Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier: fpP/SBiRiwSM3Rec6UWbkQHu+hP1H7ZvPs6RjQjDFmU=
Subject key identifier: 05:55:11:3B:39:EC:CE:C1:D8:BD:C6:45:7D:60:6D:38:95:63:62:76
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 0198D4741471F7765FC79EB1F4BF74639BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 01:03:53 +0000
Manifest this update: Sat 23 Aug 2025 01:03:53 +0000
Manifest next update: Sun 24 Aug 2025 01:03:53 +0000
Files and hashes: 1: 3WOQMHHA_gyX03awABhKzOim3Bs.roa (hash: ZA+s/EckArtDe+QZpgBb9d1KuxQcRDkEk6RSEwu6Y0k=)
2: 7KoL3jGlfNGPpyhqV9AtZAaoaI0.roa (hash: Nb/Vw+/Ylb4cSX8JKW25BkVIJgSx13SRW+VCTwm5sJ8=)
3: HL23JkhmDLszmlcMKIQLjOYgOlw.roa (hash: UcG0dWZ6JWWkmOHgvKVtqjoii96EVOB2hFdkb/AhZXs=)
4: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: zcqXDX7jG5CQDSMv814659gM4TroUp3a/Qy7+QsolsM=)
5: bLZSbio8bkJcYZljrUphK1wwfiI.roa (hash: 8pmPyotbXxfraqC1rKstG9Ljo1wkSagV+FMWF45wlzU=)
6: pZ6QLhb3L-zU8HaIuMWziHfarGQ.roa (hash: bAsLcg/vcZKidF7bKnaCdDmEHtuPe3QKZhFTHIqySAA=)
7: vgrDVzIHM-lfYbprXn7b8oE_EG0.roa (hash: pmw87KrkZDI/w+UgS4DgQBhIgi8uItz6U8fozdzX4sc=)
8: yIaElboDEcTWK_3VfQrVd7rO3sU.roa (hash: dRcI0G+6+49AKUKXqa7HKsOOK4Sxw6VtAfiMSWdhRnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:14:71:f7:76:5f:c7:9e:b1:f4:bf:74:63:9b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Aug 23 01:03:53 2025 GMT
Not After : Aug 24 01:03:53 2025 GMT
Subject: CN=0555113b39eccec1d8bdc6457d606d3895636276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:52:20:68:67:24:bc:13:e8:f8:ec:13:ea:78:
f2:b1:35:fc:2e:4e:37:bf:39:03:c4:73:b4:66:11:
b1:8b:58:29:62:59:04:60:41:8a:46:71:71:46:9c:
fe:98:b9:e2:4e:df:20:6b:12:b2:f2:0e:b0:8d:18:
c2:33:8e:48:da:e1:81:3d:f8:1f:c7:0a:98:2e:5c:
65:fe:42:34:45:df:d3:41:6d:37:3b:1b:d4:77:c8:
ae:7c:ac:26:2c:c2:73:3e:0a:5b:bf:a0:c1:8c:98:
f0:38:aa:15:1b:00:12:c7:cc:3f:15:9b:38:7b:02:
10:74:51:4f:94:31:11:a2:9b:53:48:93:e4:ba:59:
32:68:46:48:14:6e:36:b1:5f:d3:d3:18:9e:3e:2d:
7f:f4:9c:1a:5e:03:bc:07:19:25:71:96:97:5b:cb:
8f:f8:84:a2:31:1b:17:6e:f2:9c:b0:70:9b:a9:bf:
6d:ae:1b:c6:78:d6:b7:95:2e:e0:bf:5e:65:88:cd:
65:7f:4f:d3:ec:71:46:e1:ea:31:7b:5e:68:9b:3c:
1a:57:3e:fa:c8:85:19:af:42:02:ab:ff:9d:e3:d5:
9a:54:87:55:36:4e:53:06:62:e9:bc:92:d7:a8:60:
03:1c:a3:dd:e5:92:58:1a:1d:ce:57:28:af:8a:45:
df:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:55:11:3B:39:EC:CE:C1:D8:BD:C6:45:7D:60:6D:38:95:63:62:76
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ae:e4:10:9e:a5:a1:fd:26:83:48:1b:64:6d:ee:66:7b:01:
ae:98:67:39:6a:a4:9b:35:1f:f3:51:de:b6:47:e1:e7:06:83:
2f:eb:83:05:54:c8:f0:8b:0c:08:16:99:67:a5:af:76:0c:d6:
de:06:14:e1:f5:e9:70:9c:12:db:3a:ab:87:47:66:30:a8:78:
13:9d:d8:1b:26:ec:ef:81:a7:4c:2b:47:e7:17:ec:fe:d0:af:
2d:71:7b:0e:26:66:2b:76:f2:4d:09:49:06:92:48:0d:f1:87:
d4:3a:b8:51:17:2f:c9:21:c9:58:73:e0:36:39:cd:d9:63:51:
24:d7:2f:75:c4:b7:00:81:a2:5a:42:25:a5:bb:c3:0e:35:00:
3c:ee:87:78:28:94:18:44:4f:54:b7:5e:f3:9a:f2:5d:20:e9:
8d:c3:39:50:ac:a9:03:7c:af:40:6b:6d:9c:20:31:0f:28:69:
99:51:af:60:aa:36:87:5b:bc:4a:23:c0:20:9b:a3:1c:cc:5b:
12:7c:52:d3:bd:08:18:84:87:af:b6:22:fa:8b:57:c6:9e:6e:
44:19:0e:3d:5c:6f:7b:5b:12:99:c1:50:58:31:60:da:cf:03:
1a:71:ee:34:74:38:01:8e:b8:d5:8f:48:7b:82:48:c3:0d:1d:
cd:25:94:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdBRx93Zfx56x9L90Y5vjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzY0ZGMyMWNiNWZkNGQwYmNiMDJjYzJiNDNmZDc1MWZk
OTFlMWUwHhcNMjUwODIzMDEwMzUzWhcNMjUwODI0MDEwMzUzWjAzMTEwLwYDVQQD
EygwNTU1MTEzYjM5ZWNjZWMxZDhiZGM2NDU3ZDYwNmQzODk1NjM2Mjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FIgaGckvBPo+OwT6njysTX8Lk43
vzkDxHO0ZhGxi1gpYlkEYEGKRnFxRpz+mLniTt8gaxKy8g6wjRjCM45I2uGBPfgf
xwqYLlxl/kI0Rd/TQW03OxvUd8iufKwmLMJzPgpbv6DBjJjwOKoVGwASx8w/FZs4
ewIQdFFPlDERoptTSJPkulkyaEZIFG42sV/T0xiePi1/9JwaXgO8BxklcZaXW8uP
+ISiMRsXbvKcsHCbqb9trhvGeNa3lS7gv15liM1lf0/T7HFG4eoxe15omzwaVz76
yIUZr0ICq/+d49WaVIdVNk5TBmLpvJLXqGADHKPd5ZJYGh3OVyivikXfowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVVETs57M7B2L3GRX1gbTiVY2J2MB8GA1UdIwQY
MBaAFCrGTcIctf1NC8sCzCtD/XUf2R4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAt
MDk3YzNjMWMyNTQwLzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAtMDk3YzNjMWMyNTQw
LzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADK7kEJ6l
of0mg0gbZG3uZnsBrphnOWqkmzUf81Hetkfh5waDL+uDBVTI8IsMCBaZZ6WvdgzW
3gYU4fXpcJwS2zqrh0dmMKh4E53YGybs74GnTCtH5xfs/tCvLXF7DiZmK3byTQlJ
BpJIDfGH1Dq4URcvySHJWHPgNjnN2WNRJNcvdcS3AIGiWkIlpbvDDjUAPO6HeCiU
GERPVLde85ryXSDpjcM5UKypA3yvQGttnCAxDyhpmVGvYKo2h1u8SiPAIJujHMxb
EnxS070IGISHr7Yi+otXxp5uRBkOPVxve1sSmcFQWDFg2s8DGnHuNHQ4AY641Y9I
e4JIww0dzSWUrA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:02 2025 by rpki-client