
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
File: Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json)
Hash identifier: atmhUD2VrKpcKmAV6KAvKuawYURgkF1mzEOWqU6Ds9M=
Subject key identifier: 76:F3:C8:1F:10:FC:91:8C:3C:10:66:36:FC:DB:F3:C9:A9:8C:F9:E5
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial: 0198616E354ED33AE314CAB2B4A8D05D02CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
Manifest number: 12D0
Signing time: Thu 31 Jul 2025 17:01:09 +0000
Manifest this update: Thu 31 Jul 2025 17:01:09 +0000
Manifest next update: Fri 01 Aug 2025 17:01:09 +0000
Files and hashes: 1: 7RH8q326KlHuJPjQMSVa_xv9mM8.roa (hash: jYAaBPFexodAbG01790lRYCRx2XbFPYuT6Kt3pZUZ84=)
2: 86BJ0tf44AvFSPojuuBVHQjlnBU.roa (hash: a0d0fyTctB2pb4UQURZCBOpZA1JPgrlTVV7wSAI3T8Q=)
3: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: WLK7m5IEKtp8vuT7D8ZjkipyTksWNOH3RSDAQ0cM7XE=)
4: c6ZD9P3H30o78749ZEWyxOqABSU.roa (hash: cprASPGCBwZQZqsXiJOC/24dbl0p4JtT0bpDH9Sk/a4=)
5: idwzkQBauFhn5yVkIjeQVtz5mZE.roa (hash: 44TjgVB7J3xRAwnTMWxvN7AZUFhxeYggq97H4Mjz/Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 16:24:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:6e:35:4e:d3:3a:e3:14:ca:b2:b4:a8:d0:5d:02:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
Validity
Not Before: Jul 31 17:01:09 2025 GMT
Not After : Aug 1 17:01:09 2025 GMT
Subject: CN=76f3c81f10fc918c3c106636fcdbf3c9a98cf9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:5a:e3:ab:72:2b:4e:8e:e1:90:9c:04:6a:
7a:c9:18:76:97:2d:2d:24:9b:c4:75:67:7f:a5:24:
62:11:c1:d8:11:e1:71:1c:81:0f:1d:d6:0d:d7:6f:
27:1d:ef:73:bb:f0:67:ca:aa:df:0b:35:1d:3f:d6:
f6:68:fc:a7:7a:c6:54:e0:bf:de:29:e7:d7:28:62:
c7:07:d2:ec:68:9b:53:7b:76:e1:18:b4:bc:74:d9:
66:b1:ea:2f:c8:2a:82:33:71:45:92:f6:71:fe:31:
08:6a:a2:58:e1:61:16:8f:25:86:b8:f9:f8:63:c9:
14:2a:03:2a:85:8a:b9:34:3f:46:92:5f:13:39:0e:
18:9b:68:25:f9:1a:df:19:92:c8:ea:aa:66:fb:1d:
e1:cc:6f:3a:d3:e7:af:42:db:67:52:1d:5e:61:51:
dc:59:c0:61:4e:5b:08:07:d7:dd:26:3e:af:2f:f4:
89:7a:2f:f5:59:ae:ea:95:fc:87:a9:85:6b:c1:31:
33:8f:be:f9:8d:8c:7c:81:61:18:e4:ae:ee:52:fb:
b5:5b:45:63:3c:1b:e7:21:f9:81:d9:ab:88:e2:59:
96:5b:78:af:e6:b0:b0:60:9f:d8:1d:fb:45:05:96:
72:cc:d3:47:e0:44:7f:d3:ef:2e:ab:5c:1a:3e:aa:
26:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F3:C8:1F:10:FC:91:8C:3C:10:66:36:FC:DB:F3:C9:A9:8C:F9:E5
