Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
File: kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json)
Hash identifier: mCHa5DrBXziW2y2q0zfdcfAQOOVCHXHQ36c78J3ewTo=
Subject key identifier: 8C:34:1A:AA:B1:97:86:8D:78:83:9D:2B:CF:6D:A8:3A:F0:59:D6:4D
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial: 0198819DA2FEACA23519E546B610C58C78C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
Manifest number: 1622
Signing time: Wed 06 Aug 2025 23:00:48 +0000
Manifest this update: Wed 06 Aug 2025 23:00:48 +0000
Manifest next update: Thu 07 Aug 2025 23:00:48 +0000
Files and hashes: 1: 9kHCDEYZPWH5aik7KavJ0sDUmNA.roa (hash: ijJR9ND92QYljIrNDlxEINq6c8DaInEaO2V/WhuFgzU=)
2: Mdtn2WNSBNsE9Aa9ivpouspTZzc.roa (hash: S9ae068y1S4PtOCQAT0sFXCH1rFhFv4f3zsh6JDJIEk=)
3: ZgG20-53jQJwsyA9Uj-HDlUNiyA.roa (hash: r4Yw7FV6MragLYSnWbxNhJIL4Bz5tpt7zooYhdKRX2U=)
4: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: uSVexK5/iTqjwKefY8t/GMlm1Xcgl+SNEMOhVFF9eLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:a2:fe:ac:a2:35:19:e5:46:b6:10:c5:8c:78:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
Validity
Not Before: Aug 6 23:00:48 2025 GMT
Not After : Aug 7 23:00:48 2025 GMT
Subject: CN=8c341aaab197868d78839d2bcf6da83af059d64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:48:67:1d:a1:ee:70:25:3f:24:7b:12:7f:80:
01:c3:c2:6d:69:57:55:8d:d9:7a:c8:13:89:0b:b8:
8c:9b:2e:82:7b:72:56:f6:3e:f2:73:fb:ad:7b:6e:
94:5c:45:8d:f3:1c:38:f8:36:b6:93:b2:db:20:6c:
62:39:bf:14:8f:8a:a9:86:62:c1:90:3d:99:67:c7:
a5:63:b4:95:cd:2a:87:76:39:00:fc:cc:db:4d:07:
1c:3b:3f:86:bd:4b:72:1e:8d:6a:85:bb:e1:4f:0e:
e4:aa:eb:d7:7e:cb:fc:c6:4a:13:2b:e4:ff:a8:76:
08:8d:ce:52:69:5f:cb:12:84:85:fd:02:ed:de:ed:
71:a1:5a:5e:f0:d8:d1:8c:76:14:fe:e2:df:36:c9:
48:32:d8:f4:5b:5a:20:8e:1f:0e:f6:b9:c0:fa:fa:
3c:0b:e8:85:dd:6c:26:d5:62:77:99:13:bf:4d:9b:
40:35:34:67:14:fa:09:13:4f:81:47:d0:6e:d4:21:
50:18:75:77:fe:f2:5d:4f:3e:f3:4c:25:c2:c5:69:
7a:7d:2d:61:01:cc:28:84:1c:b4:f7:27:a9:76:39:
07:c9:3c:6a:68:75:b4:d1:6e:c8:56:50:e0:f5:01:
ad:45:1e:73:c5:ef:08:67:f6:fd:bd:c1:67:e4:12:
26:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:34:1A:AA:B1:97:86:8D:78:83:9D:2B:CF:6D:A8:3A:F0:59:D6:4D
X509v3 Authority Key Identifier:
keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ef:84:09:0d:e6:b4:8f:53:72:a8:49:83:c2:22:ce:c9:82:
