Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
File: kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json)
Hash identifier: XfP9y5kSaUrL6v2l/wApRfH5CfALKN9AFEkkiTmAr4M=
Subject key identifier: AA:B8:21:E8:F5:9A:9D:3D:35:63:24:75:BB:D7:60:16:DE:AA:0A:33
Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Certificate serial: 01988544E57FCFEE5D9E648DD7CF1ED925B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
Manifest number: 1623
Signing time: Thu 07 Aug 2025 16:02:21 +0000
Manifest this update: Thu 07 Aug 2025 16:02:21 +0000
Manifest next update: Fri 08 Aug 2025 16:02:21 +0000
Files and hashes: 1: _wZ7w3Scv14H15k_iZCT9mnEPVI.roa (hash: JHtZU8B5JlDmryEaVYDxAxM9JobFikDH6+vwZ+Ii1xM=)
2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: 1RoLszgjVvLHv66ov5HZfl2fsdul/JG/iKtlDu2IxG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:44:e5:7f:cf:ee:5d:9e:64:8d:d7:cf:1e:d9:25:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Validity
Not Before: Aug 7 16:02:21 2025 GMT
Not After : Aug 8 16:02:21 2025 GMT
Subject: CN=aab821e8f59a9d3d35632475bbd76016deaa0a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:43:cb:83:ec:b1:0d:93:7c:76:92:b5:cd:
23:6d:7f:f5:68:1f:c2:99:c2:ce:23:74:9c:65:f2:
9a:03:92:0e:52:2d:84:c5:f5:4c:02:a2:0e:b6:bf:
17:19:b9:8b:85:db:e9:60:6a:4e:e2:3f:4a:76:ad:
07:8e:16:5e:7a:d4:24:6b:3b:c6:7e:7c:b2:15:00:
7d:70:38:82:be:40:92:fc:ea:d5:34:6c:81:be:63:
41:60:d7:e2:13:17:19:bb:fc:36:97:dc:fd:e1:04:
26:45:52:64:c7:04:33:0d:54:50:5e:c8:41:10:b6:
94:51:00:4b:fd:14:f4:0c:b0:3d:45:ab:b3:18:e1:
80:fc:9c:f4:19:02:5f:cb:d9:56:d8:9d:58:d7:a7:
1d:ec:0d:b7:dd:ad:a9:9b:68:d8:e8:6e:cb:20:2e:
03:a4:6e:d4:4c:16:5f:60:0d:15:6e:c3:dc:27:ae:
87:28:81:3d:dc:13:30:10:cd:02:23:62:86:b7:95:
b5:0c:00:26:d9:c7:78:bb:3f:12:71:af:47:ca:00:
f4:00:2e:fb:65:ae:7e:fa:e0:16:42:02:2d:37:16:
03:5e:ae:16:5d:9c:de:36:92:46:6a:74:ef:81:15:
a9:cc:63:75:f6:69:1a:d0:42:92:1d:b5:62:de:b7:
1f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B8:21:E8:F5:9A:9D:3D:35:63:24:75:BB:D7:60:16:DE:AA:0A:33
X509v3 Authority Key Identifier:
keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:57:b3:1c:ab:8e:27:f1:b0:92:a3:2a:c5:52:9c:30:a4:91:
13:ea:45:93:c6:df:f4:09:bb:8e:3e:e0:35:6a:c1:cb:80:b2:
04:14:0d:a9:5d:33:86:b2:06:aa:78:a2:66:44:e9:a1:94:e9:
2e:fd:ec:d4:a4:a9:3c:1a:0c:1b:3d:ae:24:a9:ab:b1:fe:50:
75:31:41:77:71:10:db:0b:a7:7d:e3:5f:90:bc:26:d8:4a:70:
45:f4:84:4a:dc:68:02:09:83:83:00:91:2f:35:71:62:31:5c:
2e:00:85:cd:7d:e5:08:c9:39:30:78:f6:12:62:dc:bd:05:cb:
5f:00:5e:1c:39:62:38:2e:33:de:db:e0:be:e1:5f:76:01:71:
e5:24:ad:6b:25:43:3f:c4:13:15:f8:c6:2c:87:be:9d:1d:3a:
62:15:0e:1e:ec:34:a9:97:1f:f7:95:69:4b:64:af:86:ff:24:
1a:94:f0:b2:fa:9a:70:fa:6e:87:51:28:f0:a5:d1:44:f9:50:
90:53:33:8e:c5:b8:22:18:e7:59:8f:1a:c4:f3:10:a4:59:48:
3a:bd:9c:2e:90:15:cb:3d:3f:a7:41:e1:f3:88:66:de:af:72:
10:9f:8c:4b:df:1f:c6:1b:bd:d3:39:b1:79:ba:4f:11:32:94:
66:f4:8f:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiFROV/z+5dnmSN188e2SW1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYWU1MzhlMmE5MTM0NmYwNDAyNTk4YjBmZjJmYjlhOTVj
MDdjMzkwHhcNMjUwODA3MTYwMjIxWhcNMjUwODA4MTYwMjIxWjAzMTEwLwYDVQQD
EyhhYWI4MjFlOGY1OWE5ZDNkMzU2MzI0NzViYmQ3NjAxNmRlYWEwYTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSpDy4PssQ2TfHaStc0jbX/1aB/C
mcLOI3ScZfKaA5IOUi2ExfVMAqIOtr8XGbmLhdvpYGpO4j9Kdq0HjhZeetQkazvG
fnyyFQB9cDiCvkCS/OrVNGyBvmNBYNfiExcZu/w2l9z94QQmRVJkxwQzDVRQXshB
ELaUUQBL/RT0DLA9RauzGOGA/Jz0GQJfy9lW2J1Y16cd7A233a2pm2jY6G7LIC4D
pG7UTBZfYA0VbsPcJ66HKIE93BMwEM0CI2KGt5W1DAAm2cd4uz8Sca9HygD0AC77
Za5++uAWQgItNxYDXq4WXZzeNpJGanTvgRWpzGN19mka0EKSHbVi3rcfHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKq4Iej1mp09NWMkdbvXYBbeqgozMB8GA1UdIwQY
MBaAFJCuU44qkTRvBAJZiw/y+5qVwHw5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kNDc5MDktYTU2MC00MDljLWI4Mzkt
YzVlNzgyMTU3OWYxLzEva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kNDc5MDktYTU2MC00MDljLWI4MzktYzVlNzgyMTU3OWYx
LzEva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFezHKuO
J/GwkqMqxVKcMKSRE+pFk8bf9Am7jj7gNWrBy4CyBBQNqV0zhrIGqniiZkTpoZTp
Lv3s1KSpPBoMGz2uJKmrsf5QdTFBd3EQ2wunfeNfkLwm2EpwRfSEStxoAgmDgwCR
LzVxYjFcLgCFzX3lCMk5MHj2EmLcvQXLXwBeHDliOC4z3tvgvuFfdgFx5SStayVD
P8QTFfjGLIe+nR06YhUOHuw0qZcf95VpS2Svhv8kGpTwsvqacPpuh1Eo8KXRRPlQ
kFMzjsW4IhjnWY8axPMQpFlIOr2cLpAVyz0/p0Hh84hm3q9yEJ+MS98fxhu90zmx
ebpPETKUZvSPVQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 23:56:23 2025 by rpki-client