Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json)
Hash identifier: oi1FfZ4PAQfFOi49s3xp6geC2JxTcGoZUG44Ovf6/Zg=
Subject key identifier: 6A:CD:28:94:68:3E:B0:7E:5D:37:22:00:DB:4C:68:3E:48:89:E8:12
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 019872D00EE7B2DE2FC840DBCA367C3A7769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
Manifest number: 1627
Signing time: Mon 04 Aug 2025 02:01:34 +0000
Manifest this update: Mon 04 Aug 2025 02:01:34 +0000
Manifest next update: Tue 05 Aug 2025 02:01:34 +0000
Files and hashes: 1: 3S9CxnQg7YWqU3K6TXltDEUCLyw.roa (hash: 3OEFYGKv+A11bV584/FIEjB0rz/syH/3YTSncOKzqpk=)
2: 7iZSI8YJjBx97RcBp5yy0dHgNCc.roa (hash: zYIePn/XtBi1RBLoEwZwbryvrg3fa+ccFHSQFX92GIc=)
3: 8aTIb0puCina4qQH9DISIqfOc4Q.roa (hash: 1Nu+gUGiEPO422nTi4SIHIM/055+/Bx1i4GdyYjGB6w=)
4: 9DoakwUWAGtHNEatYpKzbo2QTwI.roa (hash: N1mtoTrK+kfX1PnLRJRzSQlCeUqp41+33H0gjLXBdeo=)
5: EZFIYtcapsDAbifqmq2FXtp-Cdw.roa (hash: f6ff20P7C3YhGHb/pCr95k1VGXcMCffUp+GlTWJzaPk=)
6: F-e0yheo2RviKbK6HPx7_eTqhA4.roa (hash: KEJO7y7WsDfC5FsDfSaCJ3hpxQXSnjViDnFGvytgGQY=)
7: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: mGpWqlUHIF2z0WF18dwLnBsgQNJLwXa/5qSq95O7ZQE=)
8: ic83PxAobxuOswBFck-YRl3xl5s.roa (hash: b2hEd1qs+ywRwA/SKMeyaDMx96OzLoUUBDS6BjYhAik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:d0:0e:e7:b2:de:2f:c8:40:db:ca:36:7c:3a:77:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Aug 4 02:01:34 2025 GMT
Not After : Aug 5 02:01:34 2025 GMT
Subject: CN=6acd2894683eb07e5d372200db4c683e4889e812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7c:0e:56:52:df:2f:5a:42:dc:5a:da:e0:63:
83:5a:b4:e8:68:da:3d:49:34:07:cf:fb:69:86:8b:
28:a1:ba:f4:75:4f:b9:ab:da:fe:1b:d1:1b:f4:73:
06:78:b5:cb:7f:aa:35:f9:a5:19:6b:67:21:58:df:
2b:00:15:ff:79:ac:c7:1a:cd:40:41:66:58:e6:a2:
2c:01:bd:09:15:67:3e:bb:25:df:be:a9:23:4d:8c:
cd:b9:b7:a7:47:13:c6:e0:cb:be:bf:8e:db:ba:a1:
64:65:5c:74:c0:42:95:4c:38:66:fd:cc:21:18:12:
f1:83:cb:e4:8c:be:71:2c:11:fc:0f:06:03:b0:53:
a5:61:a3:49:69:a0:6c:3a:fb:4e:cb:df:ae:bd:80:
5f:e9:9f:bd:b7:d4:d4:76:99:b4:c8:77:df:5b:ad:
8f:e4:20:09:8d:7f:21:b3:ce:17:ef:64:d6:b0:77:
7d:22:2f:8f:d0:c0:db:3d:74:e2:0b:57:b0:45:75:
39:a8:d8:1d:a7:81:d0:f8:27:c7:e6:81:7d:4a:57:
10:4f:fd:a3:b4:c8:07:da:d3:31:4e:2f:a0:78:61:
c0:04:f7:69:8c:b9:dd:e5:85:ab:b1:68:85:83:62:
