Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier: O0P9lNBVetuL5sIbPkO0Uqnr+TDTy1hOzaqvH8gUc+Q=
Subject key identifier: 79:C5:7D:5D:A1:A5:25:CB:43:81:22:2A:3A:7A:ED:19:6C:43:F8:3A
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 0198477771392F018DE920CB6BE14D5F0225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 16:01:06 +0000
Manifest this update: Sat 26 Jul 2025 16:01:06 +0000
Manifest next update: Sun 27 Jul 2025 16:01:06 +0000
Files and hashes: 1: Z3X9DsT4VAKW7YkBTMn0rXGuV2w.roa (hash: 4/S1oXOwwM9zeKkXcanc5Gx3gZZLVgK6WEWw0gjjXXA=)
2: evv1AEwBABySsTk3nBF2LjzybHU.roa (hash: kJn/dllwz1lruGXWCmiNDhy21/mDcgsGEnqSuWfi9xM=)
3: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: 4xlHTI4WbcuJc7FQve8KgdDZbXIaX38WN+NuBzrpGb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:71:39:2f:01:8d:e9:20:cb:6b:e1:4d:5f:02:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Jul 26 16:01:06 2025 GMT
Not After : Jul 27 16:01:06 2025 GMT
Subject: CN=79c57d5da1a525cb4381222a3a7aed196c43f83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:04:db:58:12:d1:71:a5:4d:26:c0:05:5f:2a:
61:ff:07:24:7a:1b:ac:89:6f:dc:3e:94:33:83:05:
6b:87:3f:c6:8b:08:7c:cf:5a:e4:b0:1a:4e:d4:a4:
f0:7c:ec:92:54:60:31:ad:bf:9c:74:6b:8c:44:4c:
29:2d:b9:2d:ac:dc:a8:fa:59:b3:3f:de:b8:6d:66:
5a:52:0e:10:da:78:10:cb:d3:f7:a1:f9:c4:b4:51:
5a:b5:f8:0b:3f:cd:fd:3f:04:11:41:9e:39:b4:5b:
c9:af:0c:e4:f9:0a:dd:ba:d1:7f:2c:43:61:e7:a5:
0e:9c:36:fe:2d:fb:23:14:28:c7:ca:a0:ea:ca:83:
a6:72:14:dc:dd:c9:92:8c:e3:76:83:d0:e0:00:83:
2b:03:a0:4f:e4:0b:d6:c6:79:53:ec:08:2d:48:8a:
64:ac:74:95:a7:a4:bd:6f:43:f9:48:1d:38:a5:6c:
04:65:95:6b:41:75:e7:17:6c:d6:e0:8f:83:d5:f5:
29:05:6e:38:1b:62:8b:d0:c6:56:62:5c:43:51:64:
88:4c:69:4a:84:c6:d2:04:0b:87:b8:65:e0:66:2a:
02:e1:de:c6:95:9c:df:55:69:52:21:a2:a0:c0:fd:
e9:1a:78:aa:4a:ad:a7:55:63:73:d0:f0:35:8f:8f:
c6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C5:7D:5D:A1:A5:25:CB:43:81:22:2A:3A:7A:ED:19:6C:43:F8:3A
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:17:81:ca:88:30:fd:eb:3d:ca:ba:82:8f:25:59:b6:1c:f7:
27:ce:58:30:b2:0a:2e:b6:4d:50:35:8f:b8:f0:8d:cd:13:b8:
0b:94:c3:5b:82:6e:6e:13:a4:10:6e:48:81:95:a9:70:4c:57:
2e:3e:fc:5d:ae:b2:6e:8c:7f:f2:30:cd:fd:b7:f1:29:fb:32:
7c:27:8f:39:00:26:1d:1e:8e:5e:bc:1c:28:f5:78:c9:a2:92:
9a:e7:a9:2b:0d:c6:58:07:d4:a6:4c:a7:12:f1:eb:8a:b3:e5:
30:aa:de:0a:b8:54:d2:a0:a2:a8:2f:58:eb:2a:25:63:6e:ff:
0a:74:ac:23:32:e7:1f:c0:b1:a4:fa:61:52:9a:94:f2:da:16:
50:5c:f8:75:2c:36:e2:b8:0a:71:e7:c1:35:b9:5a:10:2c:8e:
78:8b:70:45:f4:6d:e4:49:41:a5:50:61:63:2e:20:2b:d8:ca:
0e:35:b3:be:cc:c4:bf:33:e6:65:f8:bc:6e:ae:0e:a0:81:b0:
7a:1b:52:9a:8c:c6:5c:1b:7f:fe:e5:d5:88:5a:99:94:97:49:
d1:88:bb:2f:cf:93:c4:44:a3:54:06:0b:4a:b1:76:8a:62:97:
3a:b1:9b:3a:fa:eb:62:4b:ba:db:73:6c:1d:d5:f3:0c:28:07:
9b:26:f7:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHd3E5LwGN6SDLa+FNXwIlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTZkYjM0ODdiNGM1YmFjYjMwMDE3NzA1N2NmMzE3NGNm
Nzc0NzcwHhcNMjUwNzI2MTYwMTA2WhcNMjUwNzI3MTYwMTA2WjAzMTEwLwYDVQQD
Eyg3OWM1N2Q1ZGExYTUyNWNiNDM4MTIyMmEzYTdhZWQxOTZjNDNmODNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wTbWBLRcaVNJsAFXyph/wckehus
iW/cPpQzgwVrhz/Giwh8z1rksBpO1KTwfOySVGAxrb+cdGuMREwpLbktrNyo+lmz
P964bWZaUg4Q2ngQy9P3ofnEtFFatfgLP839PwQRQZ45tFvJrwzk+QrdutF/LENh
56UOnDb+LfsjFCjHyqDqyoOmchTc3cmSjON2g9DgAIMrA6BP5AvWxnlT7AgtSIpk
rHSVp6S9b0P5SB04pWwEZZVrQXXnF2zW4I+D1fUpBW44G2KL0MZWYlxDUWSITGlK
hMbSBAuHuGXgZioC4d7GlZzfVWlSIaKgwP3pGniqSq2nVWNz0PA1j4/GrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnFfV2hpSXLQ4EiKjp67RlsQ/g6MB8GA1UdIwQY
MBaAFJJW2zSHtMW6yzABdwV88xdM93R3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83YjQ1YjktOTkwYi00NjE0LWE2NGUt
MGY1MmVhNTIyOWZjLzEva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83YjQ1YjktOTkwYi00NjE0LWE2NGUtMGY1MmVhNTIyOWZj
LzEva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeheByogw
/es9yrqCjyVZthz3J85YMLIKLrZNUDWPuPCNzRO4C5TDW4JubhOkEG5IgZWpcExX
Lj78Xa6ybox/8jDN/bfxKfsyfCePOQAmHR6OXrwcKPV4yaKSmuepKw3GWAfUpkyn
EvHrirPlMKreCrhU0qCiqC9Y6yolY27/CnSsIzLnH8CxpPphUpqU8toWUFz4dSw2
4rgKcefBNblaECyOeItwRfRt5ElBpVBhYy4gK9jKDjWzvszEvzPmZfi8bq4OoIGw
ehtSmozGXBt//uXViFqZlJdJ0Yi7L8+TxESjVAYLSrF2imKXOrGbOvrrYku623Ns
HdXzDCgHmyb3Xw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:27:29 2025 by rpki-client