Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
File: Kz1duQDggbIT6h8HHsXAA0em_ZU.mft (raw, json)
Hash identifier: rDEZG5TcuvzOjl3G7vFpxC4f8cwPQ4xNkHVBatkPEVc=
Subject key identifier: F0:3E:E2:D8:27:F2:45:C5:A3:2D:DB:E8:78:93:36:DA:4F:87:D7:FA
Authority key identifier: 2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
Certificate issuer: /CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Certificate serial: 0199364A2D063B538E28ADE7C8263CD0835F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
Manifest number: 1553
Signing time: Thu 11 Sep 2025 01:00:54 +0000
Manifest this update: Thu 11 Sep 2025 01:00:54 +0000
Manifest next update: Fri 12 Sep 2025 01:00:54 +0000
Files and hashes: 1: Kz1duQDggbIT6h8HHsXAA0em_ZU.crl (hash: Q3y48ObLBbudrVWWt0AT1kxuZ6Y639blIfGGSxEZv/Y=)
2: NEgXAX_wlUMaQy2Alio_tXjqDko.roa (hash: AzGPeergn3UOGKBGdY9DWg2cAqJA+mog0I2Sf6Bpi0g=)
3: piNzw1TtbP-p8HWhuy6SBF8spgg.roa (hash: wNEUGiASiQTLAx7gOGoQvQVkZK49FM62Tev24iu4h1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:4a:2d:06:3b:53:8e:28:ad:e7:c8:26:3c:d0:83:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Validity
Not Before: Sep 11 01:00:54 2025 GMT
Not After : Sep 12 01:00:54 2025 GMT
Subject: CN=f03ee2d827f245c5a32ddbe8789336da4f87d7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:15:8d:fc:ba:31:45:97:fd:f3:6a:9e:5a:
4a:81:44:1d:4c:ba:d8:0a:bc:06:ac:3d:6b:33:3a:
8c:01:2b:f2:6b:4b:1e:8b:8b:54:d7:99:26:e1:05:
ba:8f:4b:66:b8:29:71:9f:66:ec:87:01:c3:e4:43:
91:b1:84:86:94:6e:f5:5d:0b:72:7c:a3:63:1d:49:
51:28:c9:21:ef:cb:36:d5:a8:0d:5c:0b:67:b3:23:
26:16:b1:a6:a5:ed:31:c4:e1:4d:74:e4:fc:d7:17:
0f:67:84:3f:3f:f1:5c:21:47:11:1b:d4:4b:e3:6c:
98:d9:65:d7:47:b8:60:3f:c1:77:e6:00:f2:cb:02:
ac:7d:b3:cb:71:ca:b7:73:07:72:56:1f:4b:82:88:
01:37:e8:e6:39:e5:2a:eb:0a:b5:e6:df:cc:50:4e:
3d:b8:92:8b:70:cd:42:da:16:05:32:10:35:4b:ae:
da:ee:c8:4f:1d:8e:8a:f9:b5:95:cc:9e:16:7d:49:
fc:7d:ae:44:87:f0:dd:29:13:94:d4:b2:09:dd:fb:
11:99:f6:26:2a:8e:57:27:4e:f2:bc:c5:9f:99:81:
f6:b8:4c:5d:b1:8b:10:f6:69:3b:ec:9f:d8:cf:50:
fe:2f:b6:98:32:72:a1:ed:4b:59:e7:71:76:15:ab:
c5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3E:E2:D8:27:F2:45:C5:A3:2D:DB:E8:78:93:36:DA:4F:87:D7:FA
X509v3 Authority Key Identifier:
keyid:2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:42:18:80:e7:4a:2b:64:f2:96:20:5d:50:21:3b:2c:10:d8:
