Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
File: kRxMdux1VljUX9DT9co8yOvTdLc.mft (raw, json)
Hash identifier: 2MAqdOmdBoEzCR2IMYLsgzygTUjLs0jRSEdbxlJBPXM=
Subject key identifier: B5:96:DA:07:05:4F:5E:D3:14:24:C3:E1:63:CC:4D:9F:98:1A:2F:0C
Authority key identifier: 91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
Certificate issuer: /CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Certificate serial: 01988A6A0D22D16913CF9393FA2E28154FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
Manifest number: 101D
Signing time: Fri 08 Aug 2025 16:01:02 +0000
Manifest this update: Fri 08 Aug 2025 16:01:02 +0000
Manifest next update: Sat 09 Aug 2025 16:01:02 +0000
Files and hashes: 1: MRhTTHAkH95ULYTfOcPsfcxXr14.roa (hash: IE5WDUc9dmCUsWg7sthCjIhrzs4McHIG0OGY+bFwg+8=)
2: kRxMdux1VljUX9DT9co8yOvTdLc.crl (hash: TUZ5FcogoEnBMSa5ztizw9r6wgPT+kNZHwLNWrUyPl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:6a:0d:22:d1:69:13:cf:93:93:fa:2e:28:15:4f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Validity
Not Before: Aug 8 16:01:02 2025 GMT
Not After : Aug 9 16:01:02 2025 GMT
Subject: CN=b596da07054f5ed31424c3e163cc4d9f981a2f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:09:67:ac:5b:d0:61:c4:87:f7:c5:f7:4a:96:
fd:51:6c:17:8f:73:8f:17:68:67:84:30:4a:f2:98:
28:d1:12:90:c3:df:41:5e:10:3c:33:13:82:84:5c:
ce:89:f2:17:d8:55:e2:53:07:0d:bb:38:89:e9:10:
b3:89:f2:ed:06:9f:6d:b4:e2:2a:a0:44:c1:c5:66:
33:2c:14:f8:9f:01:6f:3a:33:0e:d6:09:94:aa:22:
ad:0b:95:f7:9c:a3:d4:d9:42:f7:40:de:2e:b7:28:
a3:a9:7e:35:36:77:3d:d8:68:38:1a:df:49:84:86:
e8:8c:5a:19:14:77:6a:e7:ea:41:7d:a6:cb:d7:f5:
3b:08:30:a5:0e:a2:8d:e7:52:07:97:a6:ec:9b:92:
a4:9b:2a:a3:6f:5b:b8:fc:26:6f:ab:05:dc:e0:1b:
26:06:ab:84:1b:c5:32:a7:19:aa:bc:a7:d0:f4:44:
ba:6e:29:9f:e7:4c:1c:07:57:6e:2e:07:02:1a:39:
0e:df:01:62:d6:46:ff:10:3a:b9:57:fe:d9:37:07:
c9:32:11:17:b4:31:60:dc:14:61:f6:56:86:74:9b:
c5:9e:fb:3f:df:43:90:90:34:10:c0:fd:ea:4c:1f:
10:84:7d:39:78:7b:ca:99:ce:19:2a:13:30:df:b6:
a9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:96:DA:07:05:4F:5E:D3:14:24:C3:E1:63:CC:4D:9F:98:1A:2F:0C
X509v3 Authority Key Identifier:
keyid:91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:9e:78:55:cb:27:1f:6b:ba:aa:e6:70:34:c5:d4:6f:35:81:
2b:13:43:36:b6:f0:27:e3:94:a1:69:05:32:1c:16:ee:ec:60:
