Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
File: k9x15h5IPw1HkiHzynX8ciCWp-0.mft (raw, json)
Hash identifier: LEHPmKctP4KZAjNWlexJzLirqDK+zy8FZJ711MDmVSk=
Subject key identifier: F0:35:FC:87:3A:31:D6:A8:A7:0B:97:20:E1:25:7B:86:02:C9:A1:4A
Authority key identifier: 93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
Certificate issuer: /CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Certificate serial: 01974968267C5A3AD642AB4FEC0838FECEB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
Manifest number: 045A
Signing time: Sat 07 Jun 2025 08:00:51 +0000
Manifest this update: Sat 07 Jun 2025 08:00:51 +0000
Manifest next update: Sun 08 Jun 2025 08:00:51 +0000
Files and hashes: 1: ITvafiNBv4ylSij6nbuKyZmdE8k.roa (hash: eQlQlT15GdOmzPkZPFcmwxbiVSUvzPGQ2MQSNNK3BEo=)
2: k9x15h5IPw1HkiHzynX8ciCWp-0.crl (hash: QAul+I5pRSPnjn3PU5P8bUURB16s3YykxBub5PCErLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:26:7c:5a:3a:d6:42:ab:4f:ec:08:38:fe:ce:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Validity
Not Before: Jun 7 08:00:51 2025 GMT
Not After : Jun 8 08:00:51 2025 GMT
Subject: CN=f035fc873a31d6a8a70b9720e1257b8602c9a14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:6f:dd:1f:d2:3e:91:7f:31:ec:1b:03:74:
bb:82:c7:26:89:e8:4d:83:2e:a6:4f:46:36:f2:2e:
d9:97:8f:04:cb:58:0c:11:1a:bd:63:0b:68:c4:3f:
46:58:2c:91:3d:81:b8:73:7f:31:72:f9:89:9a:3a:
b8:3e:68:61:e5:17:4b:a7:93:a5:ca:b7:01:c0:ce:
c0:cb:9d:fa:be:b0:7b:6c:95:97:5e:34:4f:cd:4f:
c6:66:97:0f:64:f5:ed:39:9c:e3:df:39:a5:cb:65:
03:e4:fd:1e:a2:a8:2b:8c:57:cc:71:fa:04:6f:8e:
87:e4:91:82:6e:aa:1a:ad:e8:c2:92:a5:ab:97:94:
88:5c:f0:1e:fb:96:e5:64:49:70:14:cf:47:2d:82:
1f:e3:22:68:27:eb:d5:7b:a2:1c:b0:70:2e:ba:f6:
4f:b8:ca:3b:fd:c0:92:23:a5:0d:86:09:c5:20:fe:
80:4a:c8:92:f2:1b:a2:b7:d5:83:5b:b5:ca:6e:71:
33:a0:33:19:a8:62:ef:ee:8d:2c:34:a9:c2:85:e2:
03:73:b7:ae:a5:a5:83:d9:25:af:a7:c3:73:82:29:
c4:11:b0:69:c9:bb:6e:56:1c:0c:03:e0:66:e5:60:
ae:77:aa:78:32:f6:31:b8:e6:c4:c2:66:34:5a:c9:
e6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:35:FC:87:3A:31:D6:A8:A7:0B:97:20:E1:25:7B:86:02:C9:A1:4A
X509v3 Authority Key Identifier:
keyid:93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:06:e9:34:f1:37:9b:63:aa:29:62:01:48:42:a9:06:a9:34:
2d:00:5b:cb:46:49:9b:33:a3:85:2e:3f:5c:9c:c9:06:cb:81:
22:b0:09:a1:73:52:49:90:62:cf:60:b3:72:b2:2b:19:ec:3c:
75:c6:04:f3:71:4c:c0:d4:03:54:ad:b7:e2:03:4e:52:b1:b8:
84:bb:af:e2:ae:73:a3:a6:68:28:4b:2d:c8:ca:a4:e9:78:d7:
2f:cd:5e:2d:29:e8:22:65:5d:62:aa:dc:fe:d3:a9:7a:ba:a2:
da:ba:2d:6a:ad:b4:b1:ef:7e:31:ef:e2:8c:7c:29:2a:8d:89:
84:f8:f1:82:11:80:b7:9b:b0:14:d8:1c:66:cd:fb:d5:27:1c:
a7:8e:71:4d:d8:a8:81:43:44:61:18:f3:85:cb:e0:b6:b9:a9:
be:29:b8:f5:84:d0:58:9d:25:a8:3f:58:94:38:e2:34:59:15:
f5:12:e1:3c:b6:ad:c8:0a:10:df:d0:90:7d:2a:13:96:00:2e:
5c:cd:2b:cf:b8:30:3f:4f:68:5f:04:ea:2a:5c:bb:67:bf:60:
30:07:70:e8:22:1a:11:1b:2a:54:c2:df:91:d8:10:5c:58:bd:
57:ab:c9:92:10:e5:b2:6d:57:13:92:83:59:da:62:07:00:1c:
1b:26:44:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaCZ8WjrWQqtP7Ag4/s6yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZGM3NWU2MWU0ODNmMGQ0NzkyMjFmM2NhNzVmYzcyMjA5
NmE3ZWQwHhcNMjUwNjA3MDgwMDUxWhcNMjUwNjA4MDgwMDUxWjAzMTEwLwYDVQQD
EyhmMDM1ZmM4NzNhMzFkNmE4YTcwYjk3MjBlMTI1N2I4NjAyYzlhMTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTNv3R/SPpF/MewbA3S7gscmiehN
gy6mT0Y28i7Zl48Ey1gMERq9YwtoxD9GWCyRPYG4c38xcvmJmjq4Pmhh5RdLp5Ol
yrcBwM7Ay536vrB7bJWXXjRPzU/GZpcPZPXtOZzj3zmly2UD5P0eoqgrjFfMcfoE
b46H5JGCbqoarejCkqWrl5SIXPAe+5blZElwFM9HLYIf4yJoJ+vVe6IcsHAuuvZP
uMo7/cCSI6UNhgnFIP6ASsiS8huit9WDW7XKbnEzoDMZqGLv7o0sNKnCheIDc7eu
paWD2SWvp8NzginEEbBpybtuVhwMA+Bm5WCud6p4MvYxuObEwmY0WsnmawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPA1/Ic6MdaopwuXIOEle4YCyaFKMB8GA1UdIwQY
MBaAFJPcdeYeSD8NR5Ih88p1/HIglqftMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazl4MTVoNUlQdzFIa2lIenluWDhjaUNXcC0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83NjgyNDEtN2FkZi00YzI1LTk3Y2Ut
MzM4OTc1ODI5ZThiLzEvazl4MTVoNUlQdzFIa2lIenluWDhjaUNXcC0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS83NjgyNDEtN2FkZi00YzI1LTk3Y2UtMzM4OTc1ODI5ZThi
LzEvazl4MTVoNUlQdzFIa2lIenluWDhjaUNXcC0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsAbpNPE3
m2OqKWIBSEKpBqk0LQBby0ZJmzOjhS4/XJzJBsuBIrAJoXNSSZBiz2CzcrIrGew8
dcYE83FMwNQDVK234gNOUrG4hLuv4q5zo6ZoKEstyMqk6XjXL81eLSnoImVdYqrc
/tOperqi2rotaq20se9+Me/ijHwpKo2JhPjxghGAt5uwFNgcZs371Sccp45xTdio
gUNEYRjzhcvgtrmpvim49YTQWJ0lqD9YlDjiNFkV9RLhPLatyAoQ39CQfSoTlgAu
XM0rz7gwP09oXwTqKly7Z79gMAdw6CIaERsqVMLfkdgQXFi9V6vJkhDlsm1XE5KD
WdpiBwAcGyZEwA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:27:23 2025 by rpki-client