Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
File: rKjs_uUfaNX4A6rm-_wf3EGQJio.mft (raw, json)
Hash identifier: 2RkYTpvEb6ljWtYkfuWcuuWowbCqTxJIiTywnnn7qV4=
Subject key identifier: CD:77:D0:F2:8F:A9:76:B5:DC:DB:12:D9:B4:E3:EC:15:79:99:E1:17
Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
Certificate issuer: /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Certificate serial: 0198726147E8355E4E6AB3D8DED91FC4E6CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
Manifest number: 0D4D
Signing time: Mon 04 Aug 2025 00:00:34 +0000
Manifest this update: Mon 04 Aug 2025 00:00:34 +0000
Manifest next update: Tue 05 Aug 2025 00:00:34 +0000
Files and hashes: 1: TNPcdBpnbKooEgmUt2YrkLdYDmQ.roa (hash: WQcIls3E5pX4tymrsMPubCPP31sHiDGN5xYJkHTcWEg=)
2: rKjs_uUfaNX4A6rm-_wf3EGQJio.crl (hash: acNv81nABfavwnh/7vlruTyK0VpaUXotKTZPl9jPH8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:61:47:e8:35:5e:4e:6a:b3:d8:de:d9:1f:c4:e6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Validity
Not Before: Aug 4 00:00:34 2025 GMT
Not After : Aug 5 00:00:34 2025 GMT
Subject: CN=cd77d0f28fa976b5dcdb12d9b4e3ec157999e117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:81:c2:d6:72:fd:5f:ca:1a:a4:5f:cf:ed:
ed:bb:6b:24:12:97:18:e7:1d:e8:fc:d1:f2:81:91:
2c:07:d2:4c:ae:d9:c6:c2:a6:c5:51:31:8b:76:69:
7d:9a:70:2e:0b:62:bf:d5:cc:ba:b0:6b:76:25:2d:
e5:76:75:0f:1a:0b:15:ac:54:36:cf:a3:81:e8:a5:
22:1c:ec:96:f1:07:02:20:46:89:29:e0:03:d7:54:
2b:60:7d:b5:6d:03:94:30:08:25:ec:d7:36:20:89:
3b:5a:e5:38:26:66:c3:d7:6c:c3:0c:78:f7:15:0d:
71:0c:9c:37:1a:f3:1d:07:8a:ad:96:6f:fc:f2:f9:
fd:65:4c:4c:04:c6:ea:d4:9b:5d:58:6b:41:69:fd:
5a:76:8a:27:e9:18:b0:88:1b:85:3b:0d:a3:92:42:
7d:80:46:21:bc:4f:a2:de:47:37:27:db:c2:62:0a:
50:0d:5b:76:9a:07:ce:c7:3c:26:a3:9f:ad:2d:fb:
59:9f:c0:96:7e:31:b5:ff:56:7e:c6:99:84:98:eb:
70:ef:f2:42:1f:64:fd:f1:e1:c7:6a:a1:1b:47:5b:
c3:dc:bf:b0:62:fd:9c:34:f8:53:6b:0e:87:93:63:
89:da:f7:5a:e7:96:67:7f:e6:df:87:23:38:a1:db:
6f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:77:D0:F2:8F:A9:76:B5:DC:DB:12:D9:B4:E3:EC:15:79:99:E1:17
X509v3 Authority Key Identifier:
keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6b:c0:b8:3a:22:33:98:1d:d2:cb:5a:45:8b:74:80:1c:f3:
1f:9f:8b:4c:34:15:ce:8c:d4:58:d7:a4:fb:e0:47:42:2e:3e:
c2:c9:7f:b8:a1:5c:4f:6b:b6:83:2c:3d:a2:83:df:85:f2:8a:
fa:db:e5:83:6a:d8:3d:b6:95:17:5a:36:78:a5:63:ac:78:2b:
5a:85:fd:fa:41:80:3f:fe:1b:b4:02:66:b6:67:93:92:6e:87:
27:e9:3c:ee:e4:c8:ce:74:e2:02:ce:01:52:59:3b:9c:28:9a:
81:67:48:f7:f3:ab:fc:63:5c:14:a9:f2:84:08:52:de:19:0f:
e5:59:de:02:f0:24:55:ef:69:28:69:ed:84:00:8a:88:64:40:
85:1a:60:42:1b:4b:25:11:09:57:84:94:a6:95:fd:d1:27:df:
67:38:85:18:16:dc:ae:1d:f0:1b:2f:b9:4f:27:a1:03:c0:34:
aa:cf:fe:2a:f5:f5:92:f9:e3:5b:f6:a7:d3:1d:4f:fb:ab:4d:
db:69:54:ea:96:99:ad:cc:d5:30:b7:42:e0:6d:a3:89:b4:70:
c7:e8:7e:ad:4a:25:80:2f:83:da:d3:97:35:cf:ba:f4:a5:a7:
ab:d4:56:21:64:f7:13:f2:6b:23:4a:a7:cb:41:2e:dd:9e:ee:
00:0b:e3:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyYUfoNV5OarPY3tkfxObPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYThlY2ZlZTUxZjY4ZDVmODAzYWFlNmZiZmMxZmRjNDE5
MDI2MmEwHhcNMjUwODA0MDAwMDM0WhcNMjUwODA1MDAwMDM0WjAzMTEwLwYDVQQD
EyhjZDc3ZDBmMjhmYTk3NmI1ZGNkYjEyZDliNGUzZWMxNTc5OTllMTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrSBwtZy/V/KGqRfz+3tu2skEpcY
5x3o/NHygZEsB9JMrtnGwqbFUTGLdml9mnAuC2K/1cy6sGt2JS3ldnUPGgsVrFQ2
z6OB6KUiHOyW8QcCIEaJKeAD11QrYH21bQOUMAgl7Nc2IIk7WuU4JmbD12zDDHj3
FQ1xDJw3GvMdB4qtlm/88vn9ZUxMBMbq1JtdWGtBaf1adoon6RiwiBuFOw2jkkJ9
gEYhvE+i3kc3J9vCYgpQDVt2mgfOxzwmo5+tLftZn8CWfjG1/1Z+xpmEmOtw7/JC
H2T98eHHaqEbR1vD3L+wYv2cNPhTaw6Hk2OJ2vda55Znf+bfhyM4odtv+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM130PKPqXa13NsS2bTj7BV5meEXMB8GA1UdIwQY
MBaAFKyo7P7lH2jV+AOq5vv8H9xBkCYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktqc191VWZhTlg0QTZybS1fd2YzRUdRSmlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iMDk1MzAtOWNhMC00NDA3LThhMDUt
YmJkN2IwYWJhNmFiLzEvcktqc191VWZhTlg0QTZybS1fd2YzRUdRSmlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9iMDk1MzAtOWNhMC00NDA3LThhMDUtYmJkN2IwYWJhNmFi
LzEvcktqc191VWZhTlg0QTZybS1fd2YzRUdRSmlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2vAuDoi
M5gd0staRYt0gBzzH5+LTDQVzozUWNek++BHQi4+wsl/uKFcT2u2gyw9ooPfhfKK
+tvlg2rYPbaVF1o2eKVjrHgrWoX9+kGAP/4btAJmtmeTkm6HJ+k87uTIznTiAs4B
Ulk7nCiagWdI9/Or/GNcFKnyhAhS3hkP5VneAvAkVe9pKGnthACKiGRAhRpgQhtL
JREJV4SUppX90SffZziFGBbcrh3wGy+5TyehA8A0qs/+KvX1kvnjW/an0x1P+6tN
22lU6paZrczVMLdC4G2jibRwx+h+rUolgC+D2tOXNc+69KWnq9RWIWT3E/JrI0qn
y0Eu3Z7uAAvj/Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:34 2025 by rpki-client