Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
File: kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json)
Hash identifier: TF+w0ApHJhrvIM8XQzL9G1qVC2ujbTiNAG4fBunfmMg=
Subject key identifier: 41:D8:FC:8E:F8:DD:8C:6B:1B:10:47:7F:34:0A:10:A6:14:46:3E:38
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial: 019933495F8C4C38EFA68D9DAE922C3DE3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
Manifest number: 167E
Signing time: Wed 10 Sep 2025 11:01:10 +0000
Manifest this update: Wed 10 Sep 2025 11:01:10 +0000
Manifest next update: Thu 11 Sep 2025 11:01:10 +0000
Files and hashes: 1: 9kHCDEYZPWH5aik7KavJ0sDUmNA.roa (hash: ijJR9ND92QYljIrNDlxEINq6c8DaInEaO2V/WhuFgzU=)
2: Mdtn2WNSBNsE9Aa9ivpouspTZzc.roa (hash: S9ae068y1S4PtOCQAT0sFXCH1rFhFv4f3zsh6JDJIEk=)
3: ZgG20-53jQJwsyA9Uj-HDlUNiyA.roa (hash: r4Yw7FV6MragLYSnWbxNhJIL4Bz5tpt7zooYhdKRX2U=)
4: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: c6+xZIG+RK+ONeDlOeoKXR0grtFd1bSzp9woQ9wfqjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:49:5f:8c:4c:38:ef:a6:8d:9d:ae:92:2c:3d:e3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
Validity
Not Before: Sep 10 11:01:10 2025 GMT
Not After : Sep 11 11:01:10 2025 GMT
Subject: CN=41d8fc8ef8dd8c6b1b10477f340a10a614463e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1d:13:23:28:e2:86:3a:3d:2d:b0:1f:ec:0e:
68:55:f4:8a:db:8f:4a:b9:c3:bf:72:52:c6:46:26:
de:b5:0f:91:1d:04:75:f0:69:8c:c4:5c:75:75:4e:
24:4d:93:02:cc:f3:2d:bd:28:dd:66:66:4d:f3:0d:
2e:29:59:4b:9d:3d:e7:af:da:af:45:4c:12:11:f9:
2d:ed:66:f9:07:72:69:71:4b:52:be:44:97:f8:0c:
3e:cc:21:86:b1:16:cf:9c:f4:f8:00:24:64:ad:68:
21:70:6e:22:45:a8:49:d0:69:1e:c7:9f:02:c4:4f:
b5:48:72:be:aa:97:cd:18:3a:94:07:c7:d9:40:e4:
7e:27:2d:d3:6a:73:19:d4:f3:d3:f4:8e:ad:9a:63:
5d:b5:8f:b0:ad:76:1f:91:c1:f0:0e:74:d7:12:09:
34:c0:b4:cc:ad:3c:e7:19:40:fe:b8:20:a6:fb:6c:
87:dd:88:10:22:e2:f4:c9:3e:c6:28:47:d1:a2:8d:
b1:ff:fe:8e:48:82:d2:00:ef:7b:a7:9a:1d:66:12:
f9:19:97:7c:15:14:a4:3b:98:d4:72:32:a6:27:b1:
da:0a:1a:0f:f4:80:ef:ce:5b:c6:03:b6:eb:dd:11:
c4:bb:64:42:0d:f6:ab:6f:29:29:4c:4f:3d:ac:7c:
9c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D8:FC:8E:F8:DD:8C:6B:1B:10:47:7F:34:0A:10:A6:14:46:3E:38
X509v3 Authority Key Identifier:
keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:cf:2a:91:9c:e6:9f:59:37:8a:e5:d2:1f:65:c6:10:ef:12:
38:bc:69:b8:3c:cb:34:8a:19:4d:e0:f3:c8:7f:1a:ac:35:f1:
f7:89:78:1f:ab:3c:f4:e6:22:b4:5b:3f:db:0b:62:fa:4a:08:
61:0c:54:61:d1:02:bc:a3:e3:a7:ca:d5:c6:43:8a:17:eb:c8:
9b:e1:3d:b5:70:0d:0e:d8:18:7e:0f:da:21:46:77:bf:3f:e5:
ae:a3:b1:c5:2b:5c:f4:cf:e6:ac:fc:9b:74:80:76:c6:e0:de:
ff:8e:5f:e0:77:d5:ac:32:0a:d9:1b:4b:f4:44:ad:8e:cf:9e:
1f:ab:d7:41:c3:02:21:67:aa:b4:b7:d8:c2:d7:f3:65:0e:2b:
40:33:8b:b1:95:8e:de:ed:4e:96:de:10:32:86:d1:3a:80:91:
70:aa:b0:21:8a:13:39:5c:93:ff:59:11:97:58:bd:24:bb:65:
94:66:3f:54:6a:b1:62:71:3a:88:af:56:7d:bc:e8:45:0f:ed:
c2:09:ae:d3:52:32:fd:d4:b4:d0:77:a4:14:af:f9:e5:94:f2:
0c:bf:75:58:35:d1:76:f9:3a:92:eb:95:b4:9e:c8:1c:f9:1f:
ee:bc:b4:f0:5d:e2:ba:99:56:84:78:c7:74:b4:98:f1:19:36:
3e:96:bb:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzSV+MTDjvpo2drpIsPeO6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyM2EyYjNkZDc2NjcyNzVmMDk4ODZkZjdkYTA3OWY3NTVj
ZWVkNTkwHhcNMjUwOTEwMTEwMTEwWhcNMjUwOTExMTEwMTEwWjAzMTEwLwYDVQQD
Eyg0MWQ4ZmM4ZWY4ZGQ4YzZiMWIxMDQ3N2YzNDBhMTBhNjE0NDYzZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR0TIyjihjo9LbAf7A5oVfSK249K
ucO/clLGRibetQ+RHQR18GmMxFx1dU4kTZMCzPMtvSjdZmZN8w0uKVlLnT3nr9qv
RUwSEfkt7Wb5B3JpcUtSvkSX+Aw+zCGGsRbPnPT4ACRkrWghcG4iRahJ0Gkex58C
xE+1SHK+qpfNGDqUB8fZQOR+Jy3TanMZ1PPT9I6tmmNdtY+wrXYfkcHwDnTXEgk0
wLTMrTznGUD+uCCm+2yH3YgQIuL0yT7GKEfRoo2x//6OSILSAO97p5odZhL5GZd8
FRSkO5jUcjKmJ7HaChoP9IDvzlvGA7br3RHEu2RCDfarbykpTE89rHycXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHY/I743YxrGxBHfzQKEKYURj44MB8GA1UdIwQY
MBaAFJI6Kz3XZnJ18JiG332gefdVzu1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iNzk2ZjQtMmU4OC00ZWFhLWEyNjkt
MjczOGJjYjQzZDZkLzEva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iNzk2ZjQtMmU4OC00ZWFhLWEyNjktMjczOGJjYjQzZDZk
LzEva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXs8qkZzm
n1k3iuXSH2XGEO8SOLxpuDzLNIoZTeDzyH8arDXx94l4H6s89OYitFs/2wti+koI
YQxUYdECvKPjp8rVxkOKF+vIm+E9tXANDtgYfg/aIUZ3vz/lrqOxxStc9M/mrPyb
dIB2xuDe/45f4HfVrDIK2RtL9EStjs+eH6vXQcMCIWeqtLfYwtfzZQ4rQDOLsZWO
3u1Olt4QMobROoCRcKqwIYoTOVyT/1kRl1i9JLtllGY/VGqxYnE6iK9WfbzoRQ/t
wgmu01Iy/dS00HekFK/55ZTyDL91WDXRdvk6kuuVtJ7IHPkf7ry08F3iuplWhHjH
dLSY8Rk2Ppa7YQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 12:36:57 2025 by rpki-client