Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
File: _KmLHQ7MzE9v8afn24S0uy9VsI0.mft (raw, json)
Hash identifier: zz09uatDBUATjhBmf7i7YZH7SsJVnzEQnE/rmGSFCnY=
Subject key identifier: 95:86:14:58:B6:E4:13:07:25:7A:E5:D6:BC:85:8C:DD:14:7A:16:B8
Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
Certificate issuer: /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Certificate serial: 0198D5F11DB8AFF694C0BDAD9B6CB42B8874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
Manifest number: 160F
Signing time: Sat 23 Aug 2025 08:00:05 +0000
Manifest this update: Sat 23 Aug 2025 08:00:05 +0000
Manifest next update: Sun 24 Aug 2025 08:00:05 +0000
Files and hashes: 1: MIfmeAoWN0nwDc_PxEMHlVixhH0.roa (hash: BGlglgWDBdgW/hvSdFfJEQ+q//PCVjKwrtXl1XRe9nc=)
2: _KmLHQ7MzE9v8afn24S0uy9VsI0.crl (hash: qePDNvr5zTRl5wDSaP0e9u0X0iF6o5Ig3XPnZVEIiyo=)
3: ok0D6AFy1nokMBW7AtTQbtvoy-Q.roa (hash: OI8j87WnUAa44hUR7Jr4hBgPSlGVFL5uAjQD5u8Uzmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:1d:b8:af:f6:94:c0:bd:ad:9b:6c:b4:2b:88:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Validity
Not Before: Aug 23 08:00:05 2025 GMT
Not After : Aug 24 08:00:05 2025 GMT
Subject: CN=95861458b6e41307257ae5d6bc858cdd147a16b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:17:6f:a3:af:5f:a9:60:2f:ad:60:ca:1d:02:
ea:a2:3e:51:1e:97:46:f9:3f:25:ef:94:5b:c6:9b:
3a:f9:c6:af:67:17:f0:66:36:45:0b:c3:90:4c:d1:
ac:e9:51:ad:42:e2:6d:a3:90:5e:08:0c:3e:03:a6:
84:d8:b6:c3:9e:31:d9:cd:3c:d7:85:3f:de:a6:8e:
fc:74:88:93:aa:30:c9:c5:ed:78:af:cc:5f:6a:54:
58:ae:35:7f:a4:2a:e8:45:16:71:0d:ac:55:15:f6:
dc:55:a6:bb:8c:f4:23:3b:b7:3e:ce:b4:57:49:27:
7f:b0:90:37:e0:b9:03:71:0f:5f:90:cb:63:64:9c:
d6:00:fd:86:63:5c:7d:fc:cc:17:fc:fb:1e:d6:11:
bb:43:e3:7c:97:99:db:75:d7:59:54:62:18:5b:af:
d7:b0:f9:85:47:12:42:14:b8:bc:32:74:b0:2d:63:
e0:be:c4:e4:93:d4:49:eb:dc:18:d3:6f:52:3b:71:
44:0b:07:40:4e:44:43:c3:59:47:11:3f:be:60:7a:
4a:e0:62:b7:84:93:be:fe:f3:76:36:f6:0f:8d:2b:
b2:90:ba:df:f9:75:e1:af:72:31:00:78:c1:53:5b:
be:4e:9e:e6:09:5e:7a:5c:a3:e0:32:b8:d6:b3:e5:
f9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:86:14:58:B6:E4:13:07:25:7A:E5:D6:BC:85:8C:DD:14:7A:16:B8
X509v3 Authority Key Identifier:
keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d1:4b:d7:f1:bb:ab:37:df:f0:9d:54:2a:bb:57:a2:16:64:
