Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
File: kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft (raw, json)
Hash identifier: c+i2QBYFbBeeBR+Nk7FfiecO9vcXmCCPKb02MGrIduo=
Subject key identifier: 1E:84:BF:72:0C:0D:12:EF:30:5A:20:BD:0B:65:76:76:51:7B:41:F1
Authority key identifier: 91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
Certificate issuer: /CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Certificate serial: 019894B86D7B418D07B1040112195D727865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
Manifest number: 1625
Signing time: Sun 10 Aug 2025 16:02:51 +0000
Manifest this update: Sun 10 Aug 2025 16:02:51 +0000
Manifest next update: Mon 11 Aug 2025 16:02:51 +0000
Files and hashes: 1: KWOjeTqrWS2bhx1qeVkVPGbzw7c.roa (hash: XUqhrwHbJF26mG4HYcUUQFE+zak+QHQ/0xU36G+fK8E=)
2: kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl (hash: zpLo31Z6OaaL1BzSUHPplc/f4V+3in1h256boAJC1iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b8:6d:7b:41:8d:07:b1:04:01:12:19:5d:72:78:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Validity
Not Before: Aug 10 16:02:51 2025 GMT
Not After : Aug 11 16:02:51 2025 GMT
Subject: CN=1e84bf720c0d12ef305a20bd0b657676517b41f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:94:75:f7:9e:a3:67:59:45:57:86:a5:00:56:
4a:5c:b0:9d:6a:5c:ec:fe:10:f6:73:5b:6e:1c:81:
d6:6c:69:a0:df:ab:c3:23:0c:60:ee:23:56:65:bb:
14:c2:c1:a8:b9:5d:82:05:b5:17:b9:ae:61:d6:ec:
14:90:05:b0:0e:83:3a:c2:4c:f5:c6:c1:a7:92:cd:
86:bd:ea:ce:30:20:73:b6:5a:e9:4b:cf:ed:a1:f0:
3c:88:43:6a:5b:f0:f5:20:9d:ce:5e:9c:6d:2b:28:
87:08:a6:c0:97:a2:aa:b8:71:5b:48:8a:8f:a3:10:
2a:40:1d:fb:96:88:cb:29:f5:48:e1:1f:6d:44:f9:
02:87:0d:e3:80:1a:a6:e3:8d:d1:67:fa:67:b5:54:
5a:29:de:50:a6:07:04:b4:19:b3:0d:09:2c:d8:c5:
08:05:89:f8:da:f7:36:43:21:4d:c6:bc:c2:35:10:
7c:59:8c:9f:b3:03:9c:e8:64:d5:5c:87:d0:09:ed:
c5:20:ed:9e:f7:ae:0c:d9:8f:f2:c6:88:5f:61:76:
e7:98:70:6e:17:e1:fa:15:2b:6c:65:7c:32:31:41:
23:3f:ee:93:4d:2a:7c:10:d0:82:8a:3d:18:a6:8c:
f3:62:6e:d5:ea:72:dd:ea:a1:65:81:aa:a6:18:ac:
b5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:84:BF:72:0C:0D:12:EF:30:5A:20:BD:0B:65:76:76:51:7B:41:F1
X509v3 Authority Key Identifier:
keyid:91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:64:ac:cf:2a:03:5e:f3:43:d5:4f:fa:70:8d:46:29:9d:79:
6e:12:df:ec:57:e8:51:d0:68:1b:fb:8c:31:ac:85:d5:7c:a2:
16:0e:89:62:47:eb:62:6f:05:31:ff:a7:5b:e7:e9:58:74:32:
fb:e1:95:f9:0b:bc:96:87:91:08:49:72:52:bf:b0:c5:7b:1c:
16:f2:7c:78:ea:81:10:ab:40:d1:ba:04:ae:a5:ca:0d:38:cd:
47:0e:45:56:fb:e7:3e:d7:bb:b3:6f:d0:bb:ac:b3:a1:80:25:
f5:8d:84:c9:eb:db:55:e6:ed:ba:5d:a6:ca:0c:41:c8:6d:b7:
7f:c9:f1:85:f1:70:be:5a:9f:74:d4:96:27:bb:08:35:7d:72:
a8:ec:77:9a:b2:f8:1a:0d:07:c5:94:62:64:dd:75:bd:66:0d:
67:73:bf:36:38:1f:f9:df:46:86:16:3d:4a:34:4a:57:7d:62:
70:36:7e:be:59:f4:b2:ee:dc:6e:8b:09:91:d3:45:f8:76:07:
0d:76:ae:e1:d3:b7:96:dd:4e:39:3b:01:7e:24:ef:d4:75:6b:
f1:f8:1e:af:2e:f6:b6:9c:82:81:c9:6e:a4:f7:7b:86:b8:1b:
6c:a3:89:e9:a3:93:ce:b8:5a:e4:3d:cc:80:1e:57:52:8a:3c:
58:7c:84:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUuG17QY0HsQQBEhldcnhlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxOTRiODU3YzAzN2E3ZDdjYjA1NzVlMzU4MjNlNWUyODAz
MmJkYTMwHhcNMjUwODEwMTYwMjUxWhcNMjUwODExMTYwMjUxWjAzMTEwLwYDVQQD
EygxZTg0YmY3MjBjMGQxMmVmMzA1YTIwYmQwYjY1NzY3NjUxN2I0MWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35R1956jZ1lFV4alAFZKXLCdalzs
/hD2c1tuHIHWbGmg36vDIwxg7iNWZbsUwsGouV2CBbUXua5h1uwUkAWwDoM6wkz1
xsGnks2GverOMCBztlrpS8/tofA8iENqW/D1IJ3OXpxtKyiHCKbAl6KquHFbSIqP
oxAqQB37lojLKfVI4R9tRPkChw3jgBqm443RZ/pntVRaKd5QpgcEtBmzDQks2MUI
BYn42vc2QyFNxrzCNRB8WYyfswOc6GTVXIfQCe3FIO2e964M2Y/yxohfYXbnmHBu
F+H6FStsZXwyMUEjP+6TTSp8ENCCij0YpozzYm7V6nLd6qFlgaqmGKy1KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6Ev3IMDRLvMFogvQtldnZRe0HxMB8GA1UdIwQY
MBaAFJGUuFfAN6fXywV141gj5eKAMr2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1pTNFY4QTNwOWZMQlhYaldDUGw0b0F5dmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zN2FjNTktODUyOS00YWM5LWJhNGUt
M2JmN2Q3Nzc0OWFiLzEva1pTNFY4QTNwOWZMQlhYaldDUGw0b0F5dmFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zN2FjNTktODUyOS00YWM5LWJhNGUtM2JmN2Q3Nzc0OWFi
LzEva1pTNFY4QTNwOWZMQlhYaldDUGw0b0F5dmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWSszyoD
XvND1U/6cI1GKZ15bhLf7FfoUdBoG/uMMayF1XyiFg6JYkfrYm8FMf+nW+fpWHQy
++GV+Qu8loeRCElyUr+wxXscFvJ8eOqBEKtA0boErqXKDTjNRw5FVvvnPte7s2/Q
u6yzoYAl9Y2EyevbVebtul2mygxByG23f8nxhfFwvlqfdNSWJ7sINX1yqOx3mrL4
Gg0HxZRiZN11vWYNZ3O/Njgf+d9GhhY9SjRKV31icDZ+vln0su7cbosJkdNF+HYH
DXau4dO3lt1OOTsBfiTv1HVr8fgery72tpyCgclupPd7hrgbbKOJ6aOTzrha5D3M
gB5XUoo8WHyEEg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 01:48:50 2025 by rpki-client