Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
File: kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft (raw, json)
Hash identifier: /0MuVflmgRI2m2+I/nku3ucJCn9PmZnWqNaeDYbWCec=
Subject key identifier: 19:91:A0:64:FB:5D:45:F4:3C:5B:F4:D8:A3:9E:22:9F:02:85:DA:B0
Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
Certificate issuer: /CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Certificate serial: 01984B54429EC655FC413043F39824BE0019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
Manifest number: 1594
Signing time: Sun 27 Jul 2025 10:01:09 +0000
Manifest this update: Sun 27 Jul 2025 10:01:09 +0000
Manifest next update: Mon 28 Jul 2025 10:01:09 +0000
Files and hashes: 1: 3onxhQW4_iFcT0AIPYrLYgqTYV0.roa (hash: Mu7Xz4DaWXehDK3cRMePZg9doIVwsj8HrvkMJvgs9bM=)
2: kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl (hash: 2EBxzFCBgGTGqlSraBOigl3xdFdp27Q28c73emUPsy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:42:9e:c6:55:fc:41:30:43:f3:98:24:be:00:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Validity
Not Before: Jul 27 10:01:09 2025 GMT
Not After : Jul 28 10:01:09 2025 GMT
Subject: CN=1991a064fb5d45f43c5bf4d8a39e229f0285dab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:20:f9:23:de:35:40:38:03:e0:db:2b:49:d0:
1f:52:c3:f8:fa:1a:80:bb:30:c9:7a:12:e2:65:66:
64:db:d9:19:35:a3:16:f8:ea:7b:37:ca:69:4a:80:
98:3e:55:8d:8f:90:3f:f1:6d:94:2b:b7:c4:ce:b6:
4b:e9:d1:7d:5b:9d:82:35:06:2e:2e:2b:5f:8e:3e:
a8:e3:94:74:d1:77:f4:eb:53:cc:7a:d8:0c:19:e7:
16:2a:89:83:2d:5a:90:49:26:15:a8:46:21:17:7c:
68:ed:aa:ce:b4:1a:56:f3:87:dd:1b:ed:7b:be:98:
43:75:e1:04:cf:84:83:76:79:43:db:49:7f:8d:44:
cf:a1:ca:9c:05:63:1b:6e:69:1c:98:d2:e7:e9:1c:
f3:b2:60:cd:99:9b:83:09:de:72:b3:31:7b:d5:45:
ff:14:39:42:68:6f:79:63:9e:35:bb:50:4f:14:38:
99:ad:64:82:8a:e6:d6:9b:20:b9:4f:f3:9b:fc:53:
29:8c:77:f1:39:a4:0e:69:39:0f:4e:3d:2c:f5:f4:
e5:f8:5c:5a:ac:5d:5f:50:fd:a1:2d:17:9d:a2:51:
de:87:6f:93:69:9f:a6:2f:bf:58:d0:e0:7a:e4:16:
d0:9d:43:03:f1:be:02:eb:0d:55:c9:16:96:e9:15:
ab:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:91:A0:64:FB:5D:45:F4:3C:5B:F4:D8:A3:9E:22:9F:02:85:DA:B0
X509v3 Authority Key Identifier:
keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f7:00:84:b9:35:c4:33:38:7e:5b:f2:76:3a:66:cf:63:ae:
99:66:86:0e:90:08:d3:c7:69:df:a6:c7:98:3b:33:b3:ce:0d:
cf:f0:a1:a1:11:0f:14:60:8b:bd:cc:0f:aa:71:69:88:4f:47:
57:e0:e9:7c:50:f8:e6:b5:19:a2:29:39:06:99:2b:f2:10:78:
2d:26:a1:d0:4e:20:e6:24:ad:15:2b:42:8d:b4:cf:7d:24:08:
68:89:38:38:0a:fb:bc:40:06:50:18:a9:0c:91:26:49:ce:cf:
c8:ae:22:01:57:a2:3d:73:4e:a3:7b:47:d8:1c:af:7d:7a:a6:
86:a8:f1:6a:d8:92:c3:a6:10:d0:a8:6f:a3:b3:e7:84:53:2d:
76:52:12:5b:03:48:e6:4f:1c:77:12:96:71:0d:31:c1:6e:df:
06:c4:e9:9c:dd:41:8a:89:fd:d1:0e:2e:18:a3:cd:c3:e0:cd:
58:26:55:32:87:b0:e9:51:0c:79:f4:b7:0b:f7:b2:eb:b9:09:
8f:cc:ee:f0:2d:de:ed:6f:2f:f7:e4:d8:e9:47:a1:00:7f:03:
5e:ac:6e:b6:2e:68:70:9a:8a:42:fe:1f:ff:20:a8:07:b8:ec:
22:fa:90:dd:2c:82:3a:13:66:8e:04:08:3b:1d:7d:15:c2:00:
9a:33:dd:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVEKexlX8QTBD85gkvgAZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMjZiMTlmMGU5NTRkY2Y1ODE2ZmRmMzcxNjk0Yjc4NGRk
N2YzNjYwHhcNMjUwNzI3MTAwMTA5WhcNMjUwNzI4MTAwMTA5WjAzMTEwLwYDVQQD
EygxOTkxYTA2NGZiNWQ0NWY0M2M1YmY0ZDhhMzllMjI5ZjAyODVkYWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCD5I941QDgD4NsrSdAfUsP4+hqA
uzDJehLiZWZk29kZNaMW+Op7N8ppSoCYPlWNj5A/8W2UK7fEzrZL6dF9W52CNQYu
Litfjj6o45R00Xf061PMetgMGecWKomDLVqQSSYVqEYhF3xo7arOtBpW84fdG+17
vphDdeEEz4SDdnlD20l/jUTPocqcBWMbbmkcmNLn6RzzsmDNmZuDCd5yszF71UX/
FDlCaG95Y541u1BPFDiZrWSCiubWmyC5T/Ob/FMpjHfxOaQOaTkPTj0s9fTl+Fxa
rF1fUP2hLRedolHeh2+TaZ+mL79Y0OB65BbQnUMD8b4C6w1VyRaW6RWrVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmRoGT7XUX0PFv02KOeIp8ChdqwMB8GA1UdIwQY
MBaAFJEmsZ8OlU3PWBb983FpS3hN1/NmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wNzQ4NTMtMjFlZS00MmQ5LWIzYjUt
ZDJlY2I2NDczYjIzLzEva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wNzQ4NTMtMjFlZS00MmQ5LWIzYjUtZDJlY2I2NDczYjIz
LzEva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfcAhLk1
xDM4flvydjpmz2OumWaGDpAI08dp36bHmDszs84Nz/ChoREPFGCLvcwPqnFpiE9H
V+DpfFD45rUZoik5Bpkr8hB4LSah0E4g5iStFStCjbTPfSQIaIk4OAr7vEAGUBip
DJEmSc7PyK4iAVeiPXNOo3tH2ByvfXqmhqjxatiSw6YQ0Khvo7PnhFMtdlISWwNI
5k8cdxKWcQ0xwW7fBsTpnN1Bion90Q4uGKPNw+DNWCZVMoew6VEMefS3C/ey67kJ
j8zu8C3e7W8v9+TY6UehAH8DXqxuti5ocJqKQv4f/yCoB7jsIvqQ3SyCOhNmjgQI
Ox19FcIAmjPdBw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 14:43:42 2025 by rpki-client