c7:2a:a6:af:d4:d0:1b:e7:d5:92:b1:15:21:3d:e3:1f:47:fa:
b9:2b:ee:f7:e3:73:87:04:49:62:a0:61:d4:c3:87:05:77:4e:
0c:a4:ec:c5:7c:6d:23:0a:05:a1:63:a7:5c:5a:ac:35:6b:36:
e5:a2:38:61:d0:a1:63:6c:e5:09:8a:4e:ff:b1:6c:19:60:a7:
ea:98:0d:56:81:f7:d7:8c:2a:51:d5:3d:62:4a:89:61:4f:2b:
ba:9a:69:41:51:21:cd:19:9e:b6:0c:a1:e0:6d:f1:02:21:13:
ac:f5:5d:be:f2:c1:95:09:0e:36:11:8b:0a:6f:b7:46:8e:08:
6f:8d:5f:ee:03:6b:f2:5a:3c:5f:48:01:53:47:a1:7c:b2:02:
3c:14:a5:cc:42:ab:7e:01:f3:29:a1:6c:e8:ba:69:18:ba:e7:
48:ca:5f:0c:67:5b:8f:84:3e:bf:8c:e9:df:e0:14:d6:df:0b:
7f:1b:64:35:2a:84:01:b1:94:1e:7e:d8:56:8d:24:90:8e:9d:
59:0b:db:7c:58:56:a6:90:b3:ef:f1:d9:4f:c1:29:1c:09:84:
44:fb:fa:26:b1:c3:bd:e8:5f:c6:36:7b:41:60:c8:db:be:65:
c6:7a:ab:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk2Si0GO1OOKK3nyCY80INfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiM2Q1ZGI5MDBlMDgxYjIxM2VhMWYwNzFlYzVjMDAzNDdh
NmZkOTUwHhcNMjUwOTExMDEwMDU0WhcNMjUwOTEyMDEwMDU0WjAzMTEwLwYDVQQD
EyhmMDNlZTJkODI3ZjI0NWM1YTMyZGRiZTg3ODkzMzZkYTRmODdkN2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXQVjfy6MUWX/fNqnlpKgUQdTLrY
CrwGrD1rMzqMASvya0sei4tU15km4QW6j0tmuClxn2bshwHD5EORsYSGlG71XQty
fKNjHUlRKMkh78s21agNXAtnsyMmFrGmpe0xxOFNdOT81xcPZ4Q/P/FcIUcRG9RL
42yY2WXXR7hgP8F35gDyywKsfbPLccq3cwdyVh9LgogBN+jmOeUq6wq15t/MUE49
uJKLcM1C2hYFMhA1S67a7shPHY6K+bWVzJ4WfUn8fa5Eh/DdKROU1LIJ3fsRmfYm
Ko5XJ07yvMWfmYH2uExdsYsQ9mk77J/Yz1D+L7aYMnKh7UtZ53F2FavF7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPA+4tgn8kXFoy3b6HiTNtpPh9f6MB8GA1UdIwQY
MBaAFCs9XbkA4IGyE+ofBx7FwANHpv2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3oxZHVRRGdnYklUNmg4SEhzWEFBMGVtX1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS82NWY4ZTItZjRlZC00MjRkLTliOTEt
NDdkZDBjMDRiNTUwLzEvS3oxZHVRRGdnYklUNmg4SEhzWEFBMGVtX1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS82NWY4ZTItZjRlZC00MjRkLTliOTEtNDdkZDBjMDRiNTUw
LzEvS3oxZHVRRGdnYklUNmg4SEhzWEFBMGVtX1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkIYgOdK
K2TyliBdUCE7LBDYxyqmr9TQG+fVkrEVIT3jH0f6uSvu9+NzhwRJYqBh1MOHBXdO
DKTsxXxtIwoFoWOnXFqsNWs25aI4YdChY2zlCYpO/7FsGWCn6pgNVoH314wqUdU9
YkqJYU8rupppQVEhzRmetgyh4G3xAiETrPVdvvLBlQkONhGLCm+3Ro4Ib41f7gNr
8lo8X0gBU0ehfLICPBSlzEKrfgHzKaFs6LppGLrnSMpfDGdbj4Q+v4zp3+AU1t8L
fxtkNSqEAbGUHn7YVo0kkI6dWQvbfFhWppCz7/HZT8EpHAmERPv6JrHDvehfxjZ7
QWDI275lxnqrIg==
-----END CERTIFICATE-----
Generated at Thu Sep 11 08:41:51 2025 by rpki-client