Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
File: k6EPqeyo7I3dXhJUJkOOjfjIerw.mft (raw, json)
Hash identifier: BSXwCahvcaN/vxy4SvYQRJ/x8RuEmsVEi9fKb6Mmiic=
Subject key identifier: BB:E9:BB:68:9C:30:9B:F5:9A:9D:2D:C1:C7:C5:37:04:D9:6B:F1:B7
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Certificate issuer: /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial: 0198D8BCF49F46BAE3D839D5F41ED2FE45BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 21:01:58 +0000
Manifest this update: Sat 23 Aug 2025 21:01:58 +0000
Manifest next update: Sun 24 Aug 2025 21:01:58 +0000
Files and hashes: 1: 0eBNXDs625wWt3eSViaFroIf-H4.roa (hash: GT9Q8SAk5DHsclX/025XYQZy9SsVDxGpUQis2WozehI=)
2: k4iKGO7UoCQelG-VE7Zb37GDHAA.roa (hash: CfgOFR+eRUjr0ITmkPf/YrPGm8/0mSRvig8pVJqGkMU=)
3: k6EPqeyo7I3dXhJUJkOOjfjIerw.crl (hash: Uh90FN/YHP0/p1BNgq/elQ8fHScbRKJcEk6Y2WqsGgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bc:f4:9f:46:ba:e3:d8:39:d5:f4:1e:d2:fe:45:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Validity
Not Before: Aug 23 21:01:58 2025 GMT
Not After : Aug 24 21:01:58 2025 GMT
Subject: CN=bbe9bb689c309bf59a9d2dc1c7c53704d96bf1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d7:7e:50:9d:7a:3c:86:ec:9f:71:e7:2d:c9:
b2:b3:ef:fc:2b:d9:d9:e6:0f:38:0b:64:fc:09:64:
0c:3d:17:11:9e:00:e2:e1:78:c4:9b:53:5a:67:56:
8e:f2:b5:9b:9c:5f:14:e6:03:7c:15:e4:1e:04:b8:
06:06:e8:9c:f2:4c:6a:58:16:6d:05:36:c3:82:9c:
58:de:5f:fd:33:46:85:45:a2:d5:a9:f9:1e:99:c9:
eb:06:b2:fc:ab:27:52:9b:3c:58:8f:d8:15:13:d3:
c9:bf:27:60:de:ad:e7:a3:b5:dc:87:fd:d9:68:cd:
4f:14:a4:42:51:d7:db:f4:0f:73:81:94:d3:e0:3f:
7c:cf:63:05:eb:bb:e2:c6:5d:0c:d4:39:22:73:9e:
f6:33:8d:8f:75:01:37:85:fb:76:8f:d3:21:5f:08:
1f:4e:97:8f:25:b6:0b:c6:87:18:13:f2:f4:42:08:
56:df:4c:99:b2:b6:98:3c:b6:24:0d:a0:65:62:ba:
02:67:b9:7a:4b:44:0e:6a:1f:dc:f8:23:de:d5:cd:
d1:6d:c8:ad:fa:8c:74:0a:9f:ea:2b:b1:77:02:e6:
ec:84:65:8d:56:70:4e:fc:70:7d:d7:76:f2:2e:5c:
a9:4f:d8:9c:1d:d9:ba:3a:52:5c:de:9d:89:ed:27:
36:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E9:BB:68:9C:30:9B:F5:9A:9D:2D:C1:C7:C5:37:04:D9:6B:F1:B7
X509v3 Authority Key Identifier:
keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:48:04:99:ad:5d:bb:13:82:ba:2a:43:06:0b:93:eb:a9:35:
d0:00:f2:6b:5a:a4:ef:48:c0:29:ba:3b:b3:6c:15:2c:fe:95:
