Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
File: kkUytPdDz5XL7BhoG6Z6xduFTzM.mft (raw, json)
Hash identifier: uB1ZdCv7z9kqqwYNHu+ovRLrz7pgD0wtEDXABWHdSQI=
Subject key identifier: 67:AD:D5:DF:F7:2E:58:86:C6:D6:44:D0:08:F5:EA:59:0F:72:62:E6
Authority key identifier: 92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
Certificate issuer: /CN=924532b4f743cf95cbec18681ba67ac5db854f33
Certificate serial: 0198518D284E17931B249F4136BD7FF8542F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
Manifest number: 09A2
Signing time: Mon 28 Jul 2025 15:01:02 +0000
Manifest this update: Mon 28 Jul 2025 15:01:02 +0000
Manifest next update: Tue 29 Jul 2025 15:01:02 +0000
Files and hashes: 1: 0XlAvdcP4h1V0hRtnrQ19FLuFI8.roa (hash: +84Jtnm8y8lyPSa7rwRGvIOVFxMyvRwy6vUQccu0gmY=)
2: 1-nmX1WTJ49yJbme7KYE3jeC7q4Y.roa (hash: zAEWgizXd30YPkGAc5Kl/PvBR6kbJd2FV8oWGwFvE/I=)
3: XUDhKVYUmtZLfcMevlZ9gCG53Sc.roa (hash: 1W1CVZL0BwZJqQJ2Az9Lw99cQ4qD2ObuWZrSKPc6/mA=)
4: kkUytPdDz5XL7BhoG6Z6xduFTzM.crl (hash: WKYQknT9yUpNBijjyJKnf+B2KJDSyf/7lUpPfkA+Ugg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:8d:28:4e:17:93:1b:24:9f:41:36:bd:7f:f8:54:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924532b4f743cf95cbec18681ba67ac5db854f33
Validity
Not Before: Jul 28 15:01:02 2025 GMT
Not After : Jul 29 15:01:02 2025 GMT
Subject: CN=67add5dff72e5886c6d644d008f5ea590f7262e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7f:c7:a8:fb:4a:68:97:46:f9:19:a1:eb:1e:
d4:75:84:5f:ac:f5:d1:e3:7c:9f:71:3a:70:fb:06:
b4:7a:19:5c:1a:59:0c:05:15:8e:f0:79:7e:f8:a8:
21:46:4f:f9:e4:11:8b:df:f3:dd:a4:18:42:c7:83:
42:c8:03:67:73:ed:0f:44:5b:cd:50:01:a6:25:3b:
8a:22:f2:61:0c:a1:17:b4:c1:d7:05:fb:16:39:2b:
71:f8:f5:51:6f:4d:90:2c:d9:d7:39:62:fb:ab:08:
61:42:11:a2:54:3d:ed:8b:ce:df:bd:f9:6b:a7:49:
4f:f0:1d:df:84:c5:0c:a0:05:03:ae:0e:d5:2b:26:
00:e7:df:46:69:f1:9e:2b:d4:df:9b:f4:9d:0e:b2:
0d:c1:01:dd:df:8a:59:b5:8d:d7:60:d7:75:30:34:
00:55:94:cf:b4:7b:78:43:fb:56:64:48:cc:99:b0:
4c:79:51:3a:7b:bd:47:49:05:27:8c:ef:71:e9:29:
f3:f6:0d:e0:31:c1:ba:a5:1c:3d:06:f1:9c:45:21:
7d:a5:0d:4f:e4:cc:b9:af:4c:34:a7:90:49:4b:d8:
57:e9:8a:2f:4d:27:d7:fc:ad:26:8c:a9:a7:8c:19:
d7:42:66:36:94:35:fb:41:31:a4:e9:85:0f:f7:90:
41:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AD:D5:DF:F7:2E:58:86:C6:D6:44:D0:08:F5:EA:59:0F:72:62:E6
X509v3 Authority Key Identifier:
keyid:92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:42:65:b4:76:49:61:91:15:6d:37:9d:80:ff:20:e5:bd:4c:
