Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
File: krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json)
Hash identifier: 7168wFB2ZqFBoHpgJ50TltiMgZuOdUhfdOkqTz8jlg4=
Subject key identifier: 74:15:98:D9:FE:2C:DE:DB:A9:92:89:14:F3:A3:B2:60:DB:B3:FB:1E
Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Certificate issuer: /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Certificate serial: 019921B19D076D633134A4F6016D97851BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
Manifest number: 1597
Signing time: Sun 07 Sep 2025 01:01:52 +0000
Manifest this update: Sun 07 Sep 2025 01:01:52 +0000
Manifest next update: Mon 08 Sep 2025 01:01:52 +0000
Files and hashes: 1: GCdodDNbb8kK5Nk7F_0-nAXSuto.roa (hash: +rPewf2fSfxIULsaTk1i8u3POGDLVTn+S/ryNeqw1mw=)
2: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: G9LQSDi55WcRPCCCiXxznchtmlCP3HdqzSe5D5aq1iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:9d:07:6d:63:31:34:a4:f6:01:6d:97:85:1b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Validity
Not Before: Sep 7 01:01:52 2025 GMT
Not After : Sep 8 01:01:52 2025 GMT
Subject: CN=741598d9fe2cdedba9928914f3a3b260dbb3fb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:59:66:ec:c0:bd:d4:e7:c3:41:53:ae:7c:
e2:18:d0:39:80:f7:f0:6c:36:77:e7:7b:2e:f5:c0:
03:10:db:88:1e:bf:1e:64:91:dc:ec:65:10:e6:52:
1a:bd:6a:fd:9a:63:87:7e:e4:e5:2c:c8:80:15:b4:
4e:0d:6b:96:40:0d:ee:42:6c:f4:63:ab:28:db:7a:
f9:c4:50:db:d4:0c:85:23:be:be:93:18:97:c6:a1:
db:4c:9e:46:20:ab:58:6b:1c:c2:4c:49:c2:ae:0c:
04:42:db:70:fc:b7:60:44:46:f5:49:a1:b5:3f:53:
56:f7:90:f6:8f:23:04:55:56:a7:66:21:b9:3f:c3:
0b:41:8e:fd:59:60:e1:bb:19:5e:cf:58:8c:4b:d3:
44:1c:d6:ce:c7:eb:42:ca:bc:25:50:b4:ae:93:29:
55:c9:4a:7e:1b:5f:6a:60:80:ec:1b:2f:d0:31:da:
ff:e2:39:cf:01:0b:2d:8f:8a:81:a6:47:ec:f8:5b:
e6:45:cb:09:6c:51:04:df:49:49:7d:70:98:60:49:
c0:89:c3:b5:9c:65:7f:1e:42:26:0f:d2:03:c0:0a:
6e:7a:41:0b:db:96:29:a6:11:ab:4a:50:5a:f6:5e:
26:5e:10:d3:44:34:82:06:87:b7:71:57:6f:9b:f8:
63:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:15:98:D9:FE:2C:DE:DB:A9:92:89:14:F3:A3:B2:60:DB:B3:FB:1E
X509v3 Authority Key Identifier:
keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:43:60:be:f3:4c:a9:28:99:ad:a3:54:6a:b9:dd:05:f9:bc:
00:61:d4:13:7e:c7:55:82:77:39:30:56:63:00:74:5c:1d:21:
1e:03:fa:12:e5:72:a8:8c:92:de:75:2c:4a:91:23:0a:cf:96:
49:f8:a5:22:ef:42:96:68:a9:53:ec:c5:cc:e0:c3:fa:c7:1b:
42:b6:19:5d:16:10:7b:fb:71:1a:35:80:49:d0:10:22:a9:d9:
d6:7d:8a:28:3a:bc:ac:f3:57:8b:2d:28:56:5f:26:8c:db:99:
c8:44:a8:96:9b:00:f4:ef:34:fb:83:1c:a1:54:45:4d:33:92:
89:2d:07:ba:ca:7b:1d:49:01:e2:68:ae:12:7b:bb:db:bd:ca:
83:78:d7:70:0b:f9:89:4c:69:e8:28:be:d4:4b:6d:74:15:59:
1b:98:e1:4d:9b:0f:f1:a0:e9:1d:54:4b:4d:65:16:42:a9:41:
94:6b:e9:16:d6:8c:a1:28:61:27:f4:0f:7c:ae:71:89:23:38:
e8:bc:a5:dc:1f:3e:60:74:55:25:80:4a:86:f1:2e:a5:f8:3b:
ec:ed:cf:ed:03:99:d3:3b:bb:4f:58:eb:44:a6:35:d1:18:15:
32:ad:37:5b:0f:aa:42:5f:8f:6f:be:a7:47:c3:4d:ce:9b:6a:
18:2f:b6:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsZ0HbWMxNKT2AW2XhRvqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYjVhYzg4ZjJjZGIxNDkzNDgzMGMxYWMwOTZhNWVmNzMw
OThmMTIwHhcNMjUwOTA3MDEwMTUyWhcNMjUwOTA4MDEwMTUyWjAzMTEwLwYDVQQD
Eyg3NDE1OThkOWZlMmNkZWRiYTk5Mjg5MTRmM2EzYjI2MGRiYjNmYjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo5ZZuzAvdTnw0FTrnziGNA5gPfw
bDZ353su9cADENuIHr8eZJHc7GUQ5lIavWr9mmOHfuTlLMiAFbRODWuWQA3uQmz0
Y6so23r5xFDb1AyFI76+kxiXxqHbTJ5GIKtYaxzCTEnCrgwEQttw/LdgREb1SaG1
P1NW95D2jyMEVVanZiG5P8MLQY79WWDhuxlez1iMS9NEHNbOx+tCyrwlULSukylV
yUp+G19qYIDsGy/QMdr/4jnPAQstj4qBpkfs+FvmRcsJbFEE30lJfXCYYEnAicO1
nGV/HkImD9IDwApuekEL25YpphGrSlBa9l4mXhDTRDSCBoe3cVdvm/hjUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQVmNn+LN7bqZKJFPOjsmDbs/seMB8GA1UdIwQY
MBaAFJK1rIjyzbFJNIMMGsCWpe9zCY8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lNDE3YmQtMTRlYi00Y2E1LTgwZjct
MzZjNDZmOTBkOWE1LzEva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lNDE3YmQtMTRlYi00Y2E1LTgwZjctMzZjNDZmOTBkOWE1
LzEva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUNgvvNM
qSiZraNUarndBfm8AGHUE37HVYJ3OTBWYwB0XB0hHgP6EuVyqIyS3nUsSpEjCs+W
SfilIu9ClmipU+zFzODD+scbQrYZXRYQe/txGjWASdAQIqnZ1n2KKDq8rPNXiy0o
Vl8mjNuZyESolpsA9O80+4McoVRFTTOSiS0Husp7HUkB4miuEnu7273Kg3jXcAv5
iUxp6Ci+1EttdBVZG5jhTZsP8aDpHVRLTWUWQqlBlGvpFtaMoShhJ/QPfK5xiSM4
6Lyl3B8+YHRVJYBKhvEupfg77O3P7QOZ0zu7T1jrRKY10RgVMq03Ww+qQl+Pb76n
R8NNzptqGC+2NQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:26 2025 by rpki-client