Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
File: kW-Aw18gLrAnZkGb-30oISX_4Vg.mft (raw, json)
Hash identifier: 6YX0eUlCBO6IgzABFaMI524io2NPZ6SnprmjaLDcSFk=
Subject key identifier: 76:8D:F3:96:E3:00:A1:8E:F6:96:40:1A:CC:33:E9:65:AC:CD:4C:94
Authority key identifier: 91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58
Certificate issuer: /CN=916f80c35f202eb02766419bfb7d282125ffe158
Certificate serial: 01974A7B287141999AA581843735E8C813F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
Manifest number: 1582
Signing time: Sat 07 Jun 2025 13:01:14 +0000
Manifest this update: Sat 07 Jun 2025 13:01:14 +0000
Manifest next update: Sun 08 Jun 2025 13:01:14 +0000
Files and hashes: 1: Nooohr4P5yKkhRHUp5WOKPpdMDs.roa (hash: yQvSjkqhAqaWpvZ1QnemaJY2V/F+jwI7osUi/29zs8c=)
2: kW-Aw18gLrAnZkGb-30oISX_4Vg.crl (hash: uW/XHbijBtM8JRxvp89aEYa0ZVhqWDlXPzusF08R8wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:28:71:41:99:9a:a5:81:84:37:35:e8:c8:13:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916f80c35f202eb02766419bfb7d282125ffe158
Validity
Not Before: Jun 7 13:01:14 2025 GMT
Not After : Jun 8 13:01:14 2025 GMT
Subject: CN=768df396e300a18ef696401acc33e965accd4c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dd:9c:13:0a:5d:72:fa:be:f5:65:8d:e4:7f:
96:e9:41:9e:e1:9d:02:75:6f:ed:1a:31:fb:ec:db:
b0:57:e6:dd:3a:36:51:9f:2c:bd:4f:a2:2e:20:eb:
a5:17:9d:b3:10:2d:44:85:c8:08:cd:8e:a9:01:ed:
15:cb:91:08:7f:2b:6e:97:f5:c2:34:c7:74:68:f8:
08:a9:72:d3:a6:9f:10:35:a1:4f:73:d4:77:83:d9:
57:53:e6:90:d2:e8:c9:e2:7c:a2:48:aa:16:6b:e6:
7d:3e:64:dd:37:2a:1d:45:98:57:f4:43:aa:64:4f:
b0:4c:1d:dc:22:a0:fc:3f:33:e1:29:0c:44:9b:a4:
90:ca:7f:84:97:0d:52:07:eb:d3:5d:64:e4:9b:ab:
bf:58:b8:ca:38:53:d6:b9:ae:60:45:09:5b:74:6f:
56:57:41:3a:ce:46:0f:f0:27:78:17:e8:f9:8a:96:
f5:cf:4a:bc:cb:60:f1:b9:1e:e0:9d:63:bf:75:62:
f5:64:a5:d3:30:43:0f:7f:ff:7f:ed:26:dc:23:46:
b5:bd:99:c4:55:b4:6f:49:e3:dc:f2:a7:46:1e:9b:
2c:87:5c:60:bc:df:45:53:d5:de:7f:a7:86:ef:32:
40:3e:56:f5:a5:ca:3f:a5:87:5b:0b:5f:ee:ed:cc:
d8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8D:F3:96:E3:00:A1:8E:F6:96:40:1A:CC:33:E9:65:AC:CD:4C:94
X509v3 Authority Key Identifier:
keyid:91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:58:08:2f:aa:ab:e0:17:05:2e:7e:a9:2e:12:45:9c:20:57:
bc:79:7e:cf:32:03:0d:21:27:8c:83:dd:c9:c3:68:86:87:dd:
