Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.mft
File: kMABN-5t-utOpII7wXPDvAADHfk.mft (raw, json)
Hash identifier: 9Fva18TjtqckN4zkg/1Dnxj0C+XiekRkG/BprskaohU=
Subject key identifier: 8D:42:7A:7F:CC:AF:82:04:94:49:DB:8B:7B:31:68:A5:3E:49:56:27
Authority key identifier: 90:C0:01:37:EE:6D:FA:EB:4E:A4:82:3B:C1:73:C3:BC:00:03:1D:F9
Certificate issuer: /CN=90c00137ee6dfaeb4ea4823bc173c3bc00031df9
Certificate serial: 01984B542392BD235953ECFDB770BFF6CADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMABN-5t-utOpII7wXPDvAADHfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.mft
Manifest number: 05E7
Signing time: Sun 27 Jul 2025 10:01:01 +0000
Manifest this update: Sun 27 Jul 2025 10:01:01 +0000
Manifest next update: Mon 28 Jul 2025 10:01:01 +0000
Files and hashes: 1: FCW2bGoLdcM6i-Jx_GrHtMzXAlk.roa (hash: WJgWrgAT99wsdStIPz/Fl698liisGeyhumyE7tw/O7c=)
2: kMABN-5t-utOpII7wXPDvAADHfk.crl (hash: 6mVXEtomuKG7cChI7bqhLHysMJIHkn+ORJia3A+zQTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMABN-5t-utOpII7wXPDvAADHfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:23:92:bd:23:59:53:ec:fd:b7:70:bf:f6:ca:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c00137ee6dfaeb4ea4823bc173c3bc00031df9
Validity
Not Before: Jul 27 10:01:01 2025 GMT
Not After : Jul 28 10:01:01 2025 GMT
Subject: CN=8d427a7fccaf82049449db8b7b3168a53e495627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:f3:77:30:2a:21:bd:c7:db:56:da:96:93:
67:28:4f:23:1d:4b:0f:cf:34:b1:d6:68:86:60:55:
b2:d5:a4:10:28:16:28:c9:87:ae:35:71:29:ce:48:
2e:c7:8f:67:ef:c1:79:f0:52:89:76:5c:c5:6f:8f:
ac:fc:c0:22:c7:e8:84:72:7f:cc:0d:88:cd:ce:98:
81:c1:d9:b9:14:06:10:d2:45:38:19:0f:d8:b4:04:
c5:13:17:9e:0b:7c:73:20:11:ab:4d:04:d6:ee:6c:
c4:a1:cd:2d:0b:c7:4e:60:c7:b6:df:4e:b7:d7:75:
a0:5f:5d:15:44:d2:19:06:18:da:9e:36:68:d1:69:
ef:25:85:93:25:da:89:5a:95:d2:13:ba:5b:c9:db:
0c:80:fd:46:81:59:c5:c9:a7:a3:86:99:05:bf:ad:
f9:14:fb:68:72:4e:92:6b:56:f7:c6:05:f5:48:7d:
11:a5:69:34:fc:4b:2b:79:36:a0:03:e9:3b:5a:8d:
f6:f7:fe:80:02:d0:9f:56:0b:d7:fe:72:d7:29:a7:
94:0a:15:ba:d1:a7:4b:02:38:dc:e6:ba:06:70:13:
a3:36:68:c8:f5:13:76:18:33:d1:87:98:b0:27:a7:
f8:ab:6c:df:97:0f:25:80:b4:9f:e1:af:9c:eb:c0:
0c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:42:7A:7F:CC:AF:82:04:94:49:DB:8B:7B:31:68:A5:3E:49:56:27
X509v3 Authority Key Identifier:
keyid:90:C0:01:37:EE:6D:FA:EB:4E:A4:82:3B:C1:73:C3:BC:00:03:1D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMABN-5t-utOpII7wXPDvAADHfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7d:b4:45:aa:4f:d9:ab:3f:f5:d0:0a:92:d8:b4:43:a2:53:
03:46:fb:8a:4a:cf:31:12:bc:47:c3:6c:c2:33:8d:9b:b7:92:
95:5e:d6:85:eb:a3:f8:b9:88:a7:60:f1:cc:31:56:7c:da:d9:
03:2e:e4:49:de:5e:d4:78:ab:b5:c8:47:fc:b1:bc:7c:bc:31:
54:af:86:7c:1e:62:a4:34:d5:ee:10:c4:5b:30:4a:0e:58:26:
11:6c:52:85:7d:03:86:9d:c6:34:49:70:30:d3:aa:bc:60:fa:
1b:1f:08:06:53:3f:fa:7f:dd:6c:a6:d1:5c:a0:a7:14:3d:d7:
2c:ec:48:eb:23:1f:6d:8d:81:26:75:9b:0d:0e:17:56:26:e1:
c7:d8:70:a0:8c:17:72:37:51:78:ac:fe:c4:73:f1:2d:0d:64:
70:41:98:ed:39:0a:d5:f9:57:e4:3f:76:96:ff:d3:c9:2d:e2:
4e:5f:be:7e:ad:e0:78:b7:86:fa:bf:86:04:d3:3d:6c:53:56:
cd:7b:95:61:eb:71:fb:68:b8:9c:de:51:5f:1a:d1:97:ed:1a:
a3:6a:57:df:33:49:3e:9e:26:e0:a8:a3:1c:24:53:ae:2f:6d:
e3:ff:f5:33:d3:61:60:75:17:7e:ae:61:a8:38:a6:56:b2:8b:
3b:a4:5f:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVCOSvSNZU+z9t3C/9sraMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYzAwMTM3ZWU2ZGZhZWI0ZWE0ODIzYmMxNzNjM2JjMDAw
MzFkZjkwHhcNMjUwNzI3MTAwMTAxWhcNMjUwNzI4MTAwMTAxWjAzMTEwLwYDVQQD
Eyg4ZDQyN2E3ZmNjYWY4MjA0OTQ0OWRiOGI3YjMxNjhhNTNlNDk1NjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqzzdzAqIb3H21balpNnKE8jHUsP
zzSx1miGYFWy1aQQKBYoyYeuNXEpzkgux49n78F58FKJdlzFb4+s/MAix+iEcn/M
DYjNzpiBwdm5FAYQ0kU4GQ/YtATFExeeC3xzIBGrTQTW7mzEoc0tC8dOYMe23063
13WgX10VRNIZBhjanjZo0WnvJYWTJdqJWpXSE7pbydsMgP1GgVnFyaejhpkFv635
FPtock6Sa1b3xgX1SH0RpWk0/EsreTagA+k7Wo329/6AAtCfVgvX/nLXKaeUChW6
0adLAjjc5roGcBOjNmjI9RN2GDPRh5iwJ6f4q2zflw8lgLSf4a+c68AMuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1Cen/Mr4IElEnbi3sxaKU+SVYnMB8GA1UdIwQY
MBaAFJDAATfubfrrTqSCO8Fzw7wAAx35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva01BQk4tNXQtdXRPcElJN3dYUER2QUFESGZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iZTM3MGUtNjcyOS00ZGY3LWFhYmUt
MGE1MjViNjlkYjhmLzEva01BQk4tNXQtdXRPcElJN3dYUER2QUFESGZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9iZTM3MGUtNjcyOS00ZGY3LWFhYmUtMGE1MjViNjlkYjhm
LzEva01BQk4tNXQtdXRPcElJN3dYUER2QUFESGZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj320RapP
2as/9dAKkti0Q6JTA0b7ikrPMRK8R8NswjONm7eSlV7Wheuj+LmIp2DxzDFWfNrZ
Ay7kSd5e1HirtchH/LG8fLwxVK+GfB5ipDTV7hDEWzBKDlgmEWxShX0Dhp3GNElw
MNOqvGD6Gx8IBlM/+n/dbKbRXKCnFD3XLOxI6yMfbY2BJnWbDQ4XVibhx9hwoIwX
cjdReKz+xHPxLQ1kcEGY7TkK1flX5D92lv/TyS3iTl++fq3geLeG+r+GBNM9bFNW
zXuVYetx+2i4nN5RXxrRl+0ao2pX3zNJPp4m4KijHCRTri9t4//1M9NhYHUXfq5h
qDimVrKLO6RfGw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:59:30 2025 by rpki-client