Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
File: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft (raw, json)
Hash identifier: qH3Ip4xVR43jarhkDZzxJ0RlbGeEtK7PcIHOdIx7Qvg=
Subject key identifier: EC:73:8B:A7:7E:05:B5:FA:C5:E2:44:0E:4C:67:A0:98:AF:6C:55:42
Authority key identifier: 91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1
Certificate issuer: /CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1
Certificate serial: 019872CF17F1A02E4B4FD8C38C365BD1614C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
Manifest number: 14B1
Signing time: Mon 04 Aug 2025 02:00:31 +0000
Manifest this update: Mon 04 Aug 2025 02:00:31 +0000
Manifest next update: Tue 05 Aug 2025 02:00:31 +0000
Files and hashes: 1: SX3vKCIesg7brXNXKPon4jGBLVQ.roa (hash: QbCrUZtkCCzMgLc9gxL+FBpDYE7YV20lMwm2mk5wzSk=)
2: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl (hash: VdT0swPFn7fRCx45IFJ/dqE+shDQLEpbxrPVB+n+2HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:17:f1:a0:2e:4b:4f:d8:c3:8c:36:5b:d1:61:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1
Validity
Not Before: Aug 4 02:00:31 2025 GMT
Not After : Aug 5 02:00:31 2025 GMT
Subject: CN=ec738ba77e05b5fac5e2440e4c67a098af6c5542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fe:3d:51:c7:92:d5:d2:85:fe:16:9a:6e:93:
5f:94:ab:bb:0c:78:2e:1f:67:6d:02:57:96:0a:83:
41:0b:3b:ed:fd:f9:b7:6c:a7:f1:06:4a:ad:f1:50:
27:79:17:fa:bb:c3:c5:9a:e1:73:a6:a6:11:f3:65:
64:e8:dd:cf:cc:f8:60:e9:fd:84:c7:61:06:56:84:
fc:55:86:7e:03:2a:59:95:65:7c:11:63:a5:08:c0:
26:91:1e:1d:80:46:ae:77:cc:72:49:35:95:f1:b4:
47:f1:1b:68:51:9d:eb:4f:a0:04:7c:a6:9f:07:7d:
5b:35:ec:6b:4d:79:66:38:ed:14:70:a4:2b:fb:91:
c4:16:45:fd:a5:a4:04:e8:99:32:a0:fb:0d:19:59:
a8:fb:0a:26:8c:53:78:59:f0:14:ab:b4:fe:d2:ef:
7a:66:6f:10:0e:f7:dd:16:94:45:4b:a4:e6:d5:bc:
81:76:35:73:84:aa:b0:db:7a:78:97:7a:2c:f5:94:
e7:ba:5f:e3:e1:62:7e:5d:75:8f:f3:06:30:3e:f0:
7f:00:9b:48:8f:10:c3:ad:de:89:f9:8d:64:ab:cf:
3d:5c:a8:6e:b9:d6:d7:07:09:ee:20:db:59:d0:e4:
fa:fa:8b:b6:f6:c3:04:0c:95:5f:19:63:34:de:49:
20:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:73:8B:A7:7E:05:B5:FA:C5:E2:44:0E:4C:67:A0:98:AF:6C:55:42
X509v3 Authority Key Identifier:
keyid:91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:28:6b:ef:b0:58:05:04:35:36:96:15:0f:54:7d:43:46:b7:
47:01:9f:b9:b7:5d:27:24:11:cb:eb:c4:1d:15:f4:b3:76:a8:
