Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
File: kebTJCJXspZbYnj_jBfhb_PwiyE.mft (raw, json)
Hash identifier: APGzX+0j8olqUx57m/wrPg47Br5t2NSHTzprBiVurCU=
Subject key identifier: EE:AA:EF:34:C0:DA:A1:74:0F:62:36:C7:C4:5D:C5:66:2D:37:72:95
Authority key identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
Certificate issuer: /CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Certificate serial: 0198D77343A072387A6696C476CF39DA38FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 15:01:51 +0000
Manifest this update: Sat 23 Aug 2025 15:01:51 +0000
Manifest next update: Sun 24 Aug 2025 15:01:51 +0000
Files and hashes: 1: HjQkm2JT356OOTfVxzC91MAJejE.roa (hash: 6EBMcahxPvJvcaJie71cxhJd2CWIr+iW37GbqtuijiY=)
2: kebTJCJXspZbYnj_jBfhb_PwiyE.crl (hash: kSacKnVoQ5hrKPUsSRsn0S4XSshQQ3vcJywnUq7b7dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 15:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:43:a0:72:38:7a:66:96:c4:76:cf:39:da:38:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Validity
Not Before: Aug 23 15:01:51 2025 GMT
Not After : Aug 24 15:01:51 2025 GMT
Subject: CN=eeaaef34c0daa1740f6236c7c45dc5662d377295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a7:48:a1:99:19:27:41:27:29:85:da:b5:b6:
41:f4:f3:ef:a1:01:49:f0:9b:9f:78:ae:0d:c1:44:
6f:02:d2:9e:6f:53:c3:18:fe:8c:5d:41:ea:60:50:
c4:48:02:3b:d7:01:e5:0a:23:b9:5f:22:ca:19:90:
b6:3c:43:a3:ba:6a:0a:2a:ea:17:51:a5:44:9f:c3:
fd:db:94:cf:53:23:8f:f8:ec:4e:27:70:04:98:dd:
eb:61:12:ce:1f:b3:8e:de:43:45:61:c5:cf:70:a9:
85:88:d3:0e:5a:49:b6:1a:fc:d3:e0:11:b7:03:7a:
4b:b8:c6:6f:94:7d:4a:8f:02:e3:76:99:44:d0:a7:
0b:d1:e2:b7:6d:0f:f1:82:bc:fc:43:b3:f6:ba:ba:
66:62:07:52:e1:89:69:dc:5a:68:e9:44:e6:45:10:
86:0c:47:4e:76:fe:ba:05:10:c3:a8:ee:89:6e:f2:
2f:c0:28:9f:1c:fd:f9:00:b9:a8:18:a6:a9:31:42:
dc:c4:c6:fa:56:62:b0:91:39:bc:92:ee:3e:b9:5a:
24:4d:81:0f:ed:7d:04:8d:f0:ff:1b:25:ef:27:87:
39:21:b4:d3:a0:35:c6:62:45:3e:2a:15:1a:b7:c1:
1d:85:af:40:66:d8:e3:25:f8:65:dc:6a:42:02:ab:
e3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AA:EF:34:C0:DA:A1:74:0F:62:36:C7:C4:5D:C5:66:2D:37:72:95
X509v3 Authority Key Identifier:
keyid:91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:82:f0:06:0a:fd:98:a6:ed:4e:3f:12:15:58:11:27:1f:c3:
17:5f:5f:8e:1d:21:a8:89:7a:ed:75:0e:0c:73:d8:14:58:c8:
