Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
File: kfWJGibPpDaiPn4f-XZki-5573c.mft (raw, json)
Hash identifier: jdQ8uztDGMWGHevwZRoLFrKPslWOZSYBRXpDlaXjcw8=
Subject key identifier: A9:76:8C:BB:CE:72:56:0A:88:E6:FC:5A:F2:52:DA:F9:06:E8:7D:48
Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Certificate issuer: /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Certificate serial: 019849668F8B9A6CC3CC6D2C432814024626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
Manifest number: 1470
Signing time: Sun 27 Jul 2025 01:01:54 +0000
Manifest this update: Sun 27 Jul 2025 01:01:54 +0000
Manifest next update: Mon 28 Jul 2025 01:01:54 +0000
Files and hashes: 1: AwtKEHfYyxnQ1th-VlZxSnr7g6Q.roa (hash: kaMvuNz15dIgQL2M/Qvml14U3ZSUX9PuIaFhO+5H45U=)
2: DIxBuJDWRajN2G8Xp5FV5TyPSvA.roa (hash: OfQWp1njClDrdouukOkCvfJ95D6ij98TPOIuqpcwAzY=)
3: kfWJGibPpDaiPn4f-XZki-5573c.crl (hash: 1QDezfFYuFjmcvXM+MaNk0pTEra2kGiFQ+E5ksB3Vm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:8f:8b:9a:6c:c3:cc:6d:2c:43:28:14:02:46:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Validity
Not Before: Jul 27 01:01:54 2025 GMT
Not After : Jul 28 01:01:54 2025 GMT
Subject: CN=a9768cbbce72560a88e6fc5af252daf906e87d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:30:45:2d:a5:13:9c:d6:7a:ec:23:a0:45:5d:
04:86:f6:b9:ef:79:2c:e9:5e:d3:c3:51:fe:8a:29:
26:79:16:7a:7c:29:f7:93:4a:ea:43:ef:2f:0e:7f:
ff:22:47:23:8d:19:51:a6:b8:5d:1b:50:88:78:eb:
6c:e9:6c:a0:54:f1:b8:e8:7d:1c:a0:0c:ce:c5:22:
cb:04:ea:3c:05:c0:85:3a:f4:f5:6f:8b:ad:d8:d0:
b2:b3:5e:d9:b0:50:ad:54:d0:ff:92:c6:05:e4:61:
9d:15:b2:b4:2c:f4:36:6b:a2:a3:cf:e5:21:e5:03:
e8:65:26:a5:a7:ee:d5:94:d6:5e:da:3a:48:88:59:
6c:c4:71:c1:b9:10:30:5b:c5:21:70:7f:70:41:7a:
47:e2:b2:1c:e6:fd:e8:39:a3:bb:b3:03:c5:6f:6b:
64:04:c9:ce:59:99:01:50:0a:d0:47:46:e8:95:cb:
2f:9f:f3:ef:28:3d:ff:b3:02:1e:b0:12:b5:ed:a3:
62:8f:61:2b:b6:48:33:cb:de:b1:8d:44:c1:1e:6d:
bb:97:13:55:2a:53:1c:2a:14:d4:d1:49:5c:88:13:
2b:ff:f5:3b:77:71:be:d2:6f:36:57:ac:c0:18:d7:
3d:62:b8:ff:08:56:80:a1:0e:64:db:9e:f0:9d:03:
1e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:76:8C:BB:CE:72:56:0A:88:E6:FC:5A:F2:52:DA:F9:06:E8:7D:48
X509v3 Authority Key Identifier:
keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:21:11:47:b2:dc:7a:c9:ef:a0:d9:b9:0a:9a:9d:fd:89:7a:
7c:3b:ee:2e:38:b1:15:60:73:5b:35:ff:e0:32:51:20:95:cd:
