Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
File: k19T9eQH5VojMNnVI6gEwHIspWU.mft (raw, json)
Hash identifier: gbzbhgpJyieFx9/Xh/uCGK4O92v5yQFLED5FayoTtxI=
Subject key identifier: F7:8A:63:96:DD:D8:37:81:CA:F9:F7:DE:30:E6:D9:07:18:00:EB:2F
Authority key identifier: 93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
Certificate issuer: /CN=935f53f5e407e55a2330d9d523a804c0722ca565
Certificate serial: 0197B77CDAA2F225E10CD47EF3DD910EA191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:42 +0000
Manifest this update: Sat 28 Jun 2025 17:01:42 +0000
Manifest next update: Sun 29 Jun 2025 17:01:42 +0000
Files and hashes: 1: CEKF3MXHpQR2CGHCMQpTxxuuRIY.roa (hash: Rh5DOeHi5/pgsxZpTOekiFMDHUB1zlvv4XKyE6PrDFE=)
2: cXHMvnYXUn58neLwmoRSc042tjs.roa (hash: SBDcDeTpbKOEPbrOKMYmcpYN3NXUYeqARSNljTNUetg=)
3: k19T9eQH5VojMNnVI6gEwHIspWU.crl (hash: 80ezMsZ6IVfwFtGBUlNnyRKTi5MnBOf/7EQq2/s4Scs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:da:a2:f2:25:e1:0c:d4:7e:f3:dd:91:0e:a1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935f53f5e407e55a2330d9d523a804c0722ca565
Validity
Not Before: Jun 28 17:01:42 2025 GMT
Not After : Jun 29 17:01:42 2025 GMT
Subject: CN=f78a6396ddd83781caf9f7de30e6d9071800eb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3c:47:b2:15:d6:0a:2f:40:d4:8b:3f:6d:87:
b8:a3:1e:ae:6a:55:02:9e:8d:44:1c:ba:3e:b7:3d:
6c:5b:6c:5f:0f:ee:d7:18:69:f1:01:15:c3:10:8b:
7c:91:41:0a:87:40:d7:54:f9:1a:20:93:2d:86:b6:
ae:ed:34:2c:db:a4:0e:0e:e5:ca:b2:22:a4:31:06:
4f:ad:01:eb:06:cd:a9:33:cd:67:fd:e3:67:82:09:
95:92:72:79:c4:3f:f2:83:5c:22:b6:5d:67:86:b0:
12:ae:09:e9:d2:14:e0:38:8e:9f:b3:47:bb:91:86:
ba:12:46:7c:82:f4:90:16:55:f1:84:a0:0e:fe:67:
c0:6d:d0:86:2d:3a:8a:bb:4b:52:1f:e8:f2:a7:bb:
98:09:97:8b:b7:45:8b:0f:d4:70:b0:33:90:a1:ba:
7d:3a:40:fa:b5:64:99:f2:ad:90:9f:a9:2b:bb:c1:
11:ec:9b:98:9d:ef:2a:87:ca:1d:df:15:5c:8a:f5:
98:66:e7:ff:ce:2a:31:9a:ae:90:68:0a:76:e6:b9:
5f:77:cb:c9:32:3e:62:ab:41:58:77:ed:dc:1f:0c:
19:fb:9d:79:ea:70:6a:bf:02:2c:15:a8:82:57:b7:
f2:b5:d6:9a:85:15:f5:fc:c2:46:4f:05:e3:bd:a8:
11:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8A:63:96:DD:D8:37:81:CA:F9:F7:DE:30:E6:D9:07:18:00:EB:2F
X509v3 Authority Key Identifier:
keyid:93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a0:6e:cb:41:43:e6:20:a1:8b:c0:07:fe:d7:8e:8a:3f:23:
00:b9:fa:bc:40:e6:93:14:7e:63:75:8c:b9:d8:ab:6a:7e:10:
