Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
File: k3WPkqf9c1m6KEgSWoTfzELRS2w.mft (raw, json)
Hash identifier: BNounCrBSP3OnB5jG46X6C89TcPj2CeNs8t8ThRLUG4=
Subject key identifier: EF:FB:83:5D:4B:DD:01:F0:42:ED:A5:17:26:1B:E6:E5:F5:03:7C:8F
Authority key identifier: 93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
Certificate issuer: /CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Certificate serial: 0197B6A0BC21270431C479EECC470BB71B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:16 +0000
Manifest this update: Sat 28 Jun 2025 13:01:16 +0000
Manifest next update: Sun 29 Jun 2025 13:01:16 +0000
Files and hashes: 1: 6zqkbZaib1jQ2Gk8xWIE4kNkA08.roa (hash: t2pawZUDG8w+/7kKSZlwszt2WDbCUFiInD9rYvACGhw=)
2: AKC2vs0Xv6myd7svsj2_92wUeLg.roa (hash: YNCrFS5xfYguBMhlJjrv+olyy/Sk3uL/9WxwO9r8P9Y=)
3: k3WPkqf9c1m6KEgSWoTfzELRS2w.crl (hash: E2ijVuaei6nJwOTSMv09Bc91g+UPrucxRff+bt63wj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:bc:21:27:04:31:c4:79:ee:cc:47:0b:b7:1b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Validity
Not Before: Jun 28 13:01:16 2025 GMT
Not After : Jun 29 13:01:16 2025 GMT
Subject: CN=effb835d4bdd01f042eda517261be6e5f5037c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1c:ca:9a:a9:b3:4c:dc:26:75:23:ba:8d:89:
68:d1:fa:bd:57:cd:98:d4:74:b6:17:9f:2b:87:0e:
af:07:60:ea:1e:6d:17:1e:47:fe:bd:3b:4b:fd:0f:
c0:53:72:88:75:b5:82:4a:50:e1:ef:4a:a6:f1:4f:
d4:44:4b:09:e4:a2:2b:8c:17:57:32:dc:d9:ad:bb:
cf:92:06:1e:89:7d:be:12:72:40:b3:41:96:b9:3e:
d7:5a:73:29:34:47:44:a6:91:49:f0:a8:37:c0:69:
4a:55:bf:df:6e:fd:6f:32:3e:19:fb:1d:8f:fd:73:
5e:8c:b0:e1:d1:f4:89:9b:87:1a:29:50:46:ce:57:
d6:78:e8:10:ba:65:d3:86:35:8f:35:38:f6:0d:1d:
f1:93:e4:5b:f8:62:29:e3:43:b4:af:f9:db:85:96:
46:7b:89:25:f5:3a:3a:7a:89:2a:de:77:d3:5c:2a:
41:fa:10:20:da:2a:7b:29:59:98:02:7d:0c:f3:8d:
28:6d:19:a8:81:c4:04:36:fe:a3:a4:ff:c4:60:68:
d0:73:5b:4a:05:b7:c3:86:47:11:52:7a:23:fc:8a:
dc:72:c1:72:d6:a8:40:e7:53:23:13:2c:51:6d:ca:
0c:7b:d7:f3:d2:cc:ad:0e:62:08:33:d2:51:3e:92:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FB:83:5D:4B:DD:01:F0:42:ED:A5:17:26:1B:E6:E5:F5:03:7C:8F
X509v3 Authority Key Identifier:
keyid:93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a9:f7:36:67:85:dd:2c:20:4e:95:80:7e:08:45:9c:00:e1:
18:0d:63:73:84:fe:41:58:57:02:f0:7a:35:3c:79:78:29:d0:
a3:53:ec:0b:13:cd:e0:31:68:24:b8:13:bf:a7:e5:8d:95:18:
68:16:20:1e:5b:13:ba:8d:a9:3f:30:01:00:47:9a:09:c4:e6:
b8:76:15:2b:68:b4:12:36:bf:05:71:5c:93:ca:2c:ec:9c:21:
8c:38:64:ec:a1:9d:af:e1:79:b9:92:fe:d6:4a:86:53:0c:b3:
39:ca:c1:be:71:fd:fb:89:b5:10:0c:3b:7b:ab:a1:86:b9:9b:
8a:67:75:b6:f4:5f:3c:0c:90:cc:df:2d:62:68:39:94:85:e8:
04:d2:53:09:88:64:15:ee:95:62:8b:17:72:8f:68:6a:1a:da:
11:f5:d4:ef:fe:f9:39:88:8d:d3:f4:e3:dc:89:c3:4b:7b:15:
e5:0d:a4:b6:71:df:97:e3:95:6f:c6:29:82:ae:c5:6e:55:b4:
0c:5b:ee:18:fc:02:ce:43:d2:3a:5a:93:d4:67:63:d7:4a:b3:
6b:65:74:e5:ca:3f:24:20:6c:08:87:45:e0:89:7f:ad:8b:4a:
21:d4:f8:cb:ee:66:8a:bb:04:df:3d:17:f4:22:b0:45:25:7d:
e1:be:9c:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oLwhJwQxxHnuzEcLtxteMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNzU4ZjkyYTdmZDczNTliYTI4NDgxMjVhODRkZmNjNDJk
MTRiNmMwHhcNMjUwNjI4MTMwMTE2WhcNMjUwNjI5MTMwMTE2WjAzMTEwLwYDVQQD
EyhlZmZiODM1ZDRiZGQwMWYwNDJlZGE1MTcyNjFiZTZlNWY1MDM3YzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhzKmqmzTNwmdSO6jYlo0fq9V82Y
1HS2F58rhw6vB2DqHm0XHkf+vTtL/Q/AU3KIdbWCSlDh70qm8U/UREsJ5KIrjBdX
MtzZrbvPkgYeiX2+EnJAs0GWuT7XWnMpNEdEppFJ8Kg3wGlKVb/fbv1vMj4Z+x2P
/XNejLDh0fSJm4caKVBGzlfWeOgQumXThjWPNTj2DR3xk+Rb+GIp40O0r/nbhZZG
e4kl9To6eokq3nfTXCpB+hAg2ip7KVmYAn0M840obRmogcQENv6jpP/EYGjQc1tK
BbfDhkcRUnoj/IrccsFy1qhA51MjEyxRbcoMe9fz0sytDmIIM9JRPpIYMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/7g11L3QHwQu2lFyYb5uX1A3yPMB8GA1UdIwQY
MBaAFJN1j5Kn/XNZuihIElqE38xC0UtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazNXUGtxZjljMW02S0VnU1dvVGZ6RUxSUzJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wZjZkNGEtMTE2Ni00ZDJkLWE5MjEt
ZTE0M2ZhYWEwYjgyLzEvazNXUGtxZjljMW02S0VnU1dvVGZ6RUxSUzJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wZjZkNGEtMTE2Ni00ZDJkLWE5MjEtZTE0M2ZhYWEwYjgy
LzEvazNXUGtxZjljMW02S0VnU1dvVGZ6RUxSUzJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6n3NmeF
3SwgTpWAfghFnADhGA1jc4T+QVhXAvB6NTx5eCnQo1PsCxPN4DFoJLgTv6fljZUY
aBYgHlsTuo2pPzABAEeaCcTmuHYVK2i0Eja/BXFck8os7JwhjDhk7KGdr+F5uZL+
1kqGUwyzOcrBvnH9+4m1EAw7e6uhhrmbimd1tvRfPAyQzN8tYmg5lIXoBNJTCYhk
Fe6VYosXco9oahraEfXU7/75OYiN0/Tj3InDS3sV5Q2ktnHfl+OVb8Ypgq7FblW0
DFvuGPwCzkPSOlqT1Gdj10qza2V05co/JCBsCIdF4Il/rYtKIdT4y+5mirsE3z0X
9CKwRSV94b6cyg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:27 2025 by rpki-client