Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
File: k6EPqeyo7I3dXhJUJkOOjfjIerw.mft (raw, json)
Hash identifier: gt9MqC515F28+aOaqwhr0YAW4T4FQw9/yLQMQqIl2lw=
Subject key identifier: 15:D9:AF:52:17:EB:56:E3:9B:80:FA:37:40:A7:89:65:0E:98:61:D0
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Certificate issuer: /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial: 01989147700D019DBE109D35C991A04F88A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 00:00:34 +0000
Manifest this update: Sun 10 Aug 2025 00:00:34 +0000
Manifest next update: Mon 11 Aug 2025 00:00:34 +0000
Files and hashes: 1: 0eBNXDs625wWt3eSViaFroIf-H4.roa (hash: GT9Q8SAk5DHsclX/025XYQZy9SsVDxGpUQis2WozehI=)
2: k4iKGO7UoCQelG-VE7Zb37GDHAA.roa (hash: CfgOFR+eRUjr0ITmkPf/YrPGm8/0mSRvig8pVJqGkMU=)
3: k6EPqeyo7I3dXhJUJkOOjfjIerw.crl (hash: QZUoQ9Adke2Sr71WxsGdEsuqacaUUJKrzeokzJkkdjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:47:70:0d:01:9d:be:10:9d:35:c9:91:a0:4f:88:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Validity
Not Before: Aug 10 00:00:34 2025 GMT
Not After : Aug 11 00:00:34 2025 GMT
Subject: CN=15d9af5217eb56e39b80fa3740a789650e9861d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:66:1f:7d:a7:62:0d:9a:32:5f:54:25:e9:
74:8c:16:35:de:cb:1f:d5:a7:6a:35:c9:f1:15:4d:
06:2d:b5:c0:9e:fe:a5:d2:e5:ed:51:92:db:c7:b4:
84:50:12:5d:d2:05:bd:ea:f4:17:4b:33:88:20:78:
a9:26:90:ea:15:b7:14:b3:9e:ef:3e:6b:6c:f3:c5:
c5:61:da:29:42:14:3d:ad:35:33:a4:7b:ed:2e:c0:
0c:84:04:a6:81:f9:57:4a:71:be:83:18:c8:69:04:
2b:e1:3a:28:6d:81:6e:82:3f:9a:b1:91:22:0b:2a:
89:6c:9f:bf:48:9a:bd:28:7a:1a:55:50:ff:8f:3d:
f7:5a:b3:cf:d9:89:86:cc:39:e4:38:e1:73:6f:7a:
1b:4a:44:4b:a9:01:60:c6:13:5d:16:4b:01:9e:7f:
d7:59:35:3c:19:85:92:5b:29:95:93:54:26:0c:2f:
96:85:a3:fb:f9:19:02:d7:78:35:31:68:60:0a:d9:
af:b2:43:a9:ce:16:15:14:88:40:3c:aa:01:32:6f:
8b:56:76:2f:ef:8b:2b:e8:61:e3:c9:60:a1:d2:3d:
45:f3:95:68:3c:90:fb:26:69:b4:88:27:40:a5:72:
3c:26:3c:e7:5e:4b:a5:a4:6a:bd:22:a9:7a:97:03:
b9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D9:AF:52:17:EB:56:E3:9B:80:FA:37:40:A7:89:65:0E:98:61:D0
X509v3 Authority Key Identifier:
keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:82:05:b0:3f:be:28:c4:93:23:05:f0:78:c6:25:00:42:f4:
cc:f5:5a:51:32:6a:19:3e:7a:cc:1f:27:ab:8d:54:f8:a7:22:
e1:58:55:3f:51:02:3e:b6:f0:34:c0:17:c7:ab:cf:f7:06:45:
d2:51:7e:f3:cf:07:16:26:8d:c2:7e:bf:19:ba:78:49:f5:c8:
fc:26:bd:a4:c6:f4:5a:bd:79:65:5d:9b:30:a0:14:94:3b:d8:
82:1f:2a:d3:54:47:d3:11:aa:db:90:cd:f5:e7:3f:8e:f8:14:
95:18:fa:b7:87:d2:7e:12:26:c7:1f:e0:7c:6f:7e:29:2e:bd:
bd:e8:76:1d:ce:b5:db:95:47:88:a1:3f:02:9c:91:49:ec:00:
0e:f6:49:fd:cf:22:41:80:31:a8:d9:f0:0d:fd:14:b9:40:c5:
dd:a1:dc:b3:cb:2f:f7:45:90:a6:90:5d:17:fd:b0:58:27:50:
24:c5:b0:9e:3a:59:6e:7d:11:6c:9c:76:67:ad:9f:a2:cd:62:
8c:fc:65:dd:d4:50:65:d6:32:8d:48:73:59:5e:35:28:c7:93:
a1:6f:8b:36:37:42:d2:94:61:2a:0b:3a:97:8c:61:5f:a9:ca:
e1:f5:cc:5b:bb:9d:9d:0a:71:e2:08:1e:80:a1:d1:4c:33:3d:
63:6d:47:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:35:01 2025 by rpki-client