8d:cc:bf:d3:40:a0:11:42:24:55:1b:1a:96:e0:75:1f:8b:bd:
cd:f3:0e:d3:a6:63:34:22:44:11:8f:82:28:b9:1f:10:1c:fd:
9d:06:d5:b0:36:5f:7d:c2:ce:de:34:3c:15:23:14:5b:88:8d:
37:21:76:a9:93:5f:a0:1f:99:6e:7e:bc:bf:9e:b4:a5:fc:c7:
45:c5:d5:8c:da:c3:04:f8:69:db:15:59:00:14:b7:bd:bb:2f:
ce:ea:bd:3b:5e:6a:df:f5:18:f5:4e:07:48:32:e9:62:23:ed:
60:b2:43:df:9d:e2:f1:62:81:22:22:1b:c6:b3:d7:d2:52:4a:
78:24:e5:0b:fe:ee:a0:e3:be:1e:ee:33:89:db:0a:13:36:dc:
00:91:77:0e:be:2d:ae:79:cc:4b:c2:f4:63:ae:be:da:e1:d8:
39:d5:39:00:ac:9f:b4:fe:6e:07:45:0c:f7:9a:bd:ab:b1:3a:
f5:10:ab:56:e0:37:36:ea:2e:fc:03:ff:ca:93:94:49:83:11:
72:b3:b8:49:6b:ab:b2:25:97:b4:99:a5:0d:17:3d:77:f6:38:
44:c4:47:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKeyhxQZmapYGENzXoyBP4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNmY4MGMzNWYyMDJlYjAyNzY2NDE5YmZiN2QyODIxMjVm
ZmUxNTgwHhcNMjUwNjA3MTMwMTE0WhcNMjUwNjA4MTMwMTE0WjAzMTEwLwYDVQQD
Eyg3NjhkZjM5NmUzMDBhMThlZjY5NjQwMWFjYzMzZTk2NWFjY2Q0Yzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut2cEwpdcvq+9WWN5H+W6UGe4Z0C
dW/tGjH77NuwV+bdOjZRnyy9T6IuIOulF52zEC1EhcgIzY6pAe0Vy5EIfytul/XC
NMd0aPgIqXLTpp8QNaFPc9R3g9lXU+aQ0ujJ4nyiSKoWa+Z9PmTdNyodRZhX9EOq
ZE+wTB3cIqD8PzPhKQxEm6SQyn+Elw1SB+vTXWTkm6u/WLjKOFPWua5gRQlbdG9W
V0E6zkYP8Cd4F+j5ipb1z0q8y2DxuR7gnWO/dWL1ZKXTMEMPf/9/7SbcI0a1vZnE
VbRvSePc8qdGHpssh1xgvN9FU9Xef6eG7zJAPlb1pco/pYdbC1/u7czYQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaN85bjAKGO9pZAGswz6WWszUyUMB8GA1UdIwQY
MBaAFJFvgMNfIC6wJ2ZBm/t9KCEl/+FYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1ctQXcxOGdMckFuWmtHYi0zMG9JU1hfNFZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84ZDlhYzEtZDM1ZC00ZTMyLWI4M2Yt
YzEwY2M5NTNiZDFiLzEva1ctQXcxOGdMckFuWmtHYi0zMG9JU1hfNFZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi84ZDlhYzEtZDM1ZC00ZTMyLWI4M2YtYzEwY2M5NTNiZDFi
LzEva1ctQXcxOGdMckFuWmtHYi0zMG9JU1hfNFZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlgIL6qr
4BcFLn6pLhJFnCBXvHl+zzIDDSEnjIPdycNohofdjcy/00CgEUIkVRsaluB1H4u9
zfMO06ZjNCJEEY+CKLkfEBz9nQbVsDZffcLO3jQ8FSMUW4iNNyF2qZNfoB+Zbn68
v560pfzHRcXVjNrDBPhp2xVZABS3vbsvzuq9O15q3/UY9U4HSDLpYiPtYLJD353i
8WKBIiIbxrPX0lJKeCTlC/7uoOO+Hu4zidsKEzbcAJF3Dr4trnnMS8L0Y66+2uHY
OdU5AKyftP5uB0UM95q9q7E69RCrVuA3Nuou/AP/ypOUSYMRcrO4SWursiWXtJml
DRc9d/Y4RMRHGQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:34:46 2025 by rpki-client