Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
File: kY74I7sEHqOsfIk2x1C2AYE34s0.mft (raw, json)
Hash identifier: Ca+JXNJ6fPfLqf8fHwi1RQWJJbNt/sy9AMKIDZe2DEE=
Subject key identifier: 7E:6E:C1:66:18:41:F4:52:28:67:48:93:7C:50:E5:C9:96:3D:CF:A8
Authority key identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
Certificate issuer: /CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Certificate serial: 01978546006B2708DC57AF586364276916C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
Manifest number: 159B
Signing time: Wed 18 Jun 2025 23:00:46 +0000
Manifest this update: Wed 18 Jun 2025 23:00:46 +0000
Manifest next update: Thu 19 Jun 2025 23:00:46 +0000
Files and hashes: 1: A9fnzzZSIyyk78DkykeGYg11L2Q.roa (hash: jan8f+is44AYa9jG93HTE50pBitsknBS00si8XIMwqI=)
2: DHmLK6qv7LDp9GSFF3bVVqiSSSs.roa (hash: 4c04LYJlSQnDFsWUTe3RinfcXPa5HIaLB5gKn1wNfQ8=)
3: X2DKxHgU0pJJ7l0RSAZexJQ4yk4.roa (hash: c4ZqtHFp+NEImgqSyGp/s8/x5ohWKo9ZUlSrkI+FleE=)
4: kY74I7sEHqOsfIk2x1C2AYE34s0.crl (hash: oJsZChDZ0JC2H9HqoW+B9UURBLmwSOky4VtzUdxvn0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:46:00:6b:27:08:dc:57:af:58:63:64:27:69:16:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Validity
Not Before: Jun 18 23:00:46 2025 GMT
Not After : Jun 19 23:00:46 2025 GMT
Subject: CN=7e6ec1661841f452286748937c50e5c9963dcfa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:85:04:4f:d6:3d:db:cf:fa:01:9b:a7:30:38:
e2:5a:bb:16:c9:27:d3:42:ef:cc:30:f8:d5:d1:6b:
76:ca:03:f9:5c:73:bf:b9:f1:ac:f6:76:c8:3b:fd:
35:0e:3a:36:1b:2b:03:e3:22:c3:cd:a2:f0:90:0a:
9f:64:be:d7:6a:ab:d6:1f:e3:a3:23:3d:7b:ac:f2:
aa:d2:35:69:b0:3e:be:26:5e:63:b7:b9:cd:52:b3:
f1:70:e0:52:ba:10:31:16:39:0a:9c:ca:d6:ae:02:
ad:89:1a:f6:ae:8a:a8:b1:8e:f2:5e:e1:5d:c6:b2:
a7:2d:f1:77:83:82:0d:c3:1c:a4:e8:b3:7e:85:5d:
d3:dc:61:17:00:7c:f7:92:e9:0f:c0:25:60:47:2f:
59:f9:e2:56:af:8c:9e:c6:fd:87:ae:88:2f:3b:38:
58:75:56:f3:84:ea:e5:0e:a0:cf:81:2b:f6:15:46:
2b:ff:c1:de:8c:b1:42:75:6b:15:e0:de:7a:86:3b:
0a:7e:80:23:31:54:5c:66:b7:1d:e4:f5:73:23:c2:
43:da:9a:8c:89:93:9b:c0:0e:da:1d:7b:cf:49:8e:
e1:53:2b:75:54:4a:2f:3c:44:14:8c:c1:9a:f4:7f:
31:e8:d2:7b:63:4b:08:4d:2c:8b:68:2e:f0:20:d9:
e1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6E:C1:66:18:41:F4:52:28:67:48:93:7C:50:E5:C9:96:3D:CF:A8
X509v3 Authority Key Identifier:
keyid:91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5e:8c:49:6f:14:44:71:d6:0a:8c:7b:c9:4d:13:d0:71:6d:
be:7c:07:9e:c8:17:58:4b:b9:16:18:ee:0b:84:08:d7:fc:83:
ae:22:e7:1d:3b:e0:c2:21:2a:07:6d:e9:8c:9a:85:a2:f6:8e:
c7:7f:2a:27:7f:34:0b:5f:86:63:8e:d4:3e:56:16:6d:02:5e:
f0:2d:c9:54:b8:0f:34:81:43:76:08:68:15:11:9c:da:d9:3e:
f5:c9:6a:72:30:67:63:a6:23:9f:38:b4:16:7a:d8:b8:6f:ca:
ef:47:d2:bd:38:6e:64:92:56:ac:5a:09:b0:b5:46:a7:c4:b2:
c5:3c:e4:b8:23:38:3c:5a:ee:ef:dd:59:09:ee:48:46:7a:4f:
74:b7:63:33:ec:9c:16:5a:4b:ca:1b:2f:5a:66:46:7a:95:cc:
22:4e:c2:ac:ba:b5:fc:38:9b:ec:5a:81:ad:8a:30:9e:d3:9e:
b6:33:22:2d:c8:d4:f7:5e:e1:f9:bf:71:f8:f7:55:7e:9b:78:
f7:0e:f6:f7:4c:10:ec:f7:cc:a5:a0:01:03:d2:26:f8:31:41:
eb:6d:b0:ef:b7:2d:f8:d7:9d:4a:c5:03:32:32:e8:cb:3e:e4:
7f:f3:48:2d:2e:32:a7:62:2b:5f:79:e3:ea:81:49:2d:d3:13:
56:c9:10:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeFRgBrJwjcV69YY2QnaRbHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxOGVmODIzYmIwNDFlYTNhYzdjODkzNmM3NTBiNjAxODEz
N2UyY2QwHhcNMjUwNjE4MjMwMDQ2WhcNMjUwNjE5MjMwMDQ2WjAzMTEwLwYDVQQD
Eyg3ZTZlYzE2NjE4NDFmNDUyMjg2NzQ4OTM3YzUwZTVjOTk2M2RjZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIUET9Y928/6AZunMDjiWrsWySfT
Qu/MMPjV0Wt2ygP5XHO/ufGs9nbIO/01Djo2GysD4yLDzaLwkAqfZL7XaqvWH+Oj
Iz17rPKq0jVpsD6+Jl5jt7nNUrPxcOBSuhAxFjkKnMrWrgKtiRr2roqosY7yXuFd
xrKnLfF3g4INwxyk6LN+hV3T3GEXAHz3kukPwCVgRy9Z+eJWr4yexv2HrogvOzhY
dVbzhOrlDqDPgSv2FUYr/8HejLFCdWsV4N56hjsKfoAjMVRcZrcd5PVzI8JD2pqM
iZObwA7aHXvPSY7hUyt1VEovPEQUjMGa9H8x6NJ7Y0sITSyLaC7wINnh5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5uwWYYQfRSKGdIk3xQ5cmWPc+oMB8GA1UdIwQY
MBaAFJGO+CO7BB6jrHyJNsdQtgGBN+LNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1k3NEk3c0VIcU9zZklrMngxQzJBWUUzNHMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS82NTQyMGMtZjVlMi00ZDI5LWI1MDMt
NjUyOTc1MWIyYjAxLzEva1k3NEk3c0VIcU9zZklrMngxQzJBWUUzNHMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS82NTQyMGMtZjVlMi00ZDI5LWI1MDMtNjUyOTc1MWIyYjAx
LzEva1k3NEk3c0VIcU9zZklrMngxQzJBWUUzNHMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmV6MSW8U
RHHWCox7yU0T0HFtvnwHnsgXWEu5FhjuC4QI1/yDriLnHTvgwiEqB23pjJqFovaO
x38qJ380C1+GY47UPlYWbQJe8C3JVLgPNIFDdghoFRGc2tk+9clqcjBnY6Yjnzi0
FnrYuG/K70fSvThuZJJWrFoJsLVGp8SyxTzkuCM4PFru791ZCe5IRnpPdLdjM+yc
FlpLyhsvWmZGepXMIk7CrLq1/Dib7FqBrYowntOetjMiLcjU917h+b9x+PdVfpt4
9w7290wQ7PfMpaABA9Im+DFB622w77ct+NedSsUDMjLoyz7kf/NILS4yp2IrX3nj
6oFJLdMTVskQ4A==
-----END CERTIFICATE-----
Generated at Thu Jun 19 08:06:56 2025 by rpki-client