Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier: /4j9Y/ArmTNuN7aBAMLHvaezT0K7GpldtzO57B76+bo=
Subject key identifier: B3:BB:A5:12:12:B7:C8:99:45:36:83:72:BB:82:66:7E:27:B4:75:90
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 019921E7A55E2AE92032A43D588C0EA5072A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 02:00:53 +0000
Manifest this update: Sun 07 Sep 2025 02:00:53 +0000
Manifest next update: Mon 08 Sep 2025 02:00:53 +0000
Files and hashes: 1: CbRY4qO4S-WijK05eY2wCnYoQJU.roa (hash: +mTf7r6+zK/TdKHsfZ88i/cXxb9cvH9lfgC3dCfABuE=)
2: fJrFHPzcXBxu52oPqkGqKY4yJAk.roa (hash: 3hc352skG2gtrO+VgjnqkDCcrrWK6vetRgA/AknDSz8=)
3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: V51VwGDuKejgYX5mwxUOAKC4Yhp4oIfCJDYOoKsZRlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:a5:5e:2a:e9:20:32:a4:3d:58:8c:0e:a5:07:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Sep 7 02:00:53 2025 GMT
Not After : Sep 8 02:00:53 2025 GMT
Subject: CN=b3bba51212b7c89945368372bb82667e27b47590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:87:a3:5d:94:9a:fd:1f:7f:f1:06:2b:03:
a7:76:e4:f2:fc:47:5b:38:bd:83:6f:60:6b:21:ee:
88:8a:51:f8:3b:b1:b5:fb:94:c8:97:40:1b:42:e9:
e6:fe:b9:f7:4a:c8:94:02:8f:88:20:8f:53:1d:5b:
23:fc:1e:d5:15:21:74:8d:5e:20:7c:b3:47:ab:c5:
df:13:48:c0:fe:1b:02:08:48:bd:e2:14:8f:ee:b2:
83:71:ab:f4:26:db:f7:81:2b:17:21:15:96:cd:d5:
f1:83:ad:85:5e:9a:31:8d:3d:4a:00:18:5f:5d:e9:
9e:4a:22:0b:aa:8e:ec:04:e2:9a:ab:13:f0:b8:90:
3e:9c:18:24:4b:f6:3e:82:7e:d5:7d:b8:04:4f:a2:
5a:24:bd:7b:e7:99:4b:86:0b:a0:35:55:8f:00:14:
51:89:8c:2b:ae:60:f9:a0:87:f1:5e:1a:1b:71:01:
32:90:23:be:2f:a8:d5:8a:87:58:c4:1a:66:c8:cf:
7f:9f:fb:b9:77:e0:f7:1c:b7:d4:e7:57:5e:32:8a:
a7:8b:bd:06:c4:27:88:d6:bc:b8:79:96:c0:24:5c:
c9:d2:f5:90:34:c9:38:51:76:01:1c:62:07:99:23:
20:2f:82:5f:8e:31:12:81:27:6d:0a:50:1c:64:d1:
4f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BB:A5:12:12:B7:C8:99:45:36:83:72:BB:82:66:7E:27:B4:75:90
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b2:6b:30:71:c6:67:24:a4:a1:e8:be:bc:23:53:3b:93:58:
42:22:35:97:a0:82:27:9e:24:e5:8b:e8:42:23:9f:bb:7b:a7:
36:7c:91:ec:70:cb:bd:1e:78:7e:67:5b:d5:98:7f:a0:04:46:
0d:e2:88:a9:7b:a7:a1:66:11:05:b6:00:81:b3:e5:81:b3:4c:
e0:40:e1:62:a2:8d:f8:05:c0:60:fe:52:e2:ac:c8:de:c7:63:
f7:fa:9b:ba:8f:71:72:2b:cd:c0:c1:30:28:97:43:bb:55:87:
be:c3:82:32:a8:78:3a:01:67:e4:e7:4e:5c:43:8c:c6:90:62:
af:5d:46:46:bc:4f:82:86:50:fe:8a:dc:69:f7:6a:d7:b7:d2:
0f:0f:9e:3b:0b:95:63:c1:b4:3f:be:63:98:41:19:26:a6:95:
a7:2b:3c:21:f6:23:8f:dc:5d:48:98:c4:ec:3a:b6:18:c7:bd:
95:7f:9c:41:fb:9c:86:4a:a9:95:e9:4a:b0:83:51:f8:7c:f8:
e1:31:dc:42:41:f5:27:c2:b4:4a:49:5d:a8:e2:58:48:b7:dd:
a9:3d:51:11:8b:61:50:d9:69:0f:e6:93:f5:eb:aa:71:25:9a:
f8:48:3f:da:f1:61:32:68:30:f6:93:f4:8a:40:65:3e:65:b0:
13:b9:fb:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh56VeKukgMqQ9WIwOpQcqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMWUzYzhkZTBhZGQ5ZGE5NWNmNDRkODlmNTBiZmRlN2Fl
MTlhNTcwHhcNMjUwOTA3MDIwMDUzWhcNMjUwOTA4MDIwMDUzWjAzMTEwLwYDVQQD
EyhiM2JiYTUxMjEyYjdjODk5NDUzNjgzNzJiYjgyNjY3ZTI3YjQ3NTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU+Ho12Umv0ff/EGKwOnduTy/Edb
OL2Db2BrIe6IilH4O7G1+5TIl0AbQunm/rn3SsiUAo+III9THVsj/B7VFSF0jV4g
fLNHq8XfE0jA/hsCCEi94hSP7rKDcav0Jtv3gSsXIRWWzdXxg62FXpoxjT1KABhf
XemeSiILqo7sBOKaqxPwuJA+nBgkS/Y+gn7VfbgET6JaJL1755lLhgugNVWPABRR
iYwrrmD5oIfxXhobcQEykCO+L6jViodYxBpmyM9/n/u5d+D3HLfU51deMoqni70G
xCeI1ry4eZbAJFzJ0vWQNMk4UXYBHGIHmSMgL4JfjjESgSdtClAcZNFPoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLO7pRISt8iZRTaDcruCZn4ntHWQMB8GA1UdIwQY
MBaAFJMePI3grdnalc9E2J9Qv9564ZpXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84NTJjZmQtZDU5Mi00YzJkLTk0Y2Yt
YjljYTc1NTVjMmM1LzEva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi84NTJjZmQtZDU5Mi00YzJkLTk0Y2YtYjljYTc1NTVjMmM1
LzEva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtbJrMHHG
ZySkoei+vCNTO5NYQiI1l6CCJ54k5YvoQiOfu3unNnyR7HDLvR54fmdb1Zh/oARG
DeKIqXunoWYRBbYAgbPlgbNM4EDhYqKN+AXAYP5S4qzI3sdj9/qbuo9xcivNwMEw
KJdDu1WHvsOCMqh4OgFn5OdOXEOMxpBir11GRrxPgoZQ/orcafdq17fSDw+eOwuV
Y8G0P75jmEEZJqaVpys8IfYjj9xdSJjE7Dq2GMe9lX+cQfuchkqplelKsINR+Hz4
4THcQkH1J8K0SkldqOJYSLfdqT1REYthUNlpD+aT9euqcSWa+Eg/2vFhMmgw9pP0
ikBlPmWwE7n7ug==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:27 2025 by rpki-client