89:3f:e6:4f:73:a9:1d:6b:2f:d2:57:ba:c8:47:eb:32:d0:36:
44:a6:d0:ad:bd:a4:c8:fd:58:6f:0f:1d:69:1c:1b:d7:cc:6b:
e8:3c:3e:9a:30:b7:69:83:6c:1f:e8:bf:73:47:28:e2:40:9e:
9a:c0:87:95:48:75:66:10:6c:cc:82:48:0e:17:9e:b7:47:7a:
7a:46:a8:50:b9:30:03:6a:0a:10:d2:25:35:af:5b:9b:0a:5e:
7f:72:56:bf:8b:ae:b7:41:76:42:be:a6:13:c4:1f:19:03:d2:
92:d9:5d:01:a8:d7:76:d6:78:46:ef:e5:e0:c4:eb:1e:49:40:
af:90:c2:51:55:29:9b:d3:2b:23:38:3f:1f:c6:60:e0:18:31:
f2:1b:61:8b:14:5d:2c:cb:65:ca:65:71:31:97:b7:07:8b:f1:
93:0e:ec:ac:be:57:e1:cf:f2:58:d3:90:b6:68:01:fc:f2:de:
2d:1b:ab:26:cc:cd:bf:19:26:3c:df:fd:f8:c4:a0:32:cd:c8:
ef:2a:c0:02:e5:2f:b4:c9:65:95:34:10:80:43:c7:f2:fd:e5:
3d:64:a7:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKag0i0WkTz5OT+i4oFU/nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMWM0Yzc2ZWM3NTU2NThkNDVmZDBkM2Y1Y2EzY2M4ZWJk
Mzc0YjcwHhcNMjUwODA4MTYwMTAyWhcNMjUwODA5MTYwMTAyWjAzMTEwLwYDVQQD
EyhiNTk2ZGEwNzA1NGY1ZWQzMTQyNGMzZTE2M2NjNGQ5Zjk4MWEyZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAlnrFvQYcSH98X3Spb9UWwXj3OP
F2hnhDBK8pgo0RKQw99BXhA8MxOChFzOifIX2FXiUwcNuziJ6RCzifLtBp9ttOIq
oETBxWYzLBT4nwFvOjMO1gmUqiKtC5X3nKPU2UL3QN4utyijqX41Nnc92Gg4Gt9J
hIbojFoZFHdq5+pBfabL1/U7CDClDqKN51IHl6bsm5Kkmyqjb1u4/CZvqwXc4Bsm
BquEG8UypxmqvKfQ9ES6bimf50wcB1duLgcCGjkO3wFi1kb/EDq5V/7ZNwfJMhEX
tDFg3BRh9laGdJvFnvs/30OQkDQQwP3qTB8QhH05eHvKmc4ZKhMw37ap6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWW2gcFT17TFCTD4WPMTZ+YGi8MMB8GA1UdIwQY
MBaAFJEcTHbsdVZY1F/Q0/XKPMjr03S3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1J4TWR1eDFWbGpVWDlEVDljbzh5T3ZUZExjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mYTQyNTYtODQxNS00YWIyLTk2Y2Ut
NjJkMjc1NGYyODhiLzEva1J4TWR1eDFWbGpVWDlEVDljbzh5T3ZUZExjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mYTQyNTYtODQxNS00YWIyLTk2Y2UtNjJkMjc1NGYyODhi
LzEva1J4TWR1eDFWbGpVWDlEVDljbzh5T3ZUZExjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI554Vcsn
H2u6quZwNMXUbzWBKxNDNrbwJ+OUoWkFMhwW7uxgiT/mT3OpHWsv0le6yEfrMtA2
RKbQrb2kyP1Ybw8daRwb18xr6Dw+mjC3aYNsH+i/c0co4kCemsCHlUh1ZhBszIJI
Dheet0d6ekaoULkwA2oKENIlNa9bmwpef3JWv4uut0F2Qr6mE8QfGQPSktldAajX
dtZ4Ru/l4MTrHklAr5DCUVUpm9MrIzg/H8Zg4Bgx8hthixRdLMtlymVxMZe3B4vx
kw7srL5X4c/yWNOQtmgB/PLeLRurJszNvxkmPN/9+MSgMs3I7yrAAuUvtMlllTQQ
gEPH8v3lPWSnxw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:14:24 2025 by rpki-client