Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json)
Hash identifier: fGQ7AIPVrHg42bxx+WD/hqwR/0Mgvxcn7EoqRoSI2Ns=
Subject key identifier: 47:8D:E7:85:4B:6A:F4:44:79:91:C9:16:02:ED:F7:F6:26:6B:AE:69
Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Certificate serial: 019893DA89E3FB4362B553155FA98C729E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
Manifest number: 162D
Signing time: Sun 10 Aug 2025 12:00:29 +0000
Manifest this update: Sun 10 Aug 2025 12:00:29 +0000
Manifest next update: Mon 11 Aug 2025 12:00:29 +0000
Files and hashes: 1: 0-pROOQXTsOCMh82qmUXoNFs4FE.roa (hash: 0vaU6zj0/sOrHvzQbJoSj9Sg3MRWFQ3zNRXZe2vIoxM=)
2: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: PoGxFk1MVolaRNK9f5h1YAQ2eiSd+Yfxlqaro+A2T7k=)
3: 2Cx8NesV2FgXdhnelF2G7i5Bybw.roa (hash: 8z2f0ixyt/V0YgUez4ATct6QO89AWHzLa+ZNoGbwCzI=)
4: 8YGP0hkU08CaSTjLusnYfNoY0P4.roa (hash: jWZuJOzMx9s5Np/gPv2mn1+ybL0gZ2yjh5jQEUREZ9U=)
5: MQiGNWbAlQR27bMbQEHKZB--EhI.roa (hash: AiFihDDBAGIMVUfPOtlJJbKjEh0jiKhW/hNN55RabQ0=)
6: g4GRCAwu2q3EL-X1WL9RVrJbAQI.roa (hash: slCTgIDY8YfOpbaBmeIbIqftrjDIQWNh6XUk0mKIj7o=)
7: i6OZnwSC6Nlsenhf0tdXitkE5-w.roa (hash: W6vwLHJCt+ThAPP53KTcgutvWVLILu8jqOoeNXpZV58=)
8: nFpp1sOKP4UepGIUoHswLN2IbRI.roa (hash: Ttm+Uf2laDwHJ/wFsX6jTAwI0vmckT+FtwvtYdaFusE=)
9: vYCLX9lBA7ZtzSrFDp94A_tt6ys.roa (hash: YmvWA4cqMB8VZpWwYryqd/wK/81/N7wIyQFXaVwROW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:89:e3:fb:43:62:b5:53:15:5f:a9:8c:72:9e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Validity
Not Before: Aug 10 12:00:29 2025 GMT
Not After : Aug 11 12:00:29 2025 GMT
Subject: CN=478de7854b6af4447991c91602edf7f6266bae69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:96:cd:e6:71:f4:ac:f5:5e:1f:50:29:20:9a:
ef:b5:90:b6:df:e5:f3:a6:d7:02:ed:b3:f8:53:8c:
77:9d:00:a8:8e:12:9f:3d:28:de:86:92:15:09:e5:
e4:2a:94:7b:2f:7f:bb:d4:ec:5a:fd:eb:20:14:2d:
06:ad:c9:63:d7:c3:f2:df:51:35:67:ff:29:67:5c:
51:4b:8f:75:1c:0d:92:cc:b6:13:1c:86:6e:a2:ef:
ae:58:c2:c6:7c:2c:ce:fe:1f:c9:31:b7:bc:83:ab:
38:12:a1:90:fd:9b:07:a9:4a:c8:da:3b:9a:62:ec:
b7:4f:64:b9:f9:d5:70:8d:f2:25:ef:bc:86:4e:15:
92:14:f9:cc:f5:d7:db:47:1b:8f:e3:e8:24:bb:f1:
62:da:40:a1:d4:6c:43:c0:4a:59:27:d8:54:58:6d:
5f:d1:cf:74:ea:93:a6:35:b2:5e:7b:f5:37:9c:c9:
9b:f2:8d:93:b7:76:fb:84:5b:18:f2:48:81:62:22:
f6:3e:5a:1c:08:33:39:69:ae:f5:1f:48:7c:9c:f8:
75:67:85:ef:5e:5b:00:e8:f5:c5:15:48:46:c4:43:
14:36:a0:df:8c:33:18:37:6c:b1:83:a6:50:9d:43:
fd:c7:14:a6:8c:73:ab:8a:d6:4f:0d:66:34:37:5b:
3d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8D:E7:85:4B:6A:F4:44:79:91:C9:16:02:ED:F7:F6:26:6B:AE:69
X509v3 Authority Key Identifier:
keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2d:ae:49:3a:d7:f1:8e:76:26:d2:81:e3:b7:8d:f7:83:eb:
8a:72:ca:ee:4e:ee:48:3c:83:9d:49:a0:1a:94:c2:1f:b7:2e:
fa:a2:41:3c:c2:40:ba:c7:bc:18:d1:41:1a:4a:1b:6b:bb:d1:
47:4b:5b:e8:35:76:05:54:d4:80:04:c5:e7:36:36:a7:09:c2:
cd:7a:82:99:44:86:9c:25:6c:f4:66:f4:64:9e:73:35:76:f4:
8b:90:38:1d:2b:2e:39:56:42:04:dd:27:fd:27:44:1c:dc:14:
af:20:4c:cb:fa:e0:e4:6c:1a:cd:16:13:8e:b6:44:ca:49:c7:
4a:75:86:f6:d7:02:02:29:bc:cc:82:ab:e2:b5:75:8e:fb:57:
65:12:0c:44:8f:b4:05:d4:5e:51:ab:df:ba:99:04:99:34:7d:
41:84:3b:16:7e:5d:f7:9c:2e:a3:16:d6:07:54:dc:5e:8c:2c:
a1:f9:dc:4d:d7:34:85:0d:6d:04:15:31:da:7e:58:7d:30:f2:
d0:e5:7a:c1:5d:52:5a:b4:7e:29:1f:84:bf:c2:d3:97:ee:ef:
da:f1:a5:e0:b4:c4:dd:e1:fc:41:b7:d0:ee:4f:a5:e2:b1:cd:
fa:8f:c9:b9:6b:a4:86:0f:93:97:a4:86:46:3a:f6:45:12:42:
37:78:9e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:21:54 2025 by rpki-client