Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
File: Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft (raw, json)
Hash identifier: uerzEZ5UXR+MBMwW6jdhZ7NCj9olbpsP56XBwiVQZjI=
Subject key identifier: 90:DE:7B:37:3F:1E:89:A7:8C:6B:23:42:24:C6:C1:2C:D4:6B:8C:9D
Authority key identifier: 2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9
Certificate issuer: /CN=2ace126fa5830911083e45f583cadb08a63ec6f9
Certificate serial: 01987E9D04BA497F33EF4CEA9527EF10B35A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 09:01:16 +0000
Manifest this update: Wed 06 Aug 2025 09:01:16 +0000
Manifest next update: Thu 07 Aug 2025 09:01:16 +0000
Files and hashes: 1: Et82Ox-YoPWswPFqxd1JmT5HiVY.roa (hash: dKjp2M/qEJfQktMuqf3U3untvmBMHbGfy5ZX8hyRWlU=)
2: Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl (hash: 5nvlxH0rBCYV+ZWalRZtudeNBrKh3ujWDvoWieG5Vvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9d:04:ba:49:7f:33:ef:4c:ea:95:27:ef:10:b3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace126fa5830911083e45f583cadb08a63ec6f9
Validity
Not Before: Aug 6 09:01:16 2025 GMT
Not After : Aug 7 09:01:16 2025 GMT
Subject: CN=90de7b373f1e89a78c6b234224c6c12cd46b8c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:46:6e:3e:45:5e:5f:67:15:cb:11:48:03:7f:
54:b3:18:5a:3c:84:e9:22:4a:7c:8a:e2:6c:1b:16:
b0:02:59:d9:20:26:45:7f:df:49:c1:3c:61:0a:de:
7b:24:03:7a:f1:2d:8f:fb:77:f7:fa:ce:04:c5:fe:
db:e7:5e:b6:a4:ca:7d:c6:53:04:cf:21:40:ce:af:
49:90:d3:31:cd:ce:53:b5:ba:95:ed:8e:9b:d2:39:
76:86:46:43:57:fe:0d:9c:ff:ef:36:63:36:e1:e0:
ab:ac:c9:ac:10:ae:d5:79:53:5f:e1:a2:17:95:ef:
6b:b3:a0:cf:61:14:7c:dc:d0:80:7b:6b:d7:80:92:
3c:59:e3:da:53:f6:30:c5:c2:83:3b:25:1e:c9:10:
10:8b:52:15:59:5b:eb:66:cb:67:02:28:84:e7:ac:
dd:35:7a:ad:11:13:e2:02:4f:9e:45:0a:b7:72:ff:
d4:ff:45:ef:44:be:6b:7c:64:c8:41:a4:d2:ca:97:
82:11:42:f6:b7:0c:db:26:cb:41:d8:b2:c1:e0:85:
60:93:b1:53:11:2b:96:61:36:b8:d5:9d:2e:67:fd:
ca:dd:ca:9c:e2:26:79:18:bd:0b:ff:d0:0e:38:8b:
0b:fd:11:4b:30:43:5b:e1:da:21:4b:4e:af:f7:3c:
8d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DE:7B:37:3F:1E:89:A7:8C:6B:23:42:24:C6:C1:2C:D4:6B:8C:9D
X509v3 Authority Key Identifier:
keyid:2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:83:f3:b0:f9:3d:15:b8:90:ec:5b:eb:b2:19:02:95:a9:41:
05:56:a3:93:01:11:a7:51:12:82:f7:30:cc:17:18:51:e8:23:
08:c9:d7:8a:03:75:8e:c7:0e:5c:dd:7c:9b:a2:e4:a2:ff:c9:
28:36:0a:69:61:cb:c2:c2:45:ab:31:44:0f:07:3c:4d:6e:90:
38:65:94:07:62:fa:f5:bb:57:2b:6a:cb:0a:cc:b8:6f:36:15:
10:43:73:1a:27:4d:04:14:ba:02:01:b1:fb:0c:58:c1:36:73:
cf:56:9a:8c:f3:2b:6e:01:e9:00:98:33:62:d9:c3:e8:47:38:
67:16:32:87:ec:16:f2:68:f0:bc:07:13:6b:20:cb:01:d7:be:
26:d2:82:3c:1f:59:5b:38:7b:f9:d2:84:06:bc:bd:60:51:11:
5f:f3:9b:39:0e:4c:e3:c2:06:61:f2:10:00:72:f2:25:ef:3b:
ea:80:d3:6c:f1:39:01:21:c1:2c:38:dd:f5:b0:37:8f:97:3a:
29:6b:76:bc:cf:63:19:6f:fc:92:d9:0c:0d:e6:26:71:aa:f7:
43:5e:53:51:91:f8:11:fb:55:2c:8a:c6:02:6a:04:c7:94:ba:
18:04:6f:46:c9:97:61:a5:59:28:8e:7e:91:8e:dc:a0:63:b4:
9a:bf:a3:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+nQS6SX8z70zqlSfvELNaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhY2UxMjZmYTU4MzA5MTEwODNlNDVmNTgzY2FkYjA4YTYz
ZWM2ZjkwHhcNMjUwODA2MDkwMTE2WhcNMjUwODA3MDkwMTE2WjAzMTEwLwYDVQQD
Eyg5MGRlN2IzNzNmMWU4OWE3OGM2YjIzNDIyNGM2YzEyY2Q0NmI4YzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UZuPkVeX2cVyxFIA39UsxhaPITp
Ikp8iuJsGxawAlnZICZFf99JwTxhCt57JAN68S2P+3f3+s4Exf7b5162pMp9xlME
zyFAzq9JkNMxzc5TtbqV7Y6b0jl2hkZDV/4NnP/vNmM24eCrrMmsEK7VeVNf4aIX
le9rs6DPYRR83NCAe2vXgJI8WePaU/YwxcKDOyUeyRAQi1IVWVvrZstnAiiE56zd
NXqtERPiAk+eRQq3cv/U/0XvRL5rfGTIQaTSypeCEUL2twzbJstB2LLB4IVgk7FT
ESuWYTa41Z0uZ/3K3cqc4iZ5GL0L/9AOOIsL/RFLMENb4dohS06v9zyNMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDeezc/HomnjGsjQiTGwSzUa4ydMB8GA1UdIwQY
MBaAFCrOEm+lgwkRCD5F9YPK2wimPsb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iNzNiZDItYWI5NC00YWMzLTkzYzQt
NmNiY2I3ZTNkOGQyLzEvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9iNzNiZDItYWI5NC00YWMzLTkzYzQtNmNiY2I3ZTNkOGQy
LzEvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIPzsPk9
FbiQ7FvrshkClalBBVajkwERp1ESgvcwzBcYUegjCMnXigN1jscOXN18m6Lkov/J
KDYKaWHLwsJFqzFEDwc8TW6QOGWUB2L69btXK2rLCsy4bzYVEENzGidNBBS6AgGx
+wxYwTZzz1aajPMrbgHpAJgzYtnD6Ec4ZxYyh+wW8mjwvAcTayDLAde+JtKCPB9Z
Wzh7+dKEBry9YFERX/ObOQ5M48IGYfIQAHLyJe876oDTbPE5ASHBLDjd9bA3j5c6
KWt2vM9jGW/8ktkMDeYmcar3Q15TUZH4EftVLIrGAmoEx5S6GARvRsmXYaVZKI5+
kY7coGO0mr+jvA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:34:55 2025 by rpki-client