Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
File: 1-K1UNiT40ygeyXBFjudS8QpCRSk.mft (raw, json)
Hash identifier: IBZct+E67BiJlGv7R53qdj318sXPBrAW4zAVYpU/9V4=
Subject key identifier: 1D:9A:A0:2B:17:6B:03:38:DA:40:95:3F:90:93:68:3E:9A:63:BF:04
Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
Certificate issuer: /CN=f8ad543624f8d3281ec970458ee752f10a424529
Certificate serial: 019772648EFC031B7C1D065678DC5EBB3109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
Manifest number: 159A
Signing time: Sun 15 Jun 2025 07:01:22 +0000
Manifest this update: Sun 15 Jun 2025 07:01:22 +0000
Manifest next update: Mon 16 Jun 2025 07:01:22 +0000
Files and hashes: 1: 0IRPcg0Zsb-gPoOdS1ZxVTcB0GM.roa (hash: ujPSAk32+dpIjTUsucTHydurSTU82h9ZEz2rCwGCvb4=)
2: 1-K1UNiT40ygeyXBFjudS8QpCRSk.crl (hash: 5lBTLfV2rBfo4vGHxAnyaKyFDy7JUrXFCV0KRJutCNc=)
3: 27QIFK3RME4zastoZr-Aqup92E4.roa (hash: AP5Zl89w4EnvvkKDLE1wTCUl3HvQyebnmKUtnCiGMTg=)
4: JbyektcecEj3BAlwzdyd-YQZG-I.roa (hash: qaQjv/GNe5ncVF9/+USSvz1DDnlwL3O9F43o15WDW8o=)
5: Pza9faIJ5cktDsZNFR6fEzPMTws.roa (hash: IZazQ28vh340utjMZWOtEpCw1yIpqU4ff78jK5/vzyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:64:8e:fc:03:1b:7c:1d:06:56:78:dc:5e:bb:31:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529
Validity
Not Before: Jun 15 07:01:22 2025 GMT
Not After : Jun 16 07:01:22 2025 GMT
Subject: CN=1d9aa02b176b0338da40953f9093683e9a63bf04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c5:fb:5c:74:ae:99:87:c6:bc:53:f8:83:6d:
a5:c0:cc:a5:8f:00:f0:21:64:86:04:39:3b:a3:93:
c5:27:ec:5f:53:d3:39:08:6d:42:9b:be:47:87:33:
a2:86:98:43:3e:23:d0:82:9c:c3:a9:7e:f2:47:b5:
94:ec:e3:53:e5:1f:5f:c8:93:70:16:f2:2d:5e:9d:
f4:89:fd:2a:dd:82:9f:c7:9e:87:56:c5:ee:8c:0f:
96:79:6b:30:67:77:83:18:28:ab:78:b2:f9:cd:b9:
17:d3:45:5d:b9:d5:bf:6b:f3:17:c3:80:33:e6:69:
85:99:5b:6e:f8:55:86:c5:07:ed:3a:55:8d:8d:fd:
4a:73:97:1c:43:b1:7b:c1:83:1e:4d:9d:30:8a:22:
57:b1:95:b8:2a:fa:45:92:c4:79:12:3c:e8:3f:08:
23:f9:b0:57:b5:bc:f0:0e:05:73:d1:63:e6:51:6d:
10:74:75:76:c9:10:79:71:89:2c:25:bc:77:c4:1f:
81:1d:ac:98:60:92:4a:75:e0:48:9c:4a:96:90:6e:
cc:16:32:5d:c0:4c:27:ce:a7:b6:fb:cb:bb:09:f4:
fe:57:a8:b3:98:cf:e6:74:e9:eb:b5:46:f7:ed:f8:
c3:35:ef:c3:4a:e5:d0:bf:3f:2a:fb:97:f7:d6:d3:
12:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9A:A0:2B:17:6B:03:38:DA:40:95:3F:90:93:68:3E:9A:63:BF:04
X509v3 Authority Key Identifier:
keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:92:1d:2c:95:f2:57:56:5f:2d:6f:3f:39:6a:2e:1e:57:a1:
