Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
File: KkRyM2ydAqSIzdd1NNZfsUZewJo.mft (raw, json)
Hash identifier: QMC9v782AwE5adz0sSLyThBYpU+5QXCi1zeKJLGPY8o=
Subject key identifier: 03:5F:D8:E1:89:98:05:3A:19:9D:CC:77:F7:36:D5:73:4B:73:7D:43
Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
Certificate issuer: /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Certificate serial: 0198733D4CDC456EFF1C6146DDD558D8C18E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 04:00:53 +0000
Manifest this update: Mon 04 Aug 2025 04:00:53 +0000
Manifest next update: Tue 05 Aug 2025 04:00:53 +0000
Files and hashes: 1: KkRyM2ydAqSIzdd1NNZfsUZewJo.crl (hash: VjypGG/F3f/4HtqkTmOXK84MQgmZziHTrEoNccNKAW4=)
2: NPr8_e46sz8H4JR5QlVGvECNy6k.roa (hash: z5xILP0Xt/AwC2kYkY04BjCbsF3nJbNXJ0hJj+W9BVk=)
3: _x206HZGagtA6dAvfxStsmKc3n4.roa (hash: b78aj5rvx2Xy9g+pAEN4tSwQJDBl/+csOAL8uop4FGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:4c:dc:45:6e:ff:1c:61:46:dd:d5:58:d8:c1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Validity
Not Before: Aug 4 04:00:53 2025 GMT
Not After : Aug 5 04:00:53 2025 GMT
Subject: CN=035fd8e18998053a199dcc77f736d5734b737d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:12:f5:31:34:3c:31:42:1c:9e:e9:68:d8:
45:8f:d7:63:3e:58:e7:10:ed:53:2e:dc:b1:8a:50:
ad:c9:0e:31:6d:8c:bd:fc:05:c8:dd:01:20:ea:9b:
45:ef:1a:6a:73:dc:e6:4f:72:a3:f4:69:d3:ab:13:
8b:34:91:c6:7a:f1:29:fe:9d:6d:1a:eb:69:df:c3:
88:50:aa:35:d0:ab:85:f0:f9:f3:b9:b7:70:80:ee:
9d:50:50:50:37:83:a8:21:33:be:3f:85:e7:e0:d2:
a4:90:ad:e7:0b:bc:a8:27:aa:39:7b:f2:5d:49:37:
12:40:5b:6e:b9:14:31:42:c2:76:90:2b:1d:4f:26:
d8:58:93:d6:39:a0:18:c1:86:71:c8:ad:e9:aa:bb:
f3:bc:41:07:c7:e6:5b:10:43:8a:ff:8d:b0:3c:a7:
12:54:9c:54:7f:ca:c4:b6:78:27:80:cc:1d:39:c2:
e7:09:41:b9:91:6b:9a:6f:31:bc:66:e7:3e:6f:ca:
ea:09:bb:92:5d:a3:f2:3c:cf:b4:a5:57:d1:65:e1:
82:b6:b4:7c:0c:15:30:49:cc:ef:43:40:a8:35:a9:
79:81:34:2c:0a:13:33:fe:9f:6c:2b:7f:0a:c3:d8:
3b:50:a6:fd:f9:a1:28:8f:55:f4:91:15:f8:4e:6d:
72:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5F:D8:E1:89:98:05:3A:19:9D:CC:77:F7:36:D5:73:4B:73:7D:43
X509v3 Authority Key Identifier:
keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8a:9c:ea:27:cd:9e:75:e2:94:db:e8:a2:8f:3f:48:ba:28:
17:9f:f7:46:af:1e:31:71:de:d3:61:87:8e:69:35:41:15:fc:
a6:a3:9c:8e:0f:8d:32:b0:41:c9:bf:77:64:e0:ba:f2:35:78:
b5:9a:4e:bb:17:27:ae:7c:6b:4d:68:4c:2c:ff:75:95:82:5c:
67:fe:b8:9e:fe:cc:62:c1:1b:31:18:41:d1:45:11:ae:f2:86:
ee:d4:61:f8:e1:7a:35:16:44:11:95:db:33:db:48:5c:2b:78:
f6:b7:02:f4:5a:71:ce:c6:63:50:ce:42:31:20:92:9c:76:bc:
16:5d:78:da:54:8d:e5:9a:6c:a2:d9:b6:1b:59:ff:8a:50:fa:
9a:7b:92:35:e1:d6:9c:26:f0:73:6e:af:d4:7b:ab:40:45:a0:
41:ef:f4:68:5e:99:cc:6b:dc:cf:98:7a:7e:c8:ca:3b:13:52:
a7:f6:ae:ec:c4:1e:2d:80:2b:29:45:e0:24:19:6d:9c:e7:e5:
42:b8:19:1c:31:b0:7d:ec:6c:b4:18:bc:9b:99:c9:98:cb:66:
9b:17:fc:38:2c:00:77:57:48:d5:9c:bf:72:0b:7e:f6:15:73:
be:77:2e:cb:0e:5c:45:97:cf:24:cc:59:3c:3c:c0:5b:a3:96:
04:80:c3:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPUzcRW7/HGFG3dVY2MGOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNDQ3MjMzNmM5ZDAyYTQ4OGNkZDc3NTM0ZDY1ZmIxNDY1
ZWMwOWEwHhcNMjUwODA0MDQwMDUzWhcNMjUwODA1MDQwMDUzWjAzMTEwLwYDVQQD
EygwMzVmZDhlMTg5OTgwNTNhMTk5ZGNjNzdmNzM2ZDU3MzRiNzM3ZDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS4S9TE0PDFCHJ7paNhFj9djPljn
EO1TLtyxilCtyQ4xbYy9/AXI3QEg6ptF7xpqc9zmT3Kj9GnTqxOLNJHGevEp/p1t
Gutp38OIUKo10KuF8PnzubdwgO6dUFBQN4OoITO+P4Xn4NKkkK3nC7yoJ6o5e/Jd
STcSQFtuuRQxQsJ2kCsdTybYWJPWOaAYwYZxyK3pqrvzvEEHx+ZbEEOK/42wPKcS
VJxUf8rEtngngMwdOcLnCUG5kWuabzG8Zuc+b8rqCbuSXaPyPM+0pVfRZeGCtrR8
DBUwSczvQ0CoNal5gTQsChMz/p9sK38Kw9g7UKb9+aEoj1X0kRX4Tm1yHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANf2OGJmAU6GZ3Md/c21XNLc31DMB8GA1UdIwQY
MBaAFCpEcjNsnQKkiM3XdTTWX7FGXsCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wMWRiODItNDE3Mi00NDA1LWFiNTUt
MDA4NmQwMjM4NWQ2LzEvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wMWRiODItNDE3Mi00NDA1LWFiNTUtMDA4NmQwMjM4NWQ2
LzEvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIqc6ifN
nnXilNvooo8/SLooF5/3Rq8eMXHe02GHjmk1QRX8pqOcjg+NMrBByb93ZOC68jV4
tZpOuxcnrnxrTWhMLP91lYJcZ/64nv7MYsEbMRhB0UURrvKG7tRh+OF6NRZEEZXb
M9tIXCt49rcC9FpxzsZjUM5CMSCSnHa8Fl142lSN5Zpsotm2G1n/ilD6mnuSNeHW
nCbwc26v1HurQEWgQe/0aF6ZzGvcz5h6fsjKOxNSp/au7MQeLYArKUXgJBltnOfl
QrgZHDGwfexstBi8m5nJmMtmmxf8OCwAd1dI1Zy/cgt+9hVzvncuyw5cRZfPJMxZ
PDzAW6OWBIDD/A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:37 2025 by rpki-client