Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json)
Hash identifier: l8c3vz66sD5eymbV3xG/2r7cNF5c+pKVFz5ygkElwsE=
Subject key identifier: 74:53:CD:99:AF:23:B3:26:AE:6B:99:3B:AD:6C:9F:7C:8D:44:E6:79
Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691
Certificate serial: 0199228C941A38256D221A52258417E8DC8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 05:01:02 +0000
Manifest this update: Sun 07 Sep 2025 05:01:02 +0000
Manifest next update: Mon 08 Sep 2025 05:01:02 +0000
Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: fli6m5X2Lb3nGlAeQFvYLbjh83CNMmKyKbR3yqu0nKM=)
2: eoUI00v5kHG-99ELxP-BBcjXoAc.roa (hash: wGk7AZgmxRmrZlb/Q0cgAj09IR2rbdkkeiUHejBRKws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:94:1a:38:25:6d:22:1a:52:25:84:17:e8:dc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298354861973728ce2be505f7270a4364d94e691
Validity
Not Before: Sep 7 05:01:02 2025 GMT
Not After : Sep 8 05:01:02 2025 GMT
Subject: CN=7453cd99af23b326ae6b993bad6c9f7c8d44e679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:be:ac:dc:78:9b:88:d0:c6:26:27:9e:19:
5f:6d:73:59:c9:c3:eb:99:ad:b9:56:5b:c8:66:df:
6e:b3:dd:69:1d:3a:67:ea:47:45:8d:19:97:d3:54:
af:03:e4:2b:2a:fc:98:fc:8e:37:a2:8f:75:67:c6:
ee:09:ae:26:03:ee:f2:5c:64:4e:3d:1c:90:b3:1a:
9d:96:5a:43:1b:10:5f:f1:18:e7:7f:de:9b:f1:4f:
f5:1b:b4:77:34:e9:75:e6:21:bf:1c:a7:95:39:9d:
8d:27:1c:6b:1b:73:41:45:88:a5:81:0d:88:d5:8c:
71:64:c5:f4:72:ee:90:ac:c0:ca:4b:6c:12:b5:cf:
36:2f:d0:0b:2c:e8:38:1c:55:3c:d7:38:7a:f9:ea:
2a:61:69:ef:a4:f5:f2:d7:24:c0:0d:29:44:b0:64:
06:06:3a:fc:b6:1f:83:c6:ec:91:e7:ca:53:4b:8f:
29:4d:c8:56:24:d0:2c:74:2d:aa:ea:93:0b:73:4d:
86:d7:42:0f:9b:80:46:81:91:86:e3:8d:0b:a0:83:
9a:f0:85:99:93:e0:b5:b4:b8:e1:df:66:07:df:77:
85:36:f6:95:5d:5d:1f:98:b8:e2:1f:53:3d:15:16:
cd:e0:65:f7:7c:0a:35:74:ca:1e:b6:92:93:51:d7:
f7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:53:CD:99:AF:23:B3:26:AE:6B:99:3B:AD:6C:9F:7C:8D:44:E6:79
X509v3 Authority Key Identifier:
keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:f5:26:2a:26:ba:b5:36:39:41:38:79:ab:63:c7:0a:2d:d2:
53:c7:35:6d:26:4e:f0:48:38:1c:27:af:9a:1e:8b:c6:33:d3:
b7:85:3a:30:40:8a:99:39:ca:7c:cc:6d:96:aa:ad:de:9a:0c:
a6:fe:df:9b:bb:f6:bf:ba:ee:3b:3a:72:50:7f:63:fb:7a:10:
42:d3:b5:c8:58:56:55:54:93:6e:42:71:91:b2:94:67:07:6b:
5a:cd:4a:f8:16:26:64:5c:73:b1:75:e0:f1:97:8b:41:05:47:
73:90:7e:53:d2:f6:c8:ab:5f:6c:5b:0d:ef:83:4f:36:92:89:
f4:e5:cd:6b:7d:61:37:7e:0c:3c:26:78:88:7d:5b:56:8e:08:
cc:32:32:0f:b9:d4:b5:94:d6:e0:5d:21:10:35:f0:4f:13:66:
63:91:90:24:9a:15:79:7e:91:65:07:c3:0a:e6:04:4f:2d:c5:
eb:f5:e8:77:33:a8:35:81:4a:83:fc:84:94:d7:13:58:bd:c8:
f0:73:e7:9b:64:ad:58:04:f4:22:9b:6e:35:c2:90:bc:8a:45:
67:aa:87:df:93:fb:f2:c4:2f:be:92:71:c0:6d:39:26:0d:8a:
b9:42:2f:f4:fb:9d:1a:98:27:ef:00:84:84:68:04:32:69:5e:
0d:8b:45:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijJQaOCVtIhpSJYQX6NyNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODM1NDg2MTk3MzcyOGNlMmJlNTA1ZjcyNzBhNDM2NGQ5
NGU2OTEwHhcNMjUwOTA3MDUwMTAyWhcNMjUwOTA4MDUwMTAyWjAzMTEwLwYDVQQD
Eyg3NDUzY2Q5OWFmMjNiMzI2YWU2Yjk5M2JhZDZjOWY3YzhkNDRlNjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPG+rNx4m4jQxiYnnhlfbXNZycPr
ma25VlvIZt9us91pHTpn6kdFjRmX01SvA+QrKvyY/I43oo91Z8buCa4mA+7yXGRO
PRyQsxqdllpDGxBf8Rjnf96b8U/1G7R3NOl15iG/HKeVOZ2NJxxrG3NBRYilgQ2I
1YxxZMX0cu6QrMDKS2wStc82L9ALLOg4HFU81zh6+eoqYWnvpPXy1yTADSlEsGQG
Bjr8th+DxuyR58pTS48pTchWJNAsdC2q6pMLc02G10IPm4BGgZGG440LoIOa8IWZ
k+C1tLjh32YH33eFNvaVXV0fmLjiH1M9FRbN4GX3fAo1dMoetpKTUdf3TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRTzZmvI7MmrmuZO61sn3yNROZ5MB8GA1UdIwQY
MBaAFCmDVIYZc3KM4r5QX3JwpDZNlOaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hNmRjZjEtOTdmNC00NWFmLWJiNDgt
M2RiNmYwNTcwZDQ4LzEvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9hNmRjZjEtOTdmNC00NWFmLWJiNDgtM2RiNmYwNTcwZDQ4
LzEvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0fUmKia6
tTY5QTh5q2PHCi3SU8c1bSZO8Eg4HCevmh6LxjPTt4U6MECKmTnKfMxtlqqt3poM
pv7fm7v2v7ruOzpyUH9j+3oQQtO1yFhWVVSTbkJxkbKUZwdrWs1K+BYmZFxzsXXg
8ZeLQQVHc5B+U9L2yKtfbFsN74NPNpKJ9OXNa31hN34MPCZ4iH1bVo4IzDIyD7nU
tZTW4F0hEDXwTxNmY5GQJJoVeX6RZQfDCuYETy3F6/XodzOoNYFKg/yElNcTWL3I
8HPnm2StWAT0IptuNcKQvIpFZ6qH35P78sQvvpJxwG05Jg2KuUIv9PudGpgn7wCE
hGgEMmleDYtF3A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:36 2025 by rpki-client