Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
File: k--iv5CiNyiFJyfxJu3mUobDymc.mft (raw, json)
Hash identifier: MrnCHYB8QLo5Q89WIfUNF+Un1X6+4u4KliPqSSTnIMY=
Subject key identifier: 7A:B1:23:42:6E:E3:2F:56:F6:6A:34:47:DA:08:30:E2:5D:F9:26:C1
Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
Certificate issuer: /CN=93efa2bf90a23728852727f126ede65286c3ca67
Certificate serial: 0197B745814C31D357259EAE81A49B86C96E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
Manifest number: 0368
Signing time: Sat 28 Jun 2025 16:01:14 +0000
Manifest this update: Sat 28 Jun 2025 16:01:14 +0000
Manifest next update: Sun 29 Jun 2025 16:01:14 +0000
Files and hashes: 1: 7kHtWJwf55jOxnVlDwQ_Pz_QbDo.roa (hash: 5xzI11cU+vDKS4SWJ2VW5NiWSSXP8uOI0oJRmaU/700=)
2: 7t7MlmcK5nHqyL8qD10NpjUf4kU.roa (hash: 9aqRdXb5dOWxjBFXvCoD8FGSfMTH7XxxsevlkYrw8og=)
3: k--iv5CiNyiFJyfxJu3mUobDymc.crl (hash: X4VaMDb7c+CBb/OaYatpfkuQUelsp8FFRD/3kdt0x0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:81:4c:31:d3:57:25:9e:ae:81:a4:9b:86:c9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67
Validity
Not Before: Jun 28 16:01:14 2025 GMT
Not After : Jun 29 16:01:14 2025 GMT
Subject: CN=7ab123426ee32f56f66a3447da0830e25df926c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:2b:f3:9c:2f:ab:a7:19:54:8e:27:8c:3d:
c9:ad:34:b2:52:af:06:db:62:ad:5a:cf:1b:63:73:
01:0f:a0:d3:7e:4c:65:28:0f:6c:8d:b6:46:b5:dc:
c4:ef:f8:21:ef:f5:b0:82:b0:ad:29:2d:02:ee:65:
49:6d:ec:89:14:8c:13:ad:76:3e:d3:31:6a:fd:d0:
cf:16:eb:85:c5:57:b8:84:86:36:09:a3:52:bd:5d:
43:a9:2e:02:e7:e2:26:bf:a7:e4:05:14:e1:3c:4e:
70:6f:ca:12:83:3c:14:42:67:65:c6:7b:dc:cc:99:
f4:aa:87:13:5d:83:95:88:b6:03:f8:d3:85:d2:74:
4d:f5:a8:86:77:4e:85:ef:4b:ef:30:ce:d0:c8:c8:
cf:5b:e3:8e:45:6b:47:a8:c6:1c:2f:d2:0a:f9:3b:
7f:57:9c:04:6b:2a:05:1c:89:b6:e0:8a:96:29:2a:
f5:6c:7a:19:fe:c9:b8:48:90:89:56:65:4a:4d:0e:
bd:52:a6:fb:7e:e9:8f:0c:da:bc:37:c5:f1:b1:5f:
e0:99:54:d9:f5:38:85:f9:a3:cf:8e:5c:48:2b:60:
54:90:f6:8c:4a:03:b9:4f:18:f1:1c:7c:64:94:60:
bb:3c:a0:55:52:09:b9:71:92:a5:96:d3:44:6f:07:
12:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B1:23:42:6E:E3:2F:56:F6:6A:34:47:DA:08:30:E2:5D:F9:26:C1
X509v3 Authority Key Identifier:
keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f3:cc:1f:3e:a1:34:29:33:51:55:3c:01:ee:89:27:74:7d:
