Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier: mEAhu5QYmotbhUrnjqOHLdzVKyEI0hmxX471SSDJfE8=
Subject key identifier: 18:4A:28:06:02:D3:F1:E1:C2:4F:F0:A0:FB:4B:AE:7C:56:08:25:4A
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 01976F9A417A2DBD6C25AF1C86280594B49E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 18:01:09 +0000
Manifest this update: Sat 14 Jun 2025 18:01:09 +0000
Manifest next update: Sun 15 Jun 2025 18:01:09 +0000
Files and hashes: 1: ImFxqguTjs8pVYC5ryesadS38Z8.roa (hash: 50Igi8PpiinoEV07PZI2cgsRcHJemqbubsN9BAG4Kd8=)
2: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: DWy3eAstZJL4NX1pPPVu2zTFNuLXwNQhTvU44BITDBA=)
3: eznu2Fem8RjruQG_sIAcpJ1U-kc.roa (hash: dfwMs4TEX6QB36UycDExtNC5BAEKzqi0QvSQVdjONUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:41:7a:2d:bd:6c:25:af:1c:86:28:05:94:b4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Jun 14 18:01:09 2025 GMT
Not After : Jun 15 18:01:09 2025 GMT
Subject: CN=184a280602d3f1e1c24ff0a0fb4bae7c5608254a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a9:73:d7:a9:8e:48:d1:5a:c1:12:a2:90:f6:
58:bf:9b:5b:3f:65:45:85:04:6f:a4:05:68:1f:80:
3d:0a:21:07:e5:83:bf:7d:66:10:8f:2e:40:ac:a1:
08:b1:7a:73:4d:0a:18:02:af:97:fb:1e:74:a2:e7:
23:3d:c4:84:1d:43:28:7e:16:d7:c3:c8:da:27:b0:
15:a8:66:a3:02:38:11:90:06:54:e5:62:fb:60:af:
92:26:88:78:f6:e3:6e:8b:45:23:1b:cc:e9:6a:3c:
dd:c1:81:26:67:3c:24:ca:06:9c:65:04:b3:ad:2d:
13:74:c8:7e:1f:be:74:6c:fe:ba:c5:50:37:ca:52:
f5:fe:5c:e0:6d:b7:2a:da:f9:43:69:82:20:b4:98:
69:ab:a0:59:80:cf:85:1a:b8:1f:b1:93:4f:1b:b4:
97:4c:65:da:c1:81:78:07:3d:1d:d7:96:58:1c:cd:
77:54:20:77:d1:65:65:78:c1:ea:30:d3:45:76:c2:
71:f8:41:dc:dc:f1:38:c9:5c:12:cb:af:73:17:84:
2f:cc:c5:ea:26:67:65:3c:f6:0a:5a:92:c5:e3:01:
90:ac:86:0e:2f:cc:53:46:15:09:35:e0:91:19:23:
38:d6:11:52:dd:e6:ce:75:d6:a8:95:bc:6d:d7:c2:
60:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4A:28:06:02:D3:F1:E1:C2:4F:F0:A0:FB:4B:AE:7C:56:08:25:4A
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:63:a1:2d:87:a9:06:ff:ce:70:35:a7:20:64:aa:74:44:c9:
e2:6f:49:f7:a8:09:6c:96:9d:a3:5f:90:5c:36:1f:76:f3:ca:
35:ab:9d:56:79:88:e7:91:3f:f2:0b:46:42:43:52:d7:a8:eb:
39:70:c2:98:e1:b3:c5:25:49:6c:63:98:20:39:b2:a6:8f:2e:
d9:dc:9b:84:f9:2e:f3:41:ea:b4:94:e7:ae:d6:a3:da:13:cd:
c2:4d:aa:bf:e4:fa:d5:ed:08:e1:8c:a5:62:b9:95:55:5c:a6:
6b:46:18:8b:be:80:77:0a:eb:ba:17:d7:ed:11:01:af:3d:15:
61:e9:bf:cb:5b:b4:2a:36:c7:a7:44:d1:cf:fe:1f:c0:25:44:
7d:30:16:50:aa:5b:e6:6b:72:5b:83:7f:e0:9d:6d:8e:45:de:
4d:8d:4f:85:26:72:07:f9:00:bd:d7:e5:a9:2c:7d:6d:3f:59:
16:57:0a:bf:ae:a8:cf:55:39:4b:d5:bd:f9:90:bd:d0:ba:38:
37:72:78:af:e9:17:17:4a:72:c3:51:90:3c:4c:ea:b9:ca:50:
86:1b:bd:f4:33:11:5c:fc:ba:9b:cd:68:ea:17:73:32:ac:21:
6d:95:35:bc:93:5d:f5:81:22:2e:7f:d6:3b:97:ed:56:1a:5a:
16:a1:45:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmkF6Lb1sJa8chigFlLSeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOWVmYjU4NzhkM2IzNjM0ZGMxY2NiOTBhYzQ4ZTBiODlk
MWM4NzkwHhcNMjUwNjE0MTgwMTA5WhcNMjUwNjE1MTgwMTA5WjAzMTEwLwYDVQQD
EygxODRhMjgwNjAyZDNmMWUxYzI0ZmYwYTBmYjRiYWU3YzU2MDgyNTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qlz16mOSNFawRKikPZYv5tbP2VF
hQRvpAVoH4A9CiEH5YO/fWYQjy5ArKEIsXpzTQoYAq+X+x50oucjPcSEHUMofhbX
w8jaJ7AVqGajAjgRkAZU5WL7YK+SJoh49uNui0UjG8zpajzdwYEmZzwkygacZQSz
rS0TdMh+H750bP66xVA3ylL1/lzgbbcq2vlDaYIgtJhpq6BZgM+FGrgfsZNPG7SX
TGXawYF4Bz0d15ZYHM13VCB30WVleMHqMNNFdsJx+EHc3PE4yVwSy69zF4QvzMXq
JmdlPPYKWpLF4wGQrIYOL8xTRhUJNeCRGSM41hFS3ebOddaolbxt18Jg9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhKKAYC0/Hhwk/woPtLrnxWCCVKMB8GA1UdIwQY
MBaAFCue+1h407NjTcHMuQrEjguJ0ch5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kMDM2MDgtM2M2Ny00MjNkLWIxOGQt
NGJjZDNkNTg0NjNhLzEvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9kMDM2MDgtM2M2Ny00MjNkLWIxOGQtNGJjZDNkNTg0NjNh
LzEvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArmOhLYep
Bv/OcDWnIGSqdETJ4m9J96gJbJado1+QXDYfdvPKNaudVnmI55E/8gtGQkNS16jr
OXDCmOGzxSVJbGOYIDmypo8u2dybhPku80HqtJTnrtaj2hPNwk2qv+T61e0I4Yyl
YrmVVVyma0YYi76AdwrruhfX7REBrz0VYem/y1u0KjbHp0TRz/4fwCVEfTAWUKpb
5mtyW4N/4J1tjkXeTY1PhSZyB/kAvdflqSx9bT9ZFlcKv66oz1U5S9W9+ZC90Lo4
N3J4r+kXF0pyw1GQPEzqucpQhhu99DMRXPy6m81o6hdzMqwhbZU1vJNd9YEiLn/W
O5ftVhpaFqFFLg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:56:12 2025 by rpki-client