Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
File: kNdTolR-A6Sw0vkccOnOTkRoBBg.mft (raw, json)
Hash identifier: Re5ypfFVE4IOXd8T3KTgVcXAVBIWAgQ26vWZeHoqTOA=
Subject key identifier: BC:13:13:9A:B0:9A:54:25:CB:E7:48:6B:17:88:7F:8B:DA:85:A6:FF
Authority key identifier: 90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
Certificate issuer: /CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Certificate serial: 019851FA31171ADB5F0ABA388D04FC40ADE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
Manifest number: 0AA9
Signing time: Mon 28 Jul 2025 17:00:07 +0000
Manifest this update: Mon 28 Jul 2025 17:00:07 +0000
Manifest next update: Tue 29 Jul 2025 17:00:07 +0000
Files and hashes: 1: g5z8NV4dmlaKd11s7v3mxc0KYqU.roa (hash: bnZ9DFLSZGC/zi7MlcnpGi6LDIICQO79p3wjfCQfT+E=)
2: kNdTolR-A6Sw0vkccOnOTkRoBBg.crl (hash: U1VgBYBpW9aDK4B2XdmuRUYNEGo6niGkiEp5yUIDPw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:fa:31:17:1a:db:5f:0a:ba:38:8d:04:fc:40:ad:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Validity
Not Before: Jul 28 17:00:07 2025 GMT
Not After : Jul 29 17:00:07 2025 GMT
Subject: CN=bc13139ab09a5425cbe7486b17887f8bda85a6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:21:30:38:83:ce:cb:4b:61:0a:0e:80:3d:ee:
5f:d4:60:98:84:c8:ec:1a:68:21:17:83:88:7f:db:
2e:de:76:60:61:d9:a4:99:3d:fa:fe:ff:e4:0b:bb:
f7:1a:57:25:f1:f4:b6:34:3a:5e:1f:2f:11:64:a6:
9d:8c:bc:23:cf:49:b2:da:5a:d8:69:a3:4f:21:8d:
c4:ee:e1:7b:6b:9e:40:e0:45:7d:35:50:53:17:68:
fb:82:ee:9c:26:a1:44:9e:af:07:40:32:0a:f6:9f:
0b:6a:0f:91:3e:48:58:5f:64:48:d2:56:2a:b5:00:
3f:21:83:c4:07:c4:a2:5c:26:14:f0:4e:cf:4a:2b:
58:c1:7f:f0:f4:60:50:d8:c2:88:af:f8:53:a7:e3:
f7:15:f6:d9:fb:c3:0f:ae:bb:98:1d:76:bf:fc:bc:
37:9a:10:a0:85:fb:66:06:e2:ec:0f:73:39:0f:02:
c2:1b:d5:4e:26:29:42:38:d9:f2:93:84:b0:63:fb:
81:f4:d6:0f:0a:e3:e7:17:49:cd:0f:b1:05:fd:03:
e0:0e:d3:26:36:07:32:9f:39:61:69:88:5e:07:15:
6c:ad:c5:80:89:8a:9c:50:bb:18:60:b7:19:4c:47:
4e:35:7e:3a:fc:61:ff:da:0d:a7:65:23:96:2e:c1:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:13:13:9A:B0:9A:54:25:CB:E7:48:6B:17:88:7F:8B:DA:85:A6:FF
X509v3 Authority Key Identifier:
keyid:90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:41:bb:e6:b8:d0:19:5f:0d:6e:14:c3:97:03:61:3d:55:35:
0c:8e:c7:77:59:f1:54:13:59:f4:4b:04:d6:e8:03:2e:be:0d:
49:af:23:62:a4:9b:68:9b:d8:06:52:a6:c7:45:58:44:72:86:
bb:a2:93:23:af:a8:01:f5:36:e7:35:9f:27:b3:1b:a5:1a:cd:
db:91:3f:8b:2b:74:43:ed:80:7c:15:ff:9e:98:b1:33:1f:27:
df:a0:34:db:b7:d4:17:04:6e:28:d9:39:92:34:5d:ac:6b:35:
2b:67:af:99:47:42:0e:4b:89:f9:8f:75:8d:da:8f:a0:f1:76:
99:4c:23:3e:2e:df:f5:87:a9:a3:16:ed:e3:9e:3e:c4:2a:88:
4b:23:ff:a2:ed:44:82:f5:a9:a3:7a:53:fb:ac:07:61:8f:fb:
0d:fb:9a:bc:c0:34:ea:b2:7e:ed:20:94:45:5a:ac:36:94:72:
9b:09:c4:78:e3:ad:52:01:20:dc:69:fd:e6:2b:0f:4d:cd:03:
45:fb:f4:00:ea:73:71:a7:6a:e4:1f:56:6a:e3:91:7f:ef:7f:
e9:42:bf:67:18:34:55:53:97:04:78:bf:4f:de:a4:e3:56:a1:
0d:f7:d7:28:47:ba:a4:2e:7e:98:71:de:75:ed:f0:44:9a:a5:
99:1f:43:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhR+jEXGttfCro4jQT8QK3mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZDc1M2EyNTQ3ZTAzYTRiMGQyZjkxYzcwZTljZTRlNDQ2
ODA0MTgwHhcNMjUwNzI4MTcwMDA3WhcNMjUwNzI5MTcwMDA3WjAzMTEwLwYDVQQD
EyhiYzEzMTM5YWIwOWE1NDI1Y2JlNzQ4NmIxNzg4N2Y4YmRhODVhNmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iEwOIPOy0thCg6APe5f1GCYhMjs
GmghF4OIf9su3nZgYdmkmT36/v/kC7v3Glcl8fS2NDpeHy8RZKadjLwjz0my2lrY
aaNPIY3E7uF7a55A4EV9NVBTF2j7gu6cJqFEnq8HQDIK9p8Lag+RPkhYX2RI0lYq
tQA/IYPEB8SiXCYU8E7PSitYwX/w9GBQ2MKIr/hTp+P3FfbZ+8MPrruYHXa//Lw3
mhCghftmBuLsD3M5DwLCG9VOJilCONnyk4SwY/uB9NYPCuPnF0nND7EF/QPgDtMm
NgcynzlhaYheBxVsrcWAiYqcULsYYLcZTEdONX46/GH/2g2nZSOWLsHMxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwTE5qwmlQly+dIaxeIf4vahab/MB8GA1UdIwQY
MBaAFJDXU6JUfgOksNL5HHDpzk5EaAQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva05kVG9sUi1BNlN3MHZrY2NPbk9Ua1JvQkJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jYzkwOTktNzEwMS00NzJlLWFlZmMt
NWViNjZiY2UzMThkLzEva05kVG9sUi1BNlN3MHZrY2NPbk9Ua1JvQkJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jYzkwOTktNzEwMS00NzJlLWFlZmMtNWViNjZiY2UzMThk
LzEva05kVG9sUi1BNlN3MHZrY2NPbk9Ua1JvQkJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEG75rjQ
GV8NbhTDlwNhPVU1DI7Hd1nxVBNZ9EsE1ugDLr4NSa8jYqSbaJvYBlKmx0VYRHKG
u6KTI6+oAfU25zWfJ7MbpRrN25E/iyt0Q+2AfBX/npixMx8n36A027fUFwRuKNk5
kjRdrGs1K2evmUdCDkuJ+Y91jdqPoPF2mUwjPi7f9Yepoxbt454+xCqISyP/ou1E
gvWpo3pT+6wHYY/7DfuavMA06rJ+7SCURVqsNpRymwnEeOOtUgEg3Gn95isPTc0D
Rfv0AOpzcadq5B9WauORf+9/6UK/Zxg0VVOXBHi/T96k41ahDffXKEe6pC5+mHHe
de3wRJqlmR9DPg==
-----END CERTIFICATE-----
Generated at Mon Jul 28 20:10:37 2025 by rpki-client