23:7d:23:59:3d:06:5a:33:3e:57:a3:ef:39:fb:35:00:51:5b:
b2:73:72:23:75:10:8e:a2:a1:35:41:bc:3f:ec:4a:3a:86:d3:
41:c4:a0:56:6e:44:f9:07:8f:73:a1:e0:b6:7e:c1:e9:3f:6f:
46:61:38:63:2a:eb:b9:86:df:df:36:18:27:2b:6e:17:ec:6e:
32:a5:83:7e:4e:aa:dd:d6:07:d1:c0:4b:6b:69:b2:a8:d4:c2:
7f:7b:5d:c0:db:79:95:bc:1d:6d:40:7a:1b:6a:c8:3e:ac:d7:
45:ca:29:66:ea:6d:d7:10:86:29:53:ee:4e:79:7f:e9:6d:08:
97:b5:a1:9d:78:a0:eb:ff:5c:62:12:49:20:1c:d9:70:34:72:
19:0e:5d:49:2a:a3:92:51:12:76:9f:3b:55:f2:1f:ef:81:a1:
9f:34:35:9b:ee:00:0f:3b:10:bd:f7:64:03:66:a6:30:87:81:
89:55:0b:6a:01:5b:eb:57:c8:a0:87:31:7c:fc:14:5c:87:7e:
57:80:6f:05:6c:04:03:97:b2:83:40:28:4b:93:a5:d1:b1:88:
85:75:0f:f3:59:69:81:06:a6:25:48:5f:29:6c:da:e0:2c:b3:
38:1e:07:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8R24r/aUwL2tm2y0K4h0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYTk4YjFkMGVjY2NjNGY2ZmYxYTdlN2RiODRiNGJiMmY1
NWIwOGQwHhcNMjUwODIzMDgwMDA1WhcNMjUwODI0MDgwMDA1WjAzMTEwLwYDVQQD
Eyg5NTg2MTQ1OGI2ZTQxMzA3MjU3YWU1ZDZiYzg1OGNkZDE0N2ExNmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxdvo69fqWAvrWDKHQLqoj5RHpdG
+T8l75Rbxps6+cavZxfwZjZFC8OQTNGs6VGtQuJto5BeCAw+A6aE2LbDnjHZzTzX
hT/epo78dIiTqjDJxe14r8xfalRYrjV/pCroRRZxDaxVFfbcVaa7jPQjO7c+zrRX
SSd/sJA34LkDcQ9fkMtjZJzWAP2GY1x9/MwX/Pse1hG7Q+N8l5nbdddZVGIYW6/X
sPmFRxJCFLi8MnSwLWPgvsTkk9RJ69wY029SO3FECwdATkRDw1lHET++YHpK4GK3
hJO+/vN2NvYPjSuykLrf+XXhr3IxAHjBU1u+Tp7mCV56XKPgMrjWs+X5xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWGFFi25BMHJXrl1ryFjN0Ueha4MB8GA1UdIwQY
MBaAFPypix0OzMxPb/Gn59uEtLsvVbCNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85NzFlNzMtZmE4My00NTc5LTg1MzIt
NThmMGYzMjVjMmI4LzEvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85NzFlNzMtZmE4My00NTc5LTg1MzItNThmMGYzMjVjMmI4
LzEvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtFL1/G7
qzff8J1UKrtXohZkI30jWT0GWjM+V6PvOfs1AFFbsnNyI3UQjqKhNUG8P+xKOobT
QcSgVm5E+QePc6Hgtn7B6T9vRmE4YyrruYbf3zYYJytuF+xuMqWDfk6q3dYH0cBL
a2myqNTCf3tdwNt5lbwdbUB6G2rIPqzXRcopZupt1xCGKVPuTnl/6W0Il7WhnXig
6/9cYhJJIBzZcDRyGQ5dSSqjklESdp87VfIf74GhnzQ1m+4ADzsQvfdkA2amMIeB
iVULagFb61fIoIcxfPwUXId+V4BvBWwEA5eyg0AoS5Ol0bGIhXUP81lpgQamJUhf
KWza4CyzOB4HaA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:47:11 2025 by rpki-client