Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
File: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft (raw, json)
Hash identifier: ZOS6xD+MEQCKsr7ZyQGGhqINf9qRhDJRcWvzZ5S96Uc=
Subject key identifier: A7:99:92:80:CC:F7:33:0C:5B:8E:36:3B:86:7D:75:FE:53:5D:85:75
Authority key identifier: 29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
Certificate issuer: /CN=292d120970515846360ea223e9a0e6a3c3896934
Certificate serial: 0198469B1176D593F6D22F0D89E6B1B03017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 12:00:24 +0000
Manifest this update: Sat 26 Jul 2025 12:00:24 +0000
Manifest next update: Sun 27 Jul 2025 12:00:24 +0000
Files and hashes: 1: Dmpy31ijG2f6hXZqP5vPJHMC7fc.roa (hash: a19ubK1sseKa07iYGs0SfWBGmOIfQnOOnA1DdC09cIs=)
2: E7yxjynkTDUFSV0KBoIMTHpUAPI.roa (hash: 9bhJ257wp5/WErvUFH4Spo9AhE0rTIMhiGRzFbkOnjk=)
3: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl (hash: KlF78w8Nh2fmxI6c6vlCouDYq/VevTQ3RqiULO3K7Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:11:76:d5:93:f6:d2:2f:0d:89:e6:b1:b0:30:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d120970515846360ea223e9a0e6a3c3896934
Validity
Not Before: Jul 26 12:00:24 2025 GMT
Not After : Jul 27 12:00:24 2025 GMT
Subject: CN=a7999280ccf7330c5b8e363b867d75fe535d8575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:49:07:73:99:92:64:5c:a8:70:e6:42:ff:16:
48:58:33:72:73:18:c8:c4:ee:6d:7d:60:6f:16:b2:
ea:2a:8f:c9:9b:86:94:58:9b:fe:49:69:69:52:33:
ac:79:32:8f:d3:f8:ab:a7:ca:b8:d2:7e:28:ae:e5:
3c:0c:23:68:6f:0a:b3:be:a6:7c:74:14:68:8c:73:
c0:83:7a:d3:da:93:73:a0:bc:67:a3:0a:77:88:f5:
c5:25:6e:72:45:05:56:c0:71:9d:d0:e6:8a:dc:37:
7d:fc:98:b6:d8:8c:22:7d:89:48:7d:f4:96:c8:4c:
01:3a:49:51:2e:93:11:0b:df:1e:24:e6:01:b0:d6:
a9:ae:c3:42:8c:4d:5d:be:71:c8:a7:63:01:38:83:
b1:7d:ea:c0:7a:99:55:e0:99:a2:f8:79:b8:2a:f3:
38:6f:10:1d:b0:ba:69:33:1d:ae:fc:f6:59:f3:df:
09:96:49:0e:4a:ae:da:48:c1:c4:26:24:16:2d:2d:
3b:61:67:b9:e8:03:44:6f:bd:6d:01:d1:5a:63:28:
98:30:4a:05:6c:2c:d5:02:46:2c:f7:64:8c:3c:21:
ac:1e:c2:76:d7:0a:11:ee:46:88:9b:35:9d:3b:4b:
ec:fa:d3:e5:23:4b:6a:6a:11:dc:59:b4:f8:ca:3d:
16:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:99:92:80:CC:F7:33:0C:5B:8E:36:3B:86:7D:75:FE:53:5D:85:75
X509v3 Authority Key Identifier:
keyid:29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fd:00:3a:5f:9a:93:68:21:95:08:e4:95:80:8e:4b:f1:52:
