Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
File: kmhshS82--n8i-d8QJtSJqbuVNU.mft (raw, json)
Hash identifier: 4KH2TpexE2lB7iQeIEZHNZgl4NzLs567D/lOXDDuKI8=
Subject key identifier: 7B:09:6F:03:13:0C:33:C4:38:77:83:83:D1:DC:4B:39:49:52:D9:B8
Authority key identifier: 92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5
Certificate issuer: /CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5
Certificate serial: 01988BB3B0A1D25E71FB5E3B6258C369276D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
Manifest number: 1626
Signing time: Fri 08 Aug 2025 22:01:05 +0000
Manifest this update: Fri 08 Aug 2025 22:01:05 +0000
Manifest next update: Sat 09 Aug 2025 22:01:05 +0000
Files and hashes: 1: IvJ7HvT-6tCK5GKbaPNyk54ml9M.roa (hash: 7zWh/VLAgd5GsVxZJpmQ4YamOZV0jGAf5fVHM29zO30=)
2: kmhshS82--n8i-d8QJtSJqbuVNU.crl (hash: WBPuI+sK2XwOKQKcPvChvDmBzX7WYhzfLQTzIHPuXZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:b0:a1:d2:5e:71:fb:5e:3b:62:58:c3:69:27:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5
Validity
Not Before: Aug 8 22:01:05 2025 GMT
Not After : Aug 9 22:01:05 2025 GMT
Subject: CN=7b096f03130c33c438778383d1dc4b394952d9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2d:c0:37:9b:9b:19:50:72:c9:4b:97:90:0a:
4d:a4:37:6f:dd:ff:e8:96:bf:8c:62:6d:d1:b3:8a:
ea:c3:14:6a:f7:43:fd:94:43:73:61:52:77:8b:9c:
80:c8:83:b8:dc:57:27:6c:c6:30:3e:70:d4:7c:4d:
a9:62:b3:e6:63:ee:51:5e:63:32:ab:f0:9a:83:b4:
72:b0:db:9a:b4:bc:4c:2f:87:29:77:33:49:04:76:
51:0c:5c:aa:5f:f7:6b:17:6c:df:4d:04:0e:d3:34:
d4:26:8f:53:4f:98:c3:98:fb:d8:24:44:42:e4:55:
18:04:a3:91:59:75:6c:15:a6:1a:c8:95:50:b8:0f:
4a:ae:de:d4:a2:76:16:c9:22:06:74:c0:b3:b5:7b:
db:ac:98:ea:06:2c:46:da:0b:86:43:59:f1:63:01:
91:31:b9:2b:68:51:87:d8:b7:ab:79:45:a9:e9:40:
32:73:2f:94:5b:aa:ab:fe:7e:57:22:3a:fb:a1:d3:
5c:ae:b6:6f:ca:c8:c7:94:dc:43:e5:b0:70:26:31:
45:2e:52:5c:97:70:a3:62:8f:e0:43:64:e1:d0:2d:
7c:34:8f:4d:9e:31:29:6f:78:17:6f:48:eb:1e:90:
f3:13:96:2c:85:0a:a0:02:99:3a:e3:28:bf:f4:60:
b3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:09:6F:03:13:0C:33:C4:38:77:83:83:D1:DC:4B:39:49:52:D9:B8
X509v3 Authority Key Identifier:
keyid:92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fe:9c:23:d8:98:2d:17:70:52:fe:81:23:85:32:2d:d1:fe:
8e:85:3e:8d:41:b5:05:ae:48:a1:a0:88:9b:d1:a4:a9:72:a9:
df:d0:89:61:e7:c4:a2:28:7d:74:ce:e0:eb:4a:53:8b:06:5e:
61:95:2b:fb:fe:96:14:d5:dc:f7:be:28:35:ae:4d:c8:34:aa:
f5:85:9b:91:22:07:c4:80:b8:09:61:e9:7d:80:e6:6a:7b:36:
8a:99:92:3a:f9:3d:4f:44:13:c4:7c:fe:b7:64:63:34:ef:7f:
52:c1:40:ba:b8:b3:bc:d1:df:9e:56:d2:05:72:7a:ef:96:13:
90:fc:94:d4:51:61:65:50:e1:f9:f6:87:42:0c:a4:e9:48:af:
c8:1a:ed:a6:b6:b0:3d:3c:55:47:c4:00:50:d4:8e:a8:08:c5:
89:58:d4:66:31:b0:92:e5:7d:0b:66:ed:d2:a3:a5:db:86:e9:
43:79:b2:33:2e:ac:74:e6:35:73:ae:86:d3:73:05:d0:69:f9:
9a:78:fb:80:ad:0a:15:f5:2d:06:4f:dd:75:48:cc:5f:ee:3e:
10:3a:32:40:3f:be:90:73:a1:c5:f3:4d:1c:13:a0:9d:ad:af:
30:e6:2c:52:3b:28:5f:61:9a:bd:2e:02:f8:dd:21:03:5c:07:
f3:3c:57:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLs7Ch0l5x+147YljDaSdtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNjg2Yzg1MmYzNmZiZTlmYzhiZTc3YzQwOWI1MjI2YTZl
ZTU0ZDUwHhcNMjUwODA4MjIwMTA1WhcNMjUwODA5MjIwMTA1WjAzMTEwLwYDVQQD
Eyg3YjA5NmYwMzEzMGMzM2M0Mzg3NzgzODNkMWRjNGIzOTQ5NTJkOWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy3AN5ubGVByyUuXkApNpDdv3f/o
lr+MYm3Rs4rqwxRq90P9lENzYVJ3i5yAyIO43FcnbMYwPnDUfE2pYrPmY+5RXmMy
q/Cag7RysNuatLxML4cpdzNJBHZRDFyqX/drF2zfTQQO0zTUJo9TT5jDmPvYJERC
5FUYBKORWXVsFaYayJVQuA9Krt7UonYWySIGdMCztXvbrJjqBixG2guGQ1nxYwGR
MbkraFGH2LereUWp6UAycy+UW6qr/n5XIjr7odNcrrZvysjHlNxD5bBwJjFFLlJc
l3CjYo/gQ2Th0C18NI9NnjEpb3gXb0jrHpDzE5YshQqgApk64yi/9GCziQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsJbwMTDDPEOHeDg9HcSzlJUtm4MB8GA1UdIwQY
MBaAFJJobIUvNvvp/IvnfECbUiam7lTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva21oc2hTODItLW44aS1kOFFKdFNKcWJ1Vk5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kNTU5YjItNGIzMy00ZjhkLTlkMjEt
YmE3MWZiZGIwMzc0LzEva21oc2hTODItLW44aS1kOFFKdFNKcWJ1Vk5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kNTU5YjItNGIzMy00ZjhkLTlkMjEtYmE3MWZiZGIwMzc0
LzEva21oc2hTODItLW44aS1kOFFKdFNKcWJ1Vk5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARf6cI9iY
LRdwUv6BI4UyLdH+joU+jUG1Ba5IoaCIm9GkqXKp39CJYefEoih9dM7g60pTiwZe
YZUr+/6WFNXc974oNa5NyDSq9YWbkSIHxIC4CWHpfYDmans2ipmSOvk9T0QTxHz+
t2RjNO9/UsFAurizvNHfnlbSBXJ675YTkPyU1FFhZVDh+faHQgyk6UivyBrtpraw
PTxVR8QAUNSOqAjFiVjUZjGwkuV9C2bt0qOl24bpQ3myMy6sdOY1c66G03MF0Gn5
mnj7gK0KFfUtBk/ddUjMX+4+EDoyQD++kHOhxfNNHBOgna2vMOYsUjsoX2GavS4C
+N0hA1wH8zxXLw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:24 2025 by rpki-client