Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier: Ik614pcO6MEr6aGQuOOEDw6BlxP9JlMmfLWKjeZU2XQ=
Subject key identifier: 1C:C6:33:94:42:25:6D:F0:F0:25:F5:19:E8:B0:9B:FF:CD:3B:F9:47
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 0198D77386AAE62B07603E152FCF35BD2610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 15:02:09 +0000
Manifest this update: Sat 23 Aug 2025 15:02:09 +0000
Manifest next update: Sun 24 Aug 2025 15:02:09 +0000
Files and hashes: 1: 9w7Z5uUGAiM-_Df1voiT4N-AIgQ.roa (hash: MPq4XPIwVMd5VTIFEn8awNds0lwWw2BnIcp13WOQH2k=)
2: BDePhfa6XjPm6GJ2nhEOB22J0Cc.roa (hash: +yLTNZd1DxNd/w4/Tt21tkQYSV5rMNl3vDHxAq0lK+o=)
3: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: BFJI5EZc3P8KiBDfCOOkHJX74TiHFGTE4q09lbzJHMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:86:aa:e6:2b:07:60:3e:15:2f:cf:35:bd:26:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Aug 23 15:02:09 2025 GMT
Not After : Aug 24 15:02:09 2025 GMT
Subject: CN=1cc6339442256df0f025f519e8b09bffcd3bf947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:9a:42:dc:7c:39:3f:ba:b8:7b:06:30:43:
19:f4:f2:67:55:af:d5:97:62:9d:21:79:32:6b:6b:
91:70:94:57:59:98:6d:db:e1:72:b7:f8:7f:09:6d:
a3:14:3b:cd:ef:01:27:97:02:1a:f6:81:8d:48:96:
c0:2e:03:65:55:bd:2a:a8:7f:4e:7b:7f:3b:7c:e4:
e8:bf:94:0e:16:f2:22:c4:66:08:28:1b:55:15:6e:
d8:ed:4e:90:a4:54:9a:d2:51:81:2f:7f:57:d4:6b:
8e:fc:e7:11:c5:0b:c0:f5:50:7a:0a:98:91:0e:1f:
ea:ff:3d:c7:17:8d:7d:c2:7b:50:a7:5c:cc:50:c5:
01:35:83:47:dc:a2:08:60:64:e1:f3:9c:08:96:f4:
29:53:68:b2:60:45:52:26:51:41:c6:cb:e2:0e:a8:
a2:9d:45:2d:28:34:ca:d8:27:f3:e8:4a:c7:8b:e5:
c2:a6:88:c0:c2:2a:0c:5a:e9:ff:97:e8:c1:37:cd:
5e:82:7b:86:8f:d8:af:89:7a:13:23:35:6d:e9:63:
b2:88:dc:ab:08:18:43:46:5f:4f:2e:78:85:da:dc:
72:29:79:4b:87:4c:0c:32:ba:ff:91:88:b2:72:2a:
97:fb:c4:43:68:d7:97:e4:63:8d:cc:c6:66:78:5d:
ae:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C6:33:94:42:25:6D:F0:F0:25:F5:19:E8:B0:9B:FF:CD:3B:F9:47
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:03:a2:46:c2:d7:c8:60:07:1c:e9:3c:5f:1b:57:a7:cb:9b:
44:b7:43:f8:73:36:70:8e:ca:77:2e:b6:06:7a:ae:ac:bc:a7:
b7:bf:8c:2f:d6:6b:67:f1:23:e8:b5:ae:36:31:2d:6f:c2:80:
14:19:8c:90:22:f9:a0:aa:2c:6d:d6:35:2c:4d:fd:3e:ce:42:
23:a8:39:94:9e:e2:ae:e5:ea:06:34:9b:75:ef:93:6c:82:e1:
70:a4:f6:6a:15:d2:28:b3:62:b5:1e:13:e6:02:7e:f9:1e:62:
35:7b:aa:a2:76:6a:dc:bd:a4:67:1f:d0:72:25:55:f6:b9:23:
17:7e:49:23:d1:11:ee:89:22:2a:d4:4f:39:23:df:18:50:e6:
4b:f7:af:82:ab:29:62:ec:4c:5a:ce:91:c5:47:2b:9e:64:fb:
1a:ee:6d:d9:92:51:84:c0:ee:d3:a4:1a:35:d7:e4:bd:e6:37:
ea:0e:84:be:14:09:06:09:ce:3d:ae:b5:fa:1d:3c:19:d8:b7:
b5:9d:4d:55:0d:2e:01:d7:1c:1c:1a:44:82:44:59:ca:1e:5b:
ba:85:a7:49:0d:5d:78:55:5d:4b:82:5e:a4:3a:c5:c1:99:82:
6f:c4:46:01:64:60:25:76:34:5a:90:18:b0:95:db:1f:1e:bb:
bd:04:05:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXc4aq5isHYD4VL881vSYQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNWM0Mjg1N2UzMDJmZWIxNDAxNzMwMWU0M2MzOWZlNDVl
N2Y2MjkwHhcNMjUwODIzMTUwMjA5WhcNMjUwODI0MTUwMjA5WjAzMTEwLwYDVQQD
EygxY2M2MzM5NDQyMjU2ZGYwZjAyNWY1MTllOGIwOWJmZmNkM2JmOTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgeaQtx8OT+6uHsGMEMZ9PJnVa/V
l2KdIXkya2uRcJRXWZht2+Fyt/h/CW2jFDvN7wEnlwIa9oGNSJbALgNlVb0qqH9O
e387fOTov5QOFvIixGYIKBtVFW7Y7U6QpFSa0lGBL39X1GuO/OcRxQvA9VB6CpiR
Dh/q/z3HF419wntQp1zMUMUBNYNH3KIIYGTh85wIlvQpU2iyYEVSJlFBxsviDqii
nUUtKDTK2Cfz6ErHi+XCpojAwioMWun/l+jBN81egnuGj9iviXoTIzVt6WOyiNyr
CBhDRl9PLniF2txyKXlLh0wMMrr/kYiyciqX+8RDaNeX5GONzMZmeF2u4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzGM5RCJW3w8CX1Geiwm//NO/lHMB8GA1UdIwQY
MBaAFJNcQoV+MC/rFAFzAeQ8Of5F5/YpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81NWU1MjktYjgzOS00NDRmLTg3MmQt
MWJmZDEwYTg4NDVhLzEvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81NWU1MjktYjgzOS00NDRmLTg3MmQtMWJmZDEwYTg4NDVh
LzEvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgOiRsLX
yGAHHOk8XxtXp8ubRLdD+HM2cI7Kdy62BnqurLynt7+ML9ZrZ/Ej6LWuNjEtb8KA
FBmMkCL5oKosbdY1LE39Ps5CI6g5lJ7iruXqBjSbde+TbILhcKT2ahXSKLNitR4T
5gJ++R5iNXuqonZq3L2kZx/QciVV9rkjF35JI9ER7okiKtRPOSPfGFDmS/evgqsp
YuxMWs6RxUcrnmT7Gu5t2ZJRhMDu06QaNdfkveY36g6EvhQJBgnOPa61+h08Gdi3
tZ1NVQ0uAdccHBpEgkRZyh5buoWnSQ1deFVdS4JepDrFwZmCb8RGAWRgJXY0WpAY
sJXbHx67vQQFxA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:55:17 2025 by rpki-client