Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
File: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft (raw, json)
Hash identifier: 0mB0KiL8VUNorEJH4pseUgBJg1E5NCZnM7Xujr9YRwc=
Subject key identifier: 37:E5:B7:A9:09:1B:A9:17:3F:E3:C6:FF:1E:27:5F:5A:25:FF:5F:76
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 019849D3C06055DE850F11F26336EBB5BA4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 03:01:10 +0000
Manifest this update: Sun 27 Jul 2025 03:01:10 +0000
Manifest next update: Mon 28 Jul 2025 03:01:10 +0000
Files and hashes: 1: 1-BYmurPr5LAEsZbg3IkqQQ8bTE.roa (hash: gSRreBFbCS0pgQwKCm4p7z2bTAJn0+Iu8NoE2w5inzM=)
2: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl (hash: yCbBYOyZmi9QwAU8fjvHUmKitbuGA1pF5staHfbUERU=)
3: LkIHKYAztrvXyS2uvM19nitM_J8.roa (hash: bSmM4xvjjm+xIUvcYXqsQ49ZAFIaGh2KEBGQ0EzdDJQ=)
4: YZbRz0TPn2AkN3pts4pehGKPFCQ.roa (hash: +Ns94ZDDFJ4TJopF8u7U1uG56GwRweZl/hjdoUef2a0=)
5: _vdRTtZt9JtL5ja2GczGggJ0SbM.roa (hash: lAHlgKcde7+6Ag5a4YHN2NUrJtyFsbjpueclzD4vqNA=)
6: cPcxLO1mqeKGQGyRnW90EvAI0HE.roa (hash: k9JzzhuzIaxECEDTAdASrMOBk8mvIm/aEbc0qToiokc=)
7: dx0WinCfMz9mrqqCW13H5COmXU8.roa (hash: ljXXTzc+Ws09xCBJIxWwoc/Db/5IEktc/whbot/5Ato=)
8: fx8MLGTxK80dTB_4NJYiocZMPwQ.roa (hash: ktdhmccH0NnIum2PWLW59Gn98yD870nWte0K3STRnHs=)
9: uwiEBGof-KAkpEFhZy-WaLfAvIs.roa (hash: ZnbTLkj0SeUC00zQu5XoWyUlIHf81vfWL1Buec+9xEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:c0:60:55:de:85:0f:11:f2:63:36:eb:b5:ba:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Jul 27 03:01:10 2025 GMT
Not After : Jul 28 03:01:10 2025 GMT
Subject: CN=37e5b7a9091ba9173fe3c6ff1e275f5a25ff5f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:20:e8:dd:e0:9d:3d:b8:0c:a9:9e:7f:20:9d:
55:69:6e:93:bf:c6:d3:f6:a2:d9:c7:69:dd:9f:ba:
5f:71:c4:ef:17:03:a9:98:ee:ba:3a:84:3e:5a:47:
25:1c:d4:b8:29:3d:7e:b0:71:8c:bb:de:55:d3:6c:
3f:73:b6:08:ed:2c:03:a4:ce:25:5e:2a:59:a5:a2:
f0:d8:ff:55:e0:06:dd:d2:ef:46:f7:96:7c:c4:99:
32:67:aa:2c:08:07:ce:8e:d0:66:20:5e:90:3b:5e:
f1:db:d1:a4:f0:62:07:27:58:cf:2b:c2:7b:6d:ac:
7c:71:9e:2d:bb:14:70:d8:4d:29:e8:b9:f9:ba:4f:
d1:6a:d7:0d:49:96:53:07:ae:71:ae:e7:82:99:79:
d5:e8:4b:8b:f9:1a:b8:41:01:fc:5b:35:23:23:bd:
45:fb:f8:25:d8:97:66:06:3a:da:94:a6:e6:90:64:
c3:5e:38:ae:15:8f:28:e5:8e:b6:16:d1:f2:23:24:
5e:26:b5:2c:e4:d9:29:c3:04:52:2f:73:55:47:35:
6f:e0:5c:08:04:92:d7:b3:2e:ba:eb:a4:8b:c9:e5:
d2:06:73:f8:ab:d1:6d:78:26:6c:b7:bc:90:72:43:
