Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
File: dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft (raw, json)
Hash identifier: URa5KePAd+IRLrVGvUXG+5SyWEYPHRjagOyVhEcX+BI=
Subject key identifier: F4:6E:35:58:7C:81:BB:F3:55:95:F2:6A:CD:06:2E:0F:EB:78:63:BB
Authority key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
Certificate issuer: /CN=74ae941a681c1586379e07247dcc19f3f41035d8
Certificate serial: 0198887B653341E5D1A155139335F82B42E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
Manifest number: 0DBF
Signing time: Fri 08 Aug 2025 07:00:44 +0000
Manifest this update: Fri 08 Aug 2025 07:00:44 +0000
Manifest next update: Sat 09 Aug 2025 07:00:44 +0000
Files and hashes: 1: aRphps94ueev9_cb0Fbr1t6EWos.roa (hash: qY/6yr4D72wfd0je0UgbA5pXBnLSwy4IbEDXkYKHi6c=)
2: dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl (hash: ngm+Jcdwrt1BBu4uSpTsaIYZMeCo1ZcGwUYONVB8GA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:7b:65:33:41:e5:d1:a1:55:13:93:35:f8:2b:42:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74ae941a681c1586379e07247dcc19f3f41035d8
Validity
Not Before: Aug 8 07:00:44 2025 GMT
Not After : Aug 9 07:00:44 2025 GMT
Subject: CN=f46e35587c81bbf35595f26acd062e0feb7863bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:51:b7:c8:4f:57:bd:94:2c:df:c1:d9:04:8c:
56:b3:ad:0e:7c:a5:b5:e2:76:f3:64:10:36:da:44:
d2:ec:27:c5:d6:1f:1d:50:08:b6:68:6a:c2:fe:29:
7f:7d:29:68:a2:b3:be:77:d4:45:c0:7c:a2:09:ee:
a3:a9:f6:3e:35:7f:a9:38:98:f0:3d:64:d2:90:b2:
c9:ed:2a:76:f1:42:a1:be:ac:df:f9:f1:77:5e:48:
93:fd:15:88:3c:8e:07:dd:92:1a:0b:bd:0d:94:96:
1d:e6:27:a7:02:e7:05:5e:ec:42:26:27:7f:7f:c2:
28:1a:45:9f:00:54:ef:1a:ab:76:eb:d9:53:71:e1:
53:fe:c1:71:90:f8:6d:f3:88:a0:01:b9:1f:ce:9f:
b3:74:4e:b0:1e:af:d4:21:d5:14:25:3b:e5:1a:d6:
34:00:04:cc:0a:2b:ef:e8:e1:3f:5c:28:54:15:f6:
55:7d:76:79:ca:ce:ce:28:36:f1:ae:22:d1:63:fb:
2d:b6:c7:44:4e:e7:72:60:2b:ab:2b:36:6c:05:78:
aa:f6:39:a1:bd:dd:3d:b1:aa:fa:69:f9:6f:bc:6a:
54:89:ea:34:22:08:57:ad:19:70:10:db:f8:b4:b5:
c3:b6:12:7f:7e:53:b4:a2:94:dc:ad:de:99:44:ee:
fc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6E:35:58:7C:81:BB:F3:55:95:F2:6A:CD:06:2E:0F:EB:78:63:BB
X509v3 Authority Key Identifier:
keyid:74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:29:b7:2b:b6:29:37:af:0f:50:af:d3:3f:02:27:0e:3e:c7:
fc:2e:41:37:f3:0f:b7:8e:93:e0:80:f0:5e:72:56:b8:00:8b:
8d:37:6b:2b:5a:7c:fb:61:61:00:1e:c5:c7:e1:74:6e:aa:75:
b7:b7:73:e3:50:c9:d1:de:89:9d:b1:89:35:71:9f:78:38:37:
4c:56:ac:02:04:27:0a:ca:54:9b:e4:de:f6:30:64:56:02:ed:
73:2a:80:8b:ba:40:25:80:50:31:28:51:bb:05:a8:fc:cf:6b:
60:74:1d:10:83:5d:8e:17:8e:d5:3e:9c:8f:66:fc:09:31:dd:
f0:3a:ba:20:46:8a:1c:8b:0d:e2:0a:a0:fb:bb:14:3b:2a:d7:
41:a3:df:dc:58:8b:ee:bc:b6:56:d0:03:0f:79:5a:03:12:93:
a9:19:13:9f:20:00:36:be:3c:bb:ea:60:d1:6d:7c:59:17:7b:
73:41:3f:fe:18:1a:e8:94:4a:39:8c:bc:ae:9e:b5:44:88:69:
dc:b6:46:44:d6:8f:4a:0a:b8:47:f5:1c:04:fc:61:9f:e3:d7:
42:9e:6e:a6:fb:33:aa:e7:17:3e:9e:39:05:b1:78:d1:03:ce:
5d:4d:cf:fe:bf:0f:bd:df:d6:e0:4e:f8:70:38:06:d3:08:79:
63:39:26:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:10:20 2025 by rpki-client