Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
File: kJgVO94ONFhLrJH6GGjX7yTWi88.mft (raw, json)
Hash identifier: 4uhG/rDsbvTX879mE0BklX33U6p17UC+XCBoQKc2dm8=
Subject key identifier: 2B:D7:02:2F:20:5A:D1:A0:B0:DF:E9:3E:6B:1A:36:9D:5D:8E:CB:97
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 01991FC1F72CC4A932E73565895715EF2FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
Manifest number: 1367
Signing time: Sat 06 Sep 2025 16:00:29 +0000
Manifest this update: Sat 06 Sep 2025 16:00:29 +0000
Manifest next update: Sun 07 Sep 2025 16:00:29 +0000
Files and hashes: 1: kGuaXeFXRy7zk4r_fksHu1gERzY.roa (hash: eMXSEjP4L4hwARJ1cK2WpXviS5zDUtCbinSWtpWSvYQ=)
2: kJgVO94ONFhLrJH6GGjX7yTWi88.crl (hash: rTM0gNg4ft7nRuD/fziqTuAyTq5WYpFVb9Iz6QW2lJI=)
3: vvhvE6BMZMFQ1G4AEbYHHR_JKn4.roa (hash: kxXe/kCsq1l7fHe6/tvS8feYMvtFQTY38JduUQRo50I=)
4: x_9yjr6rLqSNbiZnjmWq-mNvOgg.roa (hash: mAB0u4tnNy3pI1HtMQoSvS+geYvks2ItYBoen25rRrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1f:c1:f7:2c:c4:a9:32:e7:35:65:89:57:15:ef:2f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Sep 6 16:00:29 2025 GMT
Not After : Sep 7 16:00:29 2025 GMT
Subject: CN=2bd7022f205ad1a0b0dfe93e6b1a369d5d8ecb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b0:4a:ef:ca:97:db:18:92:b7:39:4f:c8:26:
c4:6e:21:05:d2:a6:42:7f:df:f4:2a:41:5c:5b:3f:
47:9f:32:a4:71:ac:54:86:c2:e3:e2:8b:64:18:8d:
79:17:b7:a2:a0:49:01:7a:88:a7:80:e5:bc:87:82:
36:19:14:04:84:52:f1:19:da:8e:6c:6b:65:b5:fb:
a4:e9:43:54:0e:27:62:8b:1e:22:49:5f:e9:e6:66:
4e:92:02:21:34:c7:85:12:28:10:79:eb:4b:15:f3:
e4:bc:d8:66:90:3b:a6:72:31:65:bf:1b:7e:98:a0:
b9:b6:88:6b:0a:c6:03:f2:37:d3:5d:05:0f:bd:3f:
53:8a:fa:3c:3a:c8:4b:f5:1b:8a:96:e8:a2:1b:f9:
1b:1c:92:1e:7e:b9:f8:b7:cf:7f:46:50:57:dd:99:
a0:ed:34:5e:48:63:cd:97:fd:e7:42:32:d6:69:3d:
6f:30:a7:5b:17:b0:5c:14:4c:e6:d2:2c:89:84:b9:
2c:ca:b1:cb:8c:4c:3e:9b:52:2b:7a:40:29:34:79:
2f:6c:0e:c5:12:a7:4e:4d:3f:7b:4d:0f:5b:d9:fc:
44:99:3e:98:e9:15:41:62:49:63:62:5c:6f:15:a9:
49:66:62:8a:30:45:9d:b2:cd:d2:b2:ee:8f:2d:6e:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D7:02:2F:20:5A:D1:A0:B0:DF:E9:3E:6B:1A:36:9D:5D:8E:CB:97
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f0:d6:91:0a:7e:d4:ac:12:ec:f0:32:1f:b5:bf:53:99:d4:
6e:c8:43:10:6e:57:ea:45:90:c0:4c:2b:70:ba:df:86:b1:aa:
3a:be:1a:15:24:e6:e0:bf:64:6e:05:d8:9d:7e:76:c1:8e:7f:
8b:a8:5f:c0:7d:e6:65:3b:13:95:9c:4d:c0:1f:c8:21:66:18:
bf:84:fa:d6:d4:91:de:03:a9:36:ce:2e:cf:dc:57:a7:fd:ff:
e5:a7:2f:39:81:6e:47:64:16:ca:3d:85:10:d7:5b:6f:f1:41:
c4:a8:fe:72:b9:a0:ba:64:c4:c8:86:b9:0f:8f:dc:d3:5a:d6:
3b:a6:b7:67:03:9c:76:1a:ef:f5:65:1a:77:eb:ba:76:52:d5:
5d:c5:e3:32:be:09:65:79:25:2f:6d:c5:e8:d6:35:a8:9d:e3:
40:79:de:02:37:68:7d:7b:71:11:4e:22:fa:f5:21:fd:8b:71:
6d:80:ae:2e:3f:c8:e5:13:3b:76:5e:3d:7c:a1:5a:fb:07:67:
5a:38:62:fe:e4:a1:5c:e3:5b:64:0e:83:97:f1:f3:c9:45:2e:
9b:5b:04:b8:f4:bc:52:4c:62:33:61:0c:41:67:43:4f:7c:d8:
8a:85:a6:6e:39:2f:0d:25:90:74:dd:e0:9c:fd:2c:70:8d:92:
32:cb:49:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkfwfcsxKky5zVliVcV7y++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwOTgxNTNiZGUwZTM0NTg0YmFjOTFmYTE4NjhkN2VmMjRk
NjhiY2YwHhcNMjUwOTA2MTYwMDI5WhcNMjUwOTA3MTYwMDI5WjAzMTEwLwYDVQQD
EygyYmQ3MDIyZjIwNWFkMWEwYjBkZmU5M2U2YjFhMzY5ZDVkOGVjYjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LBK78qX2xiStzlPyCbEbiEF0qZC
f9/0KkFcWz9HnzKkcaxUhsLj4otkGI15F7eioEkBeoingOW8h4I2GRQEhFLxGdqO
bGtltfuk6UNUDidiix4iSV/p5mZOkgIhNMeFEigQeetLFfPkvNhmkDumcjFlvxt+
mKC5tohrCsYD8jfTXQUPvT9Tivo8OshL9RuKluiiG/kbHJIefrn4t89/RlBX3Zmg
7TReSGPNl/3nQjLWaT1vMKdbF7BcFEzm0iyJhLksyrHLjEw+m1IrekApNHkvbA7F
EqdOTT97TQ9b2fxEmT6Y6RVBYkljYlxvFalJZmKKMEWdss3Ssu6PLW5fgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvXAi8gWtGgsN/pPmsaNp1djsuXMB8GA1UdIwQY
MBaAFJCYFTveDjRYS6yR+hho1+8k1ovPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9iYTkwMDMtZDQzMy00MDk1LTg0Yjct
MmY5MzNkOTg5NmUwLzEva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9iYTkwMDMtZDQzMy00MDk1LTg0YjctMmY5MzNkOTg5NmUw
LzEva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKfDWkQp+
1KwS7PAyH7W/U5nUbshDEG5X6kWQwEwrcLrfhrGqOr4aFSTm4L9kbgXYnX52wY5/
i6hfwH3mZTsTlZxNwB/IIWYYv4T61tSR3gOpNs4uz9xXp/3/5acvOYFuR2QWyj2F
ENdbb/FBxKj+crmgumTEyIa5D4/c01rWO6a3ZwOcdhrv9WUad+u6dlLVXcXjMr4J
ZXklL23F6NY1qJ3jQHneAjdofXtxEU4i+vUh/YtxbYCuLj/I5RM7dl49fKFa+wdn
Wjhi/uShXONbZA6Dl/HzyUUum1sEuPS8UkxiM2EMQWdDT3zYioWmbjkvDSWQdN3g
nP0scI2SMstJ8A==
-----END CERTIFICATE-----
Generated at Sat Sep 6 17:19:05 2025 by rpki-client