Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
File: k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft (raw, json)
Hash identifier: Pb2xWF2cyOWyhaIjz0xMCod17z3xZs643K5r6houtgs=
Subject key identifier: 6D:4D:62:A6:45:AA:8D:03:5C:75:36:21:4B:5D:AD:6C:40:68:61:B2
Authority key identifier: 93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
Certificate issuer: /CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Certificate serial: 0198D5836F25591EC6F6C4257A72CCEB0F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:17 +0000
Manifest this update: Sat 23 Aug 2025 06:00:17 +0000
Manifest next update: Sun 24 Aug 2025 06:00:17 +0000
Files and hashes: 1: I9i3fnf4Nk0WsFMmWEWJhe5vh40.roa (hash: llYywC4U70yW6sSChiJ+ZHwIZzZjQAej/EchqIalMeA=)
2: IGJfVzvhS1XNfQJqw7b44W8rh5Q.roa (hash: ps4BuWOubuNVlVOQpqaTImNMOhN/B2m1xTG8lC4cqCo=)
3: k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl (hash: YvbhPvj0Ve+Lt2yqY8/f4/OqJdBDKjpza+QvZvMRluQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:6f:25:59:1e:c6:f6:c4:25:7a:72:cc:eb:0f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Validity
Not Before: Aug 23 06:00:17 2025 GMT
Not After : Aug 24 06:00:17 2025 GMT
Subject: CN=6d4d62a645aa8d035c7536214b5dad6c406861b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:24:82:ad:14:f2:c6:9c:27:41:14:ad:b0:10:
37:34:de:23:b8:27:e3:9a:ad:4c:eb:9e:ec:41:f6:
6c:25:fd:45:49:09:b9:1a:8d:be:5b:6d:19:d5:d1:
28:22:9d:b4:e9:cf:e6:31:4c:ad:22:36:84:a2:38:
e0:e6:4a:d6:0b:83:b3:c5:7b:67:4d:2e:ce:43:d8:
b7:84:0a:ab:f1:ba:f7:04:d2:3c:40:83:53:1a:4c:
06:f6:89:2d:45:a3:cd:17:50:60:82:78:d8:d9:af:
22:71:70:31:ef:08:13:de:18:a8:64:24:9e:51:5f:
b6:06:1f:93:44:f0:3f:99:fd:0a:e7:4b:ad:24:ce:
46:d9:53:8c:fc:b8:dd:71:39:11:2a:e8:52:4a:a6:
70:d9:d6:c5:f2:ac:69:c3:52:bf:e8:21:04:f9:cd:
84:dd:1d:43:7e:65:86:7b:7a:02:c5:3a:56:1f:10:
fb:86:ac:4b:64:b3:65:13:c9:f4:3d:b7:a3:9e:6c:
27:a2:a1:ae:a8:45:7e:bc:bc:73:e7:f8:a4:82:35:
4d:93:56:03:98:58:65:89:36:0b:af:6c:6c:d4:c0:
b7:da:28:10:43:38:d0:97:e7:7f:6b:d3:29:85:f4:
7c:0b:0a:55:44:1f:44:6d:f6:79:ae:1a:33:9f:e4:
a6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4D:62:A6:45:AA:8D:03:5C:75:36:21:4B:5D:AD:6C:40:68:61:B2
X509v3 Authority Key Identifier:
keyid:93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:bd:16:2f:96:15:29:c2:ee:bc:37:c2:c6:5a:ec:7e:82:0e:
47:49:12:86:41:e4:0a:a2:de:1d:77:9d:b0:8a:22:fe:d4:f1:
dd:f0:5b:55:80:f1:7e:31:17:82:96:f2:83:d0:6f:82:66:f7:
eb:4a:da:c1:fd:e5:25:39:e0:81:9f:7e:cf:d4:4f:c5:3c:93:
17:24:91:0a:23:21:94:1c:c5:28:de:17:ae:58:fc:c6:54:2e:
20:cd:32:81:e4:64:cd:7d:c7:a7:56:7e:98:15:92:1e:43:71:
fa:33:93:52:95:b3:e6:7b:bd:14:e9:fd:d2:f4:48:03:73:b8:
ab:0e:72:a5:4d:e3:66:5d:79:57:5c:58:12:60:bf:a8:1c:b3:
d3:b4:6e:46:61:20:d3:0e:9f:3d:ad:df:4d:34:c4:05:21:c0:
ff:70:5c:0f:ca:0f:24:8f:14:ef:a2:93:29:1e:00:65:4c:89:
06:1b:33:85:3f:49:a7:ff:e2:45:a3:3e:9f:24:33:35:e5:9c:
8e:92:1d:8e:c8:58:7f:9a:0b:ab:d6:9c:b4:7c:d3:5b:30:a1:
e7:f3:ea:29:59:a6:fe:dc:09:83:8d:1c:8a:27:ba:f5:8b:86:
42:82:0e:77:56:f3:d4:49:65:da:d5:2b:6c:93:4d:0f:1e:38:
e1:c6:9b:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg28lWR7G9sQlenLM6w+RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZGM0NWZmZTEzZjg0MWYxODhhZjc0M2JkN2RjMzRlZDU0
ODA1ZDQwHhcNMjUwODIzMDYwMDE3WhcNMjUwODI0MDYwMDE3WjAzMTEwLwYDVQQD
Eyg2ZDRkNjJhNjQ1YWE4ZDAzNWM3NTM2MjE0YjVkYWQ2YzQwNjg2MWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SSCrRTyxpwnQRStsBA3NN4juCfj
mq1M657sQfZsJf1FSQm5Go2+W20Z1dEoIp206c/mMUytIjaEojjg5krWC4OzxXtn
TS7OQ9i3hAqr8br3BNI8QINTGkwG9oktRaPNF1BggnjY2a8icXAx7wgT3hioZCSe
UV+2Bh+TRPA/mf0K50utJM5G2VOM/LjdcTkRKuhSSqZw2dbF8qxpw1K/6CEE+c2E
3R1DfmWGe3oCxTpWHxD7hqxLZLNlE8n0PbejnmwnoqGuqEV+vLxz5/ikgjVNk1YD
mFhliTYLr2xs1MC32igQQzjQl+d/a9MphfR8CwpVRB9EbfZ5rhozn+SmSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1NYqZFqo0DXHU2IUtdrWxAaGGyMB8GA1UdIwQY
MBaAFJPcRf/hP4QfGIr3Q719w07VSAXUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazl4Rl8tRV9oQjhZaXZkRHZYM0RUdFZJQmRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yZDBiMTktMGFmZi00MTJmLWEyZmQt
MjE4OTU3MjhiYTRlLzEvazl4Rl8tRV9oQjhZaXZkRHZYM0RUdFZJQmRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8yZDBiMTktMGFmZi00MTJmLWEyZmQtMjE4OTU3MjhiYTRl
LzEvazl4Rl8tRV9oQjhZaXZkRHZYM0RUdFZJQmRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAar0WL5YV
KcLuvDfCxlrsfoIOR0kShkHkCqLeHXedsIoi/tTx3fBbVYDxfjEXgpbyg9Bvgmb3
60rawf3lJTnggZ9+z9RPxTyTFySRCiMhlBzFKN4Xrlj8xlQuIM0ygeRkzX3Hp1Z+
mBWSHkNx+jOTUpWz5nu9FOn90vRIA3O4qw5ypU3jZl15V1xYEmC/qByz07RuRmEg
0w6fPa3fTTTEBSHA/3BcD8oPJI8U76KTKR4AZUyJBhszhT9Jp//iRaM+nyQzNeWc
jpIdjshYf5oLq9actHzTWzCh5/PqKVmm/twJg40ciie69YuGQoIOd1bz1Ell2tUr
bJNNDx444cab9A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:37 2025 by rpki-client