Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
File: rs1kyXg317-sBmN92VK97eDCXYU.mft (raw, json)
Hash identifier: c4zKZsZBdZjUOV9M++aft5pfZviogJG6IPX+XYSEO3k=
Subject key identifier: 22:B3:6D:40:D8:37:98:7B:A4:19:18:D1:43:6D:28:3E:3C:FC:34:C4
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 01993B39823668B8B94E627D07FAB71FE395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
Manifest number: 0F9C
Signing time: Fri 12 Sep 2025 00:00:48 +0000
Manifest this update: Fri 12 Sep 2025 00:00:48 +0000
Manifest next update: Sat 13 Sep 2025 00:00:48 +0000
Files and hashes: 1: 1-T8CKegBPOvx5rZQQVTHJ11NZfg.roa (hash: oTgrbLpJLd4bRqFVMFFivKpiZVrk/3YZuKNsOWKM6jM=)
2: 17xOhQoyIYZB59OnKrsT-dwllSw.roa (hash: KCMu12vyicYfkSRRUkeo8o3fEfjAYF/JgjW23i3oXrg=)
3: FsSFEoZYb3Nl-hkkgjVPUd2IvDA.roa (hash: Fqkp/m22ufWmmjenywmk6qhO70aCJ2/zGhbzol+bOEg=)
4: Umj2rbjqE8HIV-ruGeVeqZYwg9s.roa (hash: /89yG0WnFcE05IMFp3mM3/qP9TrscwAHv2Gfhcc6Cj0=)
5: rs1kyXg317-sBmN92VK97eDCXYU.crl (hash: 6sNX/yRxUSR6vprdZam3K4nBJKNBK2IoMh7jhzHheKs=)
6: sZB9qJRdylpTdvF1XtaqqpNl-OY.roa (hash: lRBjFzzRtx2AcctUxGDd+P1zYD8sp2IpXYC35kAzyFQ=)
7: vxhTN1By4lMiNMyOzxGwyr7QhR4.roa (hash: Ifos+E1fPLCwRcBMt2WCu8lSioPDUu6uUrn5J7VTK/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 23:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3b:39:82:36:68:b8:b9:4e:62:7d:07:fa:b7:1f:e3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Sep 12 00:00:48 2025 GMT
Not After : Sep 13 00:00:48 2025 GMT
Subject: CN=22b36d40d837987ba41918d1436d283e3cfc34c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:2c:4f:4b:8d:d2:07:30:30:a8:4b:c3:a7:43:
af:59:76:09:39:d8:c3:bb:34:af:06:c5:6c:30:07:
85:ba:cf:46:80:9a:9b:cb:c1:52:cf:61:bc:58:05:
d0:12:b9:87:72:f8:2c:91:a7:00:ac:b4:f6:51:6f:
3f:5e:ac:65:50:e8:3f:a6:21:80:9a:df:ba:00:7f:
45:f6:56:52:8d:15:f1:dc:9e:06:22:84:95:d7:03:
00:bf:77:04:a2:2e:10:df:3b:e0:b0:6f:e6:fd:95:
78:60:bd:57:75:0b:00:c3:c0:77:3d:a8:b1:35:86:
5c:3b:f9:62:6e:b4:e3:f9:50:fc:9a:44:9f:bc:73:
98:8b:25:1a:33:98:2f:09:b8:2c:46:19:49:57:92:
4e:2f:48:1f:dc:57:d6:d0:70:a8:cf:a6:ec:e5:10:
84:66:bd:18:78:7c:f2:e0:71:01:ec:09:ed:8a:f3:
cd:cd:d4:48:e9:9d:fd:51:21:e7:5a:cf:56:71:07:
71:86:76:f0:66:d9:c1:be:fb:5b:ee:ad:96:63:d6:
c8:c3:13:a7:61:be:0d:dc:81:60:9d:be:7f:ea:fe:
4c:ac:0f:87:29:87:47:85:e0:99:2e:49:d0:fb:a9:
33:d3:44:cf:72:7d:af:64:e9:0f:ec:a3:b8:eb:7d:
b4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B3:6D:40:D8:37:98:7B:A4:19:18:D1:43:6D:28:3E:3C:FC:34:C4
