Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
File: RkVleaUXL8oI4EOwK7ly-3UDrq8.mft (raw, json)
Hash identifier: 6lYLzvu//DndY7xhO80kCihmHaPhfFMe0PrT6bjXYZc=
Subject key identifier: 5B:AD:3C:EB:07:FA:16:AA:CB:3C:7D:D5:09:E0:64:E9:1A:89:B5:DD
Authority key identifier: 46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
Certificate issuer: /CN=46456579a5172fca08e043b02bb972fb7503aeaf
Certificate serial: 01988BEA8C9FE2DD03170E6B4EE20E7E858D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
Manifest number: 1378
Signing time: Fri 08 Aug 2025 23:01:00 +0000
Manifest this update: Fri 08 Aug 2025 23:01:00 +0000
Manifest next update: Sat 09 Aug 2025 23:01:00 +0000
Files and hashes: 1: 6--mKTLhcJSvHElJeuoDt_lQE_Q.roa (hash: SXpjKVkVSr9zsLSxhubs4WsDg8DBpMmGqFFwLSfPmwo=)
2: RkVleaUXL8oI4EOwK7ly-3UDrq8.crl (hash: r4K61m9mIATjXcBgaXBiQkZ4mRFCobvn7xgFHpo0Avg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:8c:9f:e2:dd:03:17:0e:6b:4e:e2:0e:7e:85:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46456579a5172fca08e043b02bb972fb7503aeaf
Validity
Not Before: Aug 8 23:01:00 2025 GMT
Not After : Aug 9 23:01:00 2025 GMT
Subject: CN=5bad3ceb07fa16aacb3c7dd509e064e91a89b5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7f:1c:76:91:2d:17:07:f7:35:8d:5a:d6:85:
ca:0d:f2:7b:bd:88:a4:33:84:21:c2:70:d6:70:5c:
4f:f3:88:f2:a3:e6:6a:aa:f2:88:88:e8:e1:19:d1:
f1:4b:26:de:7f:29:c7:92:78:13:85:72:6e:24:bb:
b2:ef:88:a7:a5:05:db:0d:75:b1:c1:24:2c:01:c0:
fb:db:b0:8a:45:2f:cd:02:f1:47:97:0f:09:76:c9:
8b:05:4d:e0:be:88:31:80:e7:11:49:de:c9:38:2b:
1c:6c:e6:c7:ce:51:e1:77:69:e5:3d:c5:24:25:48:
62:0c:82:82:79:7f:72:68:bd:87:85:a3:a6:d5:8b:
7f:82:b3:ec:fb:39:ca:82:d1:cb:5b:7b:f8:e3:a5:
b5:fb:db:90:40:df:a4:86:c6:93:ca:4a:33:9b:bb:
8f:71:46:27:67:9a:f0:b0:25:0d:45:f4:99:9e:ba:
08:35:e9:95:a3:31:c1:48:0c:0b:f7:78:ff:4e:1f:
e4:ef:25:64:64:1f:0d:34:61:db:5b:d0:69:41:8c:
7f:ba:3c:f5:c3:19:40:aa:cc:2e:02:ef:f3:be:ae:
ef:b8:3f:a7:4d:97:43:51:70:49:11:71:74:a2:a7:
21:6a:d2:34:b8:e5:65:7d:a3:96:c4:47:47:07:73:
36:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AD:3C:EB:07:FA:16:AA:CB:3C:7D:D5:09:E0:64:E9:1A:89:B5:DD
X509v3 Authority Key Identifier:
keyid:46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:cb:12:26:77:28:d6:8e:46:7f:f2:5d:3c:8b:7b:41:ad:eb:
b0:2b:03:84:78:6e:a1:ea:7b:f4:77:46:51:bb:f6:ef:fe:75:
b0:48:de:7c:2d:a4:d0:23:da:ba:62:04:65:43:e9:89:2d:9d:
2d:1a:47:a5:cf:b7:c0:e2:49:cc:55:1e:84:f3:16:7e:cb:31:
f4:d2:50:fe:c4:a7:6d:18:c8:cc:a0:65:a8:f3:21:f7:7e:cd:
c5:05:c9:08:4a:23:16:7e:e4:aa:06:f6:19:41:19:8c:5e:6a:
b4:54:40:d6:d8:5b:09:1b:f2:ae:7b:e9:d4:f2:d6:ed:d2:7b:
5a:1b:6f:3f:02:8e:66:c1:8d:77:2f:85:08:0a:71:75:4c:fe:
30:ce:fd:91:40:ee:da:2f:ba:0a:77:80:0a:ca:59:ff:4c:f3:
36:a5:68:ab:58:41:b7:3e:cf:e0:0c:59:43:16:56:ff:98:94:
34:ea:32:7f:a4:80:56:43:6e:1c:db:c2:bb:48:2a:cb:f5:6f:
7b:3a:74:24:1a:1c:18:c7:fa:bb:3d:ba:8e:72:35:29:72:0f:
b0:c0:3f:34:92:54:f4:66:d3:31:6d:2e:0f:f1:18:d2:aa:fb:
e0:fd:c4:03:bd:c1:f0:0b:b0:d6:b2:c6:f3:53:ae:c1:15:fb:
cb:53:79:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:24 2025 by rpki-client