Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier: 0WtQgsh0j84eAOsIR7B2MxV6dCG/qitmjhjJ4JqEo/8=
Subject key identifier: AF:A7:40:6F:3B:87:07:FD:16:97:03:F0:C7:5C:6C:40:94:46:06:1E
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 01987DC133C92447D2F7F8E0859B22370B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number: 0A80
Signing time: Wed 06 Aug 2025 05:01:10 +0000
Manifest this update: Wed 06 Aug 2025 05:01:10 +0000
Manifest next update: Thu 07 Aug 2025 05:01:10 +0000
Files and hashes: 1: 4Dd_oz2TtpOXQBrGavmGYMPXNlw.roa (hash: lEaJsZdsULkNE5Gu41TR5VUrs6XkOuSkB/MqNMbSRqE=)
2: 9CKQGKCQI-bIMlSOn18EkSByP_c.roa (hash: fUEwlGorb/53MsJAC9arcQFk2OY9saq26gPtLezc70o=)
3: Ehx_bk8hfbPb2wCCkbIFutyAoiQ.roa (hash: +HKiRGiNwcMbHRNsEOcJQScZZXduQOT3b8IfA7DUH+8=)
4: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: EEhEDAEYvigA+UEoOiogq37mJJbqTZHzM5NDEhl/ewk=)
5: WlNY40vGoHsISV8cxe7v-uDL1z8.roa (hash: DSI5lhy3OTW1NGDCgjE4YBOi3i582drRHl7z2eh8GT4=)
6: azXA0zek1r4GjxGORUc5CbVhlro.roa (hash: dBG8mL0HT6A6TrmZTX65GYmNTUtlNHr3mHgXq8jXk/c=)
7: fawo1EoqRqBJwHjBpTPTmcGb0cM.roa (hash: F6clH7PVg2lpM3y/mX4Zj9CRymDOfHXzUQhjxqzwyxg=)
8: o9r3uR2f73He5KEKu4BwYPFzrZs.roa (hash: di2c5UqcUyXblOdBvGL8kM199QqPxFbroxHSs6c/vq8=)
9: sd0jlwypX7mTRSVDcmbA2KcPRVw.roa (hash: YbZCCfMPY850ehWHI89VOAxoC5oI9QnHcBkGCUColGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:33:c9:24:47:d2:f7:f8:e0:85:9b:22:37:0b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Aug 6 05:01:10 2025 GMT
Not After : Aug 7 05:01:10 2025 GMT
Subject: CN=afa7406f3b8707fd169703f0c75c6c409446061e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:c3:7e:eb:bd:a6:a8:e8:78:d9:ed:67:03:
d1:19:e7:37:d5:7a:7c:dd:0b:1b:77:86:af:b0:ba:
b8:3c:fc:40:bc:4b:7e:8a:77:9f:af:9d:a4:86:5f:
d3:0b:5b:6b:60:27:da:e9:7b:8b:68:67:53:d0:d3:
38:c7:4c:98:16:0a:ae:83:20:9c:5a:30:08:7e:9c:
92:22:06:18:09:ac:f6:3c:6c:e6:83:ff:28:be:ec:
13:bb:a3:ec:a3:52:fd:f2:4c:e6:66:64:86:56:cb:
fb:88:b0:63:64:ad:5b:55:33:37:e2:5f:0f:8f:a1:
42:05:a4:23:f0:ba:5c:ba:48:b1:5b:9d:f2:50:b4:
f8:34:32:90:c6:56:8d:dc:23:c7:f7:3d:52:45:96:
4f:4d:36:68:b3:d6:8a:10:12:ae:e6:2f:c2:66:be:
3e:e1:cf:44:2e:2e:74:2d:92:15:60:c0:fd:18:96:
72:7f:a8:98:10:f6:67:d0:60:00:b6:cf:46:4e:33:
f0:98:7f:c9:05:d0:ff:a3:a2:fe:2d:60:4f:0d:c7:
0c:d1:63:7f:ce:12:54:86:d3:ae:42:46:5f:4e:0d:
ae:0b:7f:45:db:e1:18:0d:1a:5b:7a:02:48:15:fb:
74:52:60:8a:f4:fe:0f:ba:b0:57:b1:56:2d:19:0a:
d3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A7:40:6F:3B:87:07:FD:16:97:03:F0:C7:5C:6C:40:94:46:06:1E
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:77:e5:b2:d1:81:9c:af:85:67:f2:17:58:db:ef:4d:d5:ed:
ee:7c:d3:1d:4f:bb:ae:2e:2e:c7:bb:0b:d3:7d:65:56:a3:c4:
a2:f5:53:75:fd:2e:5f:4a:81:dc:9a:bb:a2:e8:83:2f:66:63:
d8:c3:52:1b:63:eb:90:2a:79:fd:41:4b:e4:17:08:b4:0c:73:
12:5d:89:8a:19:d9:51:5a:7b:df:7e:32:b8:55:f1:d6:a8:9f:
4f:7f:67:6f:39:6f:e8:6b:fa:4c:6a:cd:97:28:07:7b:8b:33:
40:26:42:ec:ce:65:62:8c:05:6c:31:11:4e:82:1e:09:e7:51:
3e:22:78:23:e7:af:71:1d:12:73:23:d5:76:4b:81:ec:c0:58:
47:2b:ac:b1:23:cb:d2:5a:56:f5:af:a4:f9:f8:5a:bc:9e:dd:
f1:d2:1f:1a:0d:b0:4c:e8:01:50:6e:61:74:36:5e:0b:fc:b0:
f4:5f:94:34:9e:1c:d2:df:2c:13:cf:bc:af:bf:cb:22:b0:4a:
27:e4:2e:de:a4:d9:4b:ce:60:ba:ec:47:51:e4:ad:68:fe:ec:
4f:98:4e:20:c2:7f:21:87:db:5c:8f:a8:2d:2f:83:39:5e:f5:
b3:24:c9:7a:c9:d7:22:4f:bf:01:eb:72:21:70:93:91:2b:1c:
e0:76:82:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9wTPJJEfS9/jghZsiNws6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZmQ2NmU0M2ExMDQ2MzNiMjdiYWM1MzliOThiZGY4ZWJm
YWM5YWUwHhcNMjUwODA2MDUwMTEwWhcNMjUwODA3MDUwMTEwWjAzMTEwLwYDVQQD
EyhhZmE3NDA2ZjNiODcwN2ZkMTY5NzAzZjBjNzVjNmM0MDk0NDYwNjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZbDfuu9pqjoeNntZwPRGec31Xp8
3Qsbd4avsLq4PPxAvEt+inefr52khl/TC1trYCfa6XuLaGdT0NM4x0yYFgqugyCc
WjAIfpySIgYYCaz2PGzmg/8ovuwTu6Pso1L98kzmZmSGVsv7iLBjZK1bVTM34l8P
j6FCBaQj8LpcukixW53yULT4NDKQxlaN3CPH9z1SRZZPTTZos9aKEBKu5i/CZr4+
4c9ELi50LZIVYMD9GJZyf6iYEPZn0GAAts9GTjPwmH/JBdD/o6L+LWBPDccM0WN/
zhJUhtOuQkZfTg2uC39F2+EYDRpbegJIFft0UmCK9P4PurBXsVYtGQrTXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+nQG87hwf9FpcD8MdcbECURgYeMB8GA1UdIwQY
MBaAFCj9ZuQ6EEYzsnusU5uYvfjr+smuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYt
MjY3NjY5ZjM1NjQ4LzEvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYtMjY3NjY5ZjM1NjQ4
LzEvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXflstGB
nK+FZ/IXWNvvTdXt7nzTHU+7ri4ux7sL031lVqPEovVTdf0uX0qB3Jq7ouiDL2Zj
2MNSG2PrkCp5/UFL5BcItAxzEl2JihnZUVp7334yuFXx1qifT39nbzlv6Gv6TGrN
lygHe4szQCZC7M5lYowFbDERToIeCedRPiJ4I+evcR0ScyPVdkuB7MBYRyussSPL
0lpW9a+k+fhavJ7d8dIfGg2wTOgBUG5hdDZeC/yw9F+UNJ4c0t8sE8+8r7/LIrBK
J+Qu3qTZS85guuxHUeStaP7sT5hOIMJ/IYfbXI+oLS+DOV71syTJesnXIk+/Aety
IXCTkSsc4HaCaQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:16:34 2025 by rpki-client