Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: /pOxaiki/UcR+UqGV9WPmqv9eG6lM5F5EcqrlkkLihs=
Subject key identifier: E1:29:21:BD:D0:EF:AB:25:7E:D3:C8:10:C4:F9:7A:B6:37:6F:8B:69
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 01989F3AE0D4E35C8FA0B7FB897CE31729AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 162F
Signing time: Tue 12 Aug 2025 17:01:32 +0000
Manifest this update: Tue 12 Aug 2025 17:01:32 +0000
Manifest next update: Wed 13 Aug 2025 17:01:32 +0000
Files and hashes: 1: 043uSXcEwcTZgUk5_ExSgvF0TDI.roa (hash: aKMAMHw8f6Tqa+Lu83OKVpFBIm3XSWZO6zpjohL8Alg=)
2: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: IWI2teIdJJ/KNWCxwmriCLQbk5mb5DDPTCFOQABmY2E=)
3: sqwvJOyPTCq5sZkvN5Pbfvvxhgg.roa (hash: HccEp/1nmaqHimBtUpSeAjWigFxaNTmI1UzABIZlNpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 17:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:3a:e0:d4:e3:5c:8f:a0:b7:fb:89:7c:e3:17:29:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Aug 12 17:01:32 2025 GMT
Not After : Aug 13 17:01:32 2025 GMT
Subject: CN=e12921bdd0efab257ed3c810c4f97ab6376f8b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:57:af:8b:89:24:12:69:55:d5:b5:e3:72:
ea:c8:32:60:16:e4:1c:06:25:a5:c6:1c:4d:26:4d:
22:02:12:b5:4d:43:85:c4:b4:e1:91:7d:96:1f:cd:
34:f5:35:fd:f2:2f:b5:20:78:85:0a:50:ae:de:33:
12:86:c4:2f:31:7d:64:9b:62:70:a3:c7:42:4f:a5:
2d:0e:9a:db:5a:bc:a8:1d:8f:72:73:0a:61:3f:2f:
6a:08:58:ed:d4:61:2a:d1:3b:fb:96:5f:80:cc:86:
f6:c3:de:76:3c:34:88:75:ad:27:b6:d0:1d:dc:6d:
81:6a:aa:29:36:8d:fe:ff:7a:cd:6c:6e:ca:4c:8e:
7e:90:58:34:ba:67:a9:04:44:fd:1b:75:36:7e:ea:
d9:75:e6:4e:47:1a:2c:c9:cd:33:85:4c:1b:3e:62:
26:da:41:3a:3e:25:5a:02:73:f0:d1:95:15:c9:69:
3f:81:06:dd:fc:6f:be:d8:fb:c6:62:eb:5d:22:69:
e2:21:59:df:bc:a9:ae:92:0d:d1:9b:f3:42:29:a0:
e4:40:fc:ed:d3:22:d8:ce:e5:d1:8a:ae:2b:05:14:
a4:cd:e2:3a:2b:7a:78:69:7d:f3:6e:f9:28:6f:1c:
0e:27:6f:35:30:ea:69:f9:c3:58:57:4b:2d:f8:96:
8c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:29:21:BD:D0:EF:AB:25:7E:D3:C8:10:C4:F9:7A:B6:37:6F:8B:69
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c9:50:44:e7:f3:72:d3:57:4c:f5:a1:7b:dc:18:e4:6c:bc:
5c:27:1a:cd:a8:2a:d7:b5:f9:8d:5b:0e:0b:47:08:03:2a:1a:
3a:10:2f:85:0b:25:2a:ff:37:bd:f1:ee:04:e8:24:bd:92:61:
3e:e8:44:8b:02:82:a7:e4:e5:f6:24:ca:31:54:65:d7:30:c5:
78:93:c4:e3:37:2b:34:77:80:91:3c:2b:0d:9c:ee:1b:6a:36:
64:77:23:fa:1d:2c:1c:3f:7a:36:18:ce:c8:6f:97:dd:95:c1:
76:3b:2b:a7:d7:ab:a5:c3:29:23:f3:fb:ca:4f:1b:2a:07:e2:
c1:7c:3b:0a:80:70:1e:c5:0e:fa:d8:45:09:08:93:b3:8f:dd:
d9:04:7d:53:83:55:60:a5:b7:a3:2e:35:9c:4c:88:7d:a4:97:
e8:0c:40:a0:02:11:63:de:e2:9c:41:4a:07:ae:62:ec:b7:92:
ad:fe:7c:ae:2e:9c:a6:0d:ac:90:39:dd:ca:b1:72:43:e4:e8:
38:d4:16:93:b3:e8:75:9c:fa:d1:39:0a:c0:3c:eb:06:af:17:
7e:5f:65:e9:82:03:7c:79:00:0e:19:bb:d1:84:d7:c9:22:74:
2b:06:3a:b3:db:76:e6:df:5a:d5:72:e6:28:1f:ed:93:9e:e9:
33:70:96:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZifOuDU41yPoLf7iXzjFymqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NWE5MmI3NzhlZGRmYThkY2Q5MTdjYmI4N2NkZTMxYmEy
YzczMmYwHhcNMjUwODEyMTcwMTMyWhcNMjUwODEzMTcwMTMyWjAzMTEwLwYDVQQD
EyhlMTI5MjFiZGQwZWZhYjI1N2VkM2M4MTBjNGY5N2FiNjM3NmY4YjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc5Xr4uJJBJpVdW143LqyDJgFuQc
BiWlxhxNJk0iAhK1TUOFxLThkX2WH8009TX98i+1IHiFClCu3jMShsQvMX1km2Jw
o8dCT6UtDprbWryoHY9ycwphPy9qCFjt1GEq0Tv7ll+AzIb2w952PDSIda0nttAd
3G2BaqopNo3+/3rNbG7KTI5+kFg0umepBET9G3U2furZdeZORxosyc0zhUwbPmIm
2kE6PiVaAnPw0ZUVyWk/gQbd/G++2PvGYutdImniIVnfvKmukg3Rm/NCKaDkQPzt
0yLYzuXRiq4rBRSkzeI6K3p4aX3zbvkobxwOJ281MOpp+cNYV0st+JaM3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEpIb3Q76slftPIEMT5erY3b4tpMB8GA1UdIwQY
MBaAFClakrd47d+o3NkXy7h83jG6LHMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NTcwZTEtYWUzZC00OTAxLTljODUt
ZGNkYzVjZWUyNzZmLzEvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83NTcwZTEtYWUzZC00OTAxLTljODUtZGNkYzVjZWUyNzZm
LzEvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApclQROfz
ctNXTPWhe9wY5Gy8XCcazagq17X5jVsOC0cIAyoaOhAvhQslKv83vfHuBOgkvZJh
PuhEiwKCp+Tl9iTKMVRl1zDFeJPE4zcrNHeAkTwrDZzuG2o2ZHcj+h0sHD96NhjO
yG+X3ZXBdjsrp9erpcMpI/P7yk8bKgfiwXw7CoBwHsUO+thFCQiTs4/d2QR9U4NV
YKW3oy41nEyIfaSX6AxAoAIRY97inEFKB65i7LeSrf58ri6cpg2skDndyrFyQ+To
ONQWk7PodZz60TkKwDzrBq8Xfl9l6YIDfHkADhm70YTXySJ0KwY6s9t25t9a1XLm
KB/tk57pM3CWgw==
-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:45 2025 by rpki-client