Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
File: kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft (raw, json)
Hash identifier: k8RBbYhEJXq1+1puZPB+HKGGHDS+hyG0+3ec7goiK+Q=
Subject key identifier: 50:A4:CE:75:55:03:02:EA:DE:C0:5D:7C:86:79:7F:99:E5:8C:EA:5C
Authority key identifier: 92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
Certificate issuer: /CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Certificate serial: 0198729858152AA8A020ED4E182EA56A1F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
Manifest number: 1226
Signing time: Mon 04 Aug 2025 01:00:43 +0000
Manifest this update: Mon 04 Aug 2025 01:00:43 +0000
Manifest next update: Tue 05 Aug 2025 01:00:43 +0000
Files and hashes: 1: 4deHnJPEkHi_Z6AsiwPaIpTKDAs.roa (hash: F92p4CywFS49zy5OOP8oYTx9eXX41zQ2otjtVHTvTfc=)
2: WvlZiKlby6mz_WZr2UVe0cYuFc8.roa (hash: Y5kWltccMkWlbHWE6g816b2afq8ovZonUhJQEFz4q4A=)
3: kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl (hash: uxDrh4zyUsFQ8PVwdMVMeqfws76zuI0e1BM34WBMjMk=)
4: uYHKtKuRAQeHOfD7lB4qDgo66SU.roa (hash: t+Ob5Y5NgLCxa3TxH9Z/GTAtTAwcsjfnwDTYcaden8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:58:15:2a:a8:a0:20:ed:4e:18:2e:a5:6a:1f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Validity
Not Before: Aug 4 01:00:43 2025 GMT
Not After : Aug 5 01:00:43 2025 GMT
Subject: CN=50a4ce75550302eadec05d7c86797f99e58cea5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:69:39:e8:1f:fc:c1:76:d4:86:d2:22:d2:
dc:d0:00:62:5e:80:0f:97:de:c3:2d:96:cf:fc:9e:
6e:2b:1a:d1:c7:33:25:5d:1a:d2:f6:8d:8d:45:8f:
43:1a:8d:a2:f9:3e:a1:5f:36:75:eb:e9:a4:dc:e9:
06:84:25:e9:8d:40:ce:7b:f5:77:4b:84:ac:f7:4b:
02:14:92:0f:1d:68:5f:1f:ee:63:64:6c:ae:9f:72:
f0:3a:5f:a5:e9:54:ca:5f:6c:22:8a:99:21:7f:e6:
34:08:0e:ec:a2:79:f4:df:ff:3a:a2:00:ef:e8:6a:
85:54:78:a2:c8:87:27:e1:d7:92:c2:88:b0:e4:f3:
7f:d9:f2:dc:5e:5a:65:a3:6d:ee:a0:b6:1d:75:2a:
4e:24:5c:34:86:5c:38:46:9d:9b:e0:a7:ef:e4:99:
7b:da:6a:e5:ab:17:19:96:ec:14:31:5e:d2:16:9e:
e5:06:ca:5a:0c:38:29:74:46:22:94:96:35:18:9a:
a5:5e:92:c2:2c:a8:d4:28:81:3e:aa:41:0b:57:8b:
d4:57:06:d2:52:f9:79:4c:44:17:13:a4:0e:11:1e:
bf:f7:79:2e:8e:84:ce:f3:bc:8b:91:48:3b:20:b1:
33:e2:f2:c1:6f:b2:32:96:31:b6:55:18:f2:e1:71:
0c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A4:CE:75:55:03:02:EA:DE:C0:5D:7C:86:79:7F:99:E5:8C:EA:5C
X509v3 Authority Key Identifier:
keyid:92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d9:69:0f:22:e4:ea:60:7b:9a:6b:49:ca:67:60:ff:95:44:
01:13:42:b5:92:a8:2e:1c:05:38:73:b8:25:14:25:cf:96:e0:
ca:37:df:66:d0:fd:a6:5f:aa:99:0a:a2:ea:36:10:0c:08:ba:
51:66:fa:81:37:d7:06:47:80:47:5b:2c:83:38:1f:ca:11:25:
89:15:9e:70:22:fd:24:63:17:58:04:c6:86:4d:57:43:28:c3:
61:9d:57:30:bf:c9:7b:69:f3:5e:12:b1:c4:c5:f6:51:2c:97:
37:09:93:be:c6:37:e5:b5:02:e1:ed:5b:73:aa:5c:98:7c:68:
0b:4b:4b:db:b1:38:9f:df:57:33:ed:b2:ea:63:fd:43:34:75:
1c:61:02:35:7d:e4:3b:ee:0f:09:c4:c9:90:6c:32:2b:9b:5d:
ec:83:9b:16:ca:9d:2b:81:4f:68:bf:fd:56:d9:29:72:2d:b7:
1c:5e:50:67:9f:32:0f:eb:b5:3f:5f:bb:02:63:82:a6:48:b6:
b3:8a:dd:5c:cc:ea:79:32:7e:67:e9:92:5e:65:47:af:2a:04:
4b:2b:8c:64:bb:04:52:0b:12:53:dc:1b:48:b0:6d:84:cc:f1:
05:e2:24:29:b5:6a:5e:d6:01:6d:f0:5e:51:9f:23:a3:09:9d:
0a:a7:60:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymFgVKqigIO1OGC6lah87MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZmI4ZmExMGRmZjM0NzNlNjUzZGJmNjFjOWE4NjQzMjE4
MGE1YzcwHhcNMjUwODA0MDEwMDQzWhcNMjUwODA1MDEwMDQzWjAzMTEwLwYDVQQD
Eyg1MGE0Y2U3NTU1MDMwMmVhZGVjMDVkN2M4Njc5N2Y5OWU1OGNlYTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxENpOegf/MF21IbSItLc0ABiXoAP
l97DLZbP/J5uKxrRxzMlXRrS9o2NRY9DGo2i+T6hXzZ16+mk3OkGhCXpjUDOe/V3
S4Ss90sCFJIPHWhfH+5jZGyun3LwOl+l6VTKX2wiipkhf+Y0CA7sonn03/86ogDv
6GqFVHiiyIcn4deSwoiw5PN/2fLcXlplo23uoLYddSpOJFw0hlw4Rp2b4Kfv5Jl7
2mrlqxcZluwUMV7SFp7lBspaDDgpdEYilJY1GJqlXpLCLKjUKIE+qkELV4vUVwbS
Uvl5TEQXE6QOER6/93kujoTO87yLkUg7ILEz4vLBb7IyljG2VRjy4XEMUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCkznVVAwLq3sBdfIZ5f5nljOpcMB8GA1UdIwQY
MBaAFJL7j6EN/zRz5lPb9hyahkMhgKXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3Z1UG9RM19OSFBtVTl2MkhKcUdReUdBcGNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9jNjRkNTAtZmNkZC00YTlmLTkwNDct
MjkzZjYxMjJhMTlkLzEva3Z1UG9RM19OSFBtVTl2MkhKcUdReUdBcGNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9jNjRkNTAtZmNkZC00YTlmLTkwNDctMjkzZjYxMjJhMTlk
LzEva3Z1UG9RM19OSFBtVTl2MkhKcUdReUdBcGNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtlpDyLk
6mB7mmtJymdg/5VEARNCtZKoLhwFOHO4JRQlz5bgyjffZtD9pl+qmQqi6jYQDAi6
UWb6gTfXBkeAR1ssgzgfyhEliRWecCL9JGMXWATGhk1XQyjDYZ1XML/Je2nzXhKx
xMX2USyXNwmTvsY35bUC4e1bc6pcmHxoC0tL27E4n99XM+2y6mP9QzR1HGECNX3k
O+4PCcTJkGwyK5td7IObFsqdK4FPaL/9Vtkpci23HF5QZ58yD+u1P1+7AmOCpki2
s4rdXMzqeTJ+Z+mSXmVHryoESyuMZLsEUgsSU9wbSLBthMzxBeIkKbVqXtYBbfBe
UZ8jowmdCqdgzg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:37 2025 by rpki-client