Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: pkg8a+aPqFFGHJinllXuccVtj5XfPPK0fdJDEssdJAM=
Subject key identifier: 78:C5:6D:BB:53:D8:B9:3C:6D:81:F3:65:49:01:41:8F:9C:25:3B:A3
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 019848895535AD80574FC9A8391802815CCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 0E51
Signing time: Sat 26 Jul 2025 21:00:16 +0000
Manifest this update: Sat 26 Jul 2025 21:00:16 +0000
Manifest next update: Sun 27 Jul 2025 21:00:16 +0000
Files and hashes: 1: 6lxIW7DOsuapgRe4TkqSuAXjoOs.roa (hash: AJ9PIBCPlG0gbaqeqnRofWtKoSg8Ai8VYC5DZAVADvU=)
2: V7lXlsc_KCrBF5PGRWvxEoDs1jE.roa (hash: 3HSkq2ZQ4Tv+kukR6Ld2lDKWo32adQgvx+S4uGpggoY=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: 84oHu4hxFwYhdoFv63HSDGMoPLlV4y2XZpZO3x0kT9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:55:35:ad:80:57:4f:c9:a8:39:18:02:81:5c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Jul 26 21:00:16 2025 GMT
Not After : Jul 27 21:00:16 2025 GMT
Subject: CN=78c56dbb53d8b93c6d81f3654901418f9c253ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:1d:55:c0:55:20:93:5a:24:a2:22:0e:52:
17:3a:1b:33:b6:63:5f:08:bc:61:02:de:14:14:5f:
90:69:77:0a:7c:01:50:3b:21:26:ac:3d:63:f3:a0:
d2:0d:0c:2d:02:a0:e9:bd:b7:f2:b7:f0:ba:74:60:
ae:fb:2c:cf:40:83:23:e0:cc:bb:98:0d:da:ae:80:
aa:00:89:15:09:64:df:e3:d5:e1:d4:f8:a7:f1:bf:
3f:76:5e:1c:8b:36:2c:59:bb:28:41:90:72:eb:7e:
78:47:cc:88:7e:fe:ed:b0:f9:92:0e:2a:c8:b0:f4:
05:34:d2:93:ea:f5:e8:02:8f:f6:37:e2:85:62:46:
cf:a1:11:dd:a0:e3:42:12:f6:19:2d:60:71:52:26:
1d:8f:fd:3f:d5:b7:55:6c:55:69:19:c4:c6:db:bd:
9f:8f:d0:b0:e0:7a:4a:e5:d8:2d:70:71:2f:48:b3:
ad:97:fc:51:e7:4d:a7:ec:f9:7d:0d:c3:4b:57:04:
41:96:46:a3:03:97:10:4e:70:71:57:1a:3a:79:ba:
09:4c:00:f2:fe:e9:25:91:03:5b:34:33:e0:05:8c:
d8:e8:3f:a8:8a:82:de:e4:db:cf:88:2a:90:47:a3:
fc:d7:2b:ac:0a:05:03:9b:21:bd:6d:db:34:d2:34:
d5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C5:6D:BB:53:D8:B9:3C:6D:81:F3:65:49:01:41:8F:9C:25:3B:A3
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7f:a8:79:fc:1c:22:49:63:97:21:ed:17:94:13:83:25:a3:
55:ab:fc:d7:4e:4a:20:21:c9:e6:b8:d1:7c:6a:32:0c:69:13:
8a:2d:cc:ae:70:23:3c:0f:af:9a:81:85:9c:ea:05:a5:60:c1:
57:b9:1c:a9:87:d5:25:c5:c6:d6:32:ce:f6:50:1b:0d:ba:bb:
dd:17:7f:79:31:3e:a8:66:2c:43:64:27:b0:ae:a5:b2:d2:33:
4c:8f:b8:11:10:18:b8:85:cc:fb:ec:08:5f:7b:7f:2d:0e:a9:
06:c9:9c:c7:25:de:43:f2:df:76:5f:3a:01:ad:bc:e4:fc:8b:
69:18:c3:94:2b:a9:d9:9d:42:0f:87:23:49:0e:5b:76:09:64:
81:0b:ce:3a:c5:9a:de:48:bb:7d:7c:6f:1d:0d:a9:e8:2b:fe:
50:a3:e1:a0:80:7c:71:77:73:fc:cb:da:7b:d1:ea:48:18:64:
b5:ec:d2:a6:e9:26:2d:03:64:ee:fe:dd:ae:92:1e:61:01:e9:
56:28:2a:05:86:bb:75:5c:5f:22:a4:a5:ed:29:a0:e6:53:17:
92:90:94:ed:66:42:7d:2d:07:05:e9:8b:0c:67:e4:0a:2b:dc:
fc:b4:bb:c1:de:b6:8f:dc:b9:34:6a:99:16:a8:4a:39:03:0b:
07:d2:49:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIiVU1rYBXT8moORgCgVzOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyOTMzZTAxMzY0NGRiOWM5ZWU5YjkxZGY3MmUxMzM4ZGI4
ZTIwOTcwHhcNMjUwNzI2MjEwMDE2WhcNMjUwNzI3MjEwMDE2WjAzMTEwLwYDVQQD
Eyg3OGM1NmRiYjUzZDhiOTNjNmQ4MWYzNjU0OTAxNDE4ZjljMjUzYmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgwdVcBVIJNaJKIiDlIXOhsztmNf
CLxhAt4UFF+QaXcKfAFQOyEmrD1j86DSDQwtAqDpvbfyt/C6dGCu+yzPQIMj4My7
mA3aroCqAIkVCWTf49Xh1Pin8b8/dl4cizYsWbsoQZBy6354R8yIfv7tsPmSDirI
sPQFNNKT6vXoAo/2N+KFYkbPoRHdoONCEvYZLWBxUiYdj/0/1bdVbFVpGcTG272f
j9Cw4HpK5dgtcHEvSLOtl/xR502n7Pl9DcNLVwRBlkajA5cQTnBxVxo6eboJTADy
/uklkQNbNDPgBYzY6D+oioLe5NvPiCqQR6P81yusCgUDmyG9bds00jTVGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjFbbtT2Lk8bYHzZUkBQY+cJTujMB8GA1UdIwQY
MBaAFJKTPgE2RNucnum5HfcuEzjbjiCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3BNLUFUWkUyNXllNmJrZDl5NFRPTnVPSUpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82YmVmMjItZjM0NS00NjAzLWExZTkt
NWNjMmVmMDk5YWVlLzEva3BNLUFUWkUyNXllNmJrZDl5NFRPTnVPSUpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy82YmVmMjItZjM0NS00NjAzLWExZTktNWNjMmVmMDk5YWVl
LzEva3BNLUFUWkUyNXllNmJrZDl5NFRPTnVPSUpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGn+oefwc
IkljlyHtF5QTgyWjVav8105KICHJ5rjRfGoyDGkTii3MrnAjPA+vmoGFnOoFpWDB
V7kcqYfVJcXG1jLO9lAbDbq73Rd/eTE+qGYsQ2QnsK6lstIzTI+4ERAYuIXM++wI
X3t/LQ6pBsmcxyXeQ/Lfdl86Aa285PyLaRjDlCup2Z1CD4cjSQ5bdglkgQvOOsWa
3ki7fXxvHQ2p6Cv+UKPhoIB8cXdz/Mvae9HqSBhktezSpukmLQNk7v7drpIeYQHp
VigqBYa7dVxfIqSl7Smg5lMXkpCU7WZCfS0HBemLDGfkCivc/LS7wd62j9y5NGqZ
FqhKOQMLB9JJDQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 03:05:43 2025 by rpki-client