36:42:99:79:95:38:06:f3:7e:84:b6:0d:71:29:4f:0d:b2:24:
7a:a7:b3:ae:19:6b:28:31:69:14:1f:f1:81:16:c1:47:1a:05:
bc:22:fa:08:a9:f4:78:2e:57:62:08:5f:47:df:e7:db:0e:23:
05:6c:65:e6:a8:48:c6:e8:f9:87:fd:0e:29:95:ac:88:cf:b7:
92:80:12:f0:31:26:ca:22:81:fb:e5:b0:2a:fc:87:8f:7d:64:
22:e7:73:52:ad:42:9c:bc:f1:a4:6b:5b:93:ea:93:68:46:29:
e3:8f:6d:df:f5:b0:d0:45:12:70:8a:cb:30:6c:d3:d6:9b:3c:
da:17:ca:f2:c7:d5:16:00:d5:d1:d4:95:65:a8:77:9f:0c:63:
b3:f6:a0:ca:18:a1:b6:8f:17:c3:02:47:5c:64:96:74:d6:52:
84:af:10:6a:82:33:98:47:dd:9c:e3:27:e1:82:1d:56:3d:48:
04:fe:db:58:cc:23:d3:e7:db:c1:5b:73:4c:24:4e:fa:f0:49:
98:68:d1:46:65:80:6a:1b:38:66:94:6a:8a:ae:fa:94:be:c7:
36:97:2e:5e:8b:5d:ac:25:e4:6d:24:02:e4:36:e3:e4:ab:ca:
c3:c4:29:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGmxF21ZP20i8NieaxsDAXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MmQxMjA5NzA1MTU4NDYzNjBlYTIyM2U5YTBlNmEzYzM4
OTY5MzQwHhcNMjUwNzI2MTIwMDI0WhcNMjUwNzI3MTIwMDI0WjAzMTEwLwYDVQQD
EyhhNzk5OTI4MGNjZjczMzBjNWI4ZTM2M2I4NjdkNzVmZTUzNWQ4NTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUkHc5mSZFyocOZC/xZIWDNycxjI
xO5tfWBvFrLqKo/Jm4aUWJv+SWlpUjOseTKP0/irp8q40n4oruU8DCNobwqzvqZ8
dBRojHPAg3rT2pNzoLxnowp3iPXFJW5yRQVWwHGd0OaK3Dd9/Ji22IwifYlIffSW
yEwBOklRLpMRC98eJOYBsNaprsNCjE1dvnHIp2MBOIOxferAeplV4Jmi+Hm4KvM4
bxAdsLppMx2u/PZZ898JlkkOSq7aSMHEJiQWLS07YWe56ANEb71tAdFaYyiYMEoF
bCzVAkYs92SMPCGsHsJ21woR7kaImzWdO0vs+tPlI0tqahHcWbT4yj0WfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeZkoDM9zMMW442O4Z9df5TXYV1MB8GA1UdIwQY
MBaAFCktEglwUVhGNg6iI+mg5qPDiWk0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1MwU0NYQlJXRVkyRHFJajZhRG1vOE9KYVRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9kZTkxMzktYTlkMC00OTNhLTkyNjAt
ZWQwZjI1NmE1ZmUzLzEvS1MwU0NYQlJXRVkyRHFJajZhRG1vOE9KYVRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9kZTkxMzktYTlkMC00OTNhLTkyNjAtZWQwZjI1NmE1ZmUz
LzEvS1MwU0NYQlJXRVkyRHFJajZhRG1vOE9KYVRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgf0AOl+a
k2ghlQjklYCOS/FSNkKZeZU4BvN+hLYNcSlPDbIkeqezrhlrKDFpFB/xgRbBRxoF
vCL6CKn0eC5XYghfR9/n2w4jBWxl5qhIxuj5h/0OKZWsiM+3koAS8DEmyiKB++Ww
KvyHj31kIudzUq1CnLzxpGtbk+qTaEYp449t3/Ww0EUScIrLMGzT1ps82hfK8sfV
FgDV0dSVZah3nwxjs/agyhihto8XwwJHXGSWdNZShK8QaoIzmEfdnOMn4YIdVj1I
BP7bWMwj0+fbwVtzTCRO+vBJmGjRRmWAahs4ZpRqiq76lL7HNpcuXotdrCXkbSQC
5Dbj5KvKw8QpeA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:26:21 2025 by rpki-client