Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json)
Hash identifier: FMUcCY38GzWD4EjZaU9SGLm/5SDbCaoR7fCGaht4CWU=
Subject key identifier: 64:9B:FB:78:B9:45:22:A4:C3:AD:AD:AE:33:EE:83:55:97:14:1E:F2
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 01988A3303B7264DA4ABBE9E6B496B41C603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
Manifest number: 0DE2
Signing time: Fri 08 Aug 2025 15:00:55 +0000
Manifest this update: Fri 08 Aug 2025 15:00:55 +0000
Manifest next update: Sat 09 Aug 2025 15:00:55 +0000
Files and hashes: 1: 5pnBu3tf1gh9PcNOyoNyWCndFPU.roa (hash: aDoSOawNOT1pzaKswy1pRUEDLgJ0J0KdcXZxORUFm5g=)
2: JlZMu6ELMWjh5VfPR-EMHwwwoJI.roa (hash: rcX300zaEAsELfD8QJxpkD3Bk9B/Y8LQIcz2cA6/7q4=)
3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: xUuU/Cm/rP5aVYZIOsOZBJEaixHqZnbhWPtaGl2eUto=)
4: bzccdE_nNPzPnSlliioVj-7hRew.roa (hash: 4glX8OcaCyXvmeuybZ7zpnmmIAAdCSrGViopmHl3Q8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:33:03:b7:26:4d:a4:ab:be:9e:6b:49:6b:41:c6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: Aug 8 15:00:55 2025 GMT
Not After : Aug 9 15:00:55 2025 GMT
Subject: CN=649bfb78b94522a4c3adadae33ee835597141ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:95:66:b1:18:0f:82:b9:96:b9:66:4c:60:
4c:b0:3c:bf:3d:10:6c:e0:bc:d1:72:2b:ae:81:62:
b2:22:b2:3b:60:d8:66:e7:51:fb:66:38:64:01:03:
51:7f:53:c4:32:ba:a5:02:11:5a:e4:2a:10:54:43:
39:f2:b0:a3:b6:db:2a:f9:8d:cb:ca:7a:12:7e:78:
21:e1:e9:30:78:af:8e:55:fc:7d:a0:02:ce:f8:cf:
e6:fb:e7:c8:9a:5e:10:17:d6:26:c3:b1:61:9b:b4:
ad:0f:e8:61:d7:02:db:f0:c0:8c:cb:0a:22:25:be:
ab:46:a4:2e:e0:f1:45:8b:49:d5:cc:b7:10:aa:ed:
cf:ed:f3:80:9e:0c:6d:d9:a2:07:06:1e:90:4e:15:
7c:cc:52:fb:6c:ee:f9:92:e0:13:42:1e:5e:9f:25:
02:5a:79:5f:40:4d:83:2d:23:ad:fd:fa:cf:40:ea:
aa:19:e1:25:83:5c:62:49:5f:10:10:d7:dc:17:80:
53:3a:39:17:7d:39:ba:70:79:06:6c:39:75:55:62:
9a:57:d7:76:77:34:78:41:8b:6d:70:80:f8:bd:32:
37:b7:f4:be:7a:f0:0b:a0:c9:5a:d2:ea:75:58:59:
75:d2:e8:85:78:c0:5e:8c:bc:7e:54:f6:52:36:f2:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9B:FB:78:B9:45:22:A4:C3:AD:AD:AE:33:EE:83:55:97:14:1E:F2
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f3:8a:71:5d:5c:83:ed:d6:bb:26:56:ac:be:06:09:74:90:
39:b8:7c:b9:df:fa:82:84:c4:89:f2:66:f0:92:22:ea:95:0b:
df:69:ad:d3:95:26:10:66:55:60:e9:e4:27:bd:34:10:0a:21:
78:fb:da:10:58:1e:43:d9:c5:a0:66:be:99:aa:ab:06:07:1d:
7c:49:87:5f:5f:95:1a:0d:1d:b7:2e:c1:97:49:16:c2:4d:44:
a8:fa:e4:79:e8:e7:d3:4d:c5:fa:a1:f7:da:3f:36:8b:96:1b:
44:94:32:e5:74:68:8a:44:e7:73:a3:d2:54:46:44:3b:76:da:
87:47:55:53:c0:37:04:6a:f8:24:44:24:70:01:93:29:80:2f:
4e:b1:00:72:25:45:3a:2d:e7:15:df:aa:ce:57:43:45:6f:54:
0a:9e:ea:e6:7c:b6:4c:8f:90:bd:e8:2d:72:db:95:5b:f1:50:
f7:c6:20:ab:9a:01:63:ae:8d:fa:f6:54:2b:cb:30:6c:08:cb:
d2:31:02:b1:77:12:c3:f0:4a:41:19:a5:f4:82:49:05:d5:b6:
f6:ed:0d:13:4d:73:a9:d0:42:dd:d7:76:a6:3e:82:d4:00:c8:
34:62:5a:1a:f8:b6:3f:c0:35:e8:c0:f3:80:cc:ad:02:64:49:
dd:c2:7e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:19:34 2025 by rpki-client