Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
File: k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft (raw, json)
Hash identifier: vJI5eZstA+xpHG+/8gFzlzTQINlWQ+OQJpxUHAtfT7U=
Subject key identifier: 46:3C:90:16:A1:C2:38:ED:C5:B6:18:61:CB:BD:5D:BF:09:00:AB:3F
Authority key identifier: 93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
Certificate issuer: /CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Certificate serial: 01974D7C4386C436C9C4064BDC6E937BA73C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 03:01:18 +0000
Manifest this update: Sun 08 Jun 2025 03:01:18 +0000
Manifest next update: Mon 09 Jun 2025 03:01:18 +0000
Files and hashes: 1: I9i3fnf4Nk0WsFMmWEWJhe5vh40.roa (hash: llYywC4U70yW6sSChiJ+ZHwIZzZjQAej/EchqIalMeA=)
2: IGJfVzvhS1XNfQJqw7b44W8rh5Q.roa (hash: ps4BuWOubuNVlVOQpqaTImNMOhN/B2m1xTG8lC4cqCo=)
3: k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl (hash: xwr5q4ZOI0iiRUrEWScoWSZiY4KH7uYUE7PIJxE3gnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:43:86:c4:36:c9:c4:06:4b:dc:6e:93:7b:a7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Validity
Not Before: Jun 8 03:01:18 2025 GMT
Not After : Jun 9 03:01:18 2025 GMT
Subject: CN=463c9016a1c238edc5b61861cbbd5dbf0900ab3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:03:4b:9b:ec:c9:b8:dc:f2:aa:6d:bb:b8:69:
f3:a7:b3:8d:5e:52:8f:91:1f:59:bc:d7:cc:e7:4c:
2a:b6:b2:20:3d:ca:5b:b1:c1:0d:24:05:d5:60:d4:
7f:fb:19:96:a2:e6:97:6f:e6:c5:9a:c3:2c:31:10:
1a:7e:fa:87:03:79:3f:f7:81:39:ef:cf:fc:a6:53:
b5:01:a5:28:3e:9c:46:dc:0f:99:4d:6d:40:4b:ac:
ce:91:4e:3d:44:b4:ff:1a:55:47:ac:ce:08:83:0c:
cc:49:ce:83:5c:bc:3c:7d:b1:75:47:8b:c2:92:48:
9b:4a:3a:b8:79:99:b9:b3:77:d0:6e:f9:2a:66:2c:
6d:49:a3:43:1e:8d:75:5e:9c:47:97:55:c7:3d:e7:
61:27:5c:ac:ea:78:cd:38:86:d7:1b:ea:63:3b:2e:
0f:ed:47:4e:68:af:e5:dc:ea:b8:4e:19:10:bb:7f:
65:14:51:1a:ce:48:60:40:e2:77:35:2d:a7:bd:08:
af:56:86:d3:53:ea:89:d8:b0:36:ac:52:9c:0d:27:
91:5c:b3:90:a2:86:ae:39:39:fb:95:6c:06:7b:9a:
6f:68:b4:c1:2e:b0:8a:e9:11:be:27:a4:08:7e:bf:
6b:2b:f9:70:01:80:df:4b:b7:ea:95:9e:13:8c:af:
51:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3C:90:16:A1:C2:38:ED:C5:B6:18:61:CB:BD:5D:BF:09:00:AB:3F
X509v3 Authority Key Identifier:
keyid:93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:3d:5e:8a:7d:91:ac:f9:86:5d:36:75:38:32:a1:52:59:7e:
ba:b9:08:67:76:43:2b:14:0c:07:58:08:87:4e:68:97:fd:6b:
bd:8a:02:fd:a1:b2:cb:22:fb:75:5e:27:d3:b1:a3:2f:c7:ad:
79:05:02:a7:d7:5e:f2:ef:dd:f4:91:16:58:80:40:92:43:4b:
7b:0a:a2:bd:01:38:8f:fa:c4:d5:a7:1a:25:a7:20:4f:fb:29:
24:b3:4b:61:6c:49:a1:e6:27:2f:ab:96:c6:9d:e8:55:95:29:
e5:8b:28:d2:85:59:1c:1b:a3:5f:65:76:32:a4:00:7d:ff:d2:
95:cb:65:4d:28:41:de:3c:a9:33:a0:39:81:20:c1:67:35:a2:
3c:7c:ad:7b:8c:44:29:d9:4d:5f:1c:7e:bc:e8:2e:61:10:43:
ba:d8:b3:aa:4e:d6:41:04:95:72:7c:53:b7:96:78:64:3a:1d:
22:43:a8:5c:d7:59:6e:cc:ad:bd:92:fa:c9:fe:2e:a1:bb:b3:
ff:1a:3d:0d:7d:47:0e:92:c4:6c:84:7a:08:df:74:bd:9e:96:
58:23:47:ef:79:80:e4:1f:5d:c6:6a:f1:b9:8e:a1:f1:3f:f8:
37:f3:cd:e9:c8:15:f9:dd:8f:47:b9:8e:5d:3e:03:be:5a:4a:
39:78:69:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNfEOGxDbJxAZL3G6Te6c8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZGM0NWZmZTEzZjg0MWYxODhhZjc0M2JkN2RjMzRlZDU0
ODA1ZDQwHhcNMjUwNjA4MDMwMTE4WhcNMjUwNjA5MDMwMTE4WjAzMTEwLwYDVQQD
Eyg0NjNjOTAxNmExYzIzOGVkYzViNjE4NjFjYmJkNWRiZjA5MDBhYjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogNLm+zJuNzyqm27uGnzp7ONXlKP
kR9ZvNfM50wqtrIgPcpbscENJAXVYNR/+xmWouaXb+bFmsMsMRAafvqHA3k/94E5
78/8plO1AaUoPpxG3A+ZTW1AS6zOkU49RLT/GlVHrM4IgwzMSc6DXLw8fbF1R4vC
kkibSjq4eZm5s3fQbvkqZixtSaNDHo11XpxHl1XHPedhJ1ys6njNOIbXG+pjOy4P
7UdOaK/l3Oq4ThkQu39lFFEazkhgQOJ3NS2nvQivVobTU+qJ2LA2rFKcDSeRXLOQ
ooauOTn7lWwGe5pvaLTBLrCK6RG+J6QIfr9rK/lwAYDfS7fqlZ4TjK9RnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEY8kBahwjjtxbYYYcu9Xb8JAKs/MB8GA1UdIwQY
MBaAFJPcRf/hP4QfGIr3Q719w07VSAXUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazl4Rl8tRV9oQjhZaXZkRHZYM0RUdFZJQmRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yZDBiMTktMGFmZi00MTJmLWEyZmQt
MjE4OTU3MjhiYTRlLzEvazl4Rl8tRV9oQjhZaXZkRHZYM0RUdFZJQmRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8yZDBiMTktMGFmZi00MTJmLWEyZmQtMjE4OTU3MjhiYTRl
LzEvazl4Rl8tRV9oQjhZaXZkRHZYM0RUdFZJQmRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtD1ein2R
rPmGXTZ1ODKhUll+urkIZ3ZDKxQMB1gIh05ol/1rvYoC/aGyyyL7dV4n07GjL8et
eQUCp9de8u/d9JEWWIBAkkNLewqivQE4j/rE1acaJacgT/spJLNLYWxJoeYnL6uW
xp3oVZUp5Yso0oVZHBujX2V2MqQAff/SlctlTShB3jypM6A5gSDBZzWiPHyte4xE
KdlNXxx+vOguYRBDutizqk7WQQSVcnxTt5Z4ZDodIkOoXNdZbsytvZL6yf4uobuz
/xo9DX1HDpLEbIR6CN90vZ6WWCNH73mA5B9dxmrxuY6h8T/4N/PN6cgV+d2PR7mO
XT4DvlpKOXhppA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:58:57 2025 by rpki-client