2c:df:79:72:43:75:c6:e5:c8:e7:de:43:7b:cd:90:35:a0:33:
52:1f:20:dc:35:8e:10:58:a4:f5:29:e5:48:75:34:c9:74:c3:
cc:84:11:2d:96:b5:23:91:41:c8:5b:a3:60:84:ba:7b:8d:6c:
31:dc:2c:b2:16:df:3d:a2:90:34:65:77:ef:90:10:24:f4:69:
ea:bb:53:8f:67:1d:9e:a0:4f:c2:a5:7f:4a:4f:3c:3b:1d:8f:
f2:1e:6a:5e:fc:1e:b5:76:97:bd:5c:43:50:ca:0d:ef:1f:a9:
ad:e2:7a:38:7d:12:91:a4:83:ba:f1:9c:1d:5e:8b:84:8d:0f:
a8:f6:ae:95:e3:33:2e:d6:a6:bc:17:49:a3:81:7f:21:32:47:
04:f3:21:a3:cc:b0:7f:e1:0f:21:67:df:06:87:a9:80:b4:e9:
34:7e:9d:32:7d:68:98:b4:5f:f2:50:99:e2:b9:ea:98:dd:b3:
cf:b0:28:ed:44:55:5f:d6:99:68:75:1f:27:85:7d:1f:c5:83:
fe:21:00:b1:91:ae:0d:c9:ec:43:61:ed:24:46:0e:b9:38:da:
84:5b:e5:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fNqi8iXhDNR+892RDqGRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNWY1M2Y1ZTQwN2U1NWEyMzMwZDlkNTIzYTgwNGMwNzIy
Y2E1NjUwHhcNMjUwNjI4MTcwMTQyWhcNMjUwNjI5MTcwMTQyWjAzMTEwLwYDVQQD
EyhmNzhhNjM5NmRkZDgzNzgxY2FmOWY3ZGUzMGU2ZDkwNzE4MDBlYjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDxHshXWCi9A1Is/bYe4ox6ualUC
no1EHLo+tz1sW2xfD+7XGGnxARXDEIt8kUEKh0DXVPkaIJMthrau7TQs26QODuXK
siKkMQZPrQHrBs2pM81n/eNnggmVknJ5xD/yg1witl1nhrASrgnp0hTgOI6fs0e7
kYa6EkZ8gvSQFlXxhKAO/mfAbdCGLTqKu0tSH+jyp7uYCZeLt0WLD9RwsDOQobp9
OkD6tWSZ8q2Qn6kru8ER7JuYne8qh8od3xVcivWYZuf/zioxmq6QaAp25rlfd8vJ
Mj5iq0FYd+3cHwwZ+5156nBqvwIsFaiCV7fytdaahRX1/MJGTwXjvagRQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeKY5bd2DeByvn33jDm2QcYAOsvMB8GA1UdIwQY
MBaAFJNfU/XkB+VaIzDZ1SOoBMByLKVlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazE5VDllUUg1Vm9qTU5uVkk2Z0V3SElzcFdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84YjU1NGMtMGNlZi00MWIzLWJhM2It
MmQ1ZDY4ODQxNzNmLzEvazE5VDllUUg1Vm9qTU5uVkk2Z0V3SElzcFdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi84YjU1NGMtMGNlZi00MWIzLWJhM2ItMmQ1ZDY4ODQxNzNm
LzEvazE5VDllUUg1Vm9qTU5uVkk2Z0V3SElzcFdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADaBuy0FD
5iChi8AH/teOij8jALn6vEDmkxR+Y3WMudiran4QLN95ckN1xuXI595De82QNaAz
Uh8g3DWOEFik9SnlSHU0yXTDzIQRLZa1I5FByFujYIS6e41sMdwsshbfPaKQNGV3
75AQJPRp6rtTj2cdnqBPwqV/Sk88Ox2P8h5qXvwetXaXvVxDUMoN7x+preJ6OH0S
kaSDuvGcHV6LhI0PqPauleMzLtamvBdJo4F/ITJHBPMho8ywf+EPIWffBoepgLTp
NH6dMn1omLRf8lCZ4rnqmN2zz7Ao7URVX9aZaHUfJ4V9H8WD/iEAsZGuDcnsQ2Ht
JEYOuTjahFvlmQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 00:48:07 2025 by rpki-client