Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
File: khPywtBsZLiVRXq1D8SSAoOknMc.mft (raw, json)
Hash identifier: 8iVoKxWubK937IHYmbm6TuBRjChMk7tAcginCc0vhjk=
Subject key identifier: A6:30:C1:3A:56:B5:4D:FC:5D:DF:80:6B:AB:9F:3E:1E:D8:AA:C2:8A
Authority key identifier: 92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
Certificate issuer: /CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Certificate serial: 0197B6A090A951414DAB394D6DA985724134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 13:01:05 +0000
Manifest this update: Sat 28 Jun 2025 13:01:05 +0000
Manifest next update: Sun 29 Jun 2025 13:01:05 +0000
Files and hashes: 1: WzcaaMQRrlChBNRzpd6ejVsnjhE.roa (hash: thxrjBXbUSSC8DCWldp79G7rZSMi1abwsQ1q60K08dg=)
2: iRKQaDksCLDeAQtwp0YKQ3SovAI.roa (hash: wixldrtyd3fdUQpeC4X4fRGfwA4fNIJXJhW2tQSWdew=)
3: khPywtBsZLiVRXq1D8SSAoOknMc.crl (hash: K6dlGarFL3JeqhykMGoJZqOPq6bTMmdOF5FPz/ykK00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:90:a9:51:41:4d:ab:39:4d:6d:a9:85:72:41:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Validity
Not Before: Jun 28 13:01:05 2025 GMT
Not After : Jun 29 13:01:05 2025 GMT
Subject: CN=a630c13a56b54dfc5ddf806bab9f3e1ed8aac28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:73:08:8d:b2:2f:3b:c8:fa:39:6c:3e:10:62:
f4:30:3b:15:72:12:05:a5:f9:6d:8c:98:86:95:65:
1e:bb:51:0b:81:30:19:21:bb:70:b0:13:d8:f5:a5:
bf:6f:c2:ab:13:70:73:a8:f9:05:76:e8:b8:0d:ef:
aa:5f:6b:b8:ad:63:d0:0d:c1:fe:df:9c:4e:a6:e6:
fe:7a:4d:5a:14:1f:7f:d3:fb:7a:9e:46:8b:66:19:
66:dc:81:6b:29:e8:91:f6:a2:4c:3d:4c:9a:a2:4a:
75:07:f0:86:cd:0d:f0:2b:c8:a8:7e:6b:60:ea:76:
c7:3a:dd:df:73:4c:b4:ca:b1:e2:60:21:eb:cc:ba:
1e:a7:62:82:76:aa:4f:b9:b7:7c:19:3c:95:b9:8d:
6e:d8:02:b6:4a:6b:66:16:63:41:52:cf:81:48:5f:
f5:a3:3d:b2:87:57:ec:db:66:12:18:f9:fb:6b:0a:
34:d7:08:bf:b1:b3:e2:b8:81:81:9b:96:1d:65:db:
90:bf:c8:bb:61:24:10:4f:a5:d7:15:de:92:df:2a:
31:d6:72:ec:b4:bc:6d:cb:31:70:bb:79:7d:71:fa:
c0:6b:9e:5b:0d:08:e3:29:5f:a0:4d:37:27:5a:a2:
64:25:e1:24:10:95:d3:c4:48:fb:fd:1c:fd:a2:bd:
50:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:30:C1:3A:56:B5:4D:FC:5D:DF:80:6B:AB:9F:3E:1E:D8:AA:C2:8A
X509v3 Authority Key Identifier:
keyid:92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:36:b3:7b:f7:d0:cd:b6:78:65:87:42:8c:dd:6b:f7:c8:5d:
25:06:99:13:5f:27:c1:06:17:ef:c9:80:99:6d:58:81:2f:af:
a8:cd:91:9a:1d:93:3c:34:15:3c:12:b0:59:84:e8:90:58:35:
37:53:c9:29:70:a9:c1:2d:1d:06:1b:2b:c0:f9:75:d1:75:1e:
60:b3:74:d0:30:07:96:6f:50:0d:c8:ac:b7:4a:9f:ca:04:8a:
58:f4:c6:78:ad:b0:fa:5a:93:8b:f1:4a:77:bd:f0:4f:61:1e:
a7:4c:fe:67:fa:60:74:a0:07:c4:33:1a:d7:e2:aa:c3:4a:f8:
f8:b3:83:9c:80:db:7d:13:61:c5:30:53:95:ff:59:43:ce:b7:
eb:11:79:0a:3d:54:87:82:93:e4:57:1b:4f:dd:39:05:7c:f8:
0d:07:17:c6:21:a3:9a:f5:a7:f3:51:81:ef:13:15:4c:fb:18:
1b:28:46:a6:4e:69:eb:78:f6:80:6a:51:85:fc:00:6f:6a:e7:
d6:dd:b5:dc:f2:68:c0:6b:4b:39:cb:44:71:37:87:7d:b0:ac:
91:e6:03:27:2e:28:b4:30:fd:6f:9b:11:2b:9f:69:43:95:01:
dc:4f:d0:02:45:37:92:15:57:6d:43:b1:95:5c:98:ce:4c:be:
c5:cb:47:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oJCpUUFNqzlNbamFckE0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMTNmMmMyZDA2YzY0Yjg5NTQ1N2FiNTBmYzQ5MjAyODNh
NDljYzcwHhcNMjUwNjI4MTMwMTA1WhcNMjUwNjI5MTMwMTA1WjAzMTEwLwYDVQQD
EyhhNjMwYzEzYTU2YjU0ZGZjNWRkZjgwNmJhYjlmM2UxZWQ4YWFjMjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnMIjbIvO8j6OWw+EGL0MDsVchIF
pfltjJiGlWUeu1ELgTAZIbtwsBPY9aW/b8KrE3BzqPkFdui4De+qX2u4rWPQDcH+
35xOpub+ek1aFB9/0/t6nkaLZhlm3IFrKeiR9qJMPUyaokp1B/CGzQ3wK8iofmtg
6nbHOt3fc0y0yrHiYCHrzLoep2KCdqpPubd8GTyVuY1u2AK2SmtmFmNBUs+BSF/1
oz2yh1fs22YSGPn7awo01wi/sbPiuIGBm5YdZduQv8i7YSQQT6XXFd6S3yox1nLs
tLxtyzFwu3l9cfrAa55bDQjjKV+gTTcnWqJkJeEkEJXTxEj7/Rz9or1QQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYwwTpWtU38Xd+Aa6ufPh7YqsKKMB8GA1UdIwQY
MBaAFJIT8sLQbGS4lUV6tQ/EkgKDpJzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8zMWE2YTQtOGE5ZC00N2EyLThmYmIt
YjlkZmYzZTdhMzJlLzEva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8zMWE2YTQtOGE5ZC00N2EyLThmYmItYjlkZmYzZTdhMzJl
LzEva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTaze/fQ
zbZ4ZYdCjN1r98hdJQaZE18nwQYX78mAmW1YgS+vqM2Rmh2TPDQVPBKwWYTokFg1
N1PJKXCpwS0dBhsrwPl10XUeYLN00DAHlm9QDcist0qfygSKWPTGeK2w+lqTi/FK
d73wT2Eep0z+Z/pgdKAHxDMa1+Kqw0r4+LODnIDbfRNhxTBTlf9ZQ8636xF5Cj1U
h4KT5FcbT905BXz4DQcXxiGjmvWn81GB7xMVTPsYGyhGpk5p63j2gGpRhfwAb2rn
1t213PJowGtLOctEcTeHfbCskeYDJy4otDD9b5sRK59pQ5UB3E/QAkU3khVXbUOx
lVyYzky+xctHqQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:43 2025 by rpki-client