Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
File: KUk3Me_Mx0rVwnOHS5Ng96polGU.mft (raw, json)
Hash identifier: eQHu/nO2R8sqPRN8nUuEMv1m7Lft8+YsxWj5ZL49BAA=
Subject key identifier: D4:8E:F4:F6:CF:2D:2F:9E:CA:AD:9B:75:6D:0E:98:37:63:7E:E6:59
Authority key identifier: 29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
Certificate issuer: /CN=29493731efccc74ad5c273874b9360f7aa689465
Certificate serial: 0198D4E0927699DDACAE0C0FEF687A1E184D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 03:02:23 +0000
Manifest this update: Sat 23 Aug 2025 03:02:23 +0000
Manifest next update: Sun 24 Aug 2025 03:02:23 +0000
Files and hashes: 1: KUk3Me_Mx0rVwnOHS5Ng96polGU.crl (hash: C90uliidoissYLt5yDsB6iNupYIMaHFYElmeogj6/+4=)
2: Xiq-7Jev0boBEtsil-XGVvUzgqg.roa (hash: Xk6kyPCoONS0HAtum1UvzVR1hPVGojYHRenom/WPJ28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:92:76:99:dd:ac:ae:0c:0f:ef:68:7a:1e:18:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29493731efccc74ad5c273874b9360f7aa689465
Validity
Not Before: Aug 23 03:02:23 2025 GMT
Not After : Aug 24 03:02:23 2025 GMT
Subject: CN=d48ef4f6cf2d2f9ecaad9b756d0e9837637ee659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9c:30:b7:bb:b8:e3:da:5a:32:32:fe:c6:9f:
94:64:f2:56:eb:87:76:cc:1e:64:de:d4:95:43:65:
ab:5f:72:8c:85:56:82:b8:9a:fa:0d:17:52:0c:2a:
72:0b:4b:9c:1d:4b:ba:fb:15:d8:a6:73:1e:05:a9:
4d:42:47:5e:ba:b2:72:56:e1:98:f5:56:d2:de:8e:
d0:6e:ca:2a:73:28:18:85:22:9c:84:89:af:57:3d:
29:31:95:45:91:a1:c8:5f:f3:5e:33:1f:9d:fe:9d:
16:29:ec:ff:1f:90:5c:ea:2a:93:6d:e0:0d:6a:41:
6a:28:86:c6:9c:4e:ae:bd:2f:75:80:40:c3:be:d3:
2d:c9:19:99:a2:1b:a1:79:cb:fa:f4:b1:84:dd:7a:
57:35:f5:bb:f9:71:8b:28:45:7c:f2:38:12:6c:b7:
1d:2a:ed:09:01:74:a7:9e:35:f2:db:dc:5e:98:95:
ad:d4:5d:5a:f2:47:c5:e5:90:bd:5e:a8:a9:1f:04:
57:f9:0b:6f:7d:94:66:40:32:48:cc:21:f4:d7:d7:
4a:5d:79:8f:5d:ae:65:d1:a3:03:c1:85:9d:e7:65:
73:0b:c8:a6:32:29:8d:16:c0:37:b7:62:5d:f6:76:
20:4a:a3:e3:7c:5f:f6:23:50:dd:bd:e3:10:b1:3a:
e4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8E:F4:F6:CF:2D:2F:9E:CA:AD:9B:75:6D:0E:98:37:63:7E:E6:59
X509v3 Authority Key Identifier:
keyid:29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:36:f0:9f:a9:7e:23:ab:e6:56:ee:b2:f1:07:4c:7c:04:76:
cd:b8:77:11:51:e0:2b:07:f0:6a:26:c3:23:ea:16:74:86:85:
24:af:24:8f:b7:4d:90:3c:49:19:fc:ed:ee:27:58:4c:5e:05:
ec:65:c5:36:6d:33:ad:9f:8e:07:ee:bd:3c:50:47:d8:c1:32:
aa:bf:f6:8f:a8:ee:f7:dc:73:88:22:c1:f1:d0:20:cd:de:d8:
10:6b:6d:cc:63:2a:4d:e1:a6:e9:f4:c7:b3:49:99:fb:ca:8e:
e9:f0:b4:65:30:d8:42:cb:e2:db:8b:5d:13:f2:19:77:b6:d8:
cd:1e:a9:a6:c8:a8:e2:09:ce:90:b5:3f:dd:46:e2:30:4d:de:
9e:27:aa:32:da:ad:0c:09:df:d9:d1:29:9f:0a:e7:9e:5a:7b:
6a:06:c6:d7:72:e3:60:99:40:b2:39:27:ef:ba:1f:83:af:87:
d3:53:df:ad:6a:4d:10:37:f5:e6:b6:a7:26:2f:26:de:41:7f:
cf:e3:73:f3:63:6b:d3:e8:38:c8:a1:ec:ee:73:48:14:c8:c8:
a5:1f:fd:82:e7:f1:03:e1:2d:1d:6e:6a:a4:6a:3a:65:ef:e7:
75:a1:11:bc:11:2a:cb:ba:3a:b7:e4:dd:cd:1a:e2:e0:30:2c:
c5:81:56:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4JJ2md2srgwP72h6HhhNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NDkzNzMxZWZjY2M3NGFkNWMyNzM4NzRiOTM2MGY3YWE2
ODk0NjUwHhcNMjUwODIzMDMwMjIzWhcNMjUwODI0MDMwMjIzWjAzMTEwLwYDVQQD
EyhkNDhlZjRmNmNmMmQyZjllY2FhZDliNzU2ZDBlOTgzNzYzN2VlNjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Jwwt7u449paMjL+xp+UZPJW64d2
zB5k3tSVQ2WrX3KMhVaCuJr6DRdSDCpyC0ucHUu6+xXYpnMeBalNQkdeurJyVuGY
9VbS3o7QbsoqcygYhSKchImvVz0pMZVFkaHIX/NeMx+d/p0WKez/H5Bc6iqTbeAN
akFqKIbGnE6uvS91gEDDvtMtyRmZohuhecv69LGE3XpXNfW7+XGLKEV88jgSbLcd
Ku0JAXSnnjXy29xemJWt1F1a8kfF5ZC9XqipHwRX+QtvfZRmQDJIzCH019dKXXmP
Xa5l0aMDwYWd52VzC8imMimNFsA3t2Jd9nYgSqPjfF/2I1DdveMQsTrk0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSO9PbPLS+eyq2bdW0OmDdjfuZZMB8GA1UdIwQY
MBaAFClJNzHvzMdK1cJzh0uTYPeqaJRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1VrM01lX014MHJWd25PSFM1Tmc5NnBvbEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9hZjRjMDktYzhjMi00ODkzLWExMGIt
MGNkOGE2OTcyOWI3LzEvS1VrM01lX014MHJWd25PSFM1Tmc5NnBvbEdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9hZjRjMDktYzhjMi00ODkzLWExMGItMGNkOGE2OTcyOWI3
LzEvS1VrM01lX014MHJWd25PSFM1Tmc5NnBvbEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzjbwn6l+
I6vmVu6y8QdMfAR2zbh3EVHgKwfwaibDI+oWdIaFJK8kj7dNkDxJGfzt7idYTF4F
7GXFNm0zrZ+OB+69PFBH2MEyqr/2j6ju99xziCLB8dAgzd7YEGttzGMqTeGm6fTH
s0mZ+8qO6fC0ZTDYQsvi24tdE/IZd7bYzR6ppsio4gnOkLU/3UbiME3enieqMtqt
DAnf2dEpnwrnnlp7agbG13LjYJlAsjkn77ofg6+H01PfrWpNEDf15ranJi8m3kF/
z+Nz82Nr0+g4yKHs7nNIFMjIpR/9gufxA+EtHW5qpGo6Ze/ndaERvBEqy7o6t+Td
zRri4DAsxYFWEg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:53 2025 by rpki-client