Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
File: kJgVO94ONFhLrJH6GGjX7yTWi88.mft (raw, json)
Hash identifier: MYgoyfGnsObubv+xp537knjIRA1D8HlYriFrMXz62O4=
Subject key identifier: 74:7C:CE:61:55:7D:0F:E1:63:40:41:5F:35:58:AF:F2:7D:A2:AC:AA
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 019826A3068176DA5E8EAE47E93646B960C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
Manifest number: 12E6
Signing time: Sun 20 Jul 2025 07:01:14 +0000
Manifest this update: Sun 20 Jul 2025 07:01:14 +0000
Manifest next update: Mon 21 Jul 2025 07:01:14 +0000
Files and hashes: 1: kGuaXeFXRy7zk4r_fksHu1gERzY.roa (hash: eMXSEjP4L4hwARJ1cK2WpXviS5zDUtCbinSWtpWSvYQ=)
2: kJgVO94ONFhLrJH6GGjX7yTWi88.crl (hash: BdjCoaQLDPy8lamHnPMvQN0NQXKzFcHme4zHQ+X0xk4=)
3: vvhvE6BMZMFQ1G4AEbYHHR_JKn4.roa (hash: kxXe/kCsq1l7fHe6/tvS8feYMvtFQTY38JduUQRo50I=)
4: x_9yjr6rLqSNbiZnjmWq-mNvOgg.roa (hash: mAB0u4tnNy3pI1HtMQoSvS+geYvks2ItYBoen25rRrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:a3:06:81:76:da:5e:8e:ae:47:e9:36:46:b9:60:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Jul 20 07:01:14 2025 GMT
Not After : Jul 21 07:01:14 2025 GMT
Subject: CN=747cce61557d0fe16340415f3558aff27da2acaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:a7:9a:ed:85:5a:af:80:50:aa:d3:29:5f:
c5:9c:bc:8b:3a:d8:ea:b4:56:cf:76:8d:a5:ee:23:
55:c4:01:98:ee:f1:fa:50:ca:33:6b:d3:0b:5a:69:
49:2b:4f:64:5d:2b:f2:2c:09:75:ad:50:cc:dc:ff:
44:e7:f5:15:a0:6d:63:50:f5:b5:51:47:c7:6a:2f:
6e:5b:3f:55:2a:30:cf:82:05:fe:a4:47:c9:5a:d1:
90:37:11:e9:d0:3e:b7:c6:7e:75:a3:a1:03:b6:de:
67:29:00:6b:35:ad:dd:9c:8d:e8:73:f8:a7:1b:26:
58:05:7d:83:fa:3a:80:0b:27:ce:e2:b0:4c:11:8b:
bc:8e:51:b6:73:1f:51:5f:ae:a8:e2:c0:0c:67:aa:
88:b2:6f:65:74:ce:42:41:3d:e5:7d:a3:75:34:28:
be:66:82:71:f8:8e:27:f3:5b:80:dc:8c:57:60:9f:
6c:5a:bd:97:16:3d:3c:b3:19:ab:aa:6d:14:43:bc:
21:fd:eb:5b:5b:f2:07:3a:7c:91:80:fa:4f:16:36:
c4:e6:2f:6d:60:ff:ca:66:42:35:63:fd:0c:ef:22:
f6:2e:8b:2c:6e:b2:a5:86:3c:2d:c3:f0:cd:bc:5d:
d3:7c:08:98:f7:e4:14:3e:e8:f3:5d:63:86:a6:f8:
74:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7C:CE:61:55:7D:0F:E1:63:40:41:5F:35:58:AF:F2:7D:A2:AC:AA
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f3:61:1b:56:e2:ce:6e:b1:27:38:fb:fb:fa:7a:cb:c6:c6:
