Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
File: k19T9eQH5VojMNnVI6gEwHIspWU.mft (raw, json)
Hash identifier: Q4HPNwkyMn1vkUqo+mAsgH3VGkNi+a0Nt59AvU2nlXE=
Subject key identifier: 66:A5:2C:3B:87:53:0E:93:3D:06:22:2A:41:68:0E:1F:BB:AD:18:A1
Authority key identifier: 93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
Certificate issuer: /CN=935f53f5e407e55a2330d9d523a804c0722ca565
Certificate serial: 01974F32E1D678E421FCC2DFBD333E903EFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 11:00:24 +0000
Manifest this update: Sun 08 Jun 2025 11:00:24 +0000
Manifest next update: Mon 09 Jun 2025 11:00:24 +0000
Files and hashes: 1: CEKF3MXHpQR2CGHCMQpTxxuuRIY.roa (hash: Rh5DOeHi5/pgsxZpTOekiFMDHUB1zlvv4XKyE6PrDFE=)
2: cXHMvnYXUn58neLwmoRSc042tjs.roa (hash: SBDcDeTpbKOEPbrOKMYmcpYN3NXUYeqARSNljTNUetg=)
3: k19T9eQH5VojMNnVI6gEwHIspWU.crl (hash: ZL2a6gFDALZY1HXeWYO9KeaF4BLo+wl+RVzHHxpxVMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:32:e1:d6:78:e4:21:fc:c2:df:bd:33:3e:90:3e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935f53f5e407e55a2330d9d523a804c0722ca565
Validity
Not Before: Jun 8 11:00:24 2025 GMT
Not After : Jun 9 11:00:24 2025 GMT
Subject: CN=66a52c3b87530e933d06222a41680e1fbbad18a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:09:39:86:a1:c0:5c:d9:d5:fb:97:5b:dd:
57:23:41:d9:52:79:60:39:b8:9b:d6:89:82:4b:76:
d2:f4:2b:8c:cf:64:90:4f:6f:58:e8:2b:21:56:28:
1b:45:36:94:60:a6:0e:76:16:25:92:99:f5:a1:34:
1f:88:e1:2b:68:da:90:a3:50:a1:e8:0e:e0:49:d6:
f9:b0:65:c7:a5:73:f6:38:50:7e:06:86:e0:38:92:
70:58:27:2d:60:ec:a1:34:5f:92:be:2b:db:74:d6:
c4:31:bf:5e:d9:fe:fe:39:4d:9f:4b:c7:d3:66:2c:
6c:45:8b:f2:e1:ef:c5:6e:2e:b4:a9:25:bf:f4:c1:
63:62:f9:54:d7:b4:59:bb:64:02:47:5e:ce:24:99:
54:44:b4:76:11:cd:72:8d:36:66:27:b5:92:b0:d8:
f5:60:d9:6e:cd:4a:e2:b9:6e:31:cb:75:33:7c:bf:
57:b1:5f:8e:64:24:4f:02:13:85:0e:90:e7:6d:bb:
f2:9d:0b:e6:6f:36:ef:7a:d3:49:0a:9a:9c:d8:02:
e0:22:87:5e:d2:82:54:00:1a:9e:e9:94:b0:3f:8c:
f8:cc:4d:b4:a5:e4:2a:76:9a:56:7d:b3:a4:48:ee:
95:a6:ee:e5:c9:1f:42:13:59:29:e9:7b:0d:fd:3a:
23:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A5:2C:3B:87:53:0E:93:3D:06:22:2A:41:68:0E:1F:BB:AD:18:A1
X509v3 Authority Key Identifier:
keyid:93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:08:23:cc:b0:a2:c0:e4:25:75:8f:40:78:58:d4:48:d6:22:
b0:2b:7e:93:a1:57:90:2b:bc:60:ad:b0:ea:d4:da:0d:75:74:
62:f5:e1:d2:7c:37:9f:52:6a:d2:65:94:07:82:24:e5:a6:eb:
38:77:f1:55:db:2d:e9:f8:ac:41:60:b1:52:98:1f:ae:b2:0d:
23:b6:8d:c6:42:c4:5d:1b:b3:2a:3a:77:40:bf:a8:85:53:21:
5c:20:75:00:87:83:8b:4f:a5:47:d7:25:17:06:41:ba:b0:f9:
36:d0:9d:9d:0a:ee:bf:83:9a:a9:eb:0f:a0:55:51:92:c3:67:
f4:ad:4d:19:94:09:72:58:ab:5e:ca:41:70:a3:26:09:50:6e:
87:b8:1e:c8:42:79:58:a9:0b:3e:6c:cb:f5:a9:01:a9:8a:73:
97:3c:6f:a6:01:d1:a8:ed:bd:11:3a:2f:14:42:39:02:6c:42:
1c:5b:f8:3f:01:cc:5b:0c:b3:7e:e3:c7:84:b8:07:c2:aa:b9:
b2:5e:7c:ad:d1:87:62:4b:b5:2a:c6:30:02:53:b4:61:66:9c:
01:5b:08:8b:c2:89:bf:60:4f:0c:3d:b2:d0:ca:dc:af:78:86:
ae:ed:08:4a:52:c6:be:f3:5d:fe:ba:5b:25:30:e9:94:35:7d:
04:3e:74:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:17:58 2025 by rpki-client