Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json)
Hash identifier: ngWSntn3+JVXLLRCLWakjOd9W+8r9UoJ/xsKLzH9+7I=
Subject key identifier: DD:6C:72:E3:98:2D:D5:EE:A0:D9:FF:B0:0C:D6:78:40:8D:09:C9:53
Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575
Certificate serial: 019889FBE4559ED6A398A98169CA85BED929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 14:00:43 +0000
Manifest this update: Fri 08 Aug 2025 14:00:43 +0000
Manifest next update: Sat 09 Aug 2025 14:00:43 +0000
Files and hashes: 1: aJJ-YdVMN1blRA6zgwpwFOSytEA.roa (hash: 18Fas5Pt/vlUe10SXqZ/nCZNIMF4HTl3m3WAOZlwA4Y=)
2: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: E0cfjPp1pUSJPmqo8BedBEOolPWO+tSfUDOd3XSV4VM=)
3: tAP5YUU5DttldDjJZneQqbjMnns.roa (hash: Wr2DWhImWg05UEtM87fECNOHzZETG/9GHlcwfpi8dUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:fb:e4:55:9e:d6:a3:98:a9:81:69:ca:85:be:d9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575
Validity
Not Before: Aug 8 14:00:43 2025 GMT
Not After : Aug 9 14:00:43 2025 GMT
Subject: CN=dd6c72e3982dd5eea0d9ffb00cd678408d09c953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b3:28:49:e5:39:ba:b9:59:42:ff:5b:d7:bd:
19:63:e3:75:2a:5d:b9:ce:4e:a4:cc:59:cb:53:1d:
f0:1d:b0:0c:bf:c3:25:4e:f7:e0:9b:d5:5f:9e:94:
fe:97:80:bb:31:00:bb:10:b4:f6:44:08:a0:df:d7:
9b:cb:bf:c0:b6:fb:05:6e:6a:a3:41:9f:c6:85:68:
ae:44:aa:2b:cd:d0:0b:cb:00:58:4c:d7:9d:09:49:
b3:e2:06:63:50:f2:93:60:fd:94:e9:25:90:83:dd:
a1:10:56:b0:9f:97:ec:3a:6a:33:35:d4:03:f6:bb:
b3:c1:11:41:a4:f7:90:a4:0f:74:b4:95:a4:80:1c:
d3:54:9e:91:4d:54:0a:8c:11:06:77:4a:97:9c:90:
9e:d3:f5:1e:00:6e:59:ad:5a:1d:87:5a:e7:8a:69:
cc:54:1b:6a:23:12:be:d6:18:25:78:f0:37:a0:9f:
15:da:a7:86:41:4e:17:64:c4:63:73:f3:dc:cd:4d:
60:45:cb:d3:41:60:05:c0:1d:66:d9:ed:eb:d0:4c:
62:fe:e2:28:dd:35:a8:2d:51:05:7f:f6:67:49:af:
d2:00:9c:69:6f:6c:dc:5a:17:88:2d:24:78:d9:ce:
f8:6e:c4:5d:78:6c:06:40:f9:79:76:55:4c:ca:87:
d1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6C:72:E3:98:2D:D5:EE:A0:D9:FF:B0:0C:D6:78:40:8D:09:C9:53
X509v3 Authority Key Identifier:
keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e9:5c:7b:94:e9:9d:64:0d:37:d0:d2:55:d8:37:87:ba:39:
31:cb:7a:0d:d2:b3:2d:83:0e:e5:8c:75:6c:ba:e6:2a:2c:a9:
c1:91:aa:ee:9c:da:be:5c:67:71:70:ca:4d:9c:b2:07:10:61:
2c:45:93:c3:5a:ec:1e:63:ec:1f:2f:fe:dd:b1:37:2d:17:e0:
21:17:e5:1e:6d:6c:63:3b:51:9b:7b:9a:e7:13:82:2e:71:ad:
40:33:d6:7f:3b:c7:d2:a2:af:b8:d9:0d:89:14:1b:9e:bc:20:
df:92:8c:85:18:9c:f3:f7:9a:f8:d3:55:85:80:48:f8:82:6b:
0e:2c:01:3e:32:8f:f0:38:d2:78:7f:6f:51:ad:79:5c:97:8f:
92:61:bb:69:4d:3e:5c:2b:fe:05:7c:4a:be:8d:0a:a6:f1:23:
5f:4b:06:03:c0:eb:86:52:db:76:b6:64:df:1a:e9:96:cf:c5:
d6:f0:88:07:85:0a:46:fa:1d:df:b5:e9:b4:d1:c1:c3:8f:39:
31:b8:e9:cf:f4:99:9f:51:26:be:0a:43:56:21:22:77:52:b8:
ea:b7:42:3d:2e:0f:cf:06:91:09:16:37:09:ce:e5:48:80:fb:
47:e3:5b:cc:5e:68:33:8c:96:9b:74:96:f5:18:96:04:00:05:
e5:d2:b6:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJ++RVntajmKmBacqFvtkpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZDhjMzJhNzAzOTcyYWFlYTA5M2EwMWY4ZGVkZjU3Zjk2
NzU1NzUwHhcNMjUwODA4MTQwMDQzWhcNMjUwODA5MTQwMDQzWjAzMTEwLwYDVQQD
EyhkZDZjNzJlMzk4MmRkNWVlYTBkOWZmYjAwY2Q2Nzg0MDhkMDljOTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrMoSeU5urlZQv9b170ZY+N1Kl25
zk6kzFnLUx3wHbAMv8MlTvfgm9VfnpT+l4C7MQC7ELT2RAig39eby7/AtvsFbmqj
QZ/GhWiuRKorzdALywBYTNedCUmz4gZjUPKTYP2U6SWQg92hEFawn5fsOmozNdQD
9ruzwRFBpPeQpA90tJWkgBzTVJ6RTVQKjBEGd0qXnJCe0/UeAG5ZrVodh1rnimnM
VBtqIxK+1hglePA3oJ8V2qeGQU4XZMRjc/PczU1gRcvTQWAFwB1m2e3r0Exi/uIo
3TWoLVEFf/ZnSa/SAJxpb2zcWheILSR42c74bsRdeGwGQPl5dlVMyofRAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1scuOYLdXuoNn/sAzWeECNCclTMB8GA1UdIwQY
MBaAFJHYwypwOXKq6gk6Afje31f5Z1V1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80ZTgxNmQtZDhlYy00MzdjLTk4NmEt
M2MxMjc4MWUyMDJkLzEva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC80ZTgxNmQtZDhlYy00MzdjLTk4NmEtM2MxMjc4MWUyMDJk
LzEva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOlce5Tp
nWQNN9DSVdg3h7o5Mct6DdKzLYMO5Yx1bLrmKiypwZGq7pzavlxncXDKTZyyBxBh
LEWTw1rsHmPsHy/+3bE3LRfgIRflHm1sYztRm3ua5xOCLnGtQDPWfzvH0qKvuNkN
iRQbnrwg35KMhRic8/ea+NNVhYBI+IJrDiwBPjKP8DjSeH9vUa15XJePkmG7aU0+
XCv+BXxKvo0KpvEjX0sGA8DrhlLbdrZk3xrpls/F1vCIB4UKRvod37XptNHBw485
Mbjpz/SZn1EmvgpDViEid1K46rdCPS4PzwaRCRY3Cc7lSID7R+NbzF5oM4yWm3SW
9RiWBAAF5dK2Zg==
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:31:49 2025 by rpki-client