9403D135B4C0B2658D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 01:03:28 +0000
Manifest this update: Sat 23 Aug 2025 01:03:28 +0000
Manifest next update: Sun 24 Aug 2025 01:03:28 +0000
Files and hashes: 1: AmmERHoFL94GmD-TNoEsdCRoLA0.roa (hash: biK301TWdWY9asw86ndZF9AzE6I4gnsLDy1ooUih+WA=)
2: K5KAl9yfiaejqKKWp4pPnQy84X8.crl (hash: BrkdzhlYBIFttS6KXgP81zquCZzCaITqjgrsFFC2WGA=)
3: Yir1wFnAK-DFdW1gJQQBqKeL_rg.roa (hash: /+asFMl4xLs7yAsL3JI4lb0AzpjlX5T5v9MFr+IdWAw=)
4: uUIHLpHOzvZGAd44SZTSJe8l41g.roa (hash: fYWeKpFER5K7DmZGk625fBtbp6QjScVAI5NXZ5fqiWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:b2:2c:11:3c:94:03:d1:35:b4:c0:b2:65:8d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Validity
Not Before: Aug 23 01:03:28 2025 GMT
Not After : Aug 24 01:03:28 2025 GMT
Subject: CN=c346ca187609acb54be86fc23b72414037c5b756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:85:2f:49:d0:f0:8c:cf:bd:10:14:e1:12:
53:63:17:81:54:1b:4c:8e:94:24:2a:90:e7:d8:66:
6c:e2:21:5e:14:82:0e:ec:3b:9f:dc:d2:20:cd:07:
9e:ec:5d:9e:ab:98:b6:d3:85:b0:70:c8:7f:5c:b6:
f8:cf:92:d5:0e:5c:07:48:36:b5:fc:ab:03:94:c3:
93:4c:a3:33:28:87:ee:5c:41:94:53:1f:a4:5f:51:
1b:b8:e8:ce:99:ff:c5:c4:53:a2:30:c5:f5:9c:52:
2b:e3:28:7f:23:52:32:2a:e2:76:a5:e5:b3:98:76:
69:57:1b:6a:b0:82:5c:e4:d0:16:46:fa:e3:17:2a:
08:e1:7f:66:ca:ba:c2:79:e6:27:4a:c0:58:d1:72:
ba:a5:93:4e:b0:30:3a:4f:8c:0e:9d:d0:1b:f0:dd:
fd:92:74:06:90:ce:90:39:74:35:63:58:29:e5:83:
2b:b3:90:a8:0b:c2:aa:04:e2:79:93:bf:e1:19:7a:
88:f2:53:bf:ae:03:99:e9:f4:01:65:4f:28:c4:58:
59:66:c2:55:c2:18:db:bb:58:18:f5:9c:46:c4:fb:
4e:a0:67:71:77:ba:62:92:f9:45:3c:04:cd:0d:6d:
a1:15:d0:40:1f:05:f5:9f:68:98:a4:0b:a6:71:96:
12:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:46:CA:18:76:09:AC:B5:4B:E8:6F:C2:3B:72:41:40:37:C5:B7:56
X509v3 Authority Key Identifier:
keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e4:76:0b:81:28:fb:7b:ff:d6:de:8e:d2:d6:0d:1d:99:3e:
1d:cc:0f:d7:67:99:48:bf:de:2b:73:05:59:ed:35:7b:8a:c6:
23:18:f8:97:e4:e7:7f:b6:ee:f8:12:2a:58:76:bb:7d:29:3f:
9a:a5:de:62:3e:38:0f:b7:4b:cc:01:25:91:0c:2e:c6:66:fd:
5d:87:72:d8:ba:f8:fb:8b:fd:eb:d5:64:38:56:f4:77:e3:7a:
ba:d9:dd:33:fe:63:00:67:af:01:fe:12:1b:44:70:0d:ef:48:
e6:3f:33:8e:44:fc:47:8d:42:ab:b2:30:d5:2f:f2:7d:68:14:
db:c8:9c:db:17:02:da:46:44:d0:55:84:46:a2:e0:be:90:3b:
c4:48:a2:33:0d:c4:39:2d:4c:bb:cd:a8:6a:91:38:68:b0:99:
27:58:2e:79:27:76:5b:6f:d7:de:b7:f6:94:98:e5:e5:67:ab:
96:6d:f1:e3:83:81:e1:52:a5:a5:d4:e8:27:ee:f8:50:0f:f1:
e9:85:05:a9:69:4a:34:fa:2c:c4:c8:52:d9:e3:a2:e3:f7:a6:
aa:01:28:77:fa:1c:60:20:8d:c2:90:a5:5a:4a:3e:cd:d9:1c:
1e:0b:34:c5:53:f9:e8:f2:0e:4b:79:8f:ba:4b:ff:7b:f7:b3:
bb:99:1a:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc7IsETyUA9E1tMCyZY1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTI4MDk3ZGM5Zjg5YTdhM2E4YTI5NmE3OGE0ZjlkMGNi
Y2UxN2YwHhcNMjUwODIzMDEwMzI4WhcNMjUwODI0MDEwMzI4WjAzMTEwLwYDVQQD
EyhjMzQ2Y2ExODc2MDlhY2I1NGJlODZmYzIzYjcyNDE0MDM3YzViNzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwGFL0nQ8IzPvRAU4RJTYxeBVBtM
jpQkKpDn2GZs4iFeFIIO7Duf3NIgzQee7F2eq5i204WwcMh/XLb4z5LVDlwHSDa1
/KsDlMOTTKMzKIfuXEGUUx+kX1EbuOjOmf/FxFOiMMX1nFIr4yh/I1IyKuJ2peWz
mHZpVxtqsIJc5NAWRvrjFyoI4X9myrrCeeYnSsBY0XK6pZNOsDA6T4wOndAb8N39
knQGkM6QOXQ1Y1gp5YMrs5CoC8KqBOJ5k7/hGXqI8lO/rgOZ6fQBZU8oxFhZZsJV
whjbu1gY9ZxGxPtOoGdxd7pikvlFPATNDW2hFdBAHwX1n2iYpAumcZYS2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNGyhh2Cay1S+hvwjtyQUA3xbdWMB8GA1UdIwQY
MBaAFCuSgJfcn4mno6iilqeKT50MvOF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNzM0YTQtMTQzZC00NjFkLWJmZDYt
NDVjYWE2ZWY2NzAwLzEvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9hNzM0YTQtMTQzZC00NjFkLWJmZDYtNDVjYWE2ZWY2NzAw
LzEvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+R2C4Eo
+3v/1t6O0tYNHZk+HcwP12eZSL/eK3MFWe01e4rGIxj4l+Tnf7bu+BIqWHa7fSk/
mqXeYj44D7dLzAElkQwuxmb9XYdy2Lr4+4v969VkOFb0d+N6utndM/5jAGevAf4S
G0RwDe9I5j8zjkT8R41Cq7Iw1S/yfWgU28ic2xcC2kZE0FWERqLgvpA7xEiiMw3E
OS1Mu82oapE4aLCZJ1gueSd2W2/X3rf2lJjl5Werlm3x44OB4VKlpdToJ+74UA/x
6YUFqWlKNPosxMhS2eOi4/emqgEod/ocYCCNwpClWko+zdkcHgs0xVP56PIOS3mP
ukv/e/ezu5kaaQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:29 2025 by rpki-client