Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
File: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft (raw, json)
Hash identifier: raBzGFF4moVCzRiPVMCdUGtpy3YUfmbeAkTGRGskfxo=
Subject key identifier: AF:84:F5:B5:77:45:EC:3E:53:2A:BA:68:CC:C2:47:EA:59:8D:D9:EE
Authority key identifier: 29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
Certificate issuer: /CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Certificate serial: 01994E1CFB9945DC948C350AC7A6BAFF507A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
Manifest number: 93
Signing time: Mon 15 Sep 2025 16:02:26 +0000
Manifest this update: Mon 15 Sep 2025 16:02:26 +0000
Manifest next update: Tue 16 Sep 2025 16:02:26 +0000
Files and hashes: 1: 1HqQBJhpRaROMHOezXr8-gOHJ-E.roa (hash: qIvuj3HHmRwp3qhT9RCCOv4MPrrW/PDxkYPz1nz2Hdc=)
2: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl (hash: cCczfoSKEccqcA0CuEGboPsFO4iSmEXyTBGsjOFPi2s=)
3: PNqLkZolFE-nbQkO_6muHe9SeaA.roa (hash: Gal/fe+4IR2MPMSFBjUaz/ftVvLiPlkLRd02XNWJeOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:1c:fb:99:45:dc:94:8c:35:0a:c7:a6:ba:ff:50:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Validity
Not Before: Sep 15 16:02:26 2025 GMT
Not After : Sep 16 16:02:26 2025 GMT
Subject: CN=af84f5b57745ec3e532aba68ccc247ea598dd9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:8f:b7:15:d0:18:07:8a:bf:d5:21:55:36:
0b:9a:6c:e0:bc:2f:d0:7f:dd:66:bc:b6:77:3d:96:
e5:9e:ae:2c:86:a4:99:08:c6:2c:c8:4e:7f:97:37:
93:81:4c:c2:5e:d8:03:e9:08:b1:6a:8c:ce:d0:25:
ab:69:48:d0:3f:da:65:78:81:58:1a:ff:22:fd:62:
32:75:50:30:66:21:6f:47:15:d4:6b:85:18:15:b1:
9f:84:90:4c:41:5f:79:1d:0a:f4:3d:6c:dd:9f:7f:
28:f7:23:c9:d2:e6:a3:59:95:b4:fc:c9:4d:de:61:
96:a3:a3:4a:31:01:ee:c0:ec:08:df:bd:8f:ac:96:
28:e6:ef:4e:6b:03:68:35:7d:7a:d9:9b:b0:9a:b1:
cf:4a:61:3f:e5:34:e6:eb:06:89:0b:23:e6:0c:42:
90:78:4a:7f:61:7b:17:8a:93:b6:e2:2b:af:e3:bb:
b3:16:8a:26:eb:b2:26:fc:d5:8f:f8:0c:e4:4b:f3:
f7:95:f9:fe:b6:d0:0b:c0:8a:bd:bf:1c:66:ad:ef:
05:d1:ba:f5:31:a9:52:0a:fc:7a:8c:cf:63:98:0f:
ad:b7:70:f4:ae:0b:84:51:3d:4d:db:62:ed:ff:6b:
fe:92:92:13:d9:58:e3:71:41:98:3a:4e:30:a3:3e:
37:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:84:F5:B5:77:45:EC:3E:53:2A:BA:68:CC:C2:47:EA:59:8D:D9:EE
X509v3 Authority Key Identifier:
keyid:29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:57:86:3e:b1:97:d7:db:70:43:82:57:a2:ab:92:fc:ec:43:
65:5a:52:24:4d:64:d5:c4:e3:4a:84:4f:fc:bd:84:03:71:66:
48:2d:52:4d:f8:b3:dd:2d:86:e5:0f:b1:4f:35:95:4e:01:6b:
80:75:9a:dc:b6:9c:b1:bc:ac:a4:6b:52:a4:8b:bc:b5:2f:d8:
e6:dd:21:8a:9f:22:e2:04:1e:e0:30:fa:35:05:b4:ae:b6:ab:
30:d6:c3:d6:b1:4e:85:c4:92:47:87:d8:4a:a4:dd:c7:cc:a9:
d6:01:42:ed:b2:22:3f:a3:8f:1e:98:52:8a:42:40:11:af:ee:
d8:5a:7b:16:94:2d:7d:ff:e7:98:85:5b:2c:8b:43:97:9b:47:
1d:ed:21:16:b9:90:84:14:34:0a:52:11:ef:65:06:48:7c:8c:
e0:2b:29:56:43:e7:ba:1d:f5:c6:42:63:bc:89:da:4f:f3:db:
c2:06:eb:98:3b:16:09:e8:32:63:3a:73:8e:3f:06:d6:ca:d5:
c5:f9:b4:36:7f:44:95:26:5f:9b:2a:96:b6:da:c9:69:69:5a:
88:7c:e5:4f:71:01:4e:f0:e5:79:26:f7:bf:34:ad:f7:91:92:
aa:61:d3:fb:42:d4:3e:94:4f:bc:ec:19:aa:91:e2:f8:4d:46:
ce:11:5d:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlOHPuZRdyUjDUKx6a6/1B6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NzY2ZDFhZTZlYjIxODQ5YmMzYTNiMmQxOGU4NjNkMjcz
ZDI0MDQwHhcNMjUwOTE1MTYwMjI2WhcNMjUwOTE2MTYwMjI2WjAzMTEwLwYDVQQD
EyhhZjg0ZjViNTc3NDVlYzNlNTMyYWJhNjhjY2MyNDdlYTU5OGRkOWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru6PtxXQGAeKv9UhVTYLmmzgvC/Q
f91mvLZ3PZblnq4shqSZCMYsyE5/lzeTgUzCXtgD6QixaozO0CWraUjQP9pleIFY
Gv8i/WIydVAwZiFvRxXUa4UYFbGfhJBMQV95HQr0PWzdn38o9yPJ0uajWZW0/MlN
3mGWo6NKMQHuwOwI372PrJYo5u9OawNoNX162ZuwmrHPSmE/5TTm6waJCyPmDEKQ
eEp/YXsXipO24iuv47uzFoom67Im/NWP+AzkS/P3lfn+ttALwIq9vxxmre8F0br1
MalSCvx6jM9jmA+tt3D0rguEUT1N22Lt/2v+kpIT2VjjcUGYOk4woz435QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+E9bV3Rew+Uyq6aMzCR+pZjdnuMB8GA1UdIwQY
MBaAFCl2bRrm6yGEm8OjstGOhj0nPSQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNzExZmItZTU4NC00ZjM1LWEwZWMt
MTE1ZDY4ZDliODFiLzEvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iNzExZmItZTU4NC00ZjM1LWEwZWMtMTE1ZDY4ZDliODFi
LzEvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1eGPrGX
19twQ4JXoquS/OxDZVpSJE1k1cTjSoRP/L2EA3FmSC1STfiz3S2G5Q+xTzWVTgFr
gHWa3LacsbyspGtSpIu8tS/Y5t0hip8i4gQe4DD6NQW0rrarMNbD1rFOhcSSR4fY
SqTdx8yp1gFC7bIiP6OPHphSikJAEa/u2Fp7FpQtff/nmIVbLItDl5tHHe0hFrmQ
hBQ0ClIR72UGSHyM4CspVkPnuh31xkJjvInaT/PbwgbrmDsWCegyYzpzjj8G1srV
xfm0Nn9ElSZfmyqWttrJaWlaiHzlT3EBTvDleSb3vzSt95GSqmHT+0LUPpRPvOwZ
qpHi+E1GzhFdrQ==
-----END CERTIFICATE-----
Generated at Mon Sep 15 18:35:31 2025 by rpki-client