a9:31:cd:8d:c5:ef:f0:95:8e:2a:9f:7a:22:7a:b8:52:a2:76:
15:36:63:20:50:85:56:66:37:34:cc:23:20:cd:4d:51:68:84:
f5:4e:cf:7c:90:a1:ae:33:f2:fc:61:46:6a:f4:3d:84:88:2e:
89:7f:77:b6:ea:27:48:02:56:ce:f7:09:db:38:ab:b8:8a:79:
3c:c4:a8:d6:d0:71:db:2a:6c:be:2f:d0:5a:d6:49:a8:cf:5d:
d6:ee:b8:57:3a:28:e2:50:e4:61:9d:03:b7:d4:b9:62:b5:6d:
d8:e9:a6:2a:b9:26:1f:f3:7e:2e:5b:45:e8:34:fe:d5:1b:98:
1b:0c:00:f1:71:57:d1:39:94:65:4c:3a:35:5e:d1:1e:be:66:
68:41:e6:d8:0b:8f:29:40:26:7f:85:6f:49:c7:b5:d3:7e:4a:
e8:8f:e1:ea:49:ac:c7:c5:63:15:b5:2e:7a:0f:b3:06:dc:c5:
e3:44:71:1b:41:62:79:c4:ee:45:85:14:bd:9d:3a:ab:60:42:
87:d6:dc:24:b1:b7:08:b8:ce:94:84:33:07:2b:73:a2:5e:2c:
73:90:ae:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyzxfxoC5LT9jDjDZb0WFMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGI3ZDFlNmU3MmQ1NWM4ZDFjNGEzZTgyNDFkNzFkY2Y4
ZTNiZjEwHhcNMjUwODA0MDIwMDMxWhcNMjUwODA1MDIwMDMxWjAzMTEwLwYDVQQD
EyhlYzczOGJhNzdlMDViNWZhYzVlMjQ0MGU0YzY3YTA5OGFmNmM1NTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP49UceS1dKF/haabpNflKu7DHgu
H2dtAleWCoNBCzvt/fm3bKfxBkqt8VAneRf6u8PFmuFzpqYR82Vk6N3PzPhg6f2E
x2EGVoT8VYZ+AypZlWV8EWOlCMAmkR4dgEaud8xySTWV8bRH8RtoUZ3rT6AEfKaf
B31bNexrTXlmOO0UcKQr+5HEFkX9paQE6JkyoPsNGVmo+womjFN4WfAUq7T+0u96
Zm8QDvfdFpRFS6Tm1byBdjVzhKqw23p4l3os9ZTnul/j4WJ+XXWP8wYwPvB/AJtI
jxDDrd6J+Y1kq889XKhuudbXBwnuINtZ0OT6+ou29sMEDJVfGWM03kkgtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxzi6d+BbX6xeJEDkxnoJivbFVCMB8GA1UdIwQY
MBaAFJFLfR5uctVcjRxKPoJB1x3PjjvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1V0OUhtNXkxVnlOSEVvLWdrSFhIYy1PT19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84MzQ5ZTQtNjljYy00MTQwLWE3NDQt
YWJlZDc0NDE1YjhmLzEva1V0OUhtNXkxVnlOSEVvLWdrSFhIYy1PT19FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy84MzQ5ZTQtNjljYy00MTQwLWE3NDQtYWJlZDc0NDE1Yjhm
LzEva1V0OUhtNXkxVnlOSEVvLWdrSFhIYy1PT19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmihr77BY
BQQ1NpYVD1R9Q0a3RwGfubddJyQRy+vEHRX0s3aoqTHNjcXv8JWOKp96Inq4UqJ2
FTZjIFCFVmY3NMwjIM1NUWiE9U7PfJChrjPy/GFGavQ9hIguiX93tuonSAJWzvcJ
2ziruIp5PMSo1tBx2ypsvi/QWtZJqM9d1u64Vzoo4lDkYZ0Dt9S5YrVt2OmmKrkm
H/N+LltF6DT+1RuYGwwA8XFX0TmUZUw6NV7RHr5maEHm2AuPKUAmf4VvSce1035K
6I/h6kmsx8VjFbUueg+zBtzF40RxG0FiecTuRYUUvZ06q2BCh9bcJLG3CLjOlIQz
Bytzol4sc5Cu7A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:48 2025 by rpki-client