55:88:10:ee:7b:b0:58:c0:73:fb:e3:68:f9:79:df:58:d8:ef:
43:57:03:28:04:85:58:b5:24:9a:e2:26:86:0b:a0:26:11:83:
5b:09:44:20:89:7c:5a:44:2f:ec:72:a7:8a:17:a9:9b:0d:be:
42:2e:68:85:ce:26:96:25:c0:bd:eb:9e:a6:59:f1:54:fa:63:
56:19:e9:9e:2f:25:f0:cf:30:0a:12:9b:86:da:6f:33:d2:0d:
86:04:02:cf:1b:91:85:0d:3d:2d:35:dd:6f:79:50:8c:b6:4d:
c5:5e:ed:53:cc:8a:13:19:c1:75:2a:47:52:85:a0:47:f0:77:
9f:6d:34:d8:2c:b8:a2:4f:36:1d:6b:82:29:0f:8b:44:a0:05:
de:d6:4f:4f:aa:40:c6:7f:15:2d:62:9e:8c:91:d0:49:fe:ba:
cf:ce:1e:b0:63:13:c1:dd:34:9e:c2:64:fe:0c:22:b7:2e:a6:
7b:fe:e3:2a:5b:02:a5:f8:2a:7a:c1:b7:16:5b:86:48:13:d2:
31:38:81:b9:72:b0:60:58:53:61:b9:6b:88:ec:fd:8e:77:48:
d6:26:89:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZo+LmmzDzG0sQygUAkYmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZjU4OTFhMjZjZmE0MzZhMjNlN2UxZmY5NzY2NDhiZWU3
OWVmNzcwHhcNMjUwNzI3MDEwMTU0WhcNMjUwNzI4MDEwMTU0WjAzMTEwLwYDVQQD
EyhhOTc2OGNiYmNlNzI1NjBhODhlNmZjNWFmMjUyZGFmOTA2ZTg3ZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzBFLaUTnNZ67COgRV0Ehva573ks
6V7Tw1H+iikmeRZ6fCn3k0rqQ+8vDn//IkcjjRlRprhdG1CIeOts6WygVPG46H0c
oAzOxSLLBOo8BcCFOvT1b4ut2NCys17ZsFCtVND/ksYF5GGdFbK0LPQ2a6Kjz+Uh
5QPoZSalp+7VlNZe2jpIiFlsxHHBuRAwW8UhcH9wQXpH4rIc5v3oOaO7swPFb2tk
BMnOWZkBUArQR0bolcsvn/PvKD3/swIesBK17aNij2Ertkgzy96xjUTBHm27lxNV
KlMcKhTU0UlciBMr//U7d3G+0m82V6zAGNc9Yrj/CFaAoQ5k257wnQMedwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKl2jLvOclYKiOb8WvJS2vkG6H1IMB8GA1UdIwQY
MBaAFJH1iRomz6Q2oj5+H/l2ZIvuee93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2ZXSkdpYlBwRGFpUG40Zi1YWmtpLTU1NzNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83ZjFiNzQtYzhkNy00YTBkLThhMzkt
ZGFhNzM5MGI1YmE3LzEva2ZXSkdpYlBwRGFpUG40Zi1YWmtpLTU1NzNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83ZjFiNzQtYzhkNy00YTBkLThhMzktZGFhNzM5MGI1YmE3
LzEva2ZXSkdpYlBwRGFpUG40Zi1YWmtpLTU1NzNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqiERR7Lc
esnvoNm5Cpqd/Yl6fDvuLjixFWBzWzX/4DJRIJXNVYgQ7nuwWMBz++No+XnfWNjv
Q1cDKASFWLUkmuImhgugJhGDWwlEIIl8WkQv7HKnihepmw2+Qi5ohc4mliXAveue
plnxVPpjVhnpni8l8M8wChKbhtpvM9INhgQCzxuRhQ09LTXdb3lQjLZNxV7tU8yK
ExnBdSpHUoWgR/B3n2002Cy4ok82HWuCKQ+LRKAF3tZPT6pAxn8VLWKejJHQSf66
z84esGMTwd00nsJk/gwity6me/7jKlsCpfgqesG3FluGSBPSMTiBuXKwYFhTYblr
iOz9jndI1iaJ3Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:09:52 2025 by rpki-client