Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json)
Hash identifier: Yf7LeZPNd7g0DSkcmbsDvSgnXuJMd1LbpjiRj2d/HJw=
Subject key identifier: 38:C0:76:16:33:63:63:90:2F:11:11:B3:AD:9D:25:2C:50:B2:F6:73
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 019930116CE8FDE5DDE9088F5D5CB1E4C700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
Manifest number: 1689
Signing time: Tue 09 Sep 2025 20:01:12 +0000
Manifest this update: Tue 09 Sep 2025 20:01:12 +0000
Manifest next update: Wed 10 Sep 2025 20:01:12 +0000
Files and hashes: 1: 3S9CxnQg7YWqU3K6TXltDEUCLyw.roa (hash: 3OEFYGKv+A11bV584/FIEjB0rz/syH/3YTSncOKzqpk=)
2: 7iZSI8YJjBx97RcBp5yy0dHgNCc.roa (hash: zYIePn/XtBi1RBLoEwZwbryvrg3fa+ccFHSQFX92GIc=)
3: 8aTIb0puCina4qQH9DISIqfOc4Q.roa (hash: 1Nu+gUGiEPO422nTi4SIHIM/055+/Bx1i4GdyYjGB6w=)
4: 9DoakwUWAGtHNEatYpKzbo2QTwI.roa (hash: N1mtoTrK+kfX1PnLRJRzSQlCeUqp41+33H0gjLXBdeo=)
5: EZFIYtcapsDAbifqmq2FXtp-Cdw.roa (hash: f6ff20P7C3YhGHb/pCr95k1VGXcMCffUp+GlTWJzaPk=)
6: F-e0yheo2RviKbK6HPx7_eTqhA4.roa (hash: KEJO7y7WsDfC5FsDfSaCJ3hpxQXSnjViDnFGvytgGQY=)
7: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: +dJ3bP5B06IbCDwpXg/ABM1WNT1/xxghdQcOpI3fP8o=)
8: ic83PxAobxuOswBFck-YRl3xl5s.roa (hash: b2hEd1qs+ywRwA/SKMeyaDMx96OzLoUUBDS6BjYhAik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:11:6c:e8:fd:e5:dd:e9:08:8f:5d:5c:b1:e4:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Sep 9 20:01:12 2025 GMT
Not After : Sep 10 20:01:12 2025 GMT
Subject: CN=38c07616336363902f1111b3ad9d252c50b2f673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:ea:26:13:09:df:fc:84:e2:78:dd:81:03:
d6:99:4f:d7:68:fe:e5:fc:55:1f:c1:c7:63:b9:2c:
a0:70:01:59:af:eb:ca:a3:52:d0:38:90:f7:75:2a:
c5:8e:6f:10:de:07:4a:ad:55:87:a1:0a:7e:a2:87:
a4:5a:9d:37:4d:55:f3:54:57:64:15:e9:d6:3b:01:
ee:5d:b7:7b:c7:4d:dc:fe:f0:74:0f:f6:06:f0:ba:
79:5d:7a:32:62:5f:c3:44:9c:09:5c:d3:1c:a5:27:
8d:a7:ad:6d:20:c7:d3:94:e3:1c:f6:a6:8f:44:59:
1e:58:eb:f1:df:0a:67:0f:cb:7a:2e:4e:0b:bc:56:
f7:c1:69:89:51:30:e9:9a:57:4d:42:c0:eb:16:fe:
5d:89:18:e3:78:8a:2d:9e:b5:e3:77:13:45:9e:ac:
6b:b8:5f:18:97:a7:b2:9b:24:a3:44:c9:cf:a3:21:
c7:3b:e5:ec:2a:a3:b5:f1:97:73:d2:fd:3d:d1:44:
d5:65:f3:c2:aa:77:40:4e:eb:c3:48:3b:d5:88:87:
e7:7c:57:19:ba:9a:36:08:a8:b6:93:4b:3a:05:16:
9d:3a:0b:7f:1e:58:d5:3d:e9:7a:45:40:c9:93:7f:
