
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
File: k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json)
Hash identifier: RzwEUYp1RX78RJ1iZV+o4mk/UBA/WZ0QPSIZWV6La3A=
Subject key identifier: B7:29:75:BD:A0:DA:61:5D:48:33:A2:02:6D:A7:6A:19:8B:6E:FB:91
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial: 01987E65F54C17200DBAEE40393AC221E978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
Manifest number: 0D01
Signing time: Wed 06 Aug 2025 08:01:07 +0000
Manifest this update: Wed 06 Aug 2025 08:01:07 +0000
Manifest next update: Thu 07 Aug 2025 08:01:07 +0000
Files and hashes: 1: 1QST1OPlWGgU_KfeCd6-eSc5Fws.roa (hash: 0IX3SPWo/YRidApWFZTcBmj27iQz+V20vqeZhxHtpTk=)
2: UOcYa9_wijcIRHEowaEFsvhzcW4.roa (hash: tUwVIAhXZ1HVd/+8k4HpFkWguLhngA3Bv+h1B/N8dK4=)
3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: tJcP9y1tI3rvEjlh/afICOG7zfN6cmU2DK/lnur5/Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:f5:4c:17:20:0d:ba:ee:40:39:3a:c2:21:e9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Validity
Not Before: Aug 6 08:01:07 2025 GMT
Not After : Aug 7 08:01:07 2025 GMT
Subject: CN=b72975bda0da615d4833a2026da76a198b6efb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:e9:fd:ec:cf:be:a8:b6:5f:13:e4:d3:76:
40:a6:13:e8:2e:10:ae:17:b3:c8:36:e9:e6:d1:59:
b5:15:0a:d1:0d:37:d8:05:ae:ec:04:8e:80:83:77:
05:69:2c:51:bd:d6:61:ea:75:e0:45:41:a3:30:12:
b6:d6:d7:76:ff:a7:83:e6:12:e3:27:c4:37:90:23:
ad:5a:88:b2:d3:fa:ee:fa:bf:b1:e2:cf:ae:73:b6:
8e:e5:95:82:a6:68:ef:b3:ef:09:79:62:88:f5:00:
55:fe:6b:0f:92:66:43:c9:de:46:2c:f2:77:cf:04:
b0:e4:f0:22:7d:cf:4d:1e:81:72:6d:2e:58:1c:3e:
29:ef:cd:42:75:90:63:e9:6a:fa:c6:6b:35:6f:11:
5b:06:5e:a6:ff:5c:94:7f:8c:10:e6:01:35:60:61:
50:2f:2d:c8:1b:b5:59:3f:28:6c:6c:58:5a:24:c5:
e6:5c:a5:2d:58:71:d6:b0:4e:70:b4:54:31:2c:e2:
3f:0a:13:50:22:8f:b7:2f:dc:0e:1d:46:91:06:a8:
ff:58:29:fe:d9:64:99:e0:d5:dd:ce:bd:d7:a7:c7:
44:c3:4e:30:d9:21:53:c0:6b:56:5a:d5:81:6c:78:
8f:ec:fa:03:e0:3b:a7:4b:51:fc:7d:51:cc:87:56:
a6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:29:75:BD:A0:DA:61:5D:48:33:A2:02:6D:A7:6A:19:8B:6E:FB:91
X509v3 Authority Key Identifier:
keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8c:d1:ea:16:b3:e1:c3:18:53:cc:b8:48:6e:94:36:b4:67:
24:2d:eb:77:c7:e8:6a:00:31:65:f8:01:48:4c:82:fe:0d:89:
ec:01:b3:af:92:97:62:33:05:4a:45:56:45:b4:9e:52:5d:2d:
9a:ec:c5:6a:e1:22:1b:89:c0:fa:ca:f0:91:15:31:1d:c3:c5:
73:db:c2:5f:53:e5:f5:50:43:4a:17:62:f5:6a:45:58:4f:39:
be:34:14:70:74:61:0a:14:23:94:85:a2:93:de:d5:7d:35:64:
f7:a8:85:6e:1d:13:1d:45:d1:a1:14:55:c9:2f:4d:fe:c2:6f:
74:cf:6b:87:d0:cb:f7:38:28:2b:62:aa:9f:35:08:1a:32:59:
de:a8:45:d4:96:ce:e2:4a:29:8b:fa:b5:b4:04:27:4c:44:a9:
61:da:8d:16:a7:3a:9f:2a:e5:b8:77:66:83:73:89:e0:d4:cb:
5e:a6:11:62:d3:0d:d6:89:b3:d2:da:3c:09:79:6a:3b:4c:72:
b6:5e:c0:6f:12:93:8f:42:c3:e2:06:98:69:2b:4a:d9:5b:32:
0d:cb:5f:99:30:4a:25:6e:6a:21:58:07:30:6e:28:8d:5a:f8:
c2:d5:09:03:0d:62:09:00:65:ec:bb:89:8a:71:c2:62:fb:64:
ac:7f:0a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:14:14 2025 by rpki-client