Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
File: kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft (raw, json)
Hash identifier: qwSfonMNAkLItXNCovGWIOWSXWgoGf7+RpWirlrqSkE=
Subject key identifier: 40:EE:02:FF:85:D4:75:6C:85:A7:D9:1B:24:05:DE:23:FF:C1:E0:E3
Authority key identifier: 90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
Certificate issuer: /CN=9087833e025b2320f9053a103ba61de52eab2afb
Certificate serial: 01988B7D256C625EFA7E228C0ED958AC9134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
Manifest number: 05CE
Signing time: Fri 08 Aug 2025 21:01:31 +0000
Manifest this update: Fri 08 Aug 2025 21:01:31 +0000
Manifest next update: Sat 09 Aug 2025 21:01:31 +0000
Files and hashes: 1: Sl6Vo_wPwtgiIFIYMqrbSQblXKc.roa (hash: l8tp4Qke8V/squeIomyLOU/9sV5KVMqfblcX8Rj/Ujc=)
2: kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl (hash: 7K59R55yGk6nNHRS14O16EAUwncYrq0vCFul1ZkBmQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:25:6c:62:5e:fa:7e:22:8c:0e:d9:58:ac:91:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9087833e025b2320f9053a103ba61de52eab2afb
Validity
Not Before: Aug 8 21:01:31 2025 GMT
Not After : Aug 9 21:01:31 2025 GMT
Subject: CN=40ee02ff85d4756c85a7d91b2405de23ffc1e0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:d5:42:2d:49:41:d1:54:31:c2:4f:cb:59:
ee:0e:33:54:c4:42:fd:7c:4b:f1:76:60:14:ea:1e:
f0:ef:b6:20:6f:15:07:18:98:22:2c:f4:b6:58:44:
60:70:a3:ae:29:15:2d:43:92:76:06:2e:35:d5:9e:
ea:1c:c0:09:3c:48:d0:51:56:82:90:57:35:5c:de:
1c:6d:1d:a8:4b:94:4b:19:50:82:a1:fd:26:59:4b:
af:b9:c9:8a:a7:d0:a2:47:7d:66:45:7d:c5:72:60:
f6:5a:8d:23:1c:3a:f8:86:4f:84:d4:af:4c:bd:33:
42:f0:9f:f5:15:b1:82:52:f3:14:07:92:a2:20:ec:
7b:6a:6f:87:f9:a4:97:1c:d2:e0:3a:b1:64:c2:2a:
81:21:fb:69:cc:32:c8:f5:87:46:05:d2:4f:37:16:
86:92:20:47:a7:b8:a9:1d:48:d8:d7:af:03:f8:e4:
ed:3f:b7:cb:85:d1:66:4d:da:74:3e:16:cb:ca:cb:
19:f3:c5:99:4c:ff:30:81:ee:14:d5:83:ee:b3:a1:
cf:84:ae:b6:17:3b:de:7d:dc:c0:b1:c2:9a:3c:69:
94:f1:00:a6:eb:42:ed:c2:05:94:5d:6b:b7:4e:cc:
24:7b:6f:ea:9e:ad:5f:97:6e:0c:e3:d1:02:7d:af:
fb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EE:02:FF:85:D4:75:6C:85:A7:D9:1B:24:05:DE:23:FF:C1:E0:E3
X509v3 Authority Key Identifier:
keyid:90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7c:ef:6a:aa:d7:66:b8:c8:2d:b5:34:c3:c8:27:62:bb:03:
3c:d9:9e:dd:19:c2:f3:3c:74:4c:f9:04:c5:79:5b:cb:eb:d4:
51:db:4c:fa:4e:3b:d8:d1:86:ae:e8:38:08:7d:e8:51:df:ba:
74:96:23:ee:fa:ae:ec:de:0a:86:6d:c8:a0:e0:00:ed:55:b9:
bb:09:da:53:88:f9:76:e7:ef:2b:34:a4:c3:6c:2b:51:72:a8:
05:ab:9d:07:7e:68:17:c2:5c:f1:43:74:fc:25:61:25:e9:51:
d8:7c:6f:8e:d1:61:15:db:48:b9:9b:4a:2b:bd:ed:8a:ff:0c:
37:fe:64:a3:60:7f:d5:86:42:32:2c:24:48:22:6d:6c:79:28:
fe:a3:fe:df:ef:67:83:c2:5e:86:e9:e2:4d:27:4a:c0:6e:4d:
fd:ca:14:f3:9c:65:d8:77:2c:11:55:8d:82:fa:be:9b:b8:b7:
b2:03:6b:8a:bb:59:ab:da:11:c7:f1:d5:a6:1f:cf:17:f8:f5:
6b:13:ca:4d:d3:f9:33:fe:c5:1b:71:94:7e:c8:b6:6c:7f:e4:
80:7a:5b:eb:29:38:e0:75:6c:63:d8:ef:8f:7b:46:71:5f:82:
55:72:58:29:bd:5a:25:58:32:52:57:59:3c:9c:10:05:32:3b:
72:3f:a6:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfSVsYl76fiKMDtlYrJE0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwODc4MzNlMDI1YjIzMjBmOTA1M2ExMDNiYTYxZGU1MmVh
YjJhZmIwHhcNMjUwODA4MjEwMTMxWhcNMjUwODA5MjEwMTMxWjAzMTEwLwYDVQQD
Eyg0MGVlMDJmZjg1ZDQ3NTZjODVhN2Q5MWIyNDA1ZGUyM2ZmYzFlMGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8nVQi1JQdFUMcJPy1nuDjNUxEL9
fEvxdmAU6h7w77YgbxUHGJgiLPS2WERgcKOuKRUtQ5J2Bi411Z7qHMAJPEjQUVaC
kFc1XN4cbR2oS5RLGVCCof0mWUuvucmKp9CiR31mRX3FcmD2Wo0jHDr4hk+E1K9M
vTNC8J/1FbGCUvMUB5KiIOx7am+H+aSXHNLgOrFkwiqBIftpzDLI9YdGBdJPNxaG
kiBHp7ipHUjY168D+OTtP7fLhdFmTdp0PhbLyssZ88WZTP8wge4U1YPus6HPhK62
FzvefdzAscKaPGmU8QCm60LtwgWUXWu3Tswke2/qnq1fl24M49ECfa/7MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDuAv+F1HVshafZGyQF3iP/weDjMB8GA1UdIwQY
MBaAFJCHgz4CWyMg+QU6EDumHeUuqyr7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0llRFBnSmJJeUQ1QlRvUU82WWQ1UzZyS3ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zNzAxZjctMjBlZi00OTY2LWEyY2Qt
MTE5ZGNkMmVhOWRiLzEva0llRFBnSmJJeUQ1QlRvUU82WWQ1UzZyS3ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8zNzAxZjctMjBlZi00OTY2LWEyY2QtMTE5ZGNkMmVhOWRi
LzEva0llRFBnSmJJeUQ1QlRvUU82WWQ1UzZyS3ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXzvaqrX
ZrjILbU0w8gnYrsDPNme3RnC8zx0TPkExXlby+vUUdtM+k472NGGrug4CH3oUd+6
dJYj7vqu7N4Khm3IoOAA7VW5uwnaU4j5dufvKzSkw2wrUXKoBaudB35oF8Jc8UN0
/CVhJelR2HxvjtFhFdtIuZtKK73tiv8MN/5ko2B/1YZCMiwkSCJtbHko/qP+3+9n
g8JehuniTSdKwG5N/coU85xl2HcsEVWNgvq+m7i3sgNrirtZq9oRx/HVph/PF/j1
axPKTdP5M/7FG3GUfsi2bH/kgHpb6yk44HVsY9jvj3tGcV+CVXJYKb1aJVgyUldZ
PJwQBTI7cj+mXg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:37:42 2025 by rpki-client