Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File: KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier: vxQjYRmA6qoqCTLHFk0sTnvmCF1sD1Y96mzD4jZtgMg=
Subject key identifier: D1:C9:7D:6E:17:F5:5A:D1:72:18:F7:D4:21:AB:29:F2:FF:C8:11:93
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 0199277D4BC60B1DBFCFF63D162A037906F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number: 14DF
Signing time: Mon 08 Sep 2025 04:02:26 +0000
Manifest this update: Mon 08 Sep 2025 04:02:26 +0000
Manifest next update: Tue 09 Sep 2025 04:02:26 +0000
Files and hashes: 1: 2Cp_JC-1gSdENPjM_UWn9lNVG7o.roa (hash: +35xjqek9Nhlc/Z0+VDCYx/DAJw10REdvRuvu6t5M3s=)
2: 30p15OIB4xzHle9tD78XYhbRDYI.roa (hash: 9HVb43mRInURyExw74+VWFanW5TCiRHL7zKkRNQfWwc=)
3: 46l3zcDNK_2V63AreaLMsQrAgaE.roa (hash: yY63fb353nPGfB15WkNs5SfqIg+XAt04c2yklxwzqUk=)
4: DrQJgIgCadGbo__38qvLm4f2buQ.roa (hash: Wx23py7fw++y8qecqXEe1C97qUaOVg6INU3OjKvg+YE=)
5: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: rNCih7WAdCf9QZoYl82Fo+FVICr19O7Yc3D5HJAmWAw=)
6: Kc-1Z4R9k1b9QbprK1lrnIRFuzo.roa (hash: mIf5b4mKVeZgEr7VsdotpcNIdYch/DFkBdwgO8kit9A=)
7: lTAav4yQpZ87qw_zIchzIsq-5gM.roa (hash: 3b9+qDTSwpfJP/SrqHspJoxR/TN3seQEWvBLhEVGMW0=)
8: x8RX4rKBNmZcMpsvt4Nm7APSjAM.roa (hash: zc30VoGi96Z1iHoOnbaFFXszAPpJE3UJpyJWRy15Byo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:7d:4b:c6:0b:1d:bf:cf:f6:3d:16:2a:03:79:06:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Sep 8 04:02:26 2025 GMT
Not After : Sep 9 04:02:26 2025 GMT
Subject: CN=d1c97d6e17f55ad17218f7d421ab29f2ffc81193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:be:86:7a:0d:3c:97:3e:e7:fb:37:e2:e8:0b:
12:f5:f8:f4:28:51:17:ca:e6:e8:dd:11:41:1e:f4:
88:ca:0f:6c:82:f0:75:09:07:e4:99:29:ba:83:b5:
20:f0:3e:1f:fd:c4:ea:62:ab:1e:30:c2:d1:d0:89:
c5:9b:07:02:8f:39:09:f1:a8:44:73:5f:90:27:1d:
ef:f2:37:4c:ac:8d:3e:32:3c:6e:28:58:29:b4:28:
04:73:48:e2:1c:6d:6f:87:a1:a8:c6:20:79:54:63:
08:bd:42:d4:09:97:bc:fc:54:47:26:23:b8:41:d6:
b2:78:e8:9c:bf:db:ac:28:43:d4:a3:81:a1:21:f9:
f0:30:82:21:93:d2:39:2a:9f:e5:b9:70:af:f8:da:
5c:d2:0c:15:ed:0b:0e:00:aa:8d:94:d9:fd:f4:fe:
3f:98:61:76:45:c7:24:b9:07:6a:c1:1d:86:fd:56:
7c:ac:2f:44:31:b4:a8:58:b4:59:25:86:cf:62:8e:
92:79:05:98:f1:db:9f:e8:6a:84:7d:09:14:56:e9:
11:d8:41:45:5d:f9:25:8b:59:62:4e:17:1a:bd:c3:
ad:de:e0:43:1c:74:a5:77:1b:98:33:3c:ce:32:4b:
44:1e:9f:39:31:85:e3:14:9a:e8:10:39:3f:1c:fe:
c2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C9:7D:6E:17:F5:5A:D1:72:18:F7:D4:21:AB:29:F2:FF:C8:11:93
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1f:28:d4:e2:9c:be:aa:ff:e8:b6:a8:07:62:cf:e0:60:fd:
57:f9:bf:ea:03:3c:cf:fb:f7:df:35:25:33:66:17:50:8d:8f:
b4:29:b8:de:ff:4e:02:9f:bc:b8:ff:b2:7b:70:84:b7:03:59:
8b:b5:70:b3:86:f8:ca:51:0c:fe:b3:80:bf:ef:e3:1b:cb:bd:
f4:e5:4b:84:a1:88:f0:f3:c8:c7:08:2f:bd:db:3e:cc:8e:39:
39:03:c1:f8:23:1d:1a:a3:df:4a:f8:81:a9:59:06:0a:88:59:
5b:38:dc:c6:a0:d1:70:0c:fe:1f:0e:03:a3:43:bd:48:26:a9:
aa:c1:2c:2c:43:e8:cb:a6:75:a9:1b:9a:c8:67:e9:fc:4b:a6:
0a:9d:67:74:a0:09:6e:f1:76:0b:ad:31:80:b9:94:c8:1a:0a:
09:97:26:11:2b:78:ca:1a:66:33:5f:76:a2:3e:16:7f:36:41:
06:7a:f8:c1:2c:d1:9b:05:80:14:3e:1b:72:1e:39:8d:51:ed:
39:00:40:cf:02:66:67:0a:3f:f6:68:47:c7:0d:63:62:62:29:
ae:be:02:1a:74:6e:6b:e7:55:ed:0c:25:dc:94:84:32:85:e0:
40:d9:5a:3d:db:80:ff:f1:f4:c3:04:b8:7d:fa:ed:81:8f:61:
56:5c:6c:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZknfUvGCx2/z/Y9FioDeQb1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NzM2NGY1MDI1MzRlODc3MWEwYzYyNTk3OTRjMjZlMjZk
NGJjYTQwHhcNMjUwOTA4MDQwMjI2WhcNMjUwOTA5MDQwMjI2WjAzMTEwLwYDVQQD
EyhkMWM5N2Q2ZTE3ZjU1YWQxNzIxOGY3ZDQyMWFiMjlmMmZmYzgxMTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5L6Geg08lz7n+zfi6AsS9fj0KFEX
yubo3RFBHvSIyg9sgvB1CQfkmSm6g7Ug8D4f/cTqYqseMMLR0InFmwcCjzkJ8ahE
c1+QJx3v8jdMrI0+MjxuKFgptCgEc0jiHG1vh6GoxiB5VGMIvULUCZe8/FRHJiO4
QdayeOicv9usKEPUo4GhIfnwMIIhk9I5Kp/luXCv+Npc0gwV7QsOAKqNlNn99P4/
mGF2RcckuQdqwR2G/VZ8rC9EMbSoWLRZJYbPYo6SeQWY8duf6GqEfQkUVukR2EFF
Xfkli1liThcavcOt3uBDHHSldxuYMzzOMktEHp85MYXjFJroEDk/HP7CKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHJfW4X9VrRchj31CGrKfL/yBGTMB8GA1UdIwQY
MBaAFClzZPUCU06HcaDGJZeUwm4m1LykMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUt
MGEwZjNlNzhhNDkzLzEvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUtMGEwZjNlNzhhNDkz
LzEvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArB8o1OKc
vqr/6LaoB2LP4GD9V/m/6gM8z/v33zUlM2YXUI2PtCm43v9OAp+8uP+ye3CEtwNZ
i7Vws4b4ylEM/rOAv+/jG8u99OVLhKGI8PPIxwgvvds+zI45OQPB+CMdGqPfSviB
qVkGCohZWzjcxqDRcAz+Hw4Do0O9SCapqsEsLEPoy6Z1qRuayGfp/EumCp1ndKAJ
bvF2C60xgLmUyBoKCZcmESt4yhpmM192oj4WfzZBBnr4wSzRmwWAFD4bch45jVHt
OQBAzwJmZwo/9mhHxw1jYmIprr4CGnRua+dV7Qwl3JSEMoXgQNlaPduA//H0wwS4
ffrtgY9hVlxsXg==
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:12:55 2025 by rpki-client