16:cc:a7:68:d8:b1:86:fa:ec:3d:9d:93:f4:84:6b:
56:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C0:76:16:33:63:63:90:2F:11:11:B3:AD:9D:25:2C:50:B2:F6:73
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e5:00:cc:15:4f:0c:31:19:e4:81:77:8f:21:bb:68:d5:22:
49:27:33:06:dd:5d:e6:57:ec:34:1d:45:6b:76:e1:22:c0:fb:
5e:6a:f8:3f:4e:f5:92:ec:55:19:88:91:2b:53:bd:a3:07:e3:
6f:5e:e2:d2:f7:b2:e3:04:3a:68:a3:07:e9:f3:b7:46:f3:d8:
08:03:6e:2c:5b:c3:56:45:ec:5f:b4:a5:3a:80:42:61:e0:3c:
0d:d5:1f:bd:a6:7d:97:c1:4b:fe:ed:75:c1:ff:5d:d7:41:61:
e7:0c:3b:62:75:22:6a:68:c8:90:60:76:67:3c:77:c6:54:03:
24:2d:26:68:bc:bf:b6:80:fc:ca:f5:05:bc:63:3a:5c:c5:5c:
a2:ac:ae:59:2f:ea:6e:fc:7e:09:e9:28:67:ee:8b:ad:68:4a:
d2:de:22:8c:d7:d1:c2:ad:f8:c4:e4:07:bf:2b:f9:ce:00:06:
09:93:0a:42:93:22:54:ab:24:fe:c8:0f:2d:e3:63:87:ce:8c:
c3:63:f9:c3:2a:af:5e:11:9b:4d:7c:2b:03:25:82:42:94:96:
4f:b1:81:46:9a:54:43:75:5f:50:26:50:74:da:de:14:20:57:
55:cf:bc:5a:db:a2:a0:fc:01:08:51:f4:74:43:8a:37:37:25:
c3:21:b0:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkwEWzo/eXd6QiPXVyx5McAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi
ZDQ2NWQwHhcNMjUwOTA5MjAwMTEyWhcNMjUwOTEwMjAwMTEyWjAzMTEwLwYDVQQD
EygzOGMwNzYxNjMzNjM2MzkwMmYxMTExYjNhZDlkMjUyYzUwYjJmNjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4DqJhMJ3/yE4njdgQPWmU/XaP7l
/FUfwcdjuSygcAFZr+vKo1LQOJD3dSrFjm8Q3gdKrVWHoQp+ooekWp03TVXzVFdk
FenWOwHuXbd7x03c/vB0D/YG8Lp5XXoyYl/DRJwJXNMcpSeNp61tIMfTlOMc9qaP
RFkeWOvx3wpnD8t6Lk4LvFb3wWmJUTDpmldNQsDrFv5diRjjeIotnrXjdxNFnqxr
uF8Yl6eymySjRMnPoyHHO+XsKqO18Zdz0v090UTVZfPCqndATuvDSDvViIfnfFcZ
upo2CKi2k0s6BRadOgt/HljVPel6RUDJk38WzKdo2LGG+uw9nZP0hGtWowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjAdhYzY2OQLxERs62dJSxQsvZzMB8GA1UdIwQY
MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt
MzkxMGE1OWExMTIxLzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx
LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmuUAzBVP
DDEZ5IF3jyG7aNUiSSczBt1d5lfsNB1Fa3bhIsD7Xmr4P071kuxVGYiRK1O9owfj
b17i0vey4wQ6aKMH6fO3RvPYCANuLFvDVkXsX7SlOoBCYeA8DdUfvaZ9l8FL/u11
wf9d10Fh5ww7YnUiamjIkGB2Zzx3xlQDJC0maLy/toD8yvUFvGM6XMVcoqyuWS/q
bvx+CekoZ+6LrWhK0t4ijNfRwq34xOQHvyv5zgAGCZMKQpMiVKsk/sgPLeNjh86M
w2P5wyqvXhGbTXwrAyWCQpSWT7GBRppUQ3VfUCZQdNreFCBXVc+8WtuioPwBCFH0
dEOKNzclwyGwPg==
-----END CERTIFICATE-----
Generated at Tue Sep 9 22:50:22 2025 by rpki-client