Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
File: k7Hqu-XuDASWgOKryVU0OexkPAs.mft (raw, json)
Hash identifier: DWqWf8HcJ8w3KmOjSTnMZRFZQS6sDnAsPZkjEqyvgmo=
Subject key identifier: 2B:53:BF:46:35:8F:DB:8A:D2:F9:B1:2E:3F:81:66:BA:62:B1:D0:06
Authority key identifier: 93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
Certificate issuer: /CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Certificate serial: 019887D720686E654052293BE77E5E177DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
Manifest number: 0FD4
Signing time: Fri 08 Aug 2025 04:01:19 +0000
Manifest this update: Fri 08 Aug 2025 04:01:19 +0000
Manifest next update: Sat 09 Aug 2025 04:01:19 +0000
Files and hashes: 1: PQ_yvQsZl8a1BJZelz18O8KYziI.roa (hash: a9+EgNIf1zhqdc2reiY/K2IYhXxlOzKE9JswUeuIGNI=)
2: k7Hqu-XuDASWgOKryVU0OexkPAs.crl (hash: lpVB4/xPie5QMEjvePaHFbef4m0K0fYXe3mpIvxqntE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:d7:20:68:6e:65:40:52:29:3b:e7:7e:5e:17:7d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Validity
Not Before: Aug 8 04:01:19 2025 GMT
Not After : Aug 9 04:01:19 2025 GMT
Subject: CN=2b53bf46358fdb8ad2f9b12e3f8166ba62b1d006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:b6:64:6a:a4:7c:a9:48:2f:85:7f:3a:cb:
ae:4f:a5:a8:ca:88:54:c2:80:1a:71:57:f6:49:a3:
a3:af:d0:e8:fe:05:7b:23:21:5c:e0:f8:b2:9b:9d:
88:44:0c:4d:2d:6b:9e:93:0d:a5:3e:5d:64:c1:e1:
27:38:f1:65:90:9d:c1:99:1b:26:da:4b:d0:05:d4:
2f:1f:b6:d6:0b:8a:71:a9:c1:27:47:00:c4:3c:fc:
be:ca:5c:ae:2d:ff:eb:2a:57:95:f5:50:99:39:e6:
59:55:0c:0f:b1:e0:6e:15:1d:d4:76:23:eb:33:c8:
47:06:cd:41:2f:1a:98:0e:83:02:b7:54:15:de:06:
8d:d4:55:50:51:27:0f:0c:ed:23:0f:03:6d:3d:4e:
29:12:70:67:a1:4f:ab:79:c5:36:1a:bc:2a:8a:ad:
3a:c1:8f:19:90:60:39:63:78:50:85:77:c8:ea:4b:
a6:ee:25:42:f7:b0:08:37:5f:c8:b0:29:c4:d5:fa:
a6:f7:0e:7a:d8:11:2f:91:72:bb:05:46:3f:ed:88:
b5:d0:3a:6f:57:7e:ef:74:4f:ca:eb:6e:d1:aa:3c:
f9:58:aa:3a:6b:71:62:4d:f1:f7:7c:9b:da:44:43:
1e:bc:0c:36:1b:90:59:0f:b8:d5:89:47:eb:05:59:
09:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:53:BF:46:35:8F:DB:8A:D2:F9:B1:2E:3F:81:66:BA:62:B1:D0:06
X509v3 Authority Key Identifier:
keyid:93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:5f:7f:4c:9f:87:12:4c:6d:19:3c:7d:36:c7:03:15:1c:da:
26:b1:8b:69:98:ee:86:dc:5e:db:b0:91:90:c4:3e:3f:38:58:
cd:79:20:a7:95:19:08:0a:bd:eb:32:9f:a4:a7:ae:39:9e:c3:
20:f8:a5:5e:26:06:2d:77:6d:1e:ba:08:8a:44:94:a7:a7:96:
35:51:2e:49:8f:5e:e4:6c:7a:c9:7b:ab:dd:4e:15:c6:e3:c8:
39:cf:89:39:2a:cf:05:23:61:3b:1d:4c:73:cd:10:8a:f6:c5:
02:73:f5:0a:7d:6a:7d:28:ff:ad:c2:f5:96:ac:e7:c6:de:ec:
a7:0e:da:79:bc:fb:90:95:14:fc:46:fb:ae:4a:d3:a9:e8:10:
a8:bc:f5:3f:23:b1:64:50:af:2e:18:b1:cd:2f:67:1e:15:a8:
46:01:12:74:a2:93:e3:e4:e0:3f:e4:60:ca:13:77:64:24:0a:
b5:6e:21:4a:12:f2:22:ed:6b:c5:8e:25:af:88:85:1e:44:bc:
51:75:24:88:2f:4a:f9:77:2a:7c:e5:86:11:43:76:ed:bf:b8:
5a:41:2b:ff:e5:78:6b:79:7b:72:72:25:67:b3:97:c6:4f:75:
bc:e2:6b:23:88:6d:39:9e:7a:c5:44:27:38:e7:5b:16:0b:3e:
0a:d0:15:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:48:53 2025 by rpki-client