Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
File: Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft (raw, json)
Hash identifier: vVPAI3vmUHGf8NIwFW6BgOT7A2Tjho42x8yP882pluA=
Subject key identifier: 57:2B:7D:E7:74:E9:7F:07:97:F1:3C:DB:E0:32:7C:8F:3B:93:0B:9A
Authority key identifier: 2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9
Certificate issuer: /CN=2ace126fa5830911083e45f583cadb08a63ec6f9
Certificate serial: 0198D583B14CE3DE1F6D4E35334F21100679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:34 +0000
Manifest this update: Sat 23 Aug 2025 06:00:34 +0000
Manifest next update: Sun 24 Aug 2025 06:00:34 +0000
Files and hashes: 1: Et82Ox-YoPWswPFqxd1JmT5HiVY.roa (hash: dKjp2M/qEJfQktMuqf3U3untvmBMHbGfy5ZX8hyRWlU=)
2: Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl (hash: IJFyviBcd87DHf4FJLBQrvRQ+isYY+oCTB+bBsdoNNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b1:4c:e3:de:1f:6d:4e:35:33:4f:21:10:06:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace126fa5830911083e45f583cadb08a63ec6f9
Validity
Not Before: Aug 23 06:00:34 2025 GMT
Not After : Aug 24 06:00:34 2025 GMT
Subject: CN=572b7de774e97f0797f13cdbe0327c8f3b930b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b8:48:dc:06:cf:c1:8b:e1:8b:93:5f:5e:2c:
8c:49:7c:f0:0f:d2:a6:54:48:ca:36:51:2d:88:9e:
71:70:c5:e6:f1:f0:77:f3:ed:7e:b7:f6:63:df:fc:
49:f7:4a:f6:01:9b:d8:00:5d:d4:5b:c1:92:af:0e:
03:8a:7a:bf:d1:f0:75:3f:c5:16:38:b9:ce:d5:66:
af:9a:0a:e5:27:0c:d7:f1:3e:50:3e:f8:64:cc:ac:
55:b2:bc:eb:3b:1f:90:a3:25:9f:79:31:dc:77:bc:
2e:97:c8:57:d2:f1:db:56:dc:97:f1:3f:01:b7:54:
82:c4:18:54:a1:79:fa:4a:b3:bf:da:98:59:57:65:
05:5c:75:b4:f8:db:36:25:ba:d0:5c:3d:71:61:50:
58:2e:70:b1:e9:e5:00:63:26:8e:c7:87:23:3f:55:
e4:67:77:bf:66:64:5e:c5:22:80:52:c1:87:14:a0:
c4:b5:75:18:77:a6:48:4b:c6:d8:c3:d0:f3:59:96:
ae:48:a7:27:2d:55:66:71:7f:86:89:5e:6f:21:2f:
34:57:e5:67:1b:ab:3d:98:63:5f:1b:9c:d4:68:3c:
ef:7f:c0:f0:fd:23:bf:46:02:cd:f7:0f:66:66:30:
29:06:56:17:80:95:7d:21:4f:2e:34:0b:78:00:9c:
95:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2B:7D:E7:74:E9:7F:07:97:F1:3C:DB:E0:32:7C:8F:3B:93:0B:9A
X509v3 Authority Key Identifier:
keyid:2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:4a:c3:36:a4:0e:c1:c5:23:d9:8f:c4:26:66:30:b2:73:e7:
97:ef:91:e7:09:4a:0f:28:14:eb:b7:64:3d:5b:fe:d6:79:a6:
99:72:fd:00:c2:e5:2a:35:f2:f9:b0:91:6f:20:e1:33:db:60:
6e:2b:43:f9:83:d1:7e:09:3c:cf:7d:3c:55:9f:03:0d:18:23:
4f:8b:44:96:7c:2a:76:fa:d7:1d:e0:e6:0c:90:e9:71:d1:3c:
13:35:74:26:a8:92:a3:72:6a:ba:fc:cf:aa:85:40:1d:47:14:
c1:35:32:7a:f9:b9:27:71:bd:c4:5d:30:a5:be:8a:f1:d6:f3:
a2:c3:61:eb:f4:de:ad:96:ef:ad:ab:92:0a:75:50:17:aa:b5:
c5:6b:fc:7c:34:45:f4:b6:d1:b9:7c:0c:75:38:a4:21:ab:02:
4d:17:e2:e5:24:ea:e7:65:4e:27:ab:d9:6c:cd:dd:79:2a:52:
9f:9b:18:b1:f4:18:6d:56:d7:42:a8:58:a1:23:12:77:5f:c3:
e2:69:69:b1:db:d5:99:8e:f9:be:b2:cd:6e:5a:c1:d5:98:6a:
70:6e:47:80:c8:ce:ec:04:e7:c5:21:47:86:94:c1:0a:72:d1:
1d:46:cc:15:42:50:5a:20:e2:44:2a:bc:ea:73:c7:ac:f5:ff:
06:42:ca:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg7FM494fbU41M08hEAZ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhY2UxMjZmYTU4MzA5MTEwODNlNDVmNTgzY2FkYjA4YTYz
ZWM2ZjkwHhcNMjUwODIzMDYwMDM0WhcNMjUwODI0MDYwMDM0WjAzMTEwLwYDVQQD
Eyg1NzJiN2RlNzc0ZTk3ZjA3OTdmMTNjZGJlMDMyN2M4ZjNiOTMwYjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LhI3AbPwYvhi5NfXiyMSXzwD9Km
VEjKNlEtiJ5xcMXm8fB38+1+t/Zj3/xJ90r2AZvYAF3UW8GSrw4Dinq/0fB1P8UW
OLnO1WavmgrlJwzX8T5QPvhkzKxVsrzrOx+QoyWfeTHcd7wul8hX0vHbVtyX8T8B
t1SCxBhUoXn6SrO/2phZV2UFXHW0+Ns2JbrQXD1xYVBYLnCx6eUAYyaOx4cjP1Xk
Z3e/ZmRexSKAUsGHFKDEtXUYd6ZIS8bYw9DzWZauSKcnLVVmcX+GiV5vIS80V+Vn
G6s9mGNfG5zUaDzvf8Dw/SO/RgLN9w9mZjApBlYXgJV9IU8uNAt4AJyVnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcrfed06X8Hl/E82+AyfI87kwuaMB8GA1UdIwQY
MBaAFCrOEm+lgwkRCD5F9YPK2wimPsb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iNzNiZDItYWI5NC00YWMzLTkzYzQt
NmNiY2I3ZTNkOGQyLzEvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9iNzNiZDItYWI5NC00YWMzLTkzYzQtNmNiY2I3ZTNkOGQy
LzEvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0ErDNqQO
wcUj2Y/EJmYwsnPnl++R5wlKDygU67dkPVv+1nmmmXL9AMLlKjXy+bCRbyDhM9tg
bitD+YPRfgk8z308VZ8DDRgjT4tElnwqdvrXHeDmDJDpcdE8EzV0JqiSo3JquvzP
qoVAHUcUwTUyevm5J3G9xF0wpb6K8dbzosNh6/TerZbvrauSCnVQF6q1xWv8fDRF
9LbRuXwMdTikIasCTRfi5STq52VOJ6vZbM3deSpSn5sYsfQYbVbXQqhYoSMSd1/D
4mlpsdvVmY75vrLNblrB1ZhqcG5HgMjO7ATnxSFHhpTBCnLRHUbMFUJQWiDiRCq8
6nPHrPX/BkLK3A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:50 2025 by rpki-client