Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
File: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft (raw, json)
Hash identifier: 1C5f9fIW1sbk8IuNLuAQ4CQV47JWeCw5YNWEgnC/TD0=
Subject key identifier: 3A:8F:86:75:E0:57:5B:04:E2:A3:47:79:71:F0:95:41:F3:34:28:D8
Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Certificate issuer: /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Certificate serial: 019881D52CF81E75991560ADF67AE3D9B17E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
Manifest number: 1623
Signing time: Thu 07 Aug 2025 00:01:28 +0000
Manifest this update: Thu 07 Aug 2025 00:01:28 +0000
Manifest next update: Fri 08 Aug 2025 00:01:28 +0000
Files and hashes: 1: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl (hash: c+LRQwCs1j9JJ208xAEbAi5lJ8h8IZhGutMd3q0hnKI=)
2: rIuFBAfmvp_-lxNjPhpoImYAjZk.roa (hash: UYHTUbb1Al1rBA78c79sngeNx1JvlEPhDvWJaFDSi+E=)
3: y4ueXY0ijBf4RZb4fGJVsXQLGA0.roa (hash: UvuMlXoUYXPwY2R/r9zwqG0BA2XfWQY7ClxJAXl4TJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:2c:f8:1e:75:99:15:60:ad:f6:7a:e3:d9:b1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Validity
Not Before: Aug 7 00:01:28 2025 GMT
Not After : Aug 8 00:01:28 2025 GMT
Subject: CN=3a8f8675e0575b04e2a3477971f09541f33428d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:88:42:47:65:87:eb:33:cd:2f:1e:ae:1a:e9:
af:e9:ce:b8:0d:c5:c6:f0:95:09:fc:8c:b2:6b:4d:
2e:b4:70:3e:49:7c:5e:47:e5:d3:a1:e5:2d:3a:61:
ac:ee:94:30:46:c1:87:42:5f:f8:d5:03:08:84:80:
3f:72:14:b8:b4:21:b3:b1:d8:4c:90:90:ee:cd:92:
ec:a8:1b:0e:00:4e:dc:62:10:88:1a:0d:11:a1:fb:
9c:7f:c6:41:09:dd:ae:14:25:2b:55:37:f2:d2:1f:
0d:e4:41:e5:f7:d2:f3:d4:64:d3:41:7e:1a:0c:3b:
68:ab:4c:53:db:64:74:7e:1e:07:f9:ec:4c:59:f0:
bf:a3:d8:c9:08:9c:1c:cb:a2:aa:b1:67:18:7f:79:
c6:a2:f0:ef:ac:d6:8c:aa:4b:9b:5b:dc:17:56:ad:
22:49:37:ea:c2:c3:92:40:a1:aa:ac:93:51:35:a0:
23:ef:b8:0c:2e:ab:30:e2:0f:e0:0a:06:cb:9e:d5:
26:a0:e9:7a:21:5c:73:7a:8f:72:27:91:d7:0e:52:
3a:2e:86:5a:5b:e2:ba:48:d3:cb:86:bd:d2:7e:97:
01:21:5e:9f:6b:62:20:7a:bd:04:0f:8f:47:8d:6e:
e9:94:4f:15:ad:7e:00:56:8b:4a:e3:c4:e6:92:18:
5e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8F:86:75:E0:57:5B:04:E2:A3:47:79:71:F0:95:41:F3:34:28:D8
X509v3 Authority Key Identifier:
keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:df:72:ff:61:da:4c:3c:01:5b:dc:8d:ac:e3:1c:e2:2a:16:
86:ff:21:f1:1e:4b:ed:06:37:94:d2:aa:36:22:f0:86:db:e5:
1b:6e:58:95:85:11:73:c2:a0:c4:2b:00:80:40:7b:3c:7b:a2:
6d:98:ae:7d:39:ff:47:09:ce:e9:1e:a3:57:4b:6d:56:a9:30:
0c:80:b0:68:d7:e2:db:f7:8e:90:c1:51:36:55:2d:2f:16:86:
b1:ff:fa:90:a8:57:54:b7:71:d6:4b:4e:9e:8f:9a:de:03:83:
b4:4e:4a:53:1f:ba:21:a4:a5:57:2a:17:d0:58:86:6d:66:1f:
df:80:ca:5d:17:31:2e:cb:cd:64:b1:1e:2d:40:a4:91:61:67:
8b:ed:2c:aa:bc:ac:25:94:e4:98:b9:62:c9:a7:17:97:b7:7e:
a7:74:c0:b6:b1:3f:61:83:ab:3b:d7:14:24:df:90:c7:f7:d0:
6d:a7:77:96:a9:8b:1f:b1:87:28:f5:2d:ec:5e:3e:c0:fe:3a:
6e:08:07:60:30:68:1c:2e:bc:d5:a0:df:a7:bd:1d:07:7a:89:
f2:2b:97:31:6d:14:91:ba:7e:1c:39:b4:93:fe:5c:30:7c:b1:
de:38:ed:33:62:6d:8f:95:88:fd:fd:19:70:88:83:38:7f:ee:
54:d6:31:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiB1Sz4HnWZFWCt9nrj2bF+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNmVkZjIzMjY0YjQzODIxZGFlOTdkMTBiZDM2NGNiNmJi
N2YyMzQwHhcNMjUwODA3MDAwMTI4WhcNMjUwODA4MDAwMTI4WjAzMTEwLwYDVQQD
EygzYThmODY3NWUwNTc1YjA0ZTJhMzQ3Nzk3MWYwOTU0MWYzMzQyOGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYhCR2WH6zPNLx6uGumv6c64DcXG
8JUJ/Iyya00utHA+SXxeR+XToeUtOmGs7pQwRsGHQl/41QMIhIA/chS4tCGzsdhM
kJDuzZLsqBsOAE7cYhCIGg0Rofucf8ZBCd2uFCUrVTfy0h8N5EHl99Lz1GTTQX4a
DDtoq0xT22R0fh4H+exMWfC/o9jJCJwcy6KqsWcYf3nGovDvrNaMqkubW9wXVq0i
STfqwsOSQKGqrJNRNaAj77gMLqsw4g/gCgbLntUmoOl6IVxzeo9yJ5HXDlI6LoZa
W+K6SNPLhr3SfpcBIV6fa2Iger0ED49HjW7plE8VrX4AVotK48TmkhheAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqPhnXgV1sE4qNHeXHwlUHzNCjYMB8GA1UdIwQY
MBaAFCpu3yMmS0OCHa6X0QvTZMtrt/I0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS203Zkl5WkxRNElkcnBmUkM5Tmt5MnUzOGpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS85YmI0MGQtMzYzOC00NDllLWFlMjUt
ZDQyOGYyMzQ5NjYwLzEvS203Zkl5WkxRNElkcnBmUkM5Tmt5MnUzOGpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS85YmI0MGQtMzYzOC00NDllLWFlMjUtZDQyOGYyMzQ5NjYw
LzEvS203Zkl5WkxRNElkcnBmUkM5Tmt5MnUzOGpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdt9y/2Ha
TDwBW9yNrOMc4ioWhv8h8R5L7QY3lNKqNiLwhtvlG25YlYURc8KgxCsAgEB7PHui
bZiufTn/RwnO6R6jV0ttVqkwDICwaNfi2/eOkMFRNlUtLxaGsf/6kKhXVLdx1ktO
no+a3gODtE5KUx+6IaSlVyoX0FiGbWYf34DKXRcxLsvNZLEeLUCkkWFni+0sqrys
JZTkmLliyacXl7d+p3TAtrE/YYOrO9cUJN+Qx/fQbad3lqmLH7GHKPUt7F4+wP46
bggHYDBoHC681aDfp70dB3qJ8iuXMW0Ukbp+HDm0k/5cMHyx3jjtM2Jtj5WI/f0Z
cIiDOH/uVNYxAg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:01:40 2025 by rpki-client