3a:29:8a:52:61:ad:a2:8b:d1:17:f4:20:db:15:6b:
ca:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E5:B7:A9:09:1B:A9:17:3F:E3:C6:FF:1E:27:5F:5A:25:FF:5F:76
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3a:06:38:63:e7:5c:a9:24:f5:f8:66:8d:71:61:69:44:70:
1c:10:c8:53:69:a4:77:7d:b6:ce:36:e8:5c:b1:62:6e:3f:83:
7f:09:06:df:a4:d1:f2:85:fb:ab:33:8d:04:a1:fd:eb:a1:3c:
8a:2e:1f:27:3d:d3:87:91:d9:4c:4b:f4:8a:92:c2:55:96:00:
b7:d1:1e:03:e9:b9:65:c1:2f:bb:44:24:bb:a1:2b:71:9b:d7:
25:36:68:73:ac:1e:7c:99:4b:9b:70:13:ef:10:39:62:05:12:
e9:28:00:ab:e4:b6:e9:07:23:fe:b2:98:36:6e:6b:70:7e:71:
4c:86:73:3e:fd:b5:6a:49:b7:17:93:eb:0f:4e:11:fc:49:3a:
cd:9f:78:2d:62:bf:d4:e8:69:a9:90:c8:d4:10:00:44:d3:a9:
e1:f4:ff:33:42:34:13:9e:2e:91:5c:ed:86:09:7e:49:d3:2f:
48:71:6b:09:bc:72:d6:fd:c1:89:b0:44:d7:4a:49:46:71:7f:
d9:02:d2:dc:72:40:1b:5c:c2:4c:4d:45:b4:14:64:43:ca:21:
25:d3:5d:23:29:c2:ff:82:24:47:1e:bb:aa:d7:62:50:a4:fa:
9f:22:61:c1:dc:24:e5:cc:e6:6a:c1:ae:da:6d:1a:56:17:26:
ca:37:58:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ08BgVd6FDxHyYzbrtbpNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MWYwYjczZTY3ZDYzYzVhNGM5MDQ2ODE0MTY2YTllMjE2
MjVmMjgwHhcNMjUwNzI3MDMwMTEwWhcNMjUwNzI4MDMwMTEwWjAzMTEwLwYDVQQD
EygzN2U1YjdhOTA5MWJhOTE3M2ZlM2M2ZmYxZTI3NWY1YTI1ZmY1Zjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiDo3eCdPbgMqZ5/IJ1VaW6Tv8bT
9qLZx2ndn7pfccTvFwOpmO66OoQ+WkclHNS4KT1+sHGMu95V02w/c7YI7SwDpM4l
XipZpaLw2P9V4Abd0u9G95Z8xJkyZ6osCAfOjtBmIF6QO17x29Gk8GIHJ1jPK8J7
bax8cZ4tuxRw2E0p6Ln5uk/RatcNSZZTB65xrueCmXnV6EuL+Rq4QQH8WzUjI71F
+/gl2JdmBjralKbmkGTDXjiuFY8o5Y62FtHyIyReJrUs5NkpwwRSL3NVRzVv4FwI
BJLXsy6666SLyeXSBnP4q9FteCZst7yQckM6KYpSYa2ii9EX9CDbFWvK6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDflt6kJG6kXP+PG/x4nX1ol/192MB8GA1UdIwQY
MBaAFCkfC3PmfWPFpMkEaBQWap4hYl8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQt
MzhlZThmZDY0ZTdkLzEvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQtMzhlZThmZDY0ZTdk
LzEvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIzoGOGPn
XKkk9fhmjXFhaURwHBDIU2mkd322zjboXLFibj+DfwkG36TR8oX7qzONBKH966E8
ii4fJz3Th5HZTEv0ipLCVZYAt9EeA+m5ZcEvu0Qku6ErcZvXJTZoc6wefJlLm3AT
7xA5YgUS6SgAq+S26Qcj/rKYNm5rcH5xTIZzPv21akm3F5PrD04R/Ek6zZ94LWK/
1OhpqZDI1BAARNOp4fT/M0I0E54ukVzthgl+SdMvSHFrCbxy1v3BibBE10pJRnF/
2QLS3HJAG1zCTE1FtBRkQ8ohJdNdIynC/4IkRx67qtdiUKT6nyJhwdwk5czmasGu
2m0aVhcmyjdYyA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:56:54 2025 by rpki-client