Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
File: sK_tekcdesOF47k2Wk6WASoBwJU.mft (raw, json)
Hash identifier: LJTXs1B5NOp9EPiGFE1zvosafaXjdkZejlufFvh+vC8=
Subject key identifier: D6:96:D7:9B:DF:5D:97:2F:54:8E:1E:98:9B:30:C0:2B:67:C3:11:E6
Authority key identifier: B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
Certificate issuer: /CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Certificate serial: 019872CF8009772EFB182563F52B55F635EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
Manifest number: 0D77
Signing time: Mon 04 Aug 2025 02:00:57 +0000
Manifest this update: Mon 04 Aug 2025 02:00:57 +0000
Manifest next update: Tue 05 Aug 2025 02:00:57 +0000
Files and hashes: 1: C3xtGxxSgp_Plz4Lpk-Ue-Bhuno.roa (hash: so9nDoVUdg/Us7gUe7/dKOyUe77DOJSLVO4IrdFOjZ8=)
2: sK_tekcdesOF47k2Wk6WASoBwJU.crl (hash: qgq8obMqnPrGFlTfCfABZQMy0rtj9p4aefLCwlu7cK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:80:09:77:2e:fb:18:25:63:f5:2b:55:f6:35:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Validity
Not Before: Aug 4 02:00:57 2025 GMT
Not After : Aug 5 02:00:57 2025 GMT
Subject: CN=d696d79bdf5d972f548e1e989b30c02b67c311e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:08:d5:8a:c4:5c:22:35:d8:c4:62:43:d7:6d:
e3:22:39:67:84:71:81:63:87:81:ad:3d:81:af:a4:
3f:00:ee:bb:38:90:5d:0b:9b:a7:25:2e:23:04:d9:
8b:75:40:4c:7b:cf:38:bd:f6:81:e5:bc:ac:69:53:
51:e7:64:f1:00:23:4f:ac:4d:47:4a:ed:cf:e0:33:
f1:2b:2d:35:cd:2d:57:11:92:1c:3b:1c:88:6c:11:
56:de:03:69:aa:47:e2:63:96:f9:91:31:86:d4:aa:
8e:5f:31:46:9a:ee:f5:8c:4e:b4:4f:2c:77:c4:2e:
a9:25:0a:6f:e6:06:7e:4e:e2:a6:25:e1:f8:7a:73:
28:dc:2b:7a:23:dc:17:9b:9a:f0:2e:b3:a3:76:38:
60:b6:0d:24:98:b0:6b:fa:d4:39:29:73:d7:4c:e1:
c5:2e:57:d1:6e:85:77:c9:74:9e:d0:cd:dc:12:b2:
23:0c:1e:3f:d5:b1:02:9f:e6:e4:ca:e2:7a:3b:d4:
4c:bd:95:49:bb:e9:86:32:f4:e8:75:ce:31:e5:ab:
4d:54:01:b8:c4:21:a6:fd:03:fb:97:81:7d:9f:19:
ce:b6:e3:41:b2:ea:8d:5c:5f:38:22:a8:d8:d2:28:
cc:f0:1b:66:1d:42:2d:db:63:53:c0:17:25:21:60:
7f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:96:D7:9B:DF:5D:97:2F:54:8E:1E:98:9B:30:C0:2B:67:C3:11:E6
X509v3 Authority Key Identifier:
keyid:B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:be:10:e8:57:4f:7f:c1:ca:8e:d9:f2:c7:d1:66:fc:f1:d0:
98:2a:05:c1:24:96:44:8d:29:29:60:f4:a2:86:55:45:75:1b:
02:3c:f0:0e:a0:1b:ce:4c:00:63:b9:e8:20:b5:5d:7f:c1:9f:
05:81:b0:e2:38:e6:91:22:92:28:2e:7c:54:1c:af:7f:03:8f:
57:12:53:07:71:07:c2:23:06:b6:08:cc:72:9c:d6:2c:45:f4:
0a:52:00:06:fa:51:23:38:e7:85:74:69:a7:5a:ad:97:6c:fa:
ed:c7:51:89:ee:c1:37:bc:9d:35:fd:b8:1f:e9:97:f8:e9:76:
a9:6b:9a:51:ac:73:9f:15:a9:f2:d0:b4:de:23:70:16:4f:3f:
38:51:0e:a9:5d:0e:ce:13:fa:e0:7e:78:b0:9c:63:5d:c8:bc:
6a:37:7e:6a:7d:68:82:b3:54:2a:0d:e5:ca:df:11:cf:96:58:
42:81:7a:f1:5c:73:e5:23:62:8f:9c:fe:07:c0:bd:b5:6d:93:
a7:02:2e:3c:2f:6f:fa:c8:c2:06:99:0c:45:ec:fd:27:52:c5:
93:cd:95:5b:40:75:fb:bf:f9:20:4a:fc:07:af:a4:0b:47:4c:
9f:6b:85:3a:d6:89:15:03:64:f7:e8:2b:9c:52:7e:c9:5d:1c:
41:ec:98:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz4AJdy77GCVj9StV9jXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYWZlZDdhNDcxZDdhYzM4NWUzYjkzNjVhNGU5NjAxMmEw
MWMwOTUwHhcNMjUwODA0MDIwMDU3WhcNMjUwODA1MDIwMDU3WjAzMTEwLwYDVQQD
EyhkNjk2ZDc5YmRmNWQ5NzJmNTQ4ZTFlOTg5YjMwYzAyYjY3YzMxMWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQjVisRcIjXYxGJD123jIjlnhHGB
Y4eBrT2Br6Q/AO67OJBdC5unJS4jBNmLdUBMe884vfaB5bysaVNR52TxACNPrE1H
Su3P4DPxKy01zS1XEZIcOxyIbBFW3gNpqkfiY5b5kTGG1KqOXzFGmu71jE60Tyx3
xC6pJQpv5gZ+TuKmJeH4enMo3Ct6I9wXm5rwLrOjdjhgtg0kmLBr+tQ5KXPXTOHF
LlfRboV3yXSe0M3cErIjDB4/1bECn+bkyuJ6O9RMvZVJu+mGMvTodc4x5atNVAG4
xCGm/QP7l4F9nxnOtuNBsuqNXF84IqjY0ijM8BtmHUIt22NTwBclIWB/ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaW15vfXZcvVI4emJswwCtnwxHmMB8GA1UdIwQY
MBaAFLCv7XpHHXrDheO5NlpOlgEqAcCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0tfdGVrY2Rlc09GNDdrMldrNldBU29Cd0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82ZjY2MTMtZTc5OC00N2Y0LWIzMTMt
MzA0YTU0ZThjMjY0LzEvc0tfdGVrY2Rlc09GNDdrMldrNldBU29Cd0pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82ZjY2MTMtZTc5OC00N2Y0LWIzMTMtMzA0YTU0ZThjMjY0
LzEvc0tfdGVrY2Rlc09GNDdrMldrNldBU29Cd0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr74Q6FdP
f8HKjtnyx9Fm/PHQmCoFwSSWRI0pKWD0ooZVRXUbAjzwDqAbzkwAY7noILVdf8Gf
BYGw4jjmkSKSKC58VByvfwOPVxJTB3EHwiMGtgjMcpzWLEX0ClIABvpRIzjnhXRp
p1qtl2z67cdRie7BN7ydNf24H+mX+Ol2qWuaUaxznxWp8tC03iNwFk8/OFEOqV0O
zhP64H54sJxjXci8ajd+an1ogrNUKg3lyt8Rz5ZYQoF68Vxz5SNij5z+B8C9tW2T
pwIuPC9v+sjCBpkMRez9J1LFk82VW0B1+7/5IEr8B6+kC0dMn2uFOtaJFQNk9+gr
nFJ+yV0cQeyYAg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:56 2025 by rpki-client