Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File: kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier: EJw8SMpgu4a3UJvCrt3XFOoaN25xpdJzCQL7E9LjXu8=
Subject key identifier: 49:BF:FE:D9:A1:2D:05:BA:B2:81:61:00:AD:3B:AA:8E:8C:FB:EE:5F
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 0198D4E055111AEB8D27E40559B738EA1D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number: 0B6B
Signing time: Sat 23 Aug 2025 03:02:08 +0000
Manifest this update: Sat 23 Aug 2025 03:02:08 +0000
Manifest next update: Sun 24 Aug 2025 03:02:08 +0000
Files and hashes: 1: Ms3efVN_XUHd4QxKef3_YdRpvGM.roa (hash: JqLniVKizln7qKYMvWy43G4dVpEgMo9SnC/GlXkBUPw=)
2: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: XBAxZeNjjtHTpl0OmaCFqR8Tn6Y16qpBXIyaXCwVIEo=)
3: uDDSIBamhzWkhMClbzH_9oqf3KA.roa (hash: m1HA6uhPnc0quVohM65OVF8eaR3/NxsjEYFcU7UUjUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:55:11:1a:eb:8d:27:e4:05:59:b7:38:ea:1d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: Aug 23 03:02:08 2025 GMT
Not After : Aug 24 03:02:08 2025 GMT
Subject: CN=49bffed9a12d05bab2816100ad3baa8e8cfbee5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:76:fc:32:78:57:7a:9c:e4:c9:a4:39:78:f0:
0c:03:ae:8f:f0:bb:42:09:c1:ef:0f:52:74:aa:1f:
af:54:6d:44:ee:b3:3d:ce:e7:bb:dc:c5:5c:70:34:
6a:58:05:23:c7:6c:ec:15:37:38:02:e0:f3:80:81:
38:a9:c6:c7:45:94:b8:5a:ae:50:44:8b:bf:7d:8d:
04:d7:0c:c9:61:6c:01:b2:5b:e1:ec:93:58:94:08:
cb:72:97:82:34:ca:27:c8:27:c0:6f:01:82:3b:f6:
b0:6c:fd:c4:a5:9b:57:ca:5b:17:49:01:72:45:73:
af:8d:f6:bf:98:88:3b:c9:54:1f:bd:7e:9d:99:0e:
34:d9:e8:da:dc:21:22:9a:bb:52:57:88:0e:fe:fe:
6f:6d:8e:71:80:b3:27:9d:e9:19:6c:89:a3:5b:c4:
c9:96:51:62:30:55:d2:b4:79:bb:d2:c3:2d:58:db:
6b:1e:6b:e2:81:26:b3:ce:6d:d2:7f:77:05:d5:db:
35:70:f7:64:a3:bc:19:06:9f:e7:76:28:44:5f:9e:
02:71:a7:1d:50:e8:9a:35:eb:07:34:71:de:21:0f:
37:c0:12:20:1d:08:05:79:94:64:7b:42:31:69:cc:
64:e3:60:2d:dd:48:6c:bb:96:1f:16:f4:a8:cc:a0:
4b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BF:FE:D9:A1:2D:05:BA:B2:81:61:00:AD:3B:AA:8E:8C:FB:EE:5F
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:33:a8:4d:ae:38:c0:58:d8:59:47:98:b4:7b:00:b0:bc:5a:
5c:33:20:1a:b5:cc:37:bb:b8:9c:c9:18:57:13:73:c9:33:d2:
0a:04:de:f4:5f:cd:f4:d2:92:80:b5:4a:fd:5f:20:a3:ae:87:
e0:8c:7b:da:52:2e:7f:cc:89:9d:66:7c:64:b4:6b:d1:9c:f8:
97:55:9e:bc:91:05:48:ac:9c:f6:0c:7e:64:8d:9d:6f:70:b3:
fa:90:a5:ab:39:56:22:3b:42:0e:6c:85:58:6a:a3:69:aa:17:
01:83:2c:d4:ed:74:00:63:e0:8f:b7:63:c5:cc:f3:08:28:33:
88:d6:8c:57:40:72:a3:11:44:17:c7:7f:f1:01:c2:c9:ed:37:
8a:c8:ec:53:3f:11:38:d3:42:fd:78:a4:8c:07:42:e1:74:24:
07:4c:64:ab:64:92:03:61:70:27:b5:02:27:d3:c8:16:2f:33:
5b:d1:6b:4a:85:59:40:3b:a6:5f:24:cc:08:15:79:2d:94:31:
cc:89:d4:1d:51:83:91:3e:80:ce:19:48:83:18:f0:17:c4:a2:
ae:53:de:a3:1e:82:54:e7:52:71:31:c8:0a:73:d8:45:5e:50:
67:7b:f4:c0:be:8c:64:26:31:78:16:c0:f7:e3:66:94:9b:b2:
47:ce:2b:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4FURGuuNJ+QFWbc46h1vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMjQ2MGI3OGY2ZThmNDY2MmFlYzc4NThlOTIwNTFlODU2
MDk5ZjUwHhcNMjUwODIzMDMwMjA4WhcNMjUwODI0MDMwMjA4WjAzMTEwLwYDVQQD
Eyg0OWJmZmVkOWExMmQwNWJhYjI4MTYxMDBhZDNiYWE4ZThjZmJlZTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXb8MnhXepzkyaQ5ePAMA66P8LtC
CcHvD1J0qh+vVG1E7rM9zue73MVccDRqWAUjx2zsFTc4AuDzgIE4qcbHRZS4Wq5Q
RIu/fY0E1wzJYWwBslvh7JNYlAjLcpeCNMonyCfAbwGCO/awbP3EpZtXylsXSQFy
RXOvjfa/mIg7yVQfvX6dmQ402eja3CEimrtSV4gO/v5vbY5xgLMnnekZbImjW8TJ
llFiMFXStHm70sMtWNtrHmvigSazzm3Sf3cF1ds1cPdko7wZBp/ndihEX54Ccacd
UOiaNesHNHHeIQ83wBIgHQgFeZRke0Ixacxk42At3Uhsu5YfFvSozKBLawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEm//tmhLQW6soFhAK07qo6M++5fMB8GA1UdIwQY
MBaAFJMkYLePbo9GYq7HhY6SBR6FYJn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3lSZ3Q0OXVqMFppcnNlRmpwSUZIb1ZnbWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jMjUxZjEtY2I3MC00MjgzLTg0MzMt
OGM5ZmNiYjNlYzUyLzEva3lSZ3Q0OXVqMFppcnNlRmpwSUZIb1ZnbWZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9jMjUxZjEtY2I3MC00MjgzLTg0MzMtOGM5ZmNiYjNlYzUy
LzEva3lSZ3Q0OXVqMFppcnNlRmpwSUZIb1ZnbWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDOoTa44
wFjYWUeYtHsAsLxaXDMgGrXMN7u4nMkYVxNzyTPSCgTe9F/N9NKSgLVK/V8go66H
4Ix72lIuf8yJnWZ8ZLRr0Zz4l1WevJEFSKyc9gx+ZI2db3Cz+pClqzlWIjtCDmyF
WGqjaaoXAYMs1O10AGPgj7djxczzCCgziNaMV0ByoxFEF8d/8QHCye03isjsUz8R
ONNC/XikjAdC4XQkB0xkq2SSA2FwJ7UCJ9PIFi8zW9FrSoVZQDumXyTMCBV5LZQx
zInUHVGDkT6AzhlIgxjwF8SirlPeox6CVOdScTHICnPYRV5QZ3v0wL6MZCYxeBbA
9+NmlJuyR84rRA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:00 2025 by rpki-client