Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
File: kY9WbI_5USpXSMwUifCTXCXYxKs.mft (raw, json)
Hash identifier: OOVFeOqW74pH7alCkO6kEmypPxaauUnxNOl4BJ4IGiQ=
Subject key identifier: D2:46:9F:D2:6F:F5:F3:83:8A:F5:8F:05:6A:21:40:94:E4:50:F3:D6
Authority key identifier: 91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB
Certificate issuer: /CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab
Certificate serial: 0197500F1E5A9F47C81520DADDB764C540EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
Manifest number: 0F
Signing time: Sun 08 Jun 2025 15:00:57 +0000
Manifest this update: Sun 08 Jun 2025 15:00:57 +0000
Manifest next update: Mon 09 Jun 2025 15:00:57 +0000
Files and hashes: 1: Hma6GYWs5Tdom6T2R14STXiUtLo.roa (hash: nzMAO+8FCPXY1wL1mWVZEzCo6GePIs/i8E7UJEjZ+GM=)
2: kY9WbI_5USpXSMwUifCTXCXYxKs.crl (hash: hJAHaApjsZ+PMmSpc0wKiE7d9xqW/Gv0Va5jgOZ8BrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0f:1e:5a:9f:47:c8:15:20:da:dd:b7:64:c5:40:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab
Validity
Not Before: Jun 8 15:00:57 2025 GMT
Not After : Jun 9 15:00:57 2025 GMT
Subject: CN=d2469fd26ff5f3838af58f056a214094e450f3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d9:a7:84:96:9c:77:29:f3:b9:cb:4a:52:bb:
3a:01:7e:74:dc:8b:0b:15:6e:12:2c:de:b5:d7:38:
57:65:b9:24:a0:e1:6a:94:f7:25:aa:ae:6e:50:45:
c9:66:aa:f6:28:35:a1:59:7b:5b:f2:04:78:aa:4f:
40:76:ff:04:b4:72:d2:d6:81:f5:78:06:84:2b:1b:
f0:06:49:6e:5d:b1:6c:e4:5a:1e:af:7f:72:16:de:
fb:38:aa:46:42:79:6d:8b:b2:a9:b8:bb:4d:88:a0:
a6:79:84:e7:f6:7b:00:d1:78:9a:73:77:ba:12:0f:
27:92:92:ef:95:b4:a7:31:21:45:95:4a:78:16:8b:
c1:1d:6f:98:59:1d:e6:fb:4f:4f:a5:96:8f:41:40:
ed:a3:ca:11:ca:28:53:d6:6f:86:e3:d5:fc:a2:60:
e2:ea:78:63:33:4a:3f:28:2a:0b:a1:f1:44:ce:2f:
58:06:ac:da:0a:f0:fb:21:cf:bf:5f:8c:f9:9f:5d:
8b:10:80:8a:77:57:18:55:28:24:3b:3d:71:a8:1e:
30:07:ce:b9:6b:50:c7:a4:27:13:f3:e8:56:69:54:
20:7c:7d:8b:36:92:cc:b3:8a:1e:50:14:68:82:ff:
2e:3b:c7:f6:cb:ab:be:d7:50:fc:0f:3f:74:70:f4:
f9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:46:9F:D2:6F:F5:F3:83:8A:F5:8F:05:6A:21:40:94:E4:50:F3:D6
X509v3 Authority Key Identifier:
keyid:91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9e:d9:c4:2f:49:fa:cd:0b:c5:cd:9b:14:e1:22:5b:b1:70:
0e:47:ee:e7:5e:4e:ba:ae:b4:44:50:d5:b0:ee:d3:b4:b1:b6:
f0:25:f2:d3:85:54:f6:38:0c:7c:17:d0:31:c3:ec:ca:93:79:
a6:63:c8:99:d0:96:3e:18:28:50:7e:68:b7:13:e6:20:90:3e:
e8:b4:16:ee:a5:69:1b:9c:31:03:7a:75:6b:07:7e:8f:c5:05:
91:97:aa:18:77:ef:a6:74:c7:9c:a1:f4:3d:79:32:85:b3:0b:
64:a2:e6:5c:b0:95:a6:4e:72:d0:1b:08:3d:f9:f1:ad:d9:5f:
ae:3d:8b:28:77:9b:79:10:b2:09:88:1e:a9:43:84:a7:3d:31:
37:b5:47:82:1d:fb:e4:4f:c3:2c:23:47:bd:c8:29:d4:4e:75:
e0:f7:d3:ab:a8:70:16:8d:8a:df:4c:51:c6:e8:ad:4b:5b:fc:
48:ea:f8:72:fb:90:3a:11:7e:fa:93:ff:21:fe:2a:49:1c:25:
a0:aa:c7:47:5b:da:bc:2d:02:01:b3:0c:dd:b5:6d:67:95:53:
6b:cf:fb:b1:90:4a:a2:df:91:64:f7:84:7f:ca:44:e6:fb:e1:
94:63:26:c0:90:96:3a:27:36:b9:79:20:c4:6e:e1:34:95:35:
fd:94:71:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQDx5an0fIFSDa3bdkxUDuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxOGY1NjZjOGZmOTUxMmE1NzQ4Y2MxNDg5ZjA5MzVjMjVk
OGM0YWIwHhcNMjUwNjA4MTUwMDU3WhcNMjUwNjA5MTUwMDU3WjAzMTEwLwYDVQQD
EyhkMjQ2OWZkMjZmZjVmMzgzOGFmNThmMDU2YTIxNDA5NGU0NTBmM2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tmnhJacdynzuctKUrs6AX503IsL
FW4SLN611zhXZbkkoOFqlPclqq5uUEXJZqr2KDWhWXtb8gR4qk9Adv8EtHLS1oH1
eAaEKxvwBkluXbFs5Foer39yFt77OKpGQnlti7KpuLtNiKCmeYTn9nsA0Xiac3e6
Eg8nkpLvlbSnMSFFlUp4FovBHW+YWR3m+09PpZaPQUDto8oRyihT1m+G49X8omDi
6nhjM0o/KCoLofFEzi9YBqzaCvD7Ic+/X4z5n12LEICKd1cYVSgkOz1xqB4wB865
a1DHpCcT8+hWaVQgfH2LNpLMs4oeUBRogv8uO8f2y6u+11D8Dz90cPT5LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJGn9Jv9fODivWPBWohQJTkUPPWMB8GA1UdIwQY
MBaAFJGPVmyP+VEqV0jMFInwk1wl2MSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1k5V2JJXzVVU3BYU013VWlmQ1RYQ1hZeEtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81YTU4Y2MtZjlmZS00OWU2LWJiOGEt
YTVmMTFiYzM1ZjMxLzEva1k5V2JJXzVVU3BYU013VWlmQ1RYQ1hZeEtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81YTU4Y2MtZjlmZS00OWU2LWJiOGEtYTVmMTFiYzM1ZjMx
LzEva1k5V2JJXzVVU3BYU013VWlmQ1RYQ1hZeEtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJ7ZxC9J
+s0Lxc2bFOEiW7FwDkfu515Ouq60RFDVsO7TtLG28CXy04VU9jgMfBfQMcPsypN5
pmPImdCWPhgoUH5otxPmIJA+6LQW7qVpG5wxA3p1awd+j8UFkZeqGHfvpnTHnKH0
PXkyhbMLZKLmXLCVpk5y0BsIPfnxrdlfrj2LKHebeRCyCYgeqUOEpz0xN7VHgh37
5E/DLCNHvcgp1E514PfTq6hwFo2K30xRxuitS1v8SOr4cvuQOhF++pP/If4qSRwl
oKrHR1vavC0CAbMM3bVtZ5VTa8/7sZBKot+RZPeEf8pE5vvhlGMmwJCWOic2uXkg
xG7hNJU1/ZRxaw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:44:15 2025 by rpki-client