Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
File: kmyYtRBh80DM5OC0zjYc40q8L84.mft (raw, json)
Hash identifier: ZfV2yXBpf05ywdILeF3rfgJFcmsfKfgBMBudR1GLR0k=
Subject key identifier: 55:F6:49:79:9F:31:B9:9B:AD:4B:4B:AF:D8:55:D1:67:14:8E:15:3F
Authority key identifier: 92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE
Certificate issuer: /CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
Certificate serial: 0198541FD87F029A6D383AD8B5BE88F100AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
Manifest number: 0653
Signing time: Tue 29 Jul 2025 03:00:29 +0000
Manifest this update: Tue 29 Jul 2025 03:00:29 +0000
Manifest next update: Wed 30 Jul 2025 03:00:29 +0000
Files and hashes: 1: NSppdy32pK0kuht35Ks5xIRdV5s.roa (hash: e3lqo49PNkPXZsVtpcSw5P8QfGbIbaYvIeXnhh1mWBY=)
2: kmyYtRBh80DM5OC0zjYc40q8L84.crl (hash: fPrFIa1OgjQsapGY7B9jcjlLL6I4nKoo2/rdtnYF190=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:d8:7f:02:9a:6d:38:3a:d8:b5:be:88:f1:00:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
Validity
Not Before: Jul 29 03:00:29 2025 GMT
Not After : Jul 30 03:00:29 2025 GMT
Subject: CN=55f649799f31b99bad4b4bafd855d167148e153f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:0a:9c:8b:52:6d:d8:ca:db:55:39:d7:ed:
9e:50:9a:bd:9b:5f:c3:1c:76:eb:e3:fd:e5:9d:97:
54:07:b9:8e:4b:bc:17:ed:6d:e7:b0:e6:38:0c:4c:
ee:16:2c:c2:b6:08:98:74:d3:c9:d3:5e:d5:5f:f0:
7d:26:82:6e:9f:8c:5e:ce:a9:98:40:dc:1e:f4:ef:
8a:d0:3f:72:f1:26:f0:1f:16:aa:40:b7:b7:14:36:
3e:20:9d:f1:5c:53:6c:e0:11:5a:32:c4:a6:b0:00:
d2:7b:3b:5e:a4:82:42:53:ae:dc:5f:c9:cc:48:e7:
7b:dc:f0:ff:27:d1:e9:6b:cf:41:17:5e:bb:63:7e:
e2:c5:f8:cf:37:f7:dd:81:5e:f8:7d:93:81:c4:56:
ca:ff:5b:15:f0:0f:40:df:bd:1a:4d:60:94:63:fb:
87:b6:9a:d6:e6:3a:b5:65:aa:a1:3a:a6:c2:1a:6b:
f2:7c:af:88:99:cb:89:39:b2:6c:1c:c1:66:02:73:
72:7c:16:ec:5e:15:d1:47:94:b0:a0:31:7f:c9:02:
cf:08:e8:e1:5c:38:ea:e4:ea:77:27:cf:8b:cb:3b:
d0:a4:85:74:13:c8:9d:56:88:f8:f1:97:66:63:50:
5d:28:20:80:cb:00:59:b5:8c:91:38:de:a8:a1:41:
d4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F6:49:79:9F:31:B9:9B:AD:4B:4B:AF:D8:55:D1:67:14:8E:15:3F
X509v3 Authority Key Identifier:
keyid:92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:37:f9:d1:2b:c4:52:b2:67:22:03:2b:09:57:6a:37:0b:81:
83:d1:d0:52:e0:dc:d6:1d:e8:51:0a:3e:0f:53:16:47:d0:ca:
