Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
File: kwHqBZY8l1byjuLpi488xHncn1g.mft (raw, json)
Hash identifier: /m9+aDqG/vw/K6M+FafYc3+F3HqkkHBqWUpuIeEmKWs=
Subject key identifier: 53:C2:2C:EE:58:68:1E:07:2A:1A:6D:65:2B:C8:3A:4C:E7:5B:15:38
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 0197BAB45D863E7C64AA49C8A1F4DD9905C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 08:01:11 +0000
Manifest this update: Sun 29 Jun 2025 08:01:11 +0000
Manifest next update: Mon 30 Jun 2025 08:01:11 +0000
Files and hashes: 1: TVR9Wcx95L9uIbI7vmRK3_ppXuA.roa (hash: FBGg+DHw7jOc497O265+HPovAlPdSEs0qwJnAdItW6I=)
2: UvYnHc7rFlBw3j4tqyHKN3v104E.roa (hash: 6QDgTXlr47CFI8bSc1FSdC5Ii7Qu4oH4gM2ZxRc6gQc=)
3: bdOSuRKRee1uOsbVObRylNDB0a0.roa (hash: gjO8qJZwFaEvDikQnhsOULa/ARdOkiQLGR4fYx/iUVY=)
4: kwHqBZY8l1byjuLpi488xHncn1g.crl (hash: 9WWnqDNVvsuwrySy1W8UHodh1bqgbhPXJOzwJGu9H28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:5d:86:3e:7c:64:aa:49:c8:a1:f4:dd:99:05:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Jun 29 08:01:11 2025 GMT
Not After : Jun 30 08:01:11 2025 GMT
Subject: CN=53c22cee58681e072a1a6d652bc83a4ce75b1538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:87:ab:93:9c:75:aa:06:21:d2:29:e3:2e:3f:
c6:48:e5:b2:16:d2:68:63:ec:d4:5d:a7:d6:1a:8e:
c1:c1:19:6a:e2:c5:95:56:76:ee:30:23:af:9d:f9:
63:4d:79:ee:cd:cb:10:48:63:5b:59:e0:c5:0f:2f:
13:d1:a8:c5:c2:91:8f:e7:19:11:f8:55:f6:d2:b5:
6b:14:9a:d3:3d:db:a7:26:06:87:aa:2e:f1:18:ba:
dc:35:a3:2e:07:cd:7e:7a:09:fa:e4:a2:5a:a4:b3:
f0:86:e1:2a:fd:bd:d8:c8:31:58:4a:0e:86:8a:d1:
33:24:12:3c:fd:74:d5:96:0e:ee:6a:9c:d1:df:77:
47:ce:2b:6e:3a:42:a3:cb:84:1f:4d:d6:ae:36:3e:
1d:71:cb:2c:2d:00:70:12:20:20:b9:b6:ed:1a:de:
29:f7:ed:bb:a7:85:72:f2:fc:e5:38:b4:a7:e8:b2:
95:98:e6:8a:cf:90:e1:31:40:c6:41:7b:41:4b:5f:
33:ad:c7:4d:3d:06:a7:d2:99:17:3d:b5:66:30:68:
9c:57:df:fb:34:ed:25:b7:f1:1a:3e:53:bb:fb:09:
98:1e:3d:5e:fb:44:f4:d6:d8:aa:47:d6:e0:1e:f9:
10:05:09:dd:df:96:e4:a0:46:87:0d:e6:d2:06:8a:
38:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C2:2C:EE:58:68:1E:07:2A:1A:6D:65:2B:C8:3A:4C:E7:5B:15:38
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:39:cc:4b:24:91:9e:51:ac:39:e6:33:5e:95:b5:a7:32:e1:
19:49:f9:bb:7a:4a:5a:da:34:e3:2c:c1:3f:db:82:ad:6d:59:
40:19:36:18:76:bb:5b:00:2e:59:b5:6e:91:67:92:14:0c:c8:
74:8e:e6:2f:e7:8a:77:b1:7e:e9:e8:e0:7c:e6:80:b7:c9:f9:
d2:ef:f9:ff:0e:c0:94:ae:2a:56:d2:7b:7a:2f:3b:e6:aa:41:
e6:0a:36:52:cf:04:0d:a2:ea:1e:be:cf:48:14:fd:01:05:dc:
39:c0:a5:b3:85:18:2f:90:f5:35:5a:e3:ba:3e:24:5d:42:e7:
5b:c8:fe:4d:34:98:3f:bb:02:ad:19:fa:c7:1b:94:32:ea:ac:
75:6c:d4:e4:75:91:82:82:f4:6a:37:ad:72:cb:07:45:77:35:
41:2f:e1:e6:98:73:cb:81:58:a5:a9:68:95:aa:18:85:19:df:
68:03:db:ef:ce:89:3b:0e:98:14:cd:02:75:15:be:1e:db:b7:
db:ec:1b:ff:c2:af:da:fe:31:7c:c9:d6:09:52:60:16:ea:cd:
36:67:76:b3:b9:82:bf:16:80:6b:2f:9a:fd:f6:8b:5a:13:59:
80:92:0d:87:5b:fc:78:86:b1:f9:5c:c4:ad:31:9a:a1:d6:2b:
46:04:45:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6tF2GPnxkqknIofTdmQXAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMDFlYTA1OTYzYzk3NTZmMjhlZTJlOThiOGYzY2M0Nzlk
YzlmNTgwHhcNMjUwNjI5MDgwMTExWhcNMjUwNjMwMDgwMTExWjAzMTEwLwYDVQQD
Eyg1M2MyMmNlZTU4NjgxZTA3MmExYTZkNjUyYmM4M2E0Y2U3NWIxNTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Ierk5x1qgYh0injLj/GSOWyFtJo
Y+zUXafWGo7BwRlq4sWVVnbuMCOvnfljTXnuzcsQSGNbWeDFDy8T0ajFwpGP5xkR
+FX20rVrFJrTPdunJgaHqi7xGLrcNaMuB81+egn65KJapLPwhuEq/b3YyDFYSg6G
itEzJBI8/XTVlg7uapzR33dHzituOkKjy4QfTdauNj4dccssLQBwEiAgubbtGt4p
9+27p4Vy8vzlOLSn6LKVmOaKz5DhMUDGQXtBS18zrcdNPQan0pkXPbVmMGicV9/7
NO0lt/EaPlO7+wmYHj1e+0T01tiqR9bgHvkQBQnd35bkoEaHDebSBoo40QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPCLO5YaB4HKhptZSvIOkznWxU4MB8GA1UdIwQY
MBaAFJMB6gWWPJdW8o7i6YuPPMR53J9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lYmY2Y2ItYTc3OS00NjRmLThiZWUt
OGYwOGUwMjcyZGY4LzEva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9lYmY2Y2ItYTc3OS00NjRmLThiZWUtOGYwOGUwMjcyZGY4
LzEva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTnMSySR
nlGsOeYzXpW1pzLhGUn5u3pKWto04yzBP9uCrW1ZQBk2GHa7WwAuWbVukWeSFAzI
dI7mL+eKd7F+6ejgfOaAt8n50u/5/w7AlK4qVtJ7ei875qpB5go2Us8EDaLqHr7P
SBT9AQXcOcCls4UYL5D1NVrjuj4kXULnW8j+TTSYP7sCrRn6xxuUMuqsdWzU5HWR
goL0ajetcssHRXc1QS/h5phzy4FYpalolaoYhRnfaAPb786JOw6YFM0CdRW+Htu3
2+wb/8Kv2v4xfMnWCVJgFurNNmd2s7mCvxaAay+a/faLWhNZgJINh1v8eIax+VzE
rTGaodYrRgRFrQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:28:51 2025 by rpki-client