37:ff:e9:1b:41:81:ab:cc:80:71:bf:7d:56:b8:2d:b3:95:6f:
c2:4d:e6:ca:1a:86:2c:bb:76:0c:42:af:60:1e:b5:6d:e8:72:
e4:6b:b6:0f:cd:fb:a7:e0:26:e3:82:0e:69:60:be:d7:3e:03:
5d:ba:cb:bc:ad:49:20:36:5f:28:91:5b:6c:1e:67:7e:a5:e4:
6f:bc:70:38:99:a5:87:3a:fb:91:48:fd:92:5a:fb:2f:b8:16:
7a:20:ae:f8:82:97:ae:84:39:1f:5f:cd:27:d3:a1:93:4a:8e:
01:5a:2e:f9:3b:7a:00:80:4c:00:a2:40:c6:5f:c6:1a:c8:df:
82:2f:a4:a2:7a:54:1e:2c:23:56:f9:b4:d7:00:c6:0b:17:07:
c5:62:bb:95:04:b7:71:52:22:99:07:52:24:a2:4c:94:2b:41:
0a:8a:2b:70:33:e6:35:5b:bd:77:da:d7:93:9d:ea:37:57:88:
dd:79:7b:af:d3:06:b5:42:e1:ac:00:aa:b5:c5:9d:28:f0:11:
3b:80:63:ba:b2:8d:2e:d4:b6:79:57:e7:eb:8f:12:62:84:77:
e0:e9:ab:2e:f5:7f:18:8a:08:21:a5:91:c7:28:97:25:7e:15:
ca:24:e5:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgmowaBdtpejq5H6TZGuWDJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwOTgxNTNiZGUwZTM0NTg0YmFjOTFmYTE4NjhkN2VmMjRk
NjhiY2YwHhcNMjUwNzIwMDcwMTE0WhcNMjUwNzIxMDcwMTE0WjAzMTEwLwYDVQQD
Eyg3NDdjY2U2MTU1N2QwZmUxNjM0MDQxNWYzNTU4YWZmMjdkYTJhY2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuinmu2FWq+AUKrTKV/FnLyLOtjq
tFbPdo2l7iNVxAGY7vH6UMoza9MLWmlJK09kXSvyLAl1rVDM3P9E5/UVoG1jUPW1
UUfHai9uWz9VKjDPggX+pEfJWtGQNxHp0D63xn51o6EDtt5nKQBrNa3dnI3oc/in
GyZYBX2D+jqACyfO4rBMEYu8jlG2cx9RX66o4sAMZ6qIsm9ldM5CQT3lfaN1NCi+
ZoJx+I4n81uA3IxXYJ9sWr2XFj08sxmrqm0UQ7wh/etbW/IHOnyRgPpPFjbE5i9t
YP/KZkI1Y/0M7yL2LossbrKlhjwtw/DNvF3TfAiY9+QUPujzXWOGpvh02wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHR8zmFVfQ/hY0BBXzVYr/J9oqyqMB8GA1UdIwQY
MBaAFJCYFTveDjRYS6yR+hho1+8k1ovPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9iYTkwMDMtZDQzMy00MDk1LTg0Yjct
MmY5MzNkOTg5NmUwLzEva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9iYTkwMDMtZDQzMy00MDk1LTg0YjctMmY5MzNkOTg5NmUw
LzEva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/NhG1bi
zm6xJzj7+/p6y8bGN//pG0GBq8yAcb99Vrgts5Vvwk3myhqGLLt2DEKvYB61behy
5Gu2D837p+Am44IOaWC+1z4DXbrLvK1JIDZfKJFbbB5nfqXkb7xwOJmlhzr7kUj9
klr7L7gWeiCu+IKXroQ5H1/NJ9Ohk0qOAVou+Tt6AIBMAKJAxl/GGsjfgi+konpU
HiwjVvm01wDGCxcHxWK7lQS3cVIimQdSJKJMlCtBCoorcDPmNVu9d9rXk53qN1eI
3Xl7r9MGtULhrACqtcWdKPARO4BjurKNLtS2eVfn648SYoR34OmrLvV/GIoIIaWR
xyiXJX4VyiTlog==
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:25:54 2025 by rpki-client