3c:ca:34:d4:bd:fc:cd:13:7f:e6:a9:04:ea:26:64:
1f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CD:28:94:68:3E:B0:7E:5D:37:22:00:DB:4C:68:3E:48:89:E8:12
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fa:76:3d:50:2c:04:71:08:41:28:fd:e2:e4:1a:c1:0c:5a:
de:14:ba:29:ba:49:c5:b8:e7:78:57:6a:e8:d0:74:e1:55:02:
3f:5f:c6:3f:07:6e:8f:fe:4d:bd:17:6b:87:92:37:14:37:b6:
42:fd:49:94:ca:3c:d9:09:3b:32:8f:79:db:b7:7f:08:6c:fe:
52:d5:f3:0c:06:49:f6:71:06:86:f7:b2:f7:25:da:8c:64:07:
ed:c3:c2:11:b3:2b:d3:f0:fd:90:2f:df:a3:fe:ea:8c:30:b0:
fa:f3:3f:aa:05:c6:6d:db:b4:e5:58:7a:c5:b6:a8:0b:a9:d6:
d8:9a:42:41:8e:58:5c:e7:7d:39:45:e8:8f:bb:8f:70:34:d2:
c9:5a:16:d1:bb:c1:c6:6d:fd:76:52:70:35:c7:c1:5f:23:db:
36:de:32:6f:60:56:a7:b1:a8:38:99:6f:a0:9d:a8:cd:3b:ef:
9e:22:28:90:27:eb:6c:e5:3b:48:87:87:02:ca:b1:89:37:2e:
0d:ea:5b:42:8e:9f:08:47:38:94:7a:46:4f:72:c2:02:91:14:
cb:f7:09:f3:31:e4:85:02:09:6d:0f:43:3e:ac:3f:0a:08:bf:
28:71:ef:07:e3:b9:5e:15:22:c8:d0:92:c8:ce:f9:cb:40:83:
6f:8c:53:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhy0A7nst4vyEDbyjZ8OndpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi
ZDQ2NWQwHhcNMjUwODA0MDIwMTM0WhcNMjUwODA1MDIwMTM0WjAzMTEwLwYDVQQD
Eyg2YWNkMjg5NDY4M2ViMDdlNWQzNzIyMDBkYjRjNjgzZTQ4ODllODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznwOVlLfL1pC3Fra4GODWrToaNo9
STQHz/tphosoobr0dU+5q9r+G9Eb9HMGeLXLf6o1+aUZa2chWN8rABX/eazHGs1A
QWZY5qIsAb0JFWc+uyXfvqkjTYzNubenRxPG4Mu+v47buqFkZVx0wEKVTDhm/cwh
GBLxg8vkjL5xLBH8DwYDsFOlYaNJaaBsOvtOy9+uvYBf6Z+9t9TUdpm0yHffW62P
5CAJjX8hs84X72TWsHd9Ii+P0MDbPXTiC1ewRXU5qNgdp4HQ+CfH5oF9SlcQT/2j
tMgH2tMxTi+geGHABPdpjLnd5YWrsWiFg2I8yjTUvfzNE3/mqQTqJmQfnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrNKJRoPrB+XTciANtMaD5IiegSMB8GA1UdIwQY
MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt
MzkxMGE1OWExMTIxLzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx
LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/p2PVAs
BHEIQSj94uQawQxa3hS6KbpJxbjneFdq6NB04VUCP1/GPwduj/5NvRdrh5I3FDe2
Qv1JlMo82Qk7Mo9527d/CGz+UtXzDAZJ9nEGhvey9yXajGQH7cPCEbMr0/D9kC/f
o/7qjDCw+vM/qgXGbdu05Vh6xbaoC6nW2JpCQY5YXOd9OUXoj7uPcDTSyVoW0bvB
xm39dlJwNcfBXyPbNt4yb2BWp7GoOJlvoJ2ozTvvniIokCfrbOU7SIeHAsqxiTcu
DepbQo6fCEc4lHpGT3LCApEUy/cJ8zHkhQIJbQ9DPqw/Cgi/KHHvB+O5XhUiyNCS
yM75y0CDb4xTRw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:32 2025 by rpki-client