Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
File: k059UV3emgPC3Ic4mi_KTn1YxOw.mft (raw, json)
Hash identifier: /nwizRB2+GN4zUtfdNo2RJeXyMcegM5jHESUAXNvOSY=
Subject key identifier: 4E:8C:7D:86:7F:48:B4:EC:CB:63:5D:0D:0D:8A:E7:C3:86:BF:A0:B0
Authority key identifier: 93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
Certificate issuer: /CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Certificate serial: 01988655D6B2E53494B97221B3AD8605C28B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
Manifest number: 131B
Signing time: Thu 07 Aug 2025 21:00:28 +0000
Manifest this update: Thu 07 Aug 2025 21:00:28 +0000
Manifest next update: Fri 08 Aug 2025 21:00:28 +0000
Files and hashes: 1: Xv-bUtmsrHjQ28dXxWqb3uBJRDg.roa (hash: 0bOsSKKdGKKiMo/FFhxHgHDZgsrzyzkqrbIyGUoQTCk=)
2: cL-keBkm4oIskLWJO5aafKhJ0jo.roa (hash: s9gkn4aSVId/ngfYN3hJphayygttMpgwEt/RQqhzDWs=)
3: k059UV3emgPC3Ic4mi_KTn1YxOw.crl (hash: Pirs70Dlv7kEcgkyqay5GUqDnlfCN0ENKzGXRzRJI2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:55:d6:b2:e5:34:94:b9:72:21:b3:ad:86:05:c2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Validity
Not Before: Aug 7 21:00:28 2025 GMT
Not After : Aug 8 21:00:28 2025 GMT
Subject: CN=4e8c7d867f48b4eccb635d0d0d8ae7c386bfa0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a7:96:16:64:08:27:21:27:a0:74:58:96:71:
3e:81:3f:40:2e:10:12:72:4d:8a:5e:1a:90:18:62:
48:f1:fd:3f:3e:b0:c7:0d:52:43:5a:e8:fa:f9:b2:
3b:e0:4c:e7:d0:f2:d2:00:5a:3b:06:54:58:67:77:
4d:7d:b0:36:e5:93:9d:cd:52:ef:0c:b2:83:6a:d4:
6a:17:24:d8:e8:34:19:10:91:9e:30:c1:e5:ae:74:
6f:8c:b6:e0:bf:55:e1:a3:f4:c8:94:cb:bd:a0:47:
01:5a:be:ef:bb:50:96:fa:11:d1:d1:b4:41:be:d5:
85:ba:69:ef:14:27:a8:08:0a:e3:0f:f1:98:b9:11:
6b:2c:c2:6b:c5:b4:d8:89:46:11:05:35:6f:1b:70:
33:32:1a:77:20:54:41:56:90:ac:d4:e2:84:c3:8d:
68:09:d8:aa:b8:59:6d:3b:d5:ed:0a:35:40:3d:24:
36:59:88:59:c0:0d:aa:af:da:c4:dd:97:85:d3:cf:
b6:17:15:c2:2d:18:9b:7e:5b:20:85:0a:97:f5:7d:
20:78:2a:c6:ab:87:62:28:ab:ed:4d:50:df:97:7c:
1e:e4:97:29:33:8e:36:53:dc:fb:c0:13:94:ac:61:
d7:06:be:e8:42:73:c8:4a:0f:77:87:3f:d3:5d:ac:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8C:7D:86:7F:48:B4:EC:CB:63:5D:0D:0D:8A:E7:C3:86:BF:A0:B0
X509v3 Authority Key Identifier:
keyid:93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:de:a1:6a:28:aa:6d:29:78:db:d8:0a:ae:d0:99:22:b5:ca:
04:01:17:b9:eb:a7:26:83:a5:56:e1:87:cd:f4:a6:a4:10:02:
96:a1:05:0c:ff:1d:e8:f7:65:91:4e:05:56:ed:3b:22:03:32:
0e:9f:58:d0:c7:5c:59:68:96:e4:9f:7c:4c:08:a5:a5:90:fd:
d1:d5:c0:85:19:8e:47:b0:77:fb:df:bb:3e:b0:17:9f:0f:ad:
bb:0c:3e:ee:39:d3:b1:a6:da:d1:db:25:bf:77:8f:ad:a6:86:
74:62:4e:2c:2a:57:e5:57:87:89:07:41:ef:21:94:10:5f:16:
aa:1e:8a:c5:39:77:f5:bf:ff:b2:4b:3e:3d:55:b6:4b:77:92:
7a:90:d3:ab:5b:0f:bc:f8:b5:43:f2:c2:6b:52:54:e6:85:ab:
4d:4a:49:46:59:f0:64:b7:fb:b9:19:d5:88:ac:55:5a:d1:d8:
43:f2:5b:8f:74:0b:d6:dd:f9:58:f6:44:85:73:fc:c7:c1:04:
89:63:f1:53:c0:6e:9e:e1:95:18:3c:de:aa:ee:e5:df:30:c2:
52:9d:7d:61:02:c7:92:a5:b7:f0:a8:2e:82:a4:34:71:6b:66:
71:9f:51:1f:3a:05:b0:3d:a0:02:17:75:16:45:20:84:57:5f:
cd:65:f5:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiGVday5TSUuXIhs62GBcKLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNGU3ZDUxNWRkZTlhMDNjMmRjODczODlhMmZjYTRlN2Q1
OGM0ZWMwHhcNMjUwODA3MjEwMDI4WhcNMjUwODA4MjEwMDI4WjAzMTEwLwYDVQQD
Eyg0ZThjN2Q4NjdmNDhiNGVjY2I2MzVkMGQwZDhhZTdjMzg2YmZhMGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aeWFmQIJyEnoHRYlnE+gT9ALhAS
ck2KXhqQGGJI8f0/PrDHDVJDWuj6+bI74Ezn0PLSAFo7BlRYZ3dNfbA25ZOdzVLv
DLKDatRqFyTY6DQZEJGeMMHlrnRvjLbgv1Xho/TIlMu9oEcBWr7vu1CW+hHR0bRB
vtWFumnvFCeoCArjD/GYuRFrLMJrxbTYiUYRBTVvG3AzMhp3IFRBVpCs1OKEw41o
CdiquFltO9XtCjVAPSQ2WYhZwA2qr9rE3ZeF08+2FxXCLRibflsghQqX9X0geCrG
q4diKKvtTVDfl3we5JcpM442U9z7wBOUrGHXBr7oQnPISg93hz/TXay1hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6MfYZ/SLTsy2NdDQ2K58OGv6CwMB8GA1UdIwQY
MBaAFJNOfVFd3poDwtyHOJovyk59WMTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazA1OVVWM2VtZ1BDM0ljNG1pX0tUbjFZeE93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83NTkzMjctY2M5Zi00ZDZkLWFjNzkt
OWNiOGQwMjNjYzBiLzEvazA1OVVWM2VtZ1BDM0ljNG1pX0tUbjFZeE93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83NTkzMjctY2M5Zi00ZDZkLWFjNzktOWNiOGQwMjNjYzBi
LzEvazA1OVVWM2VtZ1BDM0ljNG1pX0tUbjFZeE93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfN6haiiq
bSl429gKrtCZIrXKBAEXueunJoOlVuGHzfSmpBAClqEFDP8d6PdlkU4FVu07IgMy
Dp9Y0MdcWWiW5J98TAilpZD90dXAhRmOR7B3+9+7PrAXnw+tuww+7jnTsaba0dsl
v3ePraaGdGJOLCpX5VeHiQdB7yGUEF8Wqh6KxTl39b//sks+PVW2S3eSepDTq1sP
vPi1Q/LCa1JU5oWrTUpJRlnwZLf7uRnViKxVWtHYQ/Jbj3QL1t35WPZEhXP8x8EE
iWPxU8BunuGVGDzequ7l3zDCUp19YQLHkqW38KgugqQ0cWtmcZ9RHzoFsD2gAhd1
FkUghFdfzWX1Gg==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:10:24 2025 by rpki-client