22:bd:fd:54:d4:89:46:24:9f:af:b0:33:59:81:a6:ac:8a:c6:
50:b1:3f:81:bd:52:a7:6c:f0:9e:8b:c2:51:ad:c4:8f:0d:62:
62:4e:b0:e1:98:eb:8f:2f:3d:c3:0c:41:12:8b:a2:09:7a:2a:
1e:7d:af:47:1d:1c:0f:aa:9b:1d:7a:91:75:db:13:14:89:72:
8a:dd:84:0c:d6:cb:68:1b:f5:5b:b3:98:30:7b:75:8f:a3:5f:
73:bd:21:b6:61:3a:90:53:fb:20:be:67:7e:03:77:1c:27:56:
bb:8c:2a:0b:96:a5:fe:56:f8:34:29:03:92:98:6a:d5:30:2e:
3c:d4:e8:66:6b:30:bd:30:fe:c3:ca:1e:6f:d6:c9:84:09:db:
81:dc:19:17:93:5c:58:7b:b7:b5:6e:4a:c4:a2:f0:9b:18:9a:
3e:fd:d8:bc:d1:6b:0b:6e:61:d9:59:2a:2d:ab:3d:99:b7:bc:
49:49:5a:64:4c:ff:bd:3c:cc:d6:d8:57:f8:44:84:5f:ef:37:
8b:b8:79:ee:37:71:14:6d:cd:f8:0f:7e:53:a1:52:fc:6e:08:
a1:0b:84:b6:ed:aa:a0:62:64:8d:04:84:62:71:52:d8:2c:be:
5c:38:d0:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBnaL+rKI1GeVGthDFjHjGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyM2EyYjNkZDc2NjcyNzVmMDk4ODZkZjdkYTA3OWY3NTVj
ZWVkNTkwHhcNMjUwODA2MjMwMDQ4WhcNMjUwODA3MjMwMDQ4WjAzMTEwLwYDVQQD
Eyg4YzM0MWFhYWIxOTc4NjhkNzg4MzlkMmJjZjZkYTgzYWYwNTlkNjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUhnHaHucCU/JHsSf4ABw8JtaVdV
jdl6yBOJC7iMmy6Ce3JW9j7yc/ute26UXEWN8xw4+Da2k7LbIGxiOb8Uj4qphmLB
kD2ZZ8elY7SVzSqHdjkA/MzbTQccOz+GvUtyHo1qhbvhTw7kquvXfsv8xkoTK+T/
qHYIjc5SaV/LEoSF/QLt3u1xoVpe8NjRjHYU/uLfNslIMtj0W1ogjh8O9rnA+vo8
C+iF3Wwm1WJ3mRO/TZtANTRnFPoJE0+BR9Bu1CFQGHV3/vJdTz7zTCXCxWl6fS1h
AcwohBy09yepdjkHyTxqaHW00W7IVlDg9QGtRR5zxe8IZ/b9vcFn5BImUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIw0Gqqxl4aNeIOdK89tqDrwWdZNMB8GA1UdIwQY
MBaAFJI6Kz3XZnJ18JiG332gefdVzu1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iNzk2ZjQtMmU4OC00ZWFhLWEyNjkt
MjczOGJjYjQzZDZkLzEva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iNzk2ZjQtMmU4OC00ZWFhLWEyNjktMjczOGJjYjQzZDZk
LzEva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANO+ECQ3m
tI9TcqhJg8IizsmCIr39VNSJRiSfr7AzWYGmrIrGULE/gb1Sp2zwnovCUa3Ejw1i
Yk6w4Zjrjy89wwxBEouiCXoqHn2vRx0cD6qbHXqRddsTFIlyit2EDNbLaBv1W7OY
MHt1j6Nfc70htmE6kFP7IL5nfgN3HCdWu4wqC5al/lb4NCkDkphq1TAuPNToZmsw
vTD+w8oeb9bJhAnbgdwZF5NcWHu3tW5KxKLwmxiaPv3YvNFrC25h2VkqLas9mbe8
SUlaZEz/vTzM1thX+ESEX+83i7h57jdxFG3N+A9+U6FS/G4IoQuEtu2qoGJkjQSE
YnFS2Cy+XDjQeA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:10:07 2025 by rpki-client