9d:63:0f:af:11:bc:1a:07:50:8f:28:05:36:d7:28:3b:46:c3:
54:49:8e:6b:54:f2:70:b0:df:52:26:9c:df:d5:e4:8e:e7:11:
27:21:f2:4a:b7:20:93:a5:42:01:62:51:b1:b7:dd:e4:35:f5:
e1:67:ce:2a:3c:b7:25:70:3f:2f:08:50:8e:1c:7e:2f:21:30:
0d:2d:60:9c:67:b7:07:17:7a:f5:32:6e:f0:ff:4b:62:e0:c6:
e8:c9:9e:7b:4d:e5:ef:f1:a8:ea:8d:c7:10:5e:ae:fd:40:a1:
c3:b7:59:c1:34:48:8d:d8:db:d3:44:b3:71:ab:4e:cf:c6:e6:
76:6c:10:48:e2:f7:24:0e:d6:c7:66:d7:ca:6a:1a:c4:79:b4:
ab:eb:4b:02:e9:93:c2:43:c9:95:e2:a6:14:d5:04:e2:99:d8:
f4:c1:4a:a1:9d:02:57:0d:98:7e:c8:6d:fc:1e:e2:a6:29:25:
c9:a4:98:79:04:e0:15:8b:84:37:5c:5a:f7:36:48:04:03:be:
1d:8a:96:a7:7f:7b:6b:8c:c7:ec:96:3c:d8:3b:d8:7b:73:98:
0e:e0:f7:c8:a0:22:f6:85:21:31:7a:fb:a3:63:a8:8c:38:bf:
47:ec:38:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhRjShOF5MbJJ9BNr1/+FQvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDUzMmI0Zjc0M2NmOTVjYmVjMTg2ODFiYTY3YWM1ZGI4
NTRmMzMwHhcNMjUwNzI4MTUwMTAyWhcNMjUwNzI5MTUwMTAyWjAzMTEwLwYDVQQD
Eyg2N2FkZDVkZmY3MmU1ODg2YzZkNjQ0ZDAwOGY1ZWE1OTBmNzI2MmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH/HqPtKaJdG+Rmh6x7UdYRfrPXR
43yfcTpw+wa0ehlcGlkMBRWO8Hl++KghRk/55BGL3/PdpBhCx4NCyANnc+0PRFvN
UAGmJTuKIvJhDKEXtMHXBfsWOStx+PVRb02QLNnXOWL7qwhhQhGiVD3ti87fvflr
p0lP8B3fhMUMoAUDrg7VKyYA599GafGeK9Tfm/SdDrINwQHd34pZtY3XYNd1MDQA
VZTPtHt4Q/tWZEjMmbBMeVE6e71HSQUnjO9x6Snz9g3gMcG6pRw9BvGcRSF9pQ1P
5My5r0w0p5BJS9hX6YovTSfX/K0mjKmnjBnXQmY2lDX7QTGk6YUP95BBQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGet1d/3LliGxtZE0Aj16lkPcmLmMB8GA1UdIwQY
MBaAFJJFMrT3Q8+Vy+wYaBumesXbhU8zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2tVeXRQZER6NVhMN0Job0c2WjZ4ZHVGVHpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yYjlmMDEtYTU2ZS00YmU5LWFkMzIt
MzhlZDcxNTU5OTVjLzEva2tVeXRQZER6NVhMN0Job0c2WjZ4ZHVGVHpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yYjlmMDEtYTU2ZS00YmU5LWFkMzItMzhlZDcxNTU5OTVj
LzEva2tVeXRQZER6NVhMN0Job0c2WjZ4ZHVGVHpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkJltHZJ
YZEVbTedgP8g5b1MnWMPrxG8GgdQjygFNtcoO0bDVEmOa1TycLDfUiac39XkjucR
JyHySrcgk6VCAWJRsbfd5DX14WfOKjy3JXA/LwhQjhx+LyEwDS1gnGe3Bxd69TJu
8P9LYuDG6Mmee03l7/Go6o3HEF6u/UChw7dZwTRIjdjb00SzcatOz8bmdmwQSOL3
JA7Wx2bXymoaxHm0q+tLAumTwkPJleKmFNUE4pnY9MFKoZ0CVw2Yfsht/B7ipikl
yaSYeQTgFYuEN1xa9zZIBAO+HYqWp397a4zH7JY82DvYe3OYDuD3yKAi9oUhMXr7
o2OojDi/R+w4Xw==
-----END CERTIFICATE-----
Generated at Mon Jul 28 20:45:28 2025 by rpki-client