X509v3 Authority Key Identifier:
keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c2:27:e6:27:81:2d:77:1a:34:58:f5:9d:e1:e3:27:db:f3:
bf:dc:59:d6:c7:a3:d1:c5:95:59:c3:9c:40:2a:39:32:1b:07:
ac:36:20:e3:f6:c9:5f:b0:01:b8:15:c5:64:04:bf:2f:2a:1f:
90:6b:87:b6:b6:18:a3:ce:42:ae:6f:04:b2:0e:59:9e:ec:b9:
ff:dc:d0:fb:fb:fe:f7:80:e2:1b:d6:d8:f0:f7:6b:da:5a:49:
7e:04:9f:4f:5c:03:f1:03:df:6c:6f:3c:e7:26:a0:0f:35:68:
5c:a1:bb:6c:4c:27:76:5e:07:b0:1a:09:19:d0:1d:c5:d6:e9:
dd:9c:74:0e:1f:12:1a:d3:bb:79:44:e3:ae:0a:9c:28:16:75:
31:20:86:1c:12:d9:c3:a0:77:44:a0:69:01:02:60:be:f1:1c:
e0:c5:47:a0:f7:39:f1:bf:52:b4:36:86:4a:c9:80:6d:6b:a6:
8e:50:f4:98:95:d8:b3:0a:83:60:2b:6f:5c:14:de:1e:1d:e8:
39:fc:1f:3c:4d:2c:51:ea:e2:60:e3:07:c5:f2:1e:f3:bc:6e:
46:e8:bb:27:e7:b5:69:ec:17:ee:57:cc:3e:da:ab:60:5c:46:
dd:e5:36:99:ea:1b:b1:96:4a:ae:d3:b4:ef:01:b0:e2:ce:0b:
88:f3:50:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhhbjVO0zrjFMqytKjQXQLMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZGI3Y2E0ZWVlMWU0NTNkMjZmYWI5OWM4MjAxYWRmODk0
NjEyYmUwHhcNMjUwNzMxMTcwMTA5WhcNMjUwODAxMTcwMTA5WjAzMTEwLwYDVQQD
Eyg3NmYzYzgxZjEwZmM5MThjM2MxMDY2MzZmY2RiZjNjOWE5OGNmOWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLZa46tyK06O4ZCcBGp6yRh2ly0t
JJvEdWd/pSRiEcHYEeFxHIEPHdYN128nHe9zu/BnyqrfCzUdP9b2aPynesZU4L/e
KefXKGLHB9LsaJtTe3bhGLS8dNlmseovyCqCM3FFkvZx/jEIaqJY4WEWjyWGuPn4
Y8kUKgMqhYq5ND9Gkl8TOQ4Ym2gl+RrfGZLI6qpm+x3hzG860+evQttnUh1eYVHc
WcBhTlsIB9fdJj6vL/SJei/1Wa7qlfyHqYVrwTEzj775jYx8gWEY5K7uUvu1W0Vj
PBvnIfmB2auI4lmWW3iv5rCwYJ/YHftFBZZyzNNH4ER/0+8uq1waPqomwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbzyB8Q/JGMPBBmNvzb88mpjPnlMB8GA1UdIwQY
MBaAFCnbfKTu4eRT0m+rmcggGt+JRhK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2Yt
ZDMzZmExNjA1YWUxLzEvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2YtZDMzZmExNjA1YWUx
LzEvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArsIn5ieB
LXcaNFj1neHjJ9vzv9xZ1sej0cWVWcOcQCo5MhsHrDYg4/bJX7ABuBXFZAS/Lyof
kGuHtrYYo85Crm8Esg5Znuy5/9zQ+/v+94DiG9bY8Pdr2lpJfgSfT1wD8QPfbG88
5yagDzVoXKG7bEwndl4HsBoJGdAdxdbp3Zx0Dh8SGtO7eUTjrgqcKBZ1MSCGHBLZ
w6B3RKBpAQJgvvEc4MVHoPc58b9StDaGSsmAbWumjlD0mJXYswqDYCtvXBTeHh3o
OfwfPE0sUeriYOMHxfIe87xuRui7J+e1aewX7lfMPtqrYFxG3eU2meobsZZKrtO0
7wGw4s4LiPNQYg==
-----END CERTIFICATE-----
Generated at Thu Jul 31 19:44:54 2025 by rpki-client