d3:9f:be:ab:13:03:62:f0:47:58:41:47:ce:02:0e:e1:b3:30:
d7:8e:45:f6:45:8f:3e:45:b4:05:46:e1:89:e0:79:fe:88:21:
75:e0:7c:10:7e:6f:68:4e:95:66:54:dd:78:d1:eb:d4:b7:d9:
f9:bc:9c:e7:76:d5:4b:1b:28:c8:35:2b:8f:ae:ed:25:a7:b6:
16:63:59:c0:0d:18:98:89:d4:68:d0:04:a2:67:f2:c6:cf:be:
bb:86:d1:67:1d:5d:94:f4:10:7e:c1:ac:4e:f5:0e:d9:c4:dc:
83:29:76:9e:90:8b:30:eb:18:90:f3:88:99:17:67:b2:7d:62:
cd:44:36:f2:67:08:23:cb:11:ad:cc:5c:38:d1:a9:ae:a3:fa:
46:e5:a4:32:a5:0d:68:d9:66:93:c2:06:b1:88:ba:5d:f3:45:
e7:43:cb:56:4a:83:ff:66:56:3b:c5:21:8e:93:a2:c1:8a:6b:
68:4b:40:2e:10:22:01:78:b8:40:0f:1b:6f:9e:e0:21:02:c7:
8b:61:2b:11:60:18:ad:6c:72:e8:38:ad:ca:2e:b5:a4:3c:7a:
53:ad:d1:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXc0Ogcjh6ZpbEds852jj8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZTZkMzI0MjI1N2IyOTY1YjYyNzhmZjhjMTdlMTZmZjNm
MDhiMjEwHhcNMjUwODIzMTUwMTUxWhcNMjUwODI0MTUwMTUxWjAzMTEwLwYDVQQD
EyhlZWFhZWYzNGMwZGFhMTc0MGY2MjM2YzdjNDVkYzU2NjJkMzc3Mjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1adIoZkZJ0EnKYXatbZB9PPvoQFJ
8JufeK4NwURvAtKeb1PDGP6MXUHqYFDESAI71wHlCiO5XyLKGZC2PEOjumoKKuoX
UaVEn8P925TPUyOP+OxOJ3AEmN3rYRLOH7OO3kNFYcXPcKmFiNMOWkm2GvzT4BG3
A3pLuMZvlH1KjwLjdplE0KcL0eK3bQ/xgrz8Q7P2urpmYgdS4Ylp3Fpo6UTmRRCG
DEdOdv66BRDDqO6JbvIvwCifHP35ALmoGKapMULcxMb6VmKwkTm8ku4+uVokTYEP
7X0EjfD/GyXvJ4c5IbTToDXGYkU+KhUat8Edha9AZtjjJfhl3GpCAqvjLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6q7zTA2qF0D2I2x8RdxWYtN3KVMB8GA1UdIwQY
MBaAFJHm0yQiV7KWW2J4/4wX4W/z8IshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2ViVEpDSlhzcFpiWW5qX2pCZmhiX1B3aXlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wYzBmNjEtYjY5Yy00NjU3LTk4Njct
N2U3NGE2YTk4ZWNkLzEva2ViVEpDSlhzcFpiWW5qX2pCZmhiX1B3aXlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8wYzBmNjEtYjY5Yy00NjU3LTk4NjctN2U3NGE2YTk4ZWNk
LzEva2ViVEpDSlhzcFpiWW5qX2pCZmhiX1B3aXlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYLwBgr9
mKbtTj8SFVgRJx/DF19fjh0hqIl67XUODHPYFFjI05++qxMDYvBHWEFHzgIO4bMw
145F9kWPPkW0BUbhieB5/oghdeB8EH5vaE6VZlTdeNHr1LfZ+byc53bVSxsoyDUr
j67tJae2FmNZwA0YmInUaNAEomfyxs++u4bRZx1dlPQQfsGsTvUO2cTcgyl2npCL
MOsYkPOImRdnsn1izUQ28mcII8sRrcxcONGprqP6RuWkMqUNaNlmk8IGsYi6XfNF
50PLVkqD/2ZWO8UhjpOiwYpraEtALhAiAXi4QA8bb57gIQLHi2ErEWAYrWxy6Dit
yi61pDx6U63RJg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:18:11 2025 by rpki-client