Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
File: klA6rxJq980DHKw84eOYwXS4LgI.mft (raw, json)
Hash identifier: FmdOsbklNJtF/Y8oDSyC9pw9+MOhishW5UZbZlR1Ifk=
Subject key identifier: 62:DA:F3:B3:24:53:83:E9:33:A0:BE:88:87:9E:32:20:0E:32:AF:8A
Authority key identifier: 92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02
Certificate issuer: /CN=92503aaf126af7cd031cac3ce1e398c174b82e02
Certificate serial: 019898259748FD921C7896D8D1B5AFC47014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
Manifest number: 0D8D
Signing time: Mon 11 Aug 2025 08:00:56 +0000
Manifest this update: Mon 11 Aug 2025 08:00:56 +0000
Manifest next update: Tue 12 Aug 2025 08:00:56 +0000
Files and hashes: 1: LyKlqkZe1vL0FqTF3iiSvFK7hTQ.roa (hash: 2Vj99SsHB7IFNM1FIg40rxpKy12rqtdylkU9a0vtpMc=)
2: klA6rxJq980DHKw84eOYwXS4LgI.crl (hash: wbHppTqqwrDxujX5jH8w6a/Nm3g/p01lRFeWtStpFY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:25:97:48:fd:92:1c:78:96:d8:d1:b5:af:c4:70:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92503aaf126af7cd031cac3ce1e398c174b82e02
Validity
Not Before: Aug 11 08:00:56 2025 GMT
Not After : Aug 12 08:00:56 2025 GMT
Subject: CN=62daf3b3245383e933a0be88879e32200e32af8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:82:92:d9:3d:05:27:6f:f1:b6:ca:11:57:70:
c9:23:60:30:ca:cc:e2:0d:1a:36:85:09:60:f2:56:
2e:ca:1c:5c:cd:37:5b:e4:cb:64:91:b6:07:f8:4f:
70:b6:94:eb:95:da:44:82:35:59:26:30:4a:c7:f0:
a0:60:bd:5f:2e:54:b0:07:8b:d5:9a:2e:c7:fe:59:
be:9a:ac:1a:68:aa:fb:cc:4f:3a:c5:6d:5c:39:db:
fb:05:15:56:c6:4f:72:6a:70:ff:fa:c4:3a:a0:4a:
3f:1e:cd:38:c1:52:22:a2:a0:a8:5c:f4:fc:20:82:
39:24:b8:4b:06:d3:d9:04:53:aa:6a:3b:40:a8:a2:
f2:b8:bc:d3:c1:9d:8e:aa:3a:f4:d9:bf:43:91:a0:
83:71:d9:ee:ea:c9:dc:b7:08:e7:1a:c9:e1:ad:d9:
48:55:26:58:7f:83:3c:ce:4c:6c:1c:c2:8f:53:ad:
f0:21:5c:92:29:73:09:8e:07:b6:cc:e5:96:46:e7:
75:c6:59:d8:71:ba:8d:0e:99:86:03:f5:3e:7a:b2:
71:62:34:1a:c9:ea:24:5e:73:c7:e5:8e:9a:10:9d:
ed:13:8b:e1:ed:e2:d1:c4:a6:0d:85:ad:27:d3:02:
d6:ec:63:5b:a6:10:6a:50:eb:f9:9a:e3:52:f9:ee:
06:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DA:F3:B3:24:53:83:E9:33:A0:BE:88:87:9E:32:20:0E:32:AF:8A
X509v3 Authority Key Identifier:
keyid:92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f7:a5:d3:52:d1:47:9b:1a:22:4e:f4:a8:e0:78:32:0b:5b:
89:80:c6:76:da:88:2f:37:8d:b6:e3:93:7c:39:e0:7f:f6:15:
d1:d8:3d:a6:02:ad:d1:9f:02:5c:37:96:c3:5a:d4:60:d7:03:
60:36:c7:38:d8:3d:6c:b6:3f:d6:4a:84:5c:65:5c:ae:81:6a:
5e:7a:6b:9d:81:fd:db:ad:67:b2:7f:a8:e1:96:98:86:50:a0:
e2:f5:c5:07:eb:43:32:bd:6b:bf:5d:08:cb:5d:43:15:ec:75:
f3:84:ec:ae:10:41:00:74:1a:63:2d:3e:5b:99:fb:63:46:b4:
77:d7:ef:d8:73:ba:27:2a:17:bc:a7:67:74:aa:e5:80:69:2c:
c2:07:8c:f0:07:47:3f:bf:d9:1f:8b:3a:e3:1f:21:9b:46:f5:
3e:d4:4b:0b:6a:a3:d8:80:9b:1c:c2:81:91:cc:9b:0a:ce:18:
7a:b4:b5:0b:bd:38:ab:ce:78:b6:c1:bc:80:1a:46:6c:cc:9e:
c9:03:c1:aa:1e:ab:10:37:65:dd:04:cf:5d:73:9f:70:f1:5e:
a7:7b:83:49:92:18:bf:b0:96:54:b6:7e:7a:1d:6f:1c:87:e2:
25:17:d6:52:4f:18:40:29:0b:01:49:75:f0:6a:56:5e:d8:30:
d7:dc:c8:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiYJZdI/ZIceJbY0bWvxHAUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTAzYWFmMTI2YWY3Y2QwMzFjYWMzY2UxZTM5OGMxNzRi
ODJlMDIwHhcNMjUwODExMDgwMDU2WhcNMjUwODEyMDgwMDU2WjAzMTEwLwYDVQQD
Eyg2MmRhZjNiMzI0NTM4M2U5MzNhMGJlODg4NzllMzIyMDBlMzJhZjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoKS2T0FJ2/xtsoRV3DJI2Awyszi
DRo2hQlg8lYuyhxczTdb5MtkkbYH+E9wtpTrldpEgjVZJjBKx/CgYL1fLlSwB4vV
mi7H/lm+mqwaaKr7zE86xW1cOdv7BRVWxk9yanD/+sQ6oEo/Hs04wVIioqCoXPT8
III5JLhLBtPZBFOqajtAqKLyuLzTwZ2Oqjr02b9DkaCDcdnu6snctwjnGsnhrdlI
VSZYf4M8zkxsHMKPU63wIVySKXMJjge2zOWWRud1xlnYcbqNDpmGA/U+erJxYjQa
yeokXnPH5Y6aEJ3tE4vh7eLRxKYNha0n0wLW7GNbphBqUOv5muNS+e4GMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLa87MkU4PpM6C+iIeeMiAOMq+KMB8GA1UdIwQY
MBaAFJJQOq8SavfNAxysPOHjmMF0uC4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xBNnJ4SnE5ODBESEt3ODRlT1l3WFM0TGdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83OWJkYjAtYmQ1Yy00ODAwLTk3Njgt
YWZkMTI2OGZkYmZkLzEva2xBNnJ4SnE5ODBESEt3ODRlT1l3WFM0TGdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83OWJkYjAtYmQ1Yy00ODAwLTk3NjgtYWZkMTI2OGZkYmZk
LzEva2xBNnJ4SnE5ODBESEt3ODRlT1l3WFM0TGdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsvel01LR
R5saIk70qOB4MgtbiYDGdtqILzeNtuOTfDngf/YV0dg9pgKt0Z8CXDeWw1rUYNcD
YDbHONg9bLY/1kqEXGVcroFqXnprnYH9261nsn+o4ZaYhlCg4vXFB+tDMr1rv10I
y11DFex184TsrhBBAHQaYy0+W5n7Y0a0d9fv2HO6JyoXvKdndKrlgGkswgeM8AdH
P7/ZH4s64x8hm0b1PtRLC2qj2ICbHMKBkcybCs4YerS1C704q854tsG8gBpGbMye
yQPBqh6rEDdl3QTPXXOfcPFep3uDSZIYv7CWVLZ+eh1vHIfiJRfWUk8YQCkLAUl1
8GpWXtgw19zI9A==
-----END CERTIFICATE-----
Generated at Mon Aug 11 12:52:39 2025 by rpki-client