Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
File: kkMni6ptm9TkNnEE4aCxhMufstw.mft (raw, json)
Hash identifier: imqKuS/DhA3G+BbDeHd7dVDftsnsRJv/HjvGfHaa2wA=
Subject key identifier: CA:FA:0C:90:6F:F1:7B:B7:D0:71:E8:74:9C:4B:D9:57:FD:15:4E:7D
Authority key identifier: 92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
Certificate issuer: /CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Certificate serial: 019896A676029C6EB741AE63B9AB1ACFFCAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
Manifest number: 1354
Signing time: Mon 11 Aug 2025 01:02:28 +0000
Manifest this update: Mon 11 Aug 2025 01:02:28 +0000
Manifest next update: Tue 12 Aug 2025 01:02:28 +0000
Files and hashes: 1: ZLIGk0OBNpgWvIEPM3FW64TyV6Q.roa (hash: tIZYbv9uO1ydifZNyOm/4u1qZclQNJ4gcOxn8zCiU24=)
2: kkMni6ptm9TkNnEE4aCxhMufstw.crl (hash: eE/uA13gd/tOV5YBEg8R9ccQnW7fupHblEsxt6X7tgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:76:02:9c:6e:b7:41:ae:63:b9:ab:1a:cf:fc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Validity
Not Before: Aug 11 01:02:28 2025 GMT
Not After : Aug 12 01:02:28 2025 GMT
Subject: CN=cafa0c906ff17bb7d071e8749c4bd957fd154e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:55:9a:44:1d:1c:3e:4c:2f:ff:b0:61:c5:
f7:34:57:c2:2e:56:4f:b3:be:49:87:f0:a7:52:8d:
1b:d7:30:46:29:a1:7d:8e:c1:36:f3:39:b1:f8:ac:
65:da:23:05:65:a5:f3:15:16:32:ee:e3:2b:b7:42:
41:bb:7e:02:ae:4d:43:d6:67:58:2a:06:6d:a8:b5:
24:a6:06:43:8b:59:86:cc:a5:a0:ad:9e:99:e9:93:
03:3d:ca:ce:5d:48:55:73:b4:20:15:eb:6f:9c:b9:
b5:b3:b6:10:c6:57:25:8b:f0:14:12:e0:f2:ad:8c:
85:a0:f6:13:c2:c8:4d:95:11:d6:8c:24:42:f5:9f:
37:4c:1e:02:19:17:f9:24:93:ef:8b:0d:5e:2a:48:
70:19:a6:46:c7:74:7e:55:df:ac:2d:b6:35:54:20:
f4:fe:51:b9:bb:43:e1:78:8c:b8:54:c8:bd:36:82:
b5:3e:9c:82:44:63:f0:3f:3c:9d:c7:bc:07:61:ec:
e5:fb:24:30:ee:91:29:d2:aa:5f:a0:b2:ec:08:d1:
7f:60:0d:19:48:1e:16:a7:34:2a:ed:ed:4f:ff:72:
81:49:3b:7c:71:a7:08:03:d9:fc:fd:68:85:3d:d2:
76:d1:0c:9f:c2:24:75:53:d1:31:5f:b8:a4:50:bc:
b5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FA:0C:90:6F:F1:7B:B7:D0:71:E8:74:9C:4B:D9:57:FD:15:4E:7D
X509v3 Authority Key Identifier:
keyid:92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:27:ca:9b:bb:7d:af:d6:97:a8:fe:56:3d:18:65:bd:c0:52:
e2:35:00:60:47:63:c6:ea:06:c2:e0:ec:25:de:ab:4c:9a:de:
0b:3e:31:cf:43:f0:38:81:81:f8:9e:dc:ab:65:ec:f2:24:3a:
b6:7a:51:3e:29:e3:be:cf:64:10:ff:fc:ed:53:3b:16:d2:67:
09:02:44:01:57:a8:ee:b1:0c:d2:75:66:a2:f8:19:8f:f4:c4:
7b:45:93:ee:b9:03:b5:09:78:5f:17:7b:b6:31:73:e8:fe:73:
18:09:14:ae:f6:a0:c3:37:fd:e3:73:b9:a0:f9:06:27:d2:e7:
32:6b:87:e4:99:9f:ac:15:fa:c1:eb:92:a0:90:ac:63:0e:73:
20:ef:c2:56:ca:ae:0d:c5:8b:e4:30:dd:e2:49:4b:90:a4:85:
7f:09:08:3d:e4:96:4c:9e:94:36:7d:fd:4a:80:dc:94:e1:3f:
9a:44:e9:97:f6:fe:a3:65:0d:e0:7d:5b:50:84:4b:79:71:a6:
1d:30:02:6c:c7:d4:76:f5:a3:82:6a:11:8d:f7:db:0d:2c:f3:
46:ab:1e:4e:b3:95:a3:75:d8:db:a4:b2:00:95:44:b4:a6:1a:
d3:24:9f:9e:53:98:71:52:8e:be:6c:05:72:c0:48:fb:da:a4:
f7:e4:9b:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpnYCnG63Qa5juasaz/ytMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDMyNzhiYWE2ZDliZDRlNDM2NzEwNGUxYTBiMTg0Y2I5
ZmIyZGMwHhcNMjUwODExMDEwMjI4WhcNMjUwODEyMDEwMjI4WjAzMTEwLwYDVQQD
EyhjYWZhMGM5MDZmZjE3YmI3ZDA3MWU4NzQ5YzRiZDk1N2ZkMTU0ZTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTBVmkQdHD5ML/+wYcX3NFfCLlZP
s75Jh/CnUo0b1zBGKaF9jsE28zmx+Kxl2iMFZaXzFRYy7uMrt0JBu34Crk1D1mdY
KgZtqLUkpgZDi1mGzKWgrZ6Z6ZMDPcrOXUhVc7QgFetvnLm1s7YQxlcli/AUEuDy
rYyFoPYTwshNlRHWjCRC9Z83TB4CGRf5JJPviw1eKkhwGaZGx3R+Vd+sLbY1VCD0
/lG5u0PheIy4VMi9NoK1PpyCRGPwPzydx7wHYezl+yQw7pEp0qpfoLLsCNF/YA0Z
SB4WpzQq7e1P/3KBSTt8cacIA9n8/WiFPdJ20QyfwiR1U9ExX7ikULy1GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMr6DJBv8Xu30HHodJxL2Vf9FU59MB8GA1UdIwQY
MBaAFJJDJ4uqbZvU5DZxBOGgsYTLn7LcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2tNbmk2cHRtOVRrTm5FRTRhQ3hoTXVmc3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMGU3Y2YtYjRiOC00MjcyLTg3YWIt
NGMyZmJkZDU2Mjc5LzEva2tNbmk2cHRtOVRrTm5FRTRhQ3hoTXVmc3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zMGU3Y2YtYjRiOC00MjcyLTg3YWItNGMyZmJkZDU2Mjc5
LzEva2tNbmk2cHRtOVRrTm5FRTRhQ3hoTXVmc3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcifKm7t9
r9aXqP5WPRhlvcBS4jUAYEdjxuoGwuDsJd6rTJreCz4xz0PwOIGB+J7cq2Xs8iQ6
tnpRPinjvs9kEP/87VM7FtJnCQJEAVeo7rEM0nVmovgZj/TEe0WT7rkDtQl4Xxd7
tjFz6P5zGAkUrvagwzf943O5oPkGJ9LnMmuH5JmfrBX6weuSoJCsYw5zIO/CVsqu
DcWL5DDd4klLkKSFfwkIPeSWTJ6UNn39SoDclOE/mkTpl/b+o2UN4H1bUIRLeXGm
HTACbMfUdvWjgmoRjffbDSzzRqseTrOVo3XY26SyAJVEtKYa0ySfnlOYcVKOvmwF
csBI+9qk9+SbXg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:10:04 2025 by rpki-client