Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
File: K6HP11f1Hy_rdFCenDm-RoBr5kI.mft (raw, json)
Hash identifier: OzvK3NubmJFxCRL9Ln98x3jEaDp2FW+Ruun9GsdfSZo=
Subject key identifier: 9A:19:96:AD:AB:EF:AE:3D:80:35:84:B1:3C:C0:40:18:C9:7D:D8:9D
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial: 01987DC0F8E3D1082566A5855B2C55843C10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
Manifest number: 14A6
Signing time: Wed 06 Aug 2025 05:00:55 +0000
Manifest this update: Wed 06 Aug 2025 05:00:55 +0000
Manifest next update: Thu 07 Aug 2025 05:00:55 +0000
Files and hashes: 1: Av5SzJRRD3vy1EqO8zaw2x8AxeQ.roa (hash: YTI+eqyFUqGOTtLUCbS/Mne8jMXOnPny4QloLqsehFk=)
2: K6HP11f1Hy_rdFCenDm-RoBr5kI.crl (hash: L125Uvb+V3LuoRijasTOYgbd8Av415d0JywZ2tBsxGU=)
3: Z2dM55D00aW3RfIUxB7Cn0s3y18.roa (hash: r2sGLOuiB3Y67DgBocYW+k6Ki76Sz1ifvXri1YzDX/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:f8:e3:d1:08:25:66:a5:85:5b:2c:55:84:3c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Validity
Not Before: Aug 6 05:00:55 2025 GMT
Not After : Aug 7 05:00:55 2025 GMT
Subject: CN=9a1996adabefae3d803584b13cc04018c97dd89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4a:9b:b5:a4:08:d0:9c:b8:f3:87:88:74:4b:
b7:c9:ac:fd:75:ea:22:6e:e3:cd:67:5e:2b:d7:ae:
c5:59:e8:8c:3f:cd:06:88:86:e1:a0:56:78:48:71:
f1:b7:9b:79:1d:9f:c3:95:d8:28:c9:b6:c1:1f:81:
f3:46:7a:b3:50:bc:d5:36:e8:58:60:e2:39:fe:29:
42:1b:fb:fb:8a:35:72:2a:98:01:5c:3d:bb:3e:51:
41:b8:59:46:e9:ae:48:e2:b0:52:91:46:c4:52:41:
44:40:22:67:9a:59:da:90:64:c7:21:ac:53:88:2c:
2e:03:9f:fb:1b:a2:c9:c1:f3:01:8a:1c:e5:0a:e6:
31:85:78:d2:1d:cb:b0:ef:a7:19:c8:59:a8:fa:7a:
65:97:0c:82:14:e6:a9:dd:12:c4:22:f1:b4:73:8c:
3d:13:5b:75:d0:60:d3:e5:aa:ea:2d:18:56:21:7e:
29:92:9d:b9:be:d4:b7:36:25:20:78:59:a2:7f:ce:
7a:3c:5b:73:bd:1a:b5:52:24:67:0a:bf:69:0b:ca:
33:1b:5a:55:70:96:95:fc:d2:8e:24:1a:6b:7e:2c:
74:5f:c7:fd:6f:41:62:23:a7:6c:60:9a:a4:d2:42:
44:45:18:a6:ed:1d:40:a5:3f:18:2b:98:44:90:75:
88:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:19:96:AD:AB:EF:AE:3D:80:35:84:B1:3C:C0:40:18:C9:7D:D8:9D
X509v3 Authority Key Identifier:
keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:54:1a:37:96:67:50:f3:66:9b:04:18:66:52:2f:97:ea:d7:
7e:97:41:ea:bd:70:fa:a6:49:b9:a1:96:0b:73:c4:f1:a4:ef:
f1:73:87:7f:4b:88:19:72:22:7e:0b:66:f9:0e:93:86:9d:8e:
ef:3a:a6:09:42:d1:ee:31:f2:22:b0:f6:70:0e:26:6a:d3:d5:
11:69:64:b9:5d:14:5a:d3:a1:86:71:7e:09:8d:98:a3:7f:59:
a9:a2:02:22:18:84:fc:15:43:1a:d5:ab:08:fa:31:58:ee:9c:
72:62:0c:43:e0:e6:5c:bd:ce:8c:61:56:1f:38:2f:8b:2e:19:
72:4b:89:73:30:84:4c:30:c6:db:c9:0a:da:45:20:41:e1:53:
4e:22:09:bd:3e:c5:37:7f:e0:da:d5:44:02:90:a5:02:dd:3d:
5d:90:20:ac:af:71:49:38:d3:df:39:58:bf:e3:79:76:6a:a2:
7e:17:bb:91:d1:81:3b:97:c9:ad:31:88:5f:9a:69:6f:e8:22:
96:f4:53:31:96:d9:ac:82:9f:73:c2:de:0e:4a:22:39:08:1c:
9a:2d:c3:bc:60:a7:4d:60:ac:7d:e4:76:b8:84:fe:66:f0:5b:
32:cf:03:18:97:52:f3:26:4e:4c:b4:3e:37:cc:b8:52:77:b1:
29:8e:fb:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9wPjj0QglZqWFWyxVhDwQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYTFjZmQ3NTdmNTFmMmZlYjc0NTA5ZTljMzliZTQ2ODA2
YmU2NDIwHhcNMjUwODA2MDUwMDU1WhcNMjUwODA3MDUwMDU1WjAzMTEwLwYDVQQD
Eyg5YTE5OTZhZGFiZWZhZTNkODAzNTg0YjEzY2MwNDAxOGM5N2RkODlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkqbtaQI0Jy484eIdEu3yaz9deoi
buPNZ14r167FWeiMP80GiIbhoFZ4SHHxt5t5HZ/DldgoybbBH4HzRnqzULzVNuhY
YOI5/ilCG/v7ijVyKpgBXD27PlFBuFlG6a5I4rBSkUbEUkFEQCJnmlnakGTHIaxT
iCwuA5/7G6LJwfMBihzlCuYxhXjSHcuw76cZyFmo+npllwyCFOap3RLEIvG0c4w9
E1t10GDT5arqLRhWIX4pkp25vtS3NiUgeFmif856PFtzvRq1UiRnCr9pC8ozG1pV
cJaV/NKOJBprfix0X8f9b0FiI6dsYJqk0kJERRim7R1ApT8YK5hEkHWIKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoZlq2r7649gDWEsTzAQBjJfdidMB8GA1UdIwQY
MBaAFCuhz9dX9R8v63RQnpw5vkaAa+ZCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83NDU5MTAtODZjNi00M2QxLTk3NjUt
NTc4OWRlNDI0YTQyLzEvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS83NDU5MTAtODZjNi00M2QxLTk3NjUtNTc4OWRlNDI0YTQy
LzEvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVQaN5Zn
UPNmmwQYZlIvl+rXfpdB6r1w+qZJuaGWC3PE8aTv8XOHf0uIGXIifgtm+Q6Thp2O
7zqmCULR7jHyIrD2cA4matPVEWlkuV0UWtOhhnF+CY2Yo39ZqaICIhiE/BVDGtWr
CPoxWO6ccmIMQ+DmXL3OjGFWHzgviy4ZckuJczCETDDG28kK2kUgQeFTTiIJvT7F
N3/g2tVEApClAt09XZAgrK9xSTjT3zlYv+N5dmqifhe7kdGBO5fJrTGIX5ppb+gi
lvRTMZbZrIKfc8LeDkoiOQgcmi3DvGCnTWCsfeR2uIT+ZvBbMs8DGJdS8yZOTLQ+
N8y4UnexKY77Yw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:11:56 2025 by rpki-client