e3:07:c7:94:03:4c:a7:6d:47:61:e7:6b:ee:0b:25:51:51:92:
28:6e:50:b9:88:4f:4d:90:03:4e:96:cc:8b:ce:13:07:17:6f:
67:b7:bd:8a:ee:f3:b0:ec:63:10:c2:54:70:b2:7e:23:09:32:
61:f2:80:37:43:fb:6b:34:d9:98:54:a6:e3:b5:de:cd:23:c6:
5a:16:45:22:b8:a1:c4:d1:6b:e5:fa:1c:dd:1a:62:43:69:d4:
29:a4:c7:9f:91:0c:06:7d:d9:7d:c8:f0:45:0a:38:40:3e:4c:
6d:15:16:20:0f:2e:e6:01:16:99:55:b3:63:cb:26:4a:1c:7f:
c9:e9:86:81:8a:7d:ad:11:ab:c2:ec:d8:16:88:58:8f:be:4a:
37:a4:08:ea:9c:eb:67:45:38:af:dd:a8:69:e7:e2:86:eb:7d:
fa:2d:63:8e:f1:5f:9c:63:f9:e8:82:14:e8:48:16:4d:ab:51:
56:37:a7:b0:66:47:c5:83:95:7b:53:52:ea:96:5b:e0:64:1a:
fc:d5:8a:ab:bd:19:a8:4f:b7:6f:8b:34:38:c6:a9:e3:ce:42:
0f:5c:97:8a:0c:9c:22:1e:80:8e:f4:8d:d3:7e:5d:f0:c9:c4:
97:5c:e5:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RYFMMdNXJZ6ugaSbhsluMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZWZhMmJmOTBhMjM3Mjg4NTI3MjdmMTI2ZWRlNjUyODZj
M2NhNjcwHhcNMjUwNjI4MTYwMTE0WhcNMjUwNjI5MTYwMTE0WjAzMTEwLwYDVQQD
Eyg3YWIxMjM0MjZlZTMyZjU2ZjY2YTM0NDdkYTA4MzBlMjVkZjkyNmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd8r85wvq6cZVI4njD3JrTSyUq8G
22KtWs8bY3MBD6DTfkxlKA9sjbZGtdzE7/gh7/WwgrCtKS0C7mVJbeyJFIwTrXY+
0zFq/dDPFuuFxVe4hIY2CaNSvV1DqS4C5+Imv6fkBRThPE5wb8oSgzwUQmdlxnvc
zJn0qocTXYOViLYD+NOF0nRN9aiGd06F70vvMM7QyMjPW+OORWtHqMYcL9IK+Tt/
V5wEayoFHIm24IqWKSr1bHoZ/sm4SJCJVmVKTQ69Uqb7fumPDNq8N8XxsV/gmVTZ
9TiF+aPPjlxIK2BUkPaMSgO5TxjxHHxklGC7PKBVUgm5cZKlltNEbwcSEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqxI0Ju4y9W9mo0R9oIMOJd+SbBMB8GA1UdIwQY
MBaAFJPvor+QojcohScn8Sbt5lKGw8pnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hOTJlYjItYjJiYS00ZWZkLWJkMDkt
NmFiYjFjY2I2MTUzLzEvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hOTJlYjItYjJiYS00ZWZkLWJkMDktNmFiYjFjY2I2MTUz
LzEvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/PMHz6h
NCkzUVU8Ae6JJ3R94wfHlANMp21HYedr7gslUVGSKG5QuYhPTZADTpbMi84TBxdv
Z7e9iu7zsOxjEMJUcLJ+IwkyYfKAN0P7azTZmFSm47XezSPGWhZFIrihxNFr5foc
3RpiQ2nUKaTHn5EMBn3ZfcjwRQo4QD5MbRUWIA8u5gEWmVWzY8smShx/yemGgYp9
rRGrwuzYFohYj75KN6QI6pzrZ0U4r92oaefihut9+i1jjvFfnGP56IIU6EgWTatR
VjensGZHxYOVe1NS6pZb4GQa/NWKq70ZqE+3b4s0OMap485CD1yXigycIh6AjvSN
035d8MnEl1zl8Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:30:40 2025 by rpki-client