3d:af:0a:69:55:49:32:c3:c4:b8:32:2c:d8:f9:40:99:8b:6f:
fc:26:49:ff:b7:e4:2b:2b:9c:c7:8f:22:64:46:d6:05:8c:bc:
02:3c:04:6a:ea:67:81:78:a5:5b:cf:77:58:64:3a:ba:d0:51:
26:03:7e:13:5f:51:4c:36:2e:33:46:73:42:9c:2e:98:e5:6d:
33:99:ae:bf:57:d9:52:3b:5f:86:20:9c:1f:01:f4:ff:7e:03:
7b:33:28:01:c4:8c:39:11:b5:6a:a9:e6:0c:ea:fe:15:e4:85:
26:b4:86:d7:3b:89:97:cb:0d:4f:e3:e9:d3:35:59:02:36:01:
49:d9:64:95:f2:66:ad:11:a0:24:9c:d7:9d:e7:4d:cb:e8:96:
44:33:88:ce:22:1c:5e:11:97:6e:d2:8c:38:1c:46:16:b6:22:
18:19:a9:19:09:94:0a:cd:dd:b9:03:60:dc:e1:fc:a7:ca:93:
07:da:0f:06:3f:2b:99:a4:fe:e8:6c:20:59:4c:c8:56:8a:02:
fa:c9:0b:22:67:6c:16:0a:67:fd:d6:c3:10:2c:69:81:9f:65:
26:ad:ce:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYvPSfRrrj2DnV9B7S/kW+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYTEwZmE5ZWNhOGVjOGRkZDVlMTI1NDI2NDM4ZThkZjhj
ODdhYmMwHhcNMjUwODIzMjEwMTU4WhcNMjUwODI0MjEwMTU4WjAzMTEwLwYDVQQD
EyhiYmU5YmI2ODljMzA5YmY1OWE5ZDJkYzFjN2M1MzcwNGQ5NmJmMWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNd+UJ16PIbsn3HnLcmys+/8K9nZ
5g84C2T8CWQMPRcRngDi4XjEm1NaZ1aO8rWbnF8U5gN8FeQeBLgGBuic8kxqWBZt
BTbDgpxY3l/9M0aFRaLVqfkemcnrBrL8qydSmzxYj9gVE9PJvydg3q3no7Xch/3Z
aM1PFKRCUdfb9A9zgZTT4D98z2MF67vixl0M1Dkic572M42PdQE3hft2j9MhXwgf
TpePJbYLxocYE/L0QghW30yZsraYPLYkDaBlYroCZ7l6S0QOah/c+CPe1c3Rbcit
+ox0Cp/qK7F3AubshGWNVnBO/HB913byLlypT9icHdm6OlJc3p2J7Sc2HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvpu2icMJv1mp0twcfFNwTZa/G3MB8GA1UdIwQY
MBaAFJOhD6nsqOyN3V4SVCZDjo34yHq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazZFUHFleW83STNkWGhKVUprT09qZmpJZXJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84NWUwMGUtZDlhZS00MDc0LTk2NjIt
NDg3OTBmNjAwYzY0LzEvazZFUHFleW83STNkWGhKVUprT09qZmpJZXJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84NWUwMGUtZDlhZS00MDc0LTk2NjItNDg3OTBmNjAwYzY0
LzEvazZFUHFleW83STNkWGhKVUprT09qZmpJZXJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0gEma1d
uxOCuipDBguT66k10ADya1qk70jAKbo7s2wVLP6VPa8KaVVJMsPEuDIs2PlAmYtv
/CZJ/7fkKyucx48iZEbWBYy8AjwEaupngXilW893WGQ6utBRJgN+E19RTDYuM0Zz
QpwumOVtM5muv1fZUjtfhiCcHwH0/34DezMoAcSMORG1aqnmDOr+FeSFJrSG1zuJ
l8sNT+Pp0zVZAjYBSdlklfJmrRGgJJzXnedNy+iWRDOIziIcXhGXbtKMOBxGFrYi
GBmpGQmUCs3duQNg3OH8p8qTB9oPBj8rmaT+6GwgWUzIVooC+skLImdsFgpn/dbD
ECxpgZ9lJq3O0g==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:07:01 2025 by rpki-client