Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
File: kwHqBZY8l1byjuLpi488xHncn1g.mft (raw, json)
Hash identifier: jMiKz9fWjw4kO6eaqcx/qkl6lx+a0woCFcewW/dRUY0=
Subject key identifier: 97:A0:BA:4E:A5:10:4A:FF:B7:C1:34:41:76:1E:74:72:33:EC:67:8A
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 01987DC0E68327419E58293F539D7E95FF0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 05:00:50 +0000
Manifest this update: Wed 06 Aug 2025 05:00:50 +0000
Manifest next update: Thu 07 Aug 2025 05:00:50 +0000
Files and hashes: 1: TVR9Wcx95L9uIbI7vmRK3_ppXuA.roa (hash: FBGg+DHw7jOc497O265+HPovAlPdSEs0qwJnAdItW6I=)
2: UvYnHc7rFlBw3j4tqyHKN3v104E.roa (hash: 6QDgTXlr47CFI8bSc1FSdC5Ii7Qu4oH4gM2ZxRc6gQc=)
3: bdOSuRKRee1uOsbVObRylNDB0a0.roa (hash: gjO8qJZwFaEvDikQnhsOULa/ARdOkiQLGR4fYx/iUVY=)
4: kwHqBZY8l1byjuLpi488xHncn1g.crl (hash: n9yrqP/0jDda1mTwViUE4cOAGTUk+4FJuTRtzpYUJyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:e6:83:27:41:9e:58:29:3f:53:9d:7e:95:ff:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Aug 6 05:00:50 2025 GMT
Not After : Aug 7 05:00:50 2025 GMT
Subject: CN=97a0ba4ea5104affb7c13441761e747233ec678a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fa:3f:6a:4d:79:a1:ee:0d:cf:1d:73:99:7b:
24:9a:ce:fe:8d:ae:2d:6b:7a:74:b6:77:d7:3d:ba:
32:5b:a5:ea:e2:27:16:1d:da:e8:6c:c9:61:85:11:
89:49:e2:41:aa:87:13:fb:30:08:b9:9f:94:28:64:
6d:e7:0c:3d:3c:80:bf:e9:1b:c1:d3:3b:ab:15:a3:
c8:88:2b:dd:3a:7b:a0:5e:f1:67:6f:34:b4:c1:94:
6e:78:0c:f2:ed:44:f9:1e:2b:da:0b:f5:63:41:7c:
c6:e5:0a:1d:fd:01:2a:5c:fe:e1:d1:26:70:ef:f6:
e5:b7:6d:ac:b3:13:f4:0f:86:ef:c0:ad:9a:c1:bd:
4e:2d:47:ba:18:df:7b:15:16:2a:ab:77:66:c2:2f:
5d:85:3c:3d:09:97:39:20:3c:18:6b:4c:2c:ad:51:
c7:2b:39:a4:88:7b:3b:a1:6f:ff:92:d8:21:14:c8:
8f:33:e6:91:03:ea:9a:45:31:70:90:d3:c8:64:3f:
e9:7c:24:c5:da:fb:29:ab:8d:5c:85:fa:dc:d1:41:
c5:db:62:c6:42:7f:cc:90:9c:72:c9:2c:fe:64:ca:
8f:ed:2d:07:11:ab:14:e6:ce:fd:84:5b:77:13:f5:
aa:7f:94:df:5b:62:c5:cc:eb:e2:c6:e2:c6:35:30:
f7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A0:BA:4E:A5:10:4A:FF:B7:C1:34:41:76:1E:74:72:33:EC:67:8A
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5f:e5:95:28:31:93:98:25:63:5f:c1:d8:0f:53:5f:ca:ac:
e0:6b:75:49:26:6f:a8:29:be:5f:40:9b:80:c4:ff:98:fa:a7:
58:ea:1d:98:c3:a1:39:81:8b:3d:95:eb:d3:c8:f3:f9:95:be:
27:bf:85:bb:2d:b1:54:aa:b9:ac:b1:86:a4:85:d2:17:27:19:
d8:37:eb:26:2b:38:9a:7b:72:84:83:0c:71:db:2b:49:2d:dc:
cb:e4:e5:c3:8c:4b:ec:ce:5c:e3:43:8d:46:20:2f:8a:27:57:
5f:d2:92:68:72:a8:a0:f3:f2:ac:b2:60:2b:1a:91:fc:3c:8c:
73:f9:65:3c:a2:48:d4:5f:a6:c9:d7:44:d3:11:ca:26:ed:5e:
b9:c6:9f:96:a9:4b:44:17:92:3d:9f:10:16:de:5c:96:60:c3:
1c:78:9a:1a:13:10:52:51:b9:fd:5c:3d:70:2c:fa:09:1f:51:
df:1b:bf:3e:40:ea:f1:26:01:34:22:fd:9e:d6:ad:d3:da:3d:
48:63:34:ea:d0:07:f4:12:ca:c3:4a:12:af:ad:31:65:4c:50:
fd:8f:e9:69:82:65:f1:3f:3c:b1:d2:f4:19:d8:3a:13:c5:8b:
70:fa:a2:68:b4:f8:2f:00:a9:b6:ea:d1:a5:19:c2:ed:be:7e:
1c:b2:73:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9wOaDJ0GeWCk/U51+lf8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMDFlYTA1OTYzYzk3NTZmMjhlZTJlOThiOGYzY2M0Nzlk
YzlmNTgwHhcNMjUwODA2MDUwMDUwWhcNMjUwODA3MDUwMDUwWjAzMTEwLwYDVQQD
Eyg5N2EwYmE0ZWE1MTA0YWZmYjdjMTM0NDE3NjFlNzQ3MjMzZWM2NzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/o/ak15oe4Nzx1zmXskms7+ja4t
a3p0tnfXPboyW6Xq4icWHdrobMlhhRGJSeJBqocT+zAIuZ+UKGRt5ww9PIC/6RvB
0zurFaPIiCvdOnugXvFnbzS0wZRueAzy7UT5HivaC/VjQXzG5Qod/QEqXP7h0SZw
7/blt22ssxP0D4bvwK2awb1OLUe6GN97FRYqq3dmwi9dhTw9CZc5IDwYa0wsrVHH
KzmkiHs7oW//ktghFMiPM+aRA+qaRTFwkNPIZD/pfCTF2vspq41chfrc0UHF22LG
Qn/MkJxyySz+ZMqP7S0HEasU5s79hFt3E/Wqf5TfW2LFzOvixuLGNTD3vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJeguk6lEEr/t8E0QXYedHIz7GeKMB8GA1UdIwQY
MBaAFJMB6gWWPJdW8o7i6YuPPMR53J9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lYmY2Y2ItYTc3OS00NjRmLThiZWUt
OGYwOGUwMjcyZGY4LzEva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9lYmY2Y2ItYTc3OS00NjRmLThiZWUtOGYwOGUwMjcyZGY4
LzEva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbV/llSgx
k5glY1/B2A9TX8qs4Gt1SSZvqCm+X0CbgMT/mPqnWOodmMOhOYGLPZXr08jz+ZW+
J7+Fuy2xVKq5rLGGpIXSFycZ2DfrJis4mntyhIMMcdsrSS3cy+Tlw4xL7M5c40ON
RiAviidXX9KSaHKooPPyrLJgKxqR/DyMc/llPKJI1F+myddE0xHKJu1eucaflqlL
RBeSPZ8QFt5clmDDHHiaGhMQUlG5/Vw9cCz6CR9R3xu/PkDq8SYBNCL9ntat09o9
SGM06tAH9BLKw0oSr60xZUxQ/Y/paYJl8T88sdL0Gdg6E8WLcPqiaLT4LwCpturR
pRnC7b5+HLJzqA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:28:43 2025 by rpki-client