Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
File: kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft (raw, json)
Hash identifier: DTKywOCJQIqYC0tBfAvTeV8qg2i+Zhq6pBY1v8eWN2I=
Subject key identifier: 9A:64:77:E1:F9:74:A1:92:2C:A5:C8:E1:0F:F4:D0:AC:A9:01:68:F5
Authority key identifier: 92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6
Certificate issuer: /CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
Certificate serial: 0198C9B813D8C96FC1E11C6FE5FCDE9F8EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
Manifest number: 0133
Signing time: Wed 20 Aug 2025 23:02:20 +0000
Manifest this update: Wed 20 Aug 2025 23:02:20 +0000
Manifest next update: Thu 21 Aug 2025 23:02:20 +0000
Files and hashes: 1: 1-7F7uRrzkG49KON0y5p0a13vs8Q.roa (hash: kEJxDITGpSCiq2yfNEGAfr3dH9UBq24wh61zctycgJ0=)
2: kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl (hash: kbtNrWCU6/FcA7r9BQQCT5+CsaiQarcaq1SMAOs1XT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:b8:13:d8:c9:6f:c1:e1:1c:6f:e5:fc:de:9f:8e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
Validity
Not Before: Aug 20 23:02:20 2025 GMT
Not After : Aug 21 23:02:20 2025 GMT
Subject: CN=9a6477e1f974a1922ca5c8e10ff4d0aca90168f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ba:29:ac:d2:97:42:c8:ac:b8:21:bb:9a:0e:
15:15:47:31:54:fc:0a:bc:bb:e3:89:5d:fd:a2:0f:
e4:1c:7d:46:7b:33:3f:38:da:9d:c6:98:0d:89:5c:
a3:06:bb:d3:b0:4d:8d:5e:f3:c8:25:ce:39:18:a4:
43:e5:d1:ac:d1:39:e8:8e:12:9d:06:10:61:4e:33:
34:95:2a:5a:93:83:f4:a1:db:81:a5:07:1d:1e:01:
30:ad:b4:e3:e1:b7:77:16:5d:72:80:c6:50:5f:fe:
a5:38:49:74:c1:a6:bc:26:cf:d3:37:ed:07:96:4b:
ac:07:ef:ca:ab:c7:bd:72:f5:85:92:81:20:b3:af:
ac:66:3f:1a:47:7a:c0:52:a1:ed:ae:aa:bf:9c:29:
94:68:2b:6d:62:86:8e:f9:36:8f:d9:23:02:44:d6:
4a:0e:6e:bf:ae:74:19:2a:cb:b3:eb:24:7e:d9:b7:
16:04:8b:0e:19:be:83:fd:6b:8e:8d:99:df:59:5a:
e3:0d:13:af:c7:65:6b:bd:16:1a:46:5d:7d:50:a1:
84:99:2a:28:43:3d:d8:7f:f2:a6:ad:c8:08:3e:0f:
d2:1f:96:8c:64:2b:ef:d2:2c:cc:ab:49:21:5b:bc:
4c:f7:93:03:6b:d3:01:f4:76:c5:9a:37:da:c4:7b:
55:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:64:77:E1:F9:74:A1:92:2C:A5:C8:E1:0F:F4:D0:AC:A9:01:68:F5
X509v3 Authority Key Identifier:
keyid:92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:de:e8:a4:b2:c5:ed:54:f4:3f:05:c0:be:42:a2:42:84:0e:
94:33:02:b1:79:99:63:dd:9f:53:ce:c1:d0:4a:00:ac:da:7c:
a0:bc:6d:f5:d6:9d:e0:86:26:6c:4b:b9:fd:5c:4c:f4:82:7d:
cb:48:0d:06:dc:4e:b6:6f:f3:ab:cd:95:4f:78:13:30:f4:de:
5a:1d:ae:c5:5c:e0:65:c8:97:87:67:2f:9c:a4:59:98:16:dc:
63:70:81:92:c0:3f:de:a0:ef:73:f8:1e:91:fe:b6:f4:6e:d9:
09:37:e7:3a:58:0b:87:91:e3:ab:37:d0:ab:5b:94:63:b8:94:
ac:9e:ff:85:97:25:7a:9e:1d:68:c3:86:e7:a5:ba:3b:86:75:
9b:44:1f:be:27:91:3b:b4:b9:25:d8:24:89:38:8f:57:ef:fa:
a1:5d:3b:bc:bc:20:4e:72:3e:eb:16:fa:47:c5:2c:37:7e:a2:
dd:07:2b:28:94:cf:8a:70:08:77:bf:36:a8:ed:5a:c1:63:68:
79:ca:c7:75:34:63:56:06:40:81:a9:ea:06:24:24:15:2b:03:
e6:9d:a8:f1:8d:b1:18:93:3f:d5:54:7a:ce:75:6c:87:33:c4:
72:db:02:8f:76:d4:85:b1:e6:56:42:ba:16:ea:65:2b:18:bc:
4b:48:3a:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjJuBPYyW/B4Rxv5fzen460MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDhmMTMxYjFlMTIwN2ZiNDkwODJiMGUwNjQyZmQxYTYz
ZTFhYTYwHhcNMjUwODIwMjMwMjIwWhcNMjUwODIxMjMwMjIwWjAzMTEwLwYDVQQD
Eyg5YTY0NzdlMWY5NzRhMTkyMmNhNWM4ZTEwZmY0ZDBhY2E5MDE2OGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1boprNKXQsisuCG7mg4VFUcxVPwK
vLvjiV39og/kHH1GezM/ONqdxpgNiVyjBrvTsE2NXvPIJc45GKRD5dGs0TnojhKd
BhBhTjM0lSpak4P0oduBpQcdHgEwrbTj4bd3Fl1ygMZQX/6lOEl0waa8Js/TN+0H
lkusB+/Kq8e9cvWFkoEgs6+sZj8aR3rAUqHtrqq/nCmUaCttYoaO+TaP2SMCRNZK
Dm6/rnQZKsuz6yR+2bcWBIsOGb6D/WuOjZnfWVrjDROvx2VrvRYaRl19UKGEmSoo
Qz3Yf/KmrcgIPg/SH5aMZCvv0izMq0khW7xM95MDa9MB9HbFmjfaxHtVRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpkd+H5dKGSLKXI4Q/00KypAWj1MB8GA1UdIwQY
MBaAFJJI8TGx4SB/tJCCsOBkL9GmPhqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83NzUzNWYtNDczYi00M2QzLWFmNDMt
ZTQ4MTc1MWQ2ODRmLzEva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC83NzUzNWYtNDczYi00M2QzLWFmNDMtZTQ4MTc1MWQ2ODRm
LzEva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd97opLLF
7VT0PwXAvkKiQoQOlDMCsXmZY92fU87B0EoArNp8oLxt9dad4IYmbEu5/VxM9IJ9
y0gNBtxOtm/zq82VT3gTMPTeWh2uxVzgZciXh2cvnKRZmBbcY3CBksA/3qDvc/ge
kf629G7ZCTfnOlgLh5HjqzfQq1uUY7iUrJ7/hZclep4daMOG56W6O4Z1m0QfvieR
O7S5JdgkiTiPV+/6oV07vLwgTnI+6xb6R8UsN36i3QcrKJTPinAId782qO1awWNo
ecrHdTRjVgZAganqBiQkFSsD5p2o8Y2xGJM/1VR6znVshzPEctsCj3bUhbHmVkK6
FuplKxi8S0g6Ow==
-----END CERTIFICATE-----
Generated at Thu Aug 21 07:24:41 2025 by rpki-client