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6d:68:04:b6:e0:5b:3b:19:6c:4c:f7:1f:f1:22:2a:e3:4f:
dd:c8:0e:d2:27:25:ec:fe:cd:d8:56:78:35:59:42:ea:77:0f:
ac:ee:72:18:4c:eb:49:f9:97:e9:d7:2e:c2:4b:08:5f:91:7c:
72:42:52:6a:c6:38:98:2f:41:f0:8d:26:28:c7:69:51:5c:55:
d3:ec:0e:81:12:bf:8f:fd:84:36:ab:88:9e:80:ba:b7:b2:d1:
c7:f9:fa:0b:d6:a8:da:1c:8e:8c:a5:dc:d3:ce:75:89:e4:68:
a5:fe:0c:71:09:b9:c3:20:ed:54:00:d4:d7:f7:64:0b:92:3b:
e8:6f:7a:51:27:18:2d:b9:64:9a:ac:51:0d:c6:a3:ea:6b:c3:
b4:54:19:6a:09:ec:47:36:35:41:87:14:c7:6a:8f:e5:49:99:
b9:a0:33:35:96:eb:a3:c0:40:2b:b7:52:25:f7:ba:4b:5c:c8:
ef:7b:6a:8b:a7:8f:17:0b:04:6a:6a:77:8b:81:da:5b:1a:46:
56:9b:a0:e3:a8:c5:5a:75:64:f2:f9:a6:99:18:71:1c:13:a0:
f7:bb:6b:66:33:09:e6:b0:7b:3a:bd:60:da:1a:87:dd:a8:8d:
ef:58:e0:79:45:36:a9:27:78:f2:c3:2a:ab:4d:87:66:9f:1a:
c5:8a:90:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk7OYI2aLi5TmJ9B/q3H+OVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlY2Q2NGM5NzgzN2Q3YmZhYzA2NjM3ZGQ5NTJiZGVkZTBj
MjVkODUwHhcNMjUwOTEyMDAwMDQ4WhcNMjUwOTEzMDAwMDQ4WjAzMTEwLwYDVQQD
EygyMmIzNmQ0MGQ4Mzc5ODdiYTQxOTE4ZDE0MzZkMjgzZTNjZmMzNGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/CxPS43SBzAwqEvDp0OvWXYJOdjD
uzSvBsVsMAeFus9GgJqby8FSz2G8WAXQErmHcvgskacArLT2UW8/XqxlUOg/piGA
mt+6AH9F9lZSjRXx3J4GIoSV1wMAv3cEoi4Q3zvgsG/m/ZV4YL1XdQsAw8B3Paix
NYZcO/librTj+VD8mkSfvHOYiyUaM5gvCbgsRhlJV5JOL0gf3FfW0HCoz6bs5RCE
Zr0YeHzy4HEB7AntivPNzdRI6Z39USHnWs9WcQdxhnbwZtnBvvtb7q2WY9bIwxOn
Yb4N3IFgnb5/6v5MrA+HKYdHheCZLknQ+6kz00TPcn2vZOkP7KO46320nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKzbUDYN5h7pBkY0UNtKD48/DTEMB8GA1UdIwQY
MBaAFK7NZMl4N9e/rAZjfdlSve3gwl2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnMxa3lYZzMxNy1zQm1OOTJWSzk3ZURDWFlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81OTJkNGYtZDcxZS00ZThiLWE2MzIt
MWVjZGUxNzkxNTExLzEvcnMxa3lYZzMxNy1zQm1OOTJWSzk3ZURDWFlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi81OTJkNGYtZDcxZS00ZThiLWE2MzItMWVjZGUxNzkxNTEx
LzEvcnMxa3lYZzMxNy1zQm1OOTJWSzk3ZURDWFlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANG1oBLbg
WzsZbEz3H/EiKuNP3cgO0icl7P7N2FZ4NVlC6ncPrO5yGEzrSfmX6dcuwksIX5F8
ckJSasY4mC9B8I0mKMdpUVxV0+wOgRK/j/2ENquInoC6t7LRx/n6C9ao2hyOjKXc
0851ieRopf4McQm5wyDtVADU1/dkC5I76G96UScYLblkmqxRDcaj6mvDtFQZagns
RzY1QYcUx2qP5UmZuaAzNZbro8BAK7dSJfe6S1zI73tqi6ePFwsEamp3i4HaWxpG
Vpug46jFWnVk8vmmmRhxHBOg97trZjMJ5rB7Or1g2hqH3aiN71jgeUU2qSd48sMq
q02HZp8axYqQRg==
-----END CERTIFICATE-----
Generated at Fri Sep 12 07:15:15 2025 by rpki-client