Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json)
Hash identifier: AS/kz6s53NIhHLxbH8p45oRHveft33vusBBEAHnRnBg=
Subject key identifier: 25:A3:54:45:79:99:F7:95:2F:C4:01:8B:FE:C5:41:F3:D4:10:55:99
Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Certificate serial: 019922C3291D6CA12C38EEB1D9C0BC692D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
Manifest number: 1677
Signing time: Sun 07 Sep 2025 06:00:39 +0000
Manifest this update: Sun 07 Sep 2025 06:00:39 +0000
Manifest next update: Mon 08 Sep 2025 06:00:39 +0000
Files and hashes: 1: 0-pROOQXTsOCMh82qmUXoNFs4FE.roa (hash: 0vaU6zj0/sOrHvzQbJoSj9Sg3MRWFQ3zNRXZe2vIoxM=)
2: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: dNAIKgd/uG0rgI3bORGO5tX5IsZuRpIzB9QIl3eHyPA=)
3: 2Cx8NesV2FgXdhnelF2G7i5Bybw.roa (hash: 8z2f0ixyt/V0YgUez4ATct6QO89AWHzLa+ZNoGbwCzI=)
4: 8YGP0hkU08CaSTjLusnYfNoY0P4.roa (hash: jWZuJOzMx9s5Np/gPv2mn1+ybL0gZ2yjh5jQEUREZ9U=)
5: MQiGNWbAlQR27bMbQEHKZB--EhI.roa (hash: AiFihDDBAGIMVUfPOtlJJbKjEh0jiKhW/hNN55RabQ0=)
6: g4GRCAwu2q3EL-X1WL9RVrJbAQI.roa (hash: slCTgIDY8YfOpbaBmeIbIqftrjDIQWNh6XUk0mKIj7o=)
7: i6OZnwSC6Nlsenhf0tdXitkE5-w.roa (hash: W6vwLHJCt+ThAPP53KTcgutvWVLILu8jqOoeNXpZV58=)
8: nFpp1sOKP4UepGIUoHswLN2IbRI.roa (hash: Ttm+Uf2laDwHJ/wFsX6jTAwI0vmckT+FtwvtYdaFusE=)
9: vYCLX9lBA7ZtzSrFDp94A_tt6ys.roa (hash: YmvWA4cqMB8VZpWwYryqd/wK/81/N7wIyQFXaVwROW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:29:1d:6c:a1:2c:38:ee:b1:d9:c0:bc:69:2d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Validity
Not Before: Sep 7 06:00:39 2025 GMT
Not After : Sep 8 06:00:39 2025 GMT
Subject: CN=25a354457999f7952fc4018bfec541f3d4105599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:5f:0b:33:cc:a0:b5:4f:d8:1b:28:0f:6a:
0f:84:84:e8:a3:95:ef:86:96:f5:a6:bc:5c:c7:af:
a4:9b:0f:1e:ad:80:13:81:36:5c:f8:3e:94:67:63:
04:41:80:84:01:63:6a:06:02:31:f8:64:b2:d9:1a:
56:10:ac:9c:0c:ca:fc:74:5d:fc:be:21:6b:29:00:
bc:93:fb:b1:8e:16:1c:76:60:78:e1:f8:40:5a:6b:
ca:bc:21:0b:e4:35:a6:b7:9e:d7:92:c7:5f:cb:eb:
4e:c0:e6:a2:65:72:0b:c6:fe:43:aa:7f:40:51:c7:
b1:41:91:bc:02:dc:1c:ab:3f:52:e6:2a:74:6a:d3:
cf:ac:ed:81:92:1c:f1:f1:f1:c0:54:f3:5e:76:07:
81:74:50:10:1b:6a:1d:4f:bb:ec:a8:cc:db:5d:36:
06:93:9b:02:c6:2d:65:1b:09:86:1a:9e:f0:65:85:
76:ea:c5:0d:1b:d3:0e:d0:a8:26:9e:9f:3c:96:50:
bd:64:43:5c:51:85:b4:f4:ce:dd:36:83:9b:9b:a0:
26:63:70:39:18:61:f7:f9:df:fd:f6:fc:ce:25:17:
07:27:ad:8d:8a:7f:27:45:8c:3e:ae:b2:bd:af:73:
75:9e:27:19:e5:b7:b9:5c:25:b5:81:dc:dc:78:3d:
71:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A3:54:45:79:99:F7:95:2F:C4:01:8B:FE:C5:41:F3:D4:10:55:99
X509v3 Authority Key Identifier:
keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ef:dd:79:a2:65:de:f1:24:ae:fd:30:bf:ae:57:ac:e5:21:
aa:d3:d3:64:77:7d:31:a8:b6:c8:53:b8:3c:61:f1:77:2a:e4:
46:b7:05:e9:cd:98:af:67:54:0e:ce:49:f0:aa:7c:75:24:a3:
0d:41:7f:0c:dd:f6:19:69:78:d7:d0:63:42:fa:4e:a8:aa:41:
67:0b:fb:0c:12:9d:f6:4d:dd:64:3c:a9:41:1e:51:b7:47:e3:
1e:2d:a0:26:0b:e2:90:da:23:fb:e5:4c:5d:a7:d5:69:67:73:
9d:07:b8:e7:66:71:08:ec:9e:93:15:39:13:7f:72:5a:cc:5e:
d1:be:f4:8f:04:6d:88:5a:5e:e1:0d:3e:2a:ca:0f:96:e4:f5:
c3:40:94:5f:70:21:57:21:d6:59:13:e8:2f:ec:3f:d2:b2:93:
2f:e3:81:65:cd:98:d9:1e:9d:82:8f:32:3e:54:8e:a8:a7:20:
b1:17:1c:d3:11:43:9c:e8:dd:96:96:1e:0a:1b:69:0a:96:bd:
98:b5:33:17:8f:a3:e8:fd:57:e0:ed:b5:a1:f3:da:c2:6a:dd:
00:47:7a:64:d4:e0:8b:1f:30:2b:8e:f8:a8:8b:1b:5c:85:fe:
d6:d2:5c:64:a2:24:22:8e:17:77:3f:ce:bf:59:0b:84:66:0a:
e1:16:af:4f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZkiwykdbKEsOO6x2cC8aS2KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl
YzEwNWUwHhcNMjUwOTA3MDYwMDM5WhcNMjUwOTA4MDYwMDM5WjAzMTEwLwYDVQQD
EygyNWEzNTQ0NTc5OTlmNzk1MmZjNDAxOGJmZWM1NDFmM2Q0MTA1NTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8NfCzPMoLVP2BsoD2oPhIToo5Xv
hpb1prxcx6+kmw8erYATgTZc+D6UZ2MEQYCEAWNqBgIx+GSy2RpWEKycDMr8dF38
viFrKQC8k/uxjhYcdmB44fhAWmvKvCEL5DWmt57Xksdfy+tOwOaiZXILxv5Dqn9A
UcexQZG8Atwcqz9S5ip0atPPrO2Bkhzx8fHAVPNedgeBdFAQG2odT7vsqMzbXTYG
k5sCxi1lGwmGGp7wZYV26sUNG9MO0Kgmnp88llC9ZENcUYW09M7dNoObm6AmY3A5
GGH3+d/99vzOJRcHJ62Nin8nRYw+rrK9r3N1nicZ5be5XCW1gdzceD1xowIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCWjVEV5mfeVL8QBi/7FQfPUEFWZMB8GA1UdIwQY
MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1
LTM4MjM1NWZjMmZmMS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQ1LzY0YWI5OS00OWFhLTRhYWUtOGRkNS0zODIzNTVmYzJm
ZjEvMS8xLUtsbVprN0pidHZSTG82QzZVQ191ZnJzRUY0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAae/d
eaJl3vEkrv0wv65XrOUhqtPTZHd9Mai2yFO4PGHxdyrkRrcF6c2Yr2dUDs5J8Kp8
dSSjDUF/DN32GWl419BjQvpOqKpBZwv7DBKd9k3dZDypQR5Rt0fjHi2gJgvikNoj
++VMXafVaWdznQe452ZxCOyekxU5E39yWsxe0b70jwRtiFpe4Q0+KsoPluT1w0CU
X3AhVyHWWRPoL+w/0rKTL+OBZc2Y2R6dgo8yPlSOqKcgsRcc0xFDnOjdlpYeChtp
Cpa9mLUzF4+j6P1X4O21ofPawmrdAEd6ZNTgix8wK474qIsbXIX+1tJcZKIkIo4X
dz/Ov1kLhGYK4RavTw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:31:38 2025 by rpki-client