
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
File: k19T9eQH5VojMNnVI6gEwHIspWU.mft (raw, json)
Hash identifier: UcFh6xXBHB22bCgzZ8Ys8YDQCYiiLEx7384tMWaErXM=
Subject key identifier: 70:35:91:6E:E4:F5:10:D4:49:CD:94:5E:F4:60:BC:15:F8:4B:E4:2A
Authority key identifier: 93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
Certificate issuer: /CN=935f53f5e407e55a2330d9d523a804c0722ca565
Certificate serial: 01987A88AE42F69B56B2059092A2755BF81E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 14:00:34 +0000
Manifest this update: Tue 05 Aug 2025 14:00:34 +0000
Manifest next update: Wed 06 Aug 2025 14:00:34 +0000
Files and hashes: 1: CEKF3MXHpQR2CGHCMQpTxxuuRIY.roa (hash: Rh5DOeHi5/pgsxZpTOekiFMDHUB1zlvv4XKyE6PrDFE=)
2: cXHMvnYXUn58neLwmoRSc042tjs.roa (hash: SBDcDeTpbKOEPbrOKMYmcpYN3NXUYeqARSNljTNUetg=)
3: k19T9eQH5VojMNnVI6gEwHIspWU.crl (hash: /ZPr2v2RPr11R6dljltHHEiJwhR063hmeyfLZwS5yuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:88:ae:42:f6:9b:56:b2:05:90:92:a2:75:5b:f8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935f53f5e407e55a2330d9d523a804c0722ca565
Validity
Not Before: Aug 5 14:00:34 2025 GMT
Not After : Aug 6 14:00:34 2025 GMT
Subject: CN=7035916ee4f510d449cd945ef460bc15f84be42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0a:cc:41:70:10:ef:ba:a6:16:d7:8c:16:2c:
24:ed:69:b2:91:35:60:57:ea:d7:91:76:34:fa:75:
35:15:d7:24:4d:c4:a8:ad:dc:5d:26:4e:3b:9e:c4:
d0:5b:60:a6:e0:8b:6a:6e:0f:08:5c:fd:f7:09:ed:
b2:66:86:43:ed:f4:83:5e:ca:96:41:3b:51:bd:b9:
3e:93:8e:86:16:67:cd:13:58:dd:60:c4:9f:55:b2:
46:98:8b:73:7e:69:41:c1:49:ec:7f:d5:27:81:69:
b6:c5:16:56:5b:a9:35:df:8a:49:0e:40:76:48:b2:
a2:d0:a6:8b:71:37:df:14:80:38:f1:b6:3c:8d:90:
8a:74:e9:5f:3f:bf:bb:c1:da:c3:e2:62:2a:1e:eb:
bd:f0:65:6b:c4:b1:76:9c:d1:ee:7d:12:ba:18:2b:
80:db:62:64:f0:45:c6:da:b2:c8:dd:c3:f0:61:99:
e4:0c:1e:dd:56:4c:6e:02:d1:18:87:64:04:f3:f0:
39:02:41:ff:7f:f3:5b:2b:e5:fd:83:ac:30:08:e3:
09:dd:db:8f:4e:d4:1f:3f:b9:c7:43:2d:99:b2:24:
b6:65:5f:47:27:5e:ab:af:8a:b7:50:cd:61:1e:ba:
a6:89:0f:ba:99:16:79:38:32:52:96:82:2c:ec:c4:
de:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:35:91:6E:E4:F5:10:D4:49:CD:94:5E:F4:60:BC:15:F8:4B:E4:2A
X509v3 Authority Key Identifier:
keyid:93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c5:0e:39:3c:ee:8c:f3:e7:6e:56:a5:b2:79:b8:a5:c7:e0:
d2:7e:cb:88:6f:a1:41:8a:38:9c:35:8f:c4:54:b2:4c:17:f9:
df:97:1b:c6:c9:9c:d7:f7:6f:2e:c1:a8:d9:e8:7e:c6:93:52:
62:c4:8f:8d:a3:be:44:9d:62:73:a9:c9:04:f0:7e:0d:7b:08:
0a:29:23:d5:46:e1:8f:45:b0:42:ef:f4:bc:3e:82:a0:46:0a:
47:1a:e9:5f:79:fd:74:99:1d:43:b0:5f:4d:9c:8f:61:40:a1:
61:c0:3b:3f:5a:af:af:58:cd:80:fa:5e:85:43:93:4e:d7:3e:
e2:32:04:6d:57:5b:13:68:b4:65:bb:f0:29:a1:b0:61:a9:9b:
ea:de:df:f4:ee:be:f4:c4:ea:7a:a7:65:e7:1a:64:d5:6c:51:
2b:1a:fb:1d:54:c6:95:8c:9f:50:7f:b6:4a:b4:58:2f:31:c0:
20:3a:03:65:f8:ba:cc:30:6f:a9:c1:99:4f:1e:d9:4e:e6:ce:
a2:44:af:48:69:7c:7f:cc:b3:cf:98:64:3e:41:96:82:d0:5d:
91:fc:80:76:c5:0b:fd:09:ca:f7:50:9d:8e:91:ad:e1:11:c1:
d2:34:1b:57:47:e7:22:b3:45:5b:21:59:d9:99:1a:a1:d1:43:
0c:2d:0a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 19:59:55 2025 by rpki-client