Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
File: rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft (raw, json)
Hash identifier: ViDYr3pmtIeP6fMtuKUSQOVH8/Et1Ul8PG/mg4bT6+w=
Subject key identifier: 2D:0D:7C:B3:86:4D:D6:15:17:0D:B7:84:51:DA:37:06:E8:0B:AA:F7
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 01987298ADACCF21C3E891A1D1A1E8F5C766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
Manifest number: 1621
Signing time: Mon 04 Aug 2025 01:01:05 +0000
Manifest this update: Mon 04 Aug 2025 01:01:05 +0000
Manifest next update: Tue 05 Aug 2025 01:01:05 +0000
Files and hashes: 1: F8W0QKbleYbmz2EN1Tis7Vds59A.roa (hash: GzkXVUL6jOXjlFMqb78IJPo96A7wfBUt8lug7KgSDew=)
2: N8PiG76ntwKAGaSP3YzYnQGkLVI.roa (hash: nUQC/UxGj4cDa5TMObsdW9+d18vToeDUb/QlHw0eCHA=)
3: V_r_ROOdvw6x3g5Jz-742T3rIbU.roa (hash: S0q7P5LnXINS1vQh7LQXUQWUqtUOHV0qMrb+2gHbmYs=)
4: i44JVxMTVgkMbhmNJMaUgaK-WQI.roa (hash: cxxt5MnNL7SzuLLNZDQp6rhtaTD9wJRJZPKAxjU7gO4=)
5: n4Mf2ZoxRDO4Gbl-YZdYsqIz4OI.roa (hash: aS1o0h1e6vPqOWTx/X2krBGlRAa3LkoHQcee6mx6EEg=)
6: rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl (hash: 1VvHJHTWpyGwdcjhbXfjepFUN/VYeMc6ijWlmH6ZNUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:ad:ac:cf:21:c3:e8:91:a1:d1:a1:e8:f5:c7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Aug 4 01:01:05 2025 GMT
Not After : Aug 5 01:01:05 2025 GMT
Subject: CN=2d0d7cb3864dd615170db78451da3706e80baaf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:f7:2f:27:8d:bc:ff:4f:ce:07:b0:78:3c:
60:77:cc:c5:66:ad:5a:93:04:81:b1:2f:8c:4e:2d:
84:a2:87:1e:cc:68:79:db:9e:ba:6b:03:15:2c:91:
09:2f:f6:11:b0:2d:e1:b4:5d:74:67:c2:26:bb:40:
20:80:a1:d5:95:9c:45:6b:f2:0c:48:3f:ec:b6:f9:
cb:ea:57:ba:16:ae:9c:ce:9a:f8:07:c6:ef:4f:09:
6c:8b:bc:e2:67:f4:00:b0:99:95:d6:fa:9c:8d:e7:
d0:0f:52:e0:17:63:76:9d:ae:e3:97:ad:5a:a0:10:
f5:e6:db:26:04:87:b8:52:a5:18:68:82:aa:4e:ec:
c1:58:e5:ba:b6:3f:fa:df:ea:8c:c8:5e:9d:cd:81:
a8:14:0c:53:6f:6b:08:74:f8:a2:67:59:5a:94:61:
73:70:bb:14:e2:8a:31:ce:51:36:32:59:7e:cf:e1:
e5:9a:1d:2d:cc:64:05:8d:72:c2:21:c3:78:ca:6d:
8e:ec:80:8a:11:13:75:7c:9c:c0:4f:9d:75:f4:ef:
0f:1a:1f:ea:7d:8d:d4:2e:57:2a:0e:e2:95:53:35:
99:8b:9c:8e:03:e9:de:6f:fa:b6:bf:9e:d2:a2:bb:
fd:b1:74:27:8b:85:ee:12:8b:db:7a:85:d8:54:6b:
13:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0D:7C:B3:86:4D:D6:15:17:0D:B7:84:51:DA:37:06:E8:0B:AA:F7
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3b:09:9a:73:e3:7f:2f:9c:ae:c4:1e:cf:82:d4:c3:70:4a:
ac:d9:d3:f1:44:b6:33:7c:7e:61:e0:ea:73:8c:35:54:91:61:
9e:35:6e:89:b4:55:f9:69:61:a7:01:ca:76:e6:72:0e:7b:dd:
ed:48:1d:06:a2:0a:ad:e0:87:e0:02:71:45:17:ca:91:0b:3d:
27:2d:a1:a8:88:6a:3e:13:01:c6:67:8c:67:45:e4:a1:7d:a3:
e6:af:f2:ad:80:c7:ae:45:fd:64:d7:f5:b8:d3:69:6d:e4:85:
2a:bb:58:a2:fc:63:ba:b4:a6:83:21:6c:69:2a:f7:1c:8f:1a:
62:6b:03:80:fe:47:2f:d8:1a:0a:77:58:73:04:fb:6f:ae:18:
16:19:90:c4:0c:2d:02:6f:fc:20:b0:73:34:b3:6e:9c:eb:d8:
2f:14:88:74:0e:11:03:91:3c:84:3b:9b:30:0d:bc:c0:8c:01:
fa:62:2f:32:ef:f2:ac:9a:15:2e:06:23:30:43:db:57:2d:a0:
b8:93:2d:ef:21:d0:09:af:a0:02:44:cb:e4:c4:e7:f0:93:e8:
a7:94:8e:a8:99:03:db:c6:ea:0f:e9:ea:45:9d:f1:7f:3c:0a:
bb:f8:b6:a2:95:5e:8d:1b:51:c1:c8:35:ea:40:16:99:22:96:
84:db:78:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:39 2025 by rpki-client