Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: dWqeV+r8Fk7IOXGXuQqsUyuVRkl5A0WheBvHTLvc8fA=
Subject key identifier: 87:79:7A:E4:E0:31:54:AF:5B:AE:77:BE:99:8F:12:94:62:E5:E7:36
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 0198752BC41463D551534F8A085A90E92947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 13:00:59 +0000
Manifest this update: Mon 04 Aug 2025 13:00:59 +0000
Manifest next update: Tue 05 Aug 2025 13:00:59 +0000
Files and hashes: 1: GLETZPGAzgEdqr3_Ju2Hw5dfeCc.roa (hash: 1ZSMTZbayji0IpT4/tlfR8iOgQX8cgSQ3hZYI5R5pYA=)
2: JVzuM8B6ofXxJRTwKSOh4uQnHZ8.roa (hash: 6kzBk5+13Ftt6UqtqHrn3x6NbCUjc2KzWe2+5j/AkQM=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: 3/NzVX7sS7Lw++BsShAdRuQz0xkEPCju6cdkFXwkDtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:c4:14:63:d5:51:53:4f:8a:08:5a:90:e9:29:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Aug 4 13:00:59 2025 GMT
Not After : Aug 5 13:00:59 2025 GMT
Subject: CN=87797ae4e03154af5bae77be998f129462e5e736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5e:d3:59:bd:1b:91:b6:31:36:cc:21:b8:1f:
27:b4:7e:17:d5:5f:1d:2c:49:bb:93:9b:62:b3:b3:
52:41:18:d9:85:33:92:72:6c:fb:e9:9e:62:66:b3:
f7:1b:62:c9:88:92:40:1d:3c:f2:dd:16:8a:27:97:
a0:2e:4c:5c:44:7a:2d:26:85:07:1b:72:fa:49:a9:
ab:34:83:98:e5:12:65:0c:9e:d1:6c:09:40:35:73:
1d:77:2f:5b:1c:46:32:10:1b:c8:fd:b5:2e:07:b5:
68:0d:f3:80:58:9a:9c:b4:e9:c8:70:d6:3a:2f:19:
42:7b:d2:d7:3f:df:47:88:71:c9:31:c7:0f:fb:b1:
27:f5:fe:8b:63:50:d1:53:61:3e:fe:74:0b:fc:a0:
ca:3d:16:2d:ee:9d:4c:50:0b:42:83:38:38:cd:19:
33:d3:b2:bf:9a:b2:6d:99:77:88:40:ab:49:64:dd:
23:eb:30:12:73:1d:66:81:f9:65:af:f1:c0:37:4a:
26:82:18:9c:11:6a:22:da:1d:84:c8:fd:96:a4:9b:
7e:46:79:8c:00:e5:b0:1b:fe:f5:85:a3:05:bf:05:
f5:b9:96:5a:a9:5c:91:df:8b:4d:35:0b:ba:a6:c6:
bd:e4:92:94:a5:d5:64:4c:0e:63:34:bd:04:69:29:
1f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:79:7A:E4:E0:31:54:AF:5B:AE:77:BE:99:8F:12:94:62:E5:E7:36
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:82:7c:d2:2f:25:cb:11:c0:8e:52:ab:49:5a:60:1d:f7:e1:
e0:b5:64:40:af:97:a0:a1:c7:0c:7f:b4:11:46:52:39:ca:3c:
3d:0d:62:2a:80:a4:b6:45:81:cf:7d:f7:f6:36:55:e0:46:4e:
1e:b0:6a:47:e0:f6:d7:f9:af:93:6b:ef:dc:03:61:9e:21:6b:
f0:58:1c:8f:32:67:a3:ff:d2:01:1d:97:25:f4:0b:d6:8c:52:
dc:e9:f3:c3:c5:10:b0:9c:3c:3e:2f:0d:ba:53:3c:f8:85:06:
9f:70:71:79:8c:73:02:23:88:6b:26:da:d4:20:e5:e4:26:ab:
60:04:2b:15:9c:23:e8:01:9f:5a:1d:26:b5:98:af:b5:e9:42:
8e:55:e3:72:03:1f:bf:6b:36:fa:7b:50:7d:93:c4:07:44:b2:
6d:0c:6a:17:c9:10:17:07:95:af:49:c3:ac:44:28:79:e3:ff:
64:9d:8b:d3:53:92:6a:1e:88:90:08:8f:e6:80:0e:e7:69:40:
2f:b4:04:c2:27:f1:95:b0:e2:b1:92:98:63:c6:35:3d:2b:b0:
a5:f7:67:01:ab:f9:bc:98:5a:33:d1:e4:8f:ec:6b:2e:ce:d6:
cd:d9:9d:d9:eb:12:25:fc:8b:98:04:9b:36:8c:6b:87:ad:42:
cf:2a:42:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1K8QUY9VRU0+KCFqQ6SlHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NTU3OWY1YjY3M2RiZTJlYmJhMzQ4Y2ZiMGY1NjEyNGNk
ZTcwNDgwHhcNMjUwODA0MTMwMDU5WhcNMjUwODA1MTMwMDU5WjAzMTEwLwYDVQQD
Eyg4Nzc5N2FlNGUwMzE1NGFmNWJhZTc3YmU5OThmMTI5NDYyZTVlNzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF7TWb0bkbYxNswhuB8ntH4X1V8d
LEm7k5tis7NSQRjZhTOScmz76Z5iZrP3G2LJiJJAHTzy3RaKJ5egLkxcRHotJoUH
G3L6SamrNIOY5RJlDJ7RbAlANXMddy9bHEYyEBvI/bUuB7VoDfOAWJqctOnIcNY6
LxlCe9LXP99HiHHJMccP+7En9f6LY1DRU2E+/nQL/KDKPRYt7p1MUAtCgzg4zRkz
07K/mrJtmXeIQKtJZN0j6zAScx1mgfllr/HAN0omghicEWoi2h2EyP2WpJt+RnmM
AOWwG/71haMFvwX1uZZaqVyR34tNNQu6psa95JKUpdVkTA5jNL0EaSkf3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFId5euTgMVSvW653vpmPEpRi5ec2MB8GA1UdIwQY
MBaAFClVefW2c9vi67o0jPsPVhJM3nBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8xNTc0YzktMDFkNS00OGZkLTk4MGYt
MzQzYzRkMjRjMjNiLzEvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8xNTc0YzktMDFkNS00OGZkLTk4MGYtMzQzYzRkMjRjMjNi
LzEvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4J80i8l
yxHAjlKrSVpgHffh4LVkQK+XoKHHDH+0EUZSOco8PQ1iKoCktkWBz3339jZV4EZO
HrBqR+D21/mvk2vv3ANhniFr8FgcjzJno//SAR2XJfQL1oxS3Onzw8UQsJw8Pi8N
ulM8+IUGn3BxeYxzAiOIayba1CDl5CarYAQrFZwj6AGfWh0mtZivtelCjlXjcgMf
v2s2+ntQfZPEB0SybQxqF8kQFweVr0nDrEQoeeP/ZJ2L01OSah6IkAiP5oAO52lA
L7QEwifxlbDisZKYY8Y1PSuwpfdnAav5vJhaM9Hkj+xrLs7Wzdmd2esSJfyLmASb
Noxrh61CzypCZw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:33:24 2025 by rpki-client