Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
File: kKBl7vQNwBahvn8o1uZsp6h-f-U.mft (raw, json)
Hash identifier: iihXx6pFmPzFAXjSYJutEZrZotAU5SlfkW3+jGKLBco=
Subject key identifier: F8:72:70:05:75:58:E5:48:FF:77:60:BD:E5:48:42:34:FE:9B:91:DF
Authority key identifier: 90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
Certificate issuer: /CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Certificate serial: 019922C3769B60F425484B9E1F156F86E7C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 06:00:59 +0000
Manifest this update: Sun 07 Sep 2025 06:00:59 +0000
Manifest next update: Mon 08 Sep 2025 06:00:59 +0000
Files and hashes: 1: FXtyRxy310ujzM3-FcQZ1xIE8BM.roa (hash: sjb/b0eSiH//cLJ9qvCys98Peom21sTpufoCnNtl4os=)
2: kKBl7vQNwBahvn8o1uZsp6h-f-U.crl (hash: WL7Tf1LkjNmyoWt7568S0roMWyO5lq+TfgFziJeqwZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:76:9b:60:f4:25:48:4b:9e:1f:15:6f:86:e7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Validity
Not Before: Sep 7 06:00:59 2025 GMT
Not After : Sep 8 06:00:59 2025 GMT
Subject: CN=f87270057558e548ff7760bde5484234fe9b91df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:9c:bc:37:06:21:4a:91:3e:58:89:96:fa:
70:71:0b:ad:8c:c6:45:ad:14:f0:de:67:03:89:f1:
87:8e:be:8b:3e:60:6f:08:b2:ec:88:ac:20:4c:ad:
a0:fb:b1:15:5d:7c:99:47:5a:78:71:ab:ce:f9:5d:
f0:e8:89:08:7d:98:5d:11:be:ae:90:e2:50:a9:64:
35:ad:a8:d4:19:62:35:d3:77:be:1e:e3:3b:45:63:
51:36:a5:22:e0:4a:59:0a:b2:1e:16:07:92:b8:25:
94:bd:06:4e:94:29:ae:4b:f8:22:eb:81:d1:9b:45:
97:da:4e:d7:cb:04:2a:ef:87:c6:20:3a:19:64:c7:
1b:49:ce:5e:31:aa:eb:58:b4:83:c1:3b:22:07:a3:
59:f3:55:5c:6a:ba:a0:a5:27:07:04:cf:df:14:da:
c8:dd:0b:ad:cf:1a:f6:9f:c0:c6:24:88:d7:6b:3c:
f9:2b:aa:d4:2a:e0:64:64:9a:48:b4:a5:e1:06:8c:
3e:2d:a1:d7:4b:e6:b2:54:19:7b:d1:04:77:e7:cd:
72:f3:bd:d1:5f:83:86:45:b5:26:6a:88:04:d0:85:
63:87:39:34:21:fa:94:b2:a5:0f:e5:64:97:62:35:
e2:ca:3b:96:44:0b:62:b6:da:d0:43:f2:5e:bf:80:
06:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:72:70:05:75:58:E5:48:FF:77:60:BD:E5:48:42:34:FE:9B:91:DF
X509v3 Authority Key Identifier:
keyid:90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f5:07:d8:32:30:5a:e4:0a:f7:43:a3:b7:c4:53:1e:41:fd:
43:f4:f3:4d:cc:91:2a:79:67:03:2f:34:19:93:d1:a2:df:9d:
80:8b:56:44:9b:d1:90:5f:ab:d4:2d:19:31:76:89:0d:cc:98:
21:e8:fb:28:8d:a4:e0:2c:24:51:3d:da:3d:00:57:61:39:7b:
8a:fd:6c:b4:b5:d6:05:a9:ff:04:95:24:23:04:70:0c:72:4d:
88:ca:94:a6:be:ae:f8:54:7d:a8:50:94:5e:48:f1:a8:3f:eb:
24:49:2f:7c:f0:88:f3:dd:7c:24:e0:b4:eb:63:7e:e9:88:20:
66:1d:fc:29:d4:6a:52:37:c1:77:76:6d:34:4b:f9:e7:57:bc:
47:e9:00:5e:21:d9:91:49:6d:7d:37:cc:9a:d8:1a:ce:01:e6:
95:83:5d:e4:9a:ac:c8:7d:3f:0d:f6:0b:14:a7:bf:f5:20:0c:
e1:60:30:9e:fd:ae:92:24:7f:ad:1c:37:8e:f1:19:42:f7:70:
7f:a5:f9:e6:82:be:a9:ab:96:b9:96:e8:11:67:70:67:49:3c:
6e:d0:de:79:46:6f:18:e5:5e:f2:37:c7:3f:60:f9:db:6f:1d:
e7:cc:28:d2:3d:d2:a8:d9:e7:a5:31:08:57:7d:cb:a6:bc:20:
9d:9b:5a:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw3abYPQlSEueHxVvhufJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYTA2NWVlZjQwZGMwMTZhMWJlN2YyOGQ2ZTY2Y2E3YTg3
ZTdmZTUwHhcNMjUwOTA3MDYwMDU5WhcNMjUwOTA4MDYwMDU5WjAzMTEwLwYDVQQD
EyhmODcyNzAwNTc1NThlNTQ4ZmY3NzYwYmRlNTQ4NDIzNGZlOWI5MWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUicvDcGIUqRPliJlvpwcQutjMZF
rRTw3mcDifGHjr6LPmBvCLLsiKwgTK2g+7EVXXyZR1p4cavO+V3w6IkIfZhdEb6u
kOJQqWQ1rajUGWI103e+HuM7RWNRNqUi4EpZCrIeFgeSuCWUvQZOlCmuS/gi64HR
m0WX2k7XywQq74fGIDoZZMcbSc5eMarrWLSDwTsiB6NZ81VcarqgpScHBM/fFNrI
3Qutzxr2n8DGJIjXazz5K6rUKuBkZJpItKXhBow+LaHXS+ayVBl70QR3581y873R
X4OGRbUmaogE0IVjhzk0IfqUsqUP5WSXYjXiyjuWRAtittrQQ/Jev4AGoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhycAV1WOVI/3dgveVIQjT+m5HfMB8GA1UdIwQY
MBaAFJCgZe70DcAWob5/KNbmbKeofn/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0tCbDd2UU53QmFodm44bzF1WnNwNmgtZi1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS83NjhhYTItMGI0NC00Y2Y0LWI5ODQt
OTI0Y2RmMjc2ZDhkLzEva0tCbDd2UU53QmFodm44bzF1WnNwNmgtZi1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS83NjhhYTItMGI0NC00Y2Y0LWI5ODQtOTI0Y2RmMjc2ZDhk
LzEva0tCbDd2UU53QmFodm44bzF1WnNwNmgtZi1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmPUH2DIw
WuQK90Ojt8RTHkH9Q/TzTcyRKnlnAy80GZPRot+dgItWRJvRkF+r1C0ZMXaJDcyY
Iej7KI2k4CwkUT3aPQBXYTl7iv1stLXWBan/BJUkIwRwDHJNiMqUpr6u+FR9qFCU
XkjxqD/rJEkvfPCI8918JOC062N+6YggZh38KdRqUjfBd3ZtNEv551e8R+kAXiHZ
kUltfTfMmtgazgHmlYNd5JqsyH0/DfYLFKe/9SAM4WAwnv2ukiR/rRw3jvEZQvdw
f6X55oK+qauWuZboEWdwZ0k8btDeeUZvGOVe8jfHP2D5228d58wo0j3SqNnnpTEI
V33LprwgnZtaUQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:16 2025 by rpki-client