8f:28:49:ca:7a:06:1b:66:30:79:5c:01:a3:8e:e7:f5:e5:06:
85:24:ec:b8:ab:2a:68:fd:d5:c2:39:70:a3:3a:84:30:95:1f:
3a:12:e0:ac:d5:d6:fc:11:4d:12:8f:e7:99:41:cc:73:3c:fd:
fc:24:f9:cb:e0:7d:86:8a:18:35:d5:64:26:17:22:6b:73:4e:
10:4d:61:6e:78:c5:11:c9:7f:ae:21:17:ee:81:a8:58:d9:3c:
3c:f4:59:7f:b6:82:fa:c6:cb:94:a5:89:8d:27:5e:aa:d3:b0:
c4:94:76:a4:e4:ff:2c:5a:57:41:58:92:b2:9b:5a:25:9c:53:
a5:0c:30:d8:24:19:c6:da:46:30:44:4a:69:63:ca:d7:0a:ac:
52:69:ad:14:2b:85:7a:81:86:3d:54:c2:2d:2a:d7:41:5a:67:
86:c4:7b:b5:d7:ee:10:7e:21:23:72:88:3a:16:39:e8:c0:1b:
5f:6d:f4:a5:3b:b4:bf:9b:bb:43:30:cf:48:79:b0:98:07:a4:
e2:9c:b7:34:4c:d1:1f:f5:b1:0f:8d:9a:2c:b9:c6:5d:0e:a6:
8d:65:94:45:24:08:2e:5f:da:b0:56:e1:5c:ee:93:ea:62:d5:
d6:c0:16:4a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdyZI78Axt8HQZWeNxeuzEJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YWQ1NDM2MjRmOGQzMjgxZWM5NzA0NThlZTc1MmYxMGE0
MjQ1MjkwHhcNMjUwNjE1MDcwMTIyWhcNMjUwNjE2MDcwMTIyWjAzMTEwLwYDVQQD
EygxZDlhYTAyYjE3NmIwMzM4ZGE0MDk1M2Y5MDkzNjgzZTlhNjNiZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sX7XHSumYfGvFP4g22lwMyljwDw
IWSGBDk7o5PFJ+xfU9M5CG1Cm75HhzOihphDPiPQgpzDqX7yR7WU7ONT5R9fyJNw
FvItXp30if0q3YKfx56HVsXujA+WeWswZ3eDGCireLL5zbkX00VdudW/a/MXw4Az
5mmFmVtu+FWGxQftOlWNjf1Kc5ccQ7F7wYMeTZ0wiiJXsZW4KvpFksR5EjzoPwgj
+bBXtbzwDgVz0WPmUW0QdHV2yRB5cYksJbx3xB+BHayYYJJKdeBInEqWkG7MFjJd
wEwnzqe2+8u7CfT+V6izmM/mdOnrtUb37fjDNe/DSuXQvz8q+5f31tMSFwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFB2aoCsXawM42kCVP5CTaD6aY78EMB8GA1UdIwQY
MBaAFPitVDYk+NMoHslwRY7nUvEKQkUpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LMVVOaVQ0MHlnZXlYQkZqdWRTOFFwQ1JTay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYWYxZjY0LWMzNWYtNDdlOC04N2M5
LThhMTFiNDcxOWQ4Mi8xLzEtSzFVTmlUNDB5Z2V5WEJGanVkUzhRcENSU2subWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzIwL2FmMWY2NC1jMzVmLTQ3ZTgtODdjOS04YTExYjQ3MTlk
ODIvMS8xLUsxVU5pVDQweWdleVhCRmp1ZFM4UXBDUlNrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZId
LJXyV1ZfLW8/OWouHlehjyhJynoGG2YweVwBo47n9eUGhSTsuKsqaP3VwjlwozqE
MJUfOhLgrNXW/BFNEo/nmUHMczz9/CT5y+B9hooYNdVkJhcia3NOEE1hbnjFEcl/
riEX7oGoWNk8PPRZf7aC+sbLlKWJjSdeqtOwxJR2pOT/LFpXQViSsptaJZxTpQww
2CQZxtpGMERKaWPK1wqsUmmtFCuFeoGGPVTCLSrXQVpnhsR7tdfuEH4hI3KIOhY5
6MAbX230pTu0v5u7QzDPSHmwmAek4py3NEzRH/WxD42aLLnGXQ6mjWWURSQILl/a
sFbhXO6T6mLV1sAWSg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 12:56:17 2025 by rpki-client