b3:2d:0b:d2:b9:9f:aa:d0:fb:02:bd:55:55:a5:61:1b:85:ab:
56:0b:66:e8:ca:15:6d:72:75:97:3d:66:56:0f:9c:f1:d5:58:
4c:96:4c:5c:1e:0a:5f:a7:ed:80:93:19:0f:b4:b4:de:f4:50:
21:d0:d2:9c:7e:9f:fb:f3:ad:2d:4d:85:aa:86:61:bd:22:15:
dd:8e:86:15:87:a9:5a:e8:91:64:f7:6f:0b:3f:23:42:57:12:
b3:d4:04:fc:0f:9b:e0:02:36:38:a0:d2:bf:57:65:e9:2c:32:
92:da:50:fa:d7:ae:1a:b4:93:88:a6:ab:16:8c:6e:55:da:60:
99:22:b0:ad:4c:51:40:db:9e:67:4c:6d:ee:0a:01:4a:6a:d5:
15:e1:78:db:54:d8:8e:ff:55:32:a3:15:89:9a:93:da:82:93:
04:71:7d:08:ff:8d:49:f7:9f:2f:2d:95:f9:76:3b:1c:48:a6:
d8:0d:cf:09:6e:f6:8e:91:74:69:74:3e:ed:78:95:ef:df:75:
f6:30:d8:9e:c3:1a:f9:0e:2e:fc:0b:6a:79:c4:45:8f:c2:90:
ff:3a:47:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhUH9h/ApptODrYtb6I8QCqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNmM5OGI1MTA2MWYzNDBjY2U0ZTBiNGNlMzYxY2UzNGFi
YzJmY2UwHhcNMjUwNzI5MDMwMDI5WhcNMjUwNzMwMDMwMDI5WjAzMTEwLwYDVQQD
Eyg1NWY2NDk3OTlmMzFiOTliYWQ0YjRiYWZkODU1ZDE2NzE0OGUxNTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr8KnItSbdjK21U51+2eUJq9m1/D
HHbr4/3lnZdUB7mOS7wX7W3nsOY4DEzuFizCtgiYdNPJ017VX/B9JoJun4xezqmY
QNwe9O+K0D9y8SbwHxaqQLe3FDY+IJ3xXFNs4BFaMsSmsADSeztepIJCU67cX8nM
SOd73PD/J9Hpa89BF167Y37ixfjPN/fdgV74fZOBxFbK/1sV8A9A370aTWCUY/uH
tprW5jq1ZaqhOqbCGmvyfK+ImcuJObJsHMFmAnNyfBbsXhXRR5SwoDF/yQLPCOjh
XDjq5Op3J8+LyzvQpIV0E8idVoj48ZdmY1BdKCCAywBZtYyRON6ooUHUDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFX2SXmfMbmbrUtLr9hV0WcUjhU/MB8GA1UdIwQY
MBaAFJJsmLUQYfNAzOTgtM42HONKvC/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva215WXRSQmg4MERNNU9DMHpqWWM0MHE4TDg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNTE1OWEtNDUyOS00OGZhLTk1ZTkt
ZGM3NmZlY2E5NGJmLzEva215WXRSQmg4MERNNU9DMHpqWWM0MHE4TDg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNTE1OWEtNDUyOS00OGZhLTk1ZTktZGM3NmZlY2E5NGJm
LzEva215WXRSQmg4MERNNU9DMHpqWWM0MHE4TDg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzf50SvE
UrJnIgMrCVdqNwuBg9HQUuDc1h3oUQo+D1MWR9DKsy0L0rmfqtD7Ar1VVaVhG4Wr
Vgtm6MoVbXJ1lz1mVg+c8dVYTJZMXB4KX6ftgJMZD7S03vRQIdDSnH6f+/OtLU2F
qoZhvSIV3Y6GFYepWuiRZPdvCz8jQlcSs9QE/A+b4AI2OKDSv1dl6SwyktpQ+teu
GrSTiKarFoxuVdpgmSKwrUxRQNueZ0xt7goBSmrVFeF421TYjv9VMqMViZqT2oKT
BHF9CP+NSfefLy2V+XY7HEim2A3PCW72jpF0aXQ+7XiV79919jDYnsMa+Q4u/Atq
ecRFj8KQ/zpH5Q==
-----END CERTIFICATE-----
Generated at Tue Jul 29 12:40:58 2025 by rpki-client