Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File: kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier: p7bDfHun+InzJC8XSAcIHWQMIemHhnk3KtMd7I1Doxw=
Subject key identifier: 74:16:48:D8:93:EE:71:59:0D:E2:C7:CA:69:06:D4:B9:08:81:0A:1D
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 01992D48890234FD2ABB8123CC124DABC701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number: 168D
Signing time: Tue 09 Sep 2025 07:02:32 +0000
Manifest this update: Tue 09 Sep 2025 07:02:32 +0000
Manifest next update: Wed 10 Sep 2025 07:02:32 +0000
Files and hashes: 1: 12sEndDITu3xfG3rwq5fCgDFi4g.roa (hash: INrDxDNjEOUhYyeyQWwSgSxYwST/jFhVVKOzmgcOx8U=)
2: J-F67EchYLFsSdnuT0ELKO3zkVM.roa (hash: X3ffb8upes93ybjj9N2ywu5hcNrq4bSW9hgoat91kHU=)
3: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: bV8bhOstV/pZEdp/Q6Y1CpXxe40pMc/6WjPPIcgeKj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:48:89:02:34:fd:2a:bb:81:23:cc:12:4d:ab:c7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Sep 9 07:02:32 2025 GMT
Not After : Sep 10 07:02:32 2025 GMT
Subject: CN=741648d893ee71590de2c7ca6906d4b908810a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a2:51:16:14:68:0f:54:c0:49:4e:b3:58:e2:
8d:ae:e1:d9:79:00:69:a5:9d:e5:4f:74:51:bb:75:
b4:38:c4:6c:3e:0b:56:4e:5b:86:0f:87:bc:4a:dd:
9e:74:d7:1b:8b:39:f1:74:2c:67:92:17:7c:79:f6:
20:f7:89:88:1a:75:e8:9f:f6:95:b2:0b:30:f0:f4:
fc:9c:dc:fa:8d:ae:01:09:5a:09:ee:b9:f9:ca:14:
85:8a:5b:c0:3d:57:c9:75:de:0d:95:dd:de:e7:25:
d8:3d:ec:2d:39:49:91:01:cb:fe:45:c1:c1:a3:37:
eb:15:01:f8:81:e4:24:d9:03:b8:3d:f0:38:31:24:
eb:ba:4f:9c:ff:eb:af:a3:e8:92:cf:d4:6b:b0:b1:
01:a9:c2:7c:d7:2d:39:69:43:38:cd:5d:8a:ac:f8:
5d:06:00:53:f6:6b:aa:86:6f:94:35:9e:cb:84:a8:
17:a4:8c:a9:aa:ba:fa:21:a5:05:75:78:b9:26:1b:
56:7e:8a:90:ec:20:8b:1f:45:a8:30:cc:8e:1c:a8:
5d:ee:a0:6d:e7:6a:87:e3:f8:27:f7:eb:de:b6:31:
a6:b1:44:4f:57:a2:3a:a2:d4:45:3d:ed:78:ff:c0:
1e:c2:01:aa:19:a9:21:c8:93:cc:15:d6:93:11:06:
b2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:16:48:D8:93:EE:71:59:0D:E2:C7:CA:69:06:D4:B9:08:81:0A:1D
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:16:c3:90:f3:5b:e5:ad:f1:4a:24:45:ac:ce:45:8f:8a:25:
3f:c1:73:17:0e:d7:16:ab:b3:d8:c9:62:55:ec:61:63:44:fa:
1c:5f:11:8d:28:94:f6:6a:93:94:b3:1e:c7:13:1e:ca:7e:05:
f0:ad:3f:c7:f7:98:67:b7:82:35:db:14:81:f9:de:0f:63:5e:
71:5f:96:49:e0:8a:c5:8f:b0:fc:40:af:aa:c0:9e:75:1b:c0:
1a:ac:90:c5:e4:30:f6:8f:a4:52:ce:c1:41:ae:61:75:cc:70:
de:3a:9d:3e:e5:25:0b:92:51:91:ec:5b:b5:53:52:0d:1a:04:
15:68:2a:24:4b:c3:22:51:1a:72:e4:3f:ef:55:64:bf:cf:5a:
c8:eb:ab:3e:48:75:56:e6:da:6b:bb:86:3b:04:53:a0:f1:9f:
b7:f0:13:6c:df:b7:9b:aa:a4:ee:d9:94:08:08:e8:58:16:14:
4a:88:f4:e9:e8:fe:a1:41:41:65:29:48:11:e5:f0:7f:73:72:
fc:f5:d5:40:aa:e2:9d:31:37:7b:e4:95:5a:0d:9d:52:3e:eb:
70:fb:f9:9b:41:ee:2a:35:35:90:2e:ec:2b:9a:f1:fd:10:df:
f7:d7:78:45:77:f9:25:cd:b1:07:ff:f3:f7:dd:7e:70:a1:dc:
0b:4b:ce:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZktSIkCNP0qu4EjzBJNq8cBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYzEwYmZkZTU4MTNhYjQ3YzM4YzVjMTkwNGVjMjZiMzJj
MmEwOTUwHhcNMjUwOTA5MDcwMjMyWhcNMjUwOTEwMDcwMjMyWjAzMTEwLwYDVQQD
Eyg3NDE2NDhkODkzZWU3MTU5MGRlMmM3Y2E2OTA2ZDRiOTA4ODEwYTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKJRFhRoD1TASU6zWOKNruHZeQBp
pZ3lT3RRu3W0OMRsPgtWTluGD4e8St2edNcbiznxdCxnkhd8efYg94mIGnXon/aV
sgsw8PT8nNz6ja4BCVoJ7rn5yhSFilvAPVfJdd4Nld3e5yXYPewtOUmRAcv+RcHB
ozfrFQH4geQk2QO4PfA4MSTruk+c/+uvo+iSz9RrsLEBqcJ81y05aUM4zV2KrPhd
BgBT9muqhm+UNZ7LhKgXpIypqrr6IaUFdXi5JhtWfoqQ7CCLH0WoMMyOHKhd7qBt
52qH4/gn9+vetjGmsURPV6I6otRFPe14/8AewgGqGakhyJPMFdaTEQayfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQWSNiT7nFZDeLHymkG1LkIgQodMB8GA1UdIwQY
MBaAFJHBC/3lgTq0fDjFwZBOwmsywqCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTct
MDRkNzRmMzY4Njk4LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTctMDRkNzRmMzY4Njk4
LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhbDkPNb
5a3xSiRFrM5Fj4olP8FzFw7XFquz2MliVexhY0T6HF8RjSiU9mqTlLMexxMeyn4F
8K0/x/eYZ7eCNdsUgfneD2NecV+WSeCKxY+w/ECvqsCedRvAGqyQxeQw9o+kUs7B
Qa5hdcxw3jqdPuUlC5JRkexbtVNSDRoEFWgqJEvDIlEacuQ/71Vkv89ayOurPkh1
Vubaa7uGOwRToPGft/ATbN+3m6qk7tmUCAjoWBYUSoj06ej+oUFBZSlIEeXwf3Ny
/PXVQKrinTE3e+SVWg2dUj7rcPv5m0HuKjU1kC7sK5rx/RDf99d4RXf5Jc2xB//z
991+cKHcC0vO2Q==
-----END CERTIFICATE-----
Generated at Tue Sep 9 09:57:47 2025 by rpki-client