Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
File: k8JEvms6_7bU5Ufy4ePF6sGyarI.mft (raw, json)
Hash identifier: ybVTiEXOqAHJ91NKGdVTJuAFQSvlzHmEbToZmFSokpg=
Subject key identifier: 18:70:89:AD:57:D3:86:0A:09:F0:52:0B:9B:15:FA:03:1B:11:0C:17
Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
Certificate issuer: /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Certificate serial: 01987B9B9CB78E191414804BB72A8CEF8CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
Manifest number: 0D2D
Signing time: Tue 05 Aug 2025 19:00:52 +0000
Manifest this update: Tue 05 Aug 2025 19:00:52 +0000
Manifest next update: Wed 06 Aug 2025 19:00:52 +0000
Files and hashes: 1: W--ZKr5ij0BtuIXs5rvJyXt3d8w.roa (hash: GOtvHAAEQEDyzwtDsA3aSlZZHxuWNeU6Rlg4PiHPszw=)
2: k8JEvms6_7bU5Ufy4ePF6sGyarI.crl (hash: 4HvFGxB2EV0FtOzAQ7AAWnB+IxKPN6Mu9mBhHysyYDc=)
3: uG74c7I0myUDPmZfaSmD4tc9rV4.roa (hash: gFdqnU7r/rSwGKvKSrZSTL5gnMsfd1TYUTvAqWItcO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:9c:b7:8e:19:14:14:80:4b:b7:2a:8c:ef:8c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Validity
Not Before: Aug 5 19:00:52 2025 GMT
Not After : Aug 6 19:00:52 2025 GMT
Subject: CN=187089ad57d3860a09f0520b9b15fa031b110c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ef:e0:e0:12:94:2c:e7:fc:6e:7d:44:ee:4f:
3f:7f:ba:f3:3f:c4:71:70:09:4e:2e:95:b0:3f:1d:
20:d7:65:f2:42:d9:bd:51:57:38:89:81:e5:c1:fe:
d1:3c:95:42:4c:76:9b:8c:f8:76:d8:90:60:37:88:
47:82:85:8b:24:b0:30:c3:49:e7:e5:b2:1d:a0:62:
de:63:4a:93:34:07:01:e9:8a:92:87:0a:95:d5:6b:
c3:d0:53:4a:4a:2d:13:32:40:01:7e:7e:fe:dc:52:
9b:24:ff:d8:01:8d:b9:33:5a:d2:a2:3d:9e:94:df:
a7:b7:21:5e:f6:3c:0f:f7:a8:00:cb:77:16:c4:ed:
49:04:da:e8:33:6c:c1:c3:1b:a3:cf:a8:d8:bf:76:
18:42:0f:95:b6:f4:29:5c:96:f5:63:6e:44:8f:e6:
45:fa:96:28:82:e9:4c:9b:ae:e4:b6:43:19:e2:0d:
a5:66:da:aa:0f:47:38:55:69:e6:8b:5e:99:08:9b:
17:42:53:16:5f:f9:06:9c:e6:5d:6c:e0:d4:f5:d2:
9f:55:71:bb:b4:b7:88:2a:f3:ab:62:e7:aa:5c:be:
f5:94:20:2b:a2:47:df:c2:17:1e:42:96:da:b8:c3:
d8:a8:a2:f3:6d:3a:8d:d6:ba:b6:a3:5e:60:70:37:
d7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:70:89:AD:57:D3:86:0A:09:F0:52:0B:9B:15:FA:03:1B:11:0C:17
X509v3 Authority Key Identifier:
keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ca:77:0a:21:2f:71:21:cb:d2:a8:bc:eb:25:cc:ab:8d:16:
3b:e7:eb:db:08:9d:49:71:21:9d:fc:c5:27:fd:4e:c7:af:c8:
3a:b5:d8:52:66:76:93:b0:a5:a1:2e:aa:2e:fa:56:bc:2d:c6:
8b:08:5f:70:e2:2f:62:10:86:2a:44:b4:b2:4e:71:bc:f8:09:
d1:10:4d:3c:7b:f2:a4:e1:ab:f2:42:07:37:77:44:8d:fd:6e:
49:c1:40:a1:8a:67:5a:a9:e3:53:86:96:80:0a:42:53:56:2c:
63:80:3a:b5:bf:e0:ef:ea:05:4d:a3:9e:ae:52:41:d8:9e:e9:
b5:13:40:41:13:a0:02:91:f8:38:a5:f9:c8:25:99:5b:1b:59:
51:c9:1e:83:95:4e:ce:cc:40:70:de:33:3a:ea:16:1a:f6:49:
97:75:36:58:d8:0a:70:d2:ac:52:ca:5a:b2:41:5e:de:9e:c7:
9c:ad:87:3e:8c:af:55:cf:cc:b2:bd:e1:8d:97:22:37:ae:b9:
f5:6f:7a:7a:77:e7:e5:06:59:3c:d9:4b:1d:5a:15:58:92:ab:
21:a3:10:bf:af:9a:15:94:7f:1c:b5:75:eb:50:6f:a7:f0:5e:
28:e6:7d:ca:90:34:2e:65:ee:9d:5d:f9:8e:5a:89:94:f8:38:
43:6b:78:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:38:00 2025 by rpki-client