Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
File: k19T9eQH5VojMNnVI6gEwHIspWU.mft (raw, json)
Hash identifier: Su71xxKUbPlJ1+HcxU4RX7rXDCPy/Wa7M/kPqMPNa5s=
Subject key identifier: 91:5A:BC:0C:5A:61:E7:2A:EB:1B:F0:3F:43:1B:F1:03:D3:03:19:F6
Authority key identifier: 93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
Certificate issuer: /CN=935f53f5e407e55a2330d9d523a804c0722ca565
Certificate serial: 01976C2AA8B61C39DC90D990035B1E2B7621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 02:00:24 +0000
Manifest this update: Sat 14 Jun 2025 02:00:24 +0000
Manifest next update: Sun 15 Jun 2025 02:00:24 +0000
Files and hashes: 1: CEKF3MXHpQR2CGHCMQpTxxuuRIY.roa (hash: Rh5DOeHi5/pgsxZpTOekiFMDHUB1zlvv4XKyE6PrDFE=)
2: cXHMvnYXUn58neLwmoRSc042tjs.roa (hash: SBDcDeTpbKOEPbrOKMYmcpYN3NXUYeqARSNljTNUetg=)
3: k19T9eQH5VojMNnVI6gEwHIspWU.crl (hash: peyE+mHdsvU4ZLiSFYJttRHhUCmyed5TKXtSUZjhiIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:a8:b6:1c:39:dc:90:d9:90:03:5b:1e:2b:76:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935f53f5e407e55a2330d9d523a804c0722ca565
Validity
Not Before: Jun 14 02:00:24 2025 GMT
Not After : Jun 15 02:00:24 2025 GMT
Subject: CN=915abc0c5a61e72aeb1bf03f431bf103d30319f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6a:8f:f0:3f:7d:86:ae:f8:bc:6f:6d:f8:41:
f9:48:81:90:42:1b:7c:c0:43:59:0d:f8:b0:6e:91:
e8:eb:ba:66:4e:f3:7e:a6:c8:9e:af:13:d3:53:21:
00:40:aa:af:21:6d:fa:e0:9a:47:7f:90:bc:c4:c6:
29:4d:58:19:e6:55:a1:d6:70:fb:e0:42:51:7d:70:
bc:0e:26:02:21:be:58:21:e4:26:ad:08:9a:44:e3:
3f:df:0e:60:08:40:a1:40:9a:c8:a0:54:17:a4:80:
ab:ad:56:e3:4d:52:7b:5c:ac:1e:73:a1:e2:ef:56:
d0:f7:55:42:8f:50:f9:da:35:33:b0:85:6d:d1:d9:
a6:9a:98:ef:82:19:3a:16:f6:1b:ac:e0:66:10:e9:
6e:76:02:68:c2:45:1b:59:c8:42:62:0c:21:b8:cf:
6c:35:5e:eb:b1:1c:70:f4:19:9b:78:63:cd:2c:c3:
63:d6:91:63:51:8d:f8:1f:4e:33:7c:fa:3c:23:71:
f5:6d:ae:4e:f8:3b:08:a5:b8:bc:ad:d5:66:ca:0a:
77:1f:99:c1:74:f3:4a:82:68:b7:4c:bd:82:43:fb:
87:a8:e7:0e:75:68:e6:18:4c:e0:40:64:c5:73:71:
89:d7:0f:d3:78:56:14:86:23:74:9d:83:69:cf:ee:
58:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5A:BC:0C:5A:61:E7:2A:EB:1B:F0:3F:43:1B:F1:03:D3:03:19:F6
X509v3 Authority Key Identifier:
keyid:93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:51:e9:00:5a:51:ee:2f:00:d4:6b:5a:86:c2:21:08:47:db:
80:fb:42:13:10:9e:4c:ab:f9:3e:e0:f9:33:2e:13:b1:46:e7:
74:23:f8:70:22:ad:79:df:7a:de:95:e4:3f:e1:64:ce:be:7d:
6f:ab:8e:6f:f3:81:fb:86:61:83:b4:45:07:e6:e1:db:a5:b3:
b8:0e:5d:fd:1c:68:bd:d8:5b:82:78:1c:27:78:bf:6d:2a:d5:
2e:a2:5b:ad:8e:d7:6e:ae:d8:52:b6:be:3f:39:7a:69:bc:27:
17:f0:c9:f7:e9:a5:38:1f:bf:3c:f3:44:0d:d0:ef:60:5e:d1:
97:3e:37:a1:49:1b:80:d8:db:0c:85:ad:33:14:22:b3:13:8c:
2a:04:7a:f7:25:70:2a:4b:e9:c0:68:9c:77:40:f7:65:1e:90:
79:90:f9:2a:ff:a8:eb:9d:73:ff:c2:80:87:4a:c2:f5:f6:6b:
3c:1e:c9:9c:f1:88:80:1f:ff:07:25:b0:36:e5:6f:e9:70:61:
0d:80:7c:e5:30:ce:62:f4:e9:7b:d7:4d:a4:b2:8b:31:13:e1:
91:f2:ee:23:f9:7c:47:e6:4f:b3:a3:96:fa:bf:6a:7e:ee:ca:
e4:6a:f6:d7:8d:cc:e5:fd:d3:60:7a:44:f0:02:8d:e4:43:89:
07:46:4c:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsKqi2HDnckNmQA1seK3YhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNWY1M2Y1ZTQwN2U1NWEyMzMwZDlkNTIzYTgwNGMwNzIy
Y2E1NjUwHhcNMjUwNjE0MDIwMDI0WhcNMjUwNjE1MDIwMDI0WjAzMTEwLwYDVQQD
Eyg5MTVhYmMwYzVhNjFlNzJhZWIxYmYwM2Y0MzFiZjEwM2QzMDMxOWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12qP8D99hq74vG9t+EH5SIGQQht8
wENZDfiwbpHo67pmTvN+psierxPTUyEAQKqvIW364JpHf5C8xMYpTVgZ5lWh1nD7
4EJRfXC8DiYCIb5YIeQmrQiaROM/3w5gCEChQJrIoFQXpICrrVbjTVJ7XKwec6Hi
71bQ91VCj1D52jUzsIVt0dmmmpjvghk6FvYbrOBmEOludgJowkUbWchCYgwhuM9s
NV7rsRxw9BmbeGPNLMNj1pFjUY34H04zfPo8I3H1ba5O+DsIpbi8rdVmygp3H5nB
dPNKgmi3TL2CQ/uHqOcOdWjmGEzgQGTFc3GJ1w/TeFYUhiN0nYNpz+5YUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFavAxaYecq6xvwP0Mb8QPTAxn2MB8GA1UdIwQY
MBaAFJNfU/XkB+VaIzDZ1SOoBMByLKVlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazE5VDllUUg1Vm9qTU5uVkk2Z0V3SElzcFdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84YjU1NGMtMGNlZi00MWIzLWJhM2It
MmQ1ZDY4ODQxNzNmLzEvazE5VDllUUg1Vm9qTU5uVkk2Z0V3SElzcFdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi84YjU1NGMtMGNlZi00MWIzLWJhM2ItMmQ1ZDY4ODQxNzNm
LzEvazE5VDllUUg1Vm9qTU5uVkk2Z0V3SElzcFdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1HpAFpR
7i8A1GtahsIhCEfbgPtCExCeTKv5PuD5My4TsUbndCP4cCKted963pXkP+Fkzr59
b6uOb/OB+4Zhg7RFB+bh26WzuA5d/RxovdhbgngcJ3i/bSrVLqJbrY7Xbq7YUra+
Pzl6abwnF/DJ9+mlOB+/PPNEDdDvYF7Rlz43oUkbgNjbDIWtMxQisxOMKgR69yVw
KkvpwGicd0D3ZR6QeZD5Kv+o651z/8KAh0rC9fZrPB7JnPGIgB//ByWwNuVv6XBh
DYB85TDOYvTpe9dNpLKLMRPhkfLuI/l8R+ZPs6OW+r9qfu7K5Gr2143M5f3TYHpE
8AKN5EOJB0ZM4Q==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:22:40 2025 by rpki-client