Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
File: pkDHUev7SAfYRiLoBss9C53YEGk.mft (raw, json)
Hash identifier: o95NqqzL0zEgpwWsElx5jDgoXoWBoyt7wqPWFnMsQ0Y=
Subject key identifier: 68:B4:B9:6C:EE:E4:8E:D7:A8:ED:A4:03:51:84:C2:31:4A:C9:39:0B
Authority key identifier: A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
Certificate issuer: /CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Certificate serial: 01987D8A48A2F1AE743560256159FF0F1837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 04:01:11 +0000
Manifest this update: Wed 06 Aug 2025 04:01:11 +0000
Manifest next update: Thu 07 Aug 2025 04:01:11 +0000
Files and hashes: 1: CqoX7DJIz6T-m3NHJ01LCtyGJFE.roa (hash: 32gG2ZUMfd1jjxqZY90ktdKNZmqWxjZXungJm+FeL3s=)
2: ZCRNSq91ZKzRcSK6x3pKdZV_4Rw.roa (hash: SLb/dN4BABY7//UWc03uIXxQcoqVDd7HnpJMkhWH2bA=)
3: pkDHUev7SAfYRiLoBss9C53YEGk.crl (hash: S2NvhoBSt+XVCGp4hmXNDfrBT3iDi+59Ua8MxRkXK0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:48:a2:f1:ae:74:35:60:25:61:59:ff:0f:18:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Validity
Not Before: Aug 6 04:01:11 2025 GMT
Not After : Aug 7 04:01:11 2025 GMT
Subject: CN=68b4b96ceee48ed7a8eda4035184c2314ac9390b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:02:ce:96:de:5f:32:a5:6d:55:1f:83:41:
62:8b:cd:37:e2:fd:9d:af:6e:13:e9:68:97:93:d2:
b3:f1:10:52:37:6e:0a:e1:76:45:f1:54:d5:5e:26:
23:cd:c8:54:f0:65:93:85:aa:a0:8a:cd:ad:23:86:
52:f8:1b:71:b5:92:30:bd:b5:b4:df:dd:d3:32:35:
d5:0d:0d:72:48:f5:1e:30:62:7e:31:7e:e2:02:ae:
44:53:05:ff:f1:a2:71:25:40:bc:e6:b5:02:01:0c:
ba:5a:f9:7f:86:da:51:36:2c:21:59:9e:e8:60:9d:
7f:9b:b9:54:a5:f6:79:ab:b9:14:f0:01:d9:81:17:
b2:7c:6e:8d:23:c8:a5:e1:05:55:6e:6e:3f:09:10:
7e:ec:86:4a:d3:f1:d0:31:19:02:92:78:58:1f:15:
77:9c:6f:5d:9a:ec:62:10:40:15:d1:13:f2:bc:74:
2c:cc:81:90:81:f2:24:8b:07:bf:76:9d:f2:cd:aa:
12:9c:42:b9:c0:85:bd:99:f8:bd:c6:b7:94:bb:b1:
3a:e0:7e:90:1e:9d:5e:fd:94:74:7a:fc:81:da:38:
5e:80:3f:8d:1f:a2:d2:24:4e:ed:0c:49:8d:d0:23:
9d:f9:3b:0e:e8:7c:3b:b3:2e:71:d0:ab:11:4b:ad:
1f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B4:B9:6C:EE:E4:8E:D7:A8:ED:A4:03:51:84:C2:31:4A:C9:39:0B
X509v3 Authority Key Identifier:
keyid:A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:06:78:53:a7:45:fd:bb:87:c0:5f:d1:f6:ae:37:c5:af:43:
53:09:d4:8d:54:ef:e4:e4:05:b4:e3:5a:ed:fd:cc:5d:55:f8:
ef:58:e9:90:79:61:7e:25:2e:13:91:e7:3e:af:c8:9a:22:fe:
cd:c7:6d:09:83:b7:ae:9c:e3:e0:5b:63:69:d8:37:a7:9e:33:
9e:2b:20:bf:30:41:76:cc:c7:e5:3c:b3:5c:d3:68:9d:50:bf:
23:c9:72:99:aa:0d:84:d9:1e:1c:be:93:9c:e7:e4:ac:91:5d:
68:a1:65:77:6f:65:78:83:fd:e7:14:58:fd:e9:41:1d:0e:09:
2b:b7:5f:6f:90:ea:83:cd:66:a2:d0:56:e5:0b:b1:b0:61:58:
e6:98:fb:54:b9:02:38:95:67:72:84:bd:71:96:15:ec:eb:68:
f5:50:b7:81:15:06:a7:1d:d5:76:a9:6b:0c:5f:8a:76:86:3b:
01:f1:e6:ea:85:a1:79:ef:b7:04:39:69:74:75:d3:9e:34:fc:
cd:78:93:45:ec:62:8b:83:2b:bc:2a:c5:67:66:43:8b:ae:ac:
4d:69:46:a8:38:e4:f0:1a:fa:46:36:9a:13:e4:71:07:f9:b7:
2d:cb:32:ce:43:e5:da:0b:b3:6c:9f:80:44:32:15:a3:0f:b3:
7e:5b:80:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:25:55 2025 by rpki-client