Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
File: kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft (raw, json)
Hash identifier: cnSvPry7uh+LUd+FRjxnaursAa7dyPPOEmvaKwXj+Rk=
Subject key identifier: AE:D4:C2:1C:7E:7D:A3:EA:65:DA:48:BB:F4:11:13:81:68:B1:CD:4C
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Certificate issuer: /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial: 019849D36C1AFCD9C313C5415645F219A0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
Manifest number: 09AD
Signing time: Sun 27 Jul 2025 03:00:49 +0000
Manifest this update: Sun 27 Jul 2025 03:00:49 +0000
Manifest next update: Mon 28 Jul 2025 03:00:49 +0000
Files and hashes: 1: QskXpCpWaerncmB5Tx33KABcmDs.roa (hash: fifxhbdZnzofmDMHP2JVB3uX7ui63rFuuabdauCyEO0=)
2: cpWvTztcB_PVgTrvB1pOMqOcrgg.roa (hash: F85tpYix9Q/joiRkP3de92k+CoUDGGFBzb+mLGcQwm8=)
3: kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl (hash: qaggHeXfk9nF7LmKp9C8Wp+UcyIYOctbY3dq8Lsnexo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:6c:1a:fc:d9:c3:13:c5:41:56:45:f2:19:a0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Validity
Not Before: Jul 27 03:00:49 2025 GMT
Not After : Jul 28 03:00:49 2025 GMT
Subject: CN=aed4c21c7e7da3ea65da48bbf411138168b1cd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:00:47:1b:1a:11:c3:33:d3:cd:a4:25:77:
f8:40:a1:bd:c6:ac:90:41:ef:94:8a:03:67:43:df:
cd:37:1f:59:99:c5:7a:44:14:f6:2b:b7:e5:a2:1f:
8b:7c:2d:65:f4:72:74:00:d8:74:2f:97:83:f6:b4:
d1:61:b8:a2:92:ef:0c:4c:74:82:93:74:e2:bf:88:
2d:15:0b:4a:97:04:eb:a4:cf:64:7a:9c:15:d6:5f:
52:25:2d:56:0d:82:36:fa:7f:04:29:fc:d1:2c:c9:
a1:1f:65:98:19:df:53:91:95:32:a2:68:a5:25:9a:
93:9e:d7:fa:f4:e0:85:5b:96:c0:bb:90:da:c5:1c:
c1:20:64:0a:89:d2:4d:4f:e4:dd:c2:d8:4f:95:c2:
3f:dc:bb:3d:62:0e:4d:ab:67:7f:eb:5d:73:3c:10:
44:3c:b4:7b:ca:3e:4d:20:6f:4f:0e:b8:b2:f0:d4:
ad:2e:0f:b7:e5:6c:7c:2f:4e:a0:a3:9c:06:1e:4e:
c4:72:ae:7c:8b:98:0d:58:87:b7:e1:73:7e:2c:33:
4f:24:8f:00:22:05:b2:41:cb:f3:b7:b5:41:00:0e:
ae:74:e6:9b:d3:9e:d0:88:73:e3:dd:b9:8f:1f:1b:
b8:ff:01:29:8d:f3:74:a3:fc:ef:35:de:b1:e8:5e:
be:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D4:C2:1C:7E:7D:A3:EA:65:DA:48:BB:F4:11:13:81:68:B1:CD:4C
X509v3 Authority Key Identifier:
keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:27:4c:3e:13:df:85:8e:ce:b2:ca:32:53:f7:d2:dd:6c:bc:
33:74:c0:43:c6:4d:43:4e:5b:f2:be:fc:70:17:7b:46:19:7f:
c1:fc:da:31:89:41:c8:e7:12:ae:d8:3f:ab:27:5e:d8:a5:0d:
bd:5e:bd:ea:8b:cf:1e:f3:f0:ac:93:97:95:10:56:57:48:7f:
68:83:ac:df:29:fe:89:66:0a:60:93:f2:86:6f:27:20:ae:e9:
9e:ec:a3:6c:1f:16:fb:6e:39:bc:44:9b:a2:4e:80:72:23:85:
d1:f9:43:dc:40:7f:1b:1a:67:06:05:43:74:60:ba:1e:d8:de:
23:eb:c1:2c:4b:3d:b4:d6:80:6c:0f:c8:b5:19:bb:d4:b6:a9:
33:50:80:43:c4:cf:b6:6e:d1:71:82:83:ef:e6:88:33:03:43:
06:f2:b1:e2:46:9d:e8:da:b5:c6:04:cb:5d:be:3a:67:30:32:
92:dc:9a:12:70:5d:a1:5d:dc:5d:aa:40:fe:3e:bc:bf:e7:5f:
bc:79:36:e8:40:d4:b9:4b:61:bc:c8:3c:cf:f5:6b:f4:86:96:
6a:ad:a8:1a:69:66:e6:76:97:bf:af:03:c1:13:6a:45:1e:74:
a3:72:41:4f:ea:77:f3:c0:11:d2:37:84:09:25:28:bc:d0:6a:
d5:da:22:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ02wa/NnDE8VBVkXyGaC8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNTFlYmY4YzI4ZjgxN2I3ZjE0OGJmYzk1Y2MyYjViNGNi
MzAwODkwHhcNMjUwNzI3MDMwMDQ5WhcNMjUwNzI4MDMwMDQ5WjAzMTEwLwYDVQQD
EyhhZWQ0YzIxYzdlN2RhM2VhNjVkYTQ4YmJmNDExMTM4MTY4YjFjZDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO0ARxsaEcMz082kJXf4QKG9xqyQ
Qe+UigNnQ9/NNx9ZmcV6RBT2K7floh+LfC1l9HJ0ANh0L5eD9rTRYbiiku8MTHSC
k3Tiv4gtFQtKlwTrpM9kepwV1l9SJS1WDYI2+n8EKfzRLMmhH2WYGd9TkZUyomil
JZqTntf69OCFW5bAu5DaxRzBIGQKidJNT+TdwthPlcI/3Ls9Yg5Nq2d/611zPBBE
PLR7yj5NIG9PDriy8NStLg+35Wx8L06go5wGHk7Ecq58i5gNWIe34XN+LDNPJI8A
IgWyQcvzt7VBAA6udOab057QiHPj3bmPHxu4/wEpjfN0o/zvNd6x6F6+mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7Uwhx+faPqZdpIu/QRE4Fosc1MMB8GA1UdIwQY
MBaAFJBR6/jCj4F7fxSL/JXMK1tMswCJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0ZIci1NS1BnWHRfRkl2OGxjd3JXMHl6QUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83OWI1OTctNmIwYy00ZDAzLWJmNDAt
MzEyNDdmM2E0NTM5LzEva0ZIci1NS1BnWHRfRkl2OGxjd3JXMHl6QUlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My83OWI1OTctNmIwYy00ZDAzLWJmNDAtMzEyNDdmM2E0NTM5
LzEva0ZIci1NS1BnWHRfRkl2OGxjd3JXMHl6QUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdCdMPhPf
hY7OssoyU/fS3Wy8M3TAQ8ZNQ05b8r78cBd7Rhl/wfzaMYlByOcSrtg/qyde2KUN
vV696ovPHvPwrJOXlRBWV0h/aIOs3yn+iWYKYJPyhm8nIK7pnuyjbB8W+245vESb
ok6AciOF0flD3EB/GxpnBgVDdGC6HtjeI+vBLEs9tNaAbA/ItRm71LapM1CAQ8TP
tm7RcYKD7+aIMwNDBvKx4kad6Nq1xgTLXb46ZzAyktyaEnBdoV3cXapA/j68v+df
vHk26EDUuUthvMg8z/Vr9IaWaq2oGmlm5naXv68DwRNqRR50o3JBT+p388AR0jeE
CSUovNBq1doisA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:06:40 2025 by rpki-client