Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
File: k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft (raw, json)
Hash identifier: UM8yyMnhfLgBRgekGh3wtii+fGtO5gp1DXt4WdUT7EY=
Subject key identifier: E6:B5:0C:DE:53:C7:DF:34:5B:00:0A:BB:42:A2:49:15:98:34:38:0C
Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
Certificate issuer: /CN=93501077db80d52b16d49f863a61ea41a124bc59
Certificate serial: 0198936D55F7C26C04BC4CADAE10D12357FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
Manifest number: 0538
Signing time: Sun 10 Aug 2025 10:01:12 +0000
Manifest this update: Sun 10 Aug 2025 10:01:12 +0000
Manifest next update: Mon 11 Aug 2025 10:01:12 +0000
Files and hashes: 1: aWw5wJuzfBEHmyQaah8xYehdUG8.roa (hash: H2Jnmk/OanpEK56jJ8tSaxjK9R89WU3IiR7I7leXG38=)
2: k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl (hash: IQZO7MvDMODMr0EDD3L58rDyDpk3MCARKnury92D7fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6d:55:f7:c2:6c:04:bc:4c:ad:ae:10:d1:23:57:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59
Validity
Not Before: Aug 10 10:01:12 2025 GMT
Not After : Aug 11 10:01:12 2025 GMT
Subject: CN=e6b50cde53c7df345b000abb42a249159834380c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:53:25:52:e9:f4:21:d6:3b:5e:86:4a:9e:75:
b3:1d:d9:ed:b1:e2:5d:8d:3b:b9:db:8b:b5:29:25:
03:a2:d9:2b:78:86:e9:db:41:67:30:87:f9:2a:94:
8e:21:30:87:7a:46:a9:c6:24:ff:bc:d2:1c:5d:a8:
fc:af:72:70:71:2b:ef:33:03:cf:8e:07:44:c0:a8:
a2:9c:fa:43:a0:16:06:54:0e:e2:f8:23:a8:74:6c:
cf:fc:0a:f6:59:77:33:0a:4b:e6:ea:6a:f7:30:4c:
0e:0e:b1:28:25:37:47:b7:84:ba:b7:38:d7:cc:44:
24:fb:e0:72:e6:4b:db:b6:39:f9:bf:99:0c:c5:aa:
4a:47:4a:9f:f3:b9:4a:de:f9:da:26:16:d4:ee:fd:
70:fe:ad:00:62:0f:ca:20:0c:84:af:ea:89:83:d0:
82:50:ee:d5:64:f0:5c:1b:73:3c:69:9b:ee:ac:e8:
9e:87:06:14:5b:58:7a:28:ce:d5:f8:51:db:38:57:
cb:e6:f8:0d:04:32:f3:a4:52:f6:af:ec:2d:df:51:
19:71:90:23:22:34:b2:b8:5f:11:73:7f:18:54:88:
eb:ee:83:e1:24:46:68:eb:3d:63:96:88:aa:f6:98:
6d:62:38:5e:4d:55:e7:10:91:3f:38:4c:04:6e:24:
0b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B5:0C:DE:53:C7:DF:34:5B:00:0A:BB:42:A2:49:15:98:34:38:0C
X509v3 Authority Key Identifier:
keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:58:4e:7b:08:f4:dd:cd:39:38:c3:ce:ab:c2:57:5a:6a:e0:
72:77:4e:2e:b6:21:4a:aa:9d:67:df:e4:d4:51:7b:20:d3:fc:
a9:51:e1:4d:cd:b6:94:39:be:a7:32:4b:8b:28:6f:d1:7e:13:
d9:c5:4b:e7:8b:0b:3c:8a:dc:d5:18:56:26:07:8e:08:90:1b:
12:b0:8c:40:44:10:02:74:6e:86:a0:db:11:59:bd:11:2b:dd:
ae:54:65:e5:a5:97:55:bc:bd:c6:69:ed:df:39:ad:a7:f6:97:
6a:55:bb:89:e7:bf:e5:0a:41:1d:9a:21:34:95:5c:66:24:9e:
b8:27:fc:d3:91:0d:3c:74:d6:ec:31:aa:7a:2a:85:0e:63:8d:
9c:8e:cc:26:41:4f:78:1a:be:4a:86:0d:5a:3c:1f:5a:e1:1b:
75:f8:86:f7:b0:27:70:00:ab:9f:59:d5:ad:2d:33:9f:6d:12:
4f:1d:05:be:51:08:3a:ad:03:b2:c1:3d:3b:8e:77:16:53:83:
29:5f:f1:61:1c:a7:41:d9:a7:67:e9:49:da:0e:40:0f:14:f5:
2a:07:2e:79:b2:60:70:c5:2e:75:47:6a:9d:48:64:f2:22:ad:
38:03:15:9a:54:8f:c3:0e:34:38:bc:69:49:b7:5a:e0:62:f5:
0c:5e:97:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:21 2025 by rpki-client