Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
File: KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft (raw, json)
Hash identifier: 9MvYJWQzc5q/i3cc9J0ieRm24JSl0k79uxvUOOvK/Rs=
Subject key identifier: F1:9C:5D:88:17:0E:C1:C5:16:42:B8:38:D1:EA:D0:22:75:E2:75:79
Authority key identifier: 29:71:94:F4:B5:2B:9F:F4:33:F2:BF:0D:16:B5:8C:11:C7:CF:11:31
Certificate issuer: /CN=297194f4b52b9ff433f2bf0d16b58c11c7cf1131
Certificate serial: 019847E489EADB0E753F60996DE42AB2E876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
Manifest number: 0C9A
Signing time: Sat 26 Jul 2025 18:00:16 +0000
Manifest this update: Sat 26 Jul 2025 18:00:16 +0000
Manifest next update: Sun 27 Jul 2025 18:00:16 +0000
Files and hashes: 1: 3Q4b3ZrB5hBNl0sc19tX6sYik8M.roa (hash: Y2d6NgWxe37Sh2Kw4xqcfrnYvSssw7Fp3dHdg6i9y18=)
2: GL9mMoVzYzt9cAMp9ZMhDNvyxpY.roa (hash: sr1sGLjbfiu/0SvHpnzyQUaLuHxB9sxU75fTY0SHxZw=)
3: KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl (hash: EsnPlHDTKZh/9tq+JbjL5b53qK4PGee13Ca7Y4hWL1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:89:ea:db:0e:75:3f:60:99:6d:e4:2a:b2:e8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297194f4b52b9ff433f2bf0d16b58c11c7cf1131
Validity
Not Before: Jul 26 18:00:16 2025 GMT
Not After : Jul 27 18:00:16 2025 GMT
Subject: CN=f19c5d88170ec1c51642b838d1ead02275e27579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c3:04:7d:70:0a:a2:07:98:6c:3b:a4:2a:92:
40:ae:be:16:a0:11:fb:ab:e7:0d:d0:b3:2e:89:9b:
59:81:f2:5d:89:42:f2:3d:19:b5:ce:2c:28:8a:9d:
62:d5:1e:60:d7:3c:0a:8a:93:3d:00:a5:96:7d:55:
82:25:bf:8f:98:a9:4c:34:aa:cb:c9:da:02:49:b4:
24:8a:4f:45:37:6a:92:b4:96:d0:69:8b:7a:6c:9a:
2e:20:2b:8d:54:e4:0b:90:1e:3b:5d:12:6a:80:a2:
ab:2e:66:cd:c9:34:75:db:99:c7:13:7d:30:cf:35:
3a:35:92:e7:e2:ae:01:1f:52:68:14:83:7a:25:ca:
34:36:82:dc:05:35:8e:fc:91:79:dc:98:ad:1f:8f:
ef:e3:ff:1b:c0:bd:d4:cf:2f:3d:73:77:18:57:bf:
51:83:43:09:4c:68:c3:ee:8a:3f:94:47:4b:ab:0b:
9b:a7:ff:3d:2d:59:24:85:d1:ac:a8:2d:c1:17:01:
5a:9b:9f:eb:ef:de:3f:32:f5:02:15:ae:50:80:37:
71:2e:66:60:0c:36:0a:e5:52:c7:62:5c:59:bb:96:
81:78:b5:d4:da:c4:2c:7f:09:79:38:ab:89:cd:e3:
d4:3d:3c:36:bc:13:ff:d8:66:8e:7a:9f:59:39:fe:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9C:5D:88:17:0E:C1:C5:16:42:B8:38:D1:EA:D0:22:75:E2:75:79
X509v3 Authority Key Identifier:
keyid:29:71:94:F4:B5:2B:9F:F4:33:F2:BF:0D:16:B5:8C:11:C7:CF:11:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2e:63:a3:e8:fc:56:33:9a:65:68:b3:ba:7e:78:41:cf:38:
2a:0a:8a:a3:25:0b:0f:a3:01:92:ed:d1:be:b7:23:ce:31:f4:
d3:ca:e7:9c:f5:fb:4d:40:73:70:54:73:8f:56:83:13:36:cf:
84:33:d3:52:3f:c7:25:a4:d3:0a:ae:f4:3a:1e:2a:4f:fd:5f:
b3:aa:16:e5:7e:fa:60:91:ab:c6:14:01:a8:90:8d:af:14:d2:
7c:e5:80:0a:97:07:10:c8:4e:94:03:00:3e:f7:0f:68:b8:3c:
73:df:ff:bd:15:54:1f:61:6e:e7:ae:a9:b9:c8:50:ff:6c:88:
59:55:91:6d:7b:b5:2b:e4:6e:d1:8e:cf:72:70:c3:5e:9c:8d:
cd:de:91:94:92:0e:55:13:46:c8:5e:34:54:85:df:ae:84:63:
4f:46:cd:40:36:ec:d2:75:86:22:6f:6d:a9:58:f4:61:3b:60:
98:e5:6d:79:ff:57:8b:c8:bc:f3:37:a3:55:8f:02:a1:c8:b2:
6a:e1:cf:ae:53:0d:61:8e:e7:39:63:f7:5a:f7:c4:a9:c1:e2:
0a:a9:5e:9e:bc:99:a3:03:7e:39:65:2f:80:ea:ef:0b:00:4f:
ec:14:5c:72:5e:6a:da:b3:17:c3:90:6c:24:eb:ed:8e:c4:58:
c6:4b:51:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5Inq2w51P2CZbeQqsuh2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NzE5NGY0YjUyYjlmZjQzM2YyYmYwZDE2YjU4YzExYzdj
ZjExMzEwHhcNMjUwNzI2MTgwMDE2WhcNMjUwNzI3MTgwMDE2WjAzMTEwLwYDVQQD
EyhmMTljNWQ4ODE3MGVjMWM1MTY0MmI4MzhkMWVhZDAyMjc1ZTI3NTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38MEfXAKogeYbDukKpJArr4WoBH7
q+cN0LMuiZtZgfJdiULyPRm1ziwoip1i1R5g1zwKipM9AKWWfVWCJb+PmKlMNKrL
ydoCSbQkik9FN2qStJbQaYt6bJouICuNVOQLkB47XRJqgKKrLmbNyTR125nHE30w
zzU6NZLn4q4BH1JoFIN6Jco0NoLcBTWO/JF53JitH4/v4/8bwL3Uzy89c3cYV79R
g0MJTGjD7oo/lEdLqwubp/89LVkkhdGsqC3BFwFam5/r794/MvUCFa5QgDdxLmZg
DDYK5VLHYlxZu5aBeLXU2sQsfwl5OKuJzePUPTw2vBP/2GaOep9ZOf5FUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGcXYgXDsHFFkK4ONHq0CJ14nV5MB8GA1UdIwQY
MBaAFClxlPS1K5/0M/K/DRa1jBHHzxExMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hHVTlMVXJuX1F6OHI4TkZyV01FY2ZQRVRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84MGI0YzAtMDZjYi00NDI0LTlkZDUt
NWE5ODg5MzFlYTMzLzEvS1hHVTlMVXJuX1F6OHI4TkZyV01FY2ZQRVRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS84MGI0YzAtMDZjYi00NDI0LTlkZDUtNWE5ODg5MzFlYTMz
LzEvS1hHVTlMVXJuX1F6OHI4TkZyV01FY2ZQRVRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEC5jo+j8
VjOaZWizun54Qc84KgqKoyULD6MBku3RvrcjzjH008rnnPX7TUBzcFRzj1aDEzbP
hDPTUj/HJaTTCq70Oh4qT/1fs6oW5X76YJGrxhQBqJCNrxTSfOWACpcHEMhOlAMA
PvcPaLg8c9//vRVUH2Fu566puchQ/2yIWVWRbXu1K+Ru0Y7PcnDDXpyNzd6RlJIO
VRNGyF40VIXfroRjT0bNQDbs0nWGIm9tqVj0YTtgmOVtef9Xi8i88zejVY8Cociy
auHPrlMNYY7nOWP3WvfEqcHiCqlenryZowN+OWUvgOrvCwBP7BRccl5q2rMXw5Bs
JOvtjsRYxktRnw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:29:58 2025 by rpki-client