Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
File: v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft (raw, json)
Hash identifier: nxuql/t+LAWnpYvOvHSNEw290InOR2o4dN3xwdIz+40=
Subject key identifier: 8E:4F:25:02:39:E0:7A:D6:CD:86:3C:BF:FD:B1:9F:46:82:8B:CE:79
Authority key identifier: BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
Certificate issuer: /CN=bf628b93661e905887359fc8e9a1888075db3cd8
Certificate serial: 019873E3E62A0D62E45D1B057E507A934F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:02:52 +0000
Manifest this update: Mon 04 Aug 2025 07:02:52 +0000
Manifest next update: Tue 05 Aug 2025 07:02:52 +0000
Files and hashes: 1: O8A-n_YJ3aGox49eBzm7Q8xhXdQ.roa (hash: EUscQTnmBwchHhwFPgGdViuEre/xVGQ6ryyvSQoTdUA=)
2: v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl (hash: QbGxxMVL8vweouVyfxJRIbt3bUd3wldv4WY5TWpyTUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:e6:2a:0d:62:e4:5d:1b:05:7e:50:7a:93:4f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf628b93661e905887359fc8e9a1888075db3cd8
Validity
Not Before: Aug 4 07:02:52 2025 GMT
Not After : Aug 5 07:02:52 2025 GMT
Subject: CN=8e4f250239e07ad6cd863cbffdb19f46828bce79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:48:2f:e5:13:4d:a8:2f:5c:6b:25:7a:b5:
5d:3f:f3:ef:86:a7:10:34:d1:d6:f7:7b:54:a6:1e:
08:fc:6b:23:37:0d:a8:17:d9:75:d1:88:6e:34:ac:
b1:26:aa:a7:ee:5d:7b:67:27:6b:df:e4:8d:45:63:
ca:41:a9:ed:5a:0a:2f:19:4f:5e:76:e1:71:0d:b6:
f3:95:5a:e2:98:27:e1:a0:0f:6b:c6:e2:91:4b:41:
89:9d:96:3f:72:a8:14:c5:09:c0:34:a4:a7:07:8f:
2e:4a:df:57:a0:1c:70:19:fb:24:af:85:57:97:95:
f5:28:16:dd:3d:9f:92:0a:a2:94:27:bc:e4:a8:c9:
8b:ca:dd:f3:55:2a:96:d2:36:6d:d5:e2:f3:5d:11:
9c:83:19:6c:4a:19:10:fe:72:cc:c5:0a:ed:fa:88:
8c:0b:08:b4:79:c6:81:c7:61:c5:75:9c:98:c1:f1:
6d:b0:c8:3f:00:07:5d:ff:5d:da:9a:2e:4c:c7:17:
06:44:f0:b4:31:af:d4:45:2d:c1:75:7b:aa:5d:16:
f6:44:dd:97:d5:5c:80:3e:39:38:97:3a:20:db:6c:
0b:77:3a:a3:fe:c6:bb:64:bd:b9:8f:a0:53:25:e5:
17:b9:6a:bb:69:cf:0a:9a:08:e8:77:44:41:0e:08:
06:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4F:25:02:39:E0:7A:D6:CD:86:3C:BF:FD:B1:9F:46:82:8B:CE:79
X509v3 Authority Key Identifier:
keyid:BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:cc:3e:ef:b8:af:05:99:ca:48:6e:c2:a9:a6:cc:55:e8:9e:
8f:b0:a2:84:3a:13:a8:18:8d:58:32:75:77:43:1c:09:02:3d:
26:0a:d7:06:d2:a9:18:68:53:0b:52:b8:e2:22:11:05:c6:24:
a3:0a:fd:8b:fe:cb:93:f8:47:22:54:79:a5:3f:5d:b4:27:50:
41:02:42:11:6a:55:3c:72:09:2c:ab:15:97:33:ee:ca:e7:bf:
fa:54:65:e4:ed:82:54:a7:15:c6:c4:47:78:5d:99:a0:cd:a3:
2b:a7:87:ac:71:52:dd:ad:87:51:f2:fb:c3:9b:59:47:ba:99:
8e:54:53:e9:9f:07:c5:7a:26:8d:7b:a2:9a:95:b1:1d:fb:ae:
01:9d:d7:64:ad:b3:06:72:0d:1d:cd:34:28:89:29:64:37:0a:
96:f2:9f:4f:c5:87:dd:cd:81:38:a8:87:f3:65:32:33:b9:18:
13:95:3b:8c:c6:10:1c:38:b1:a1:59:f4:af:87:14:f0:00:e8:
f0:ce:ea:71:74:b2:e6:3e:11:9d:cb:58:8f:7c:1c:21:1d:50:
c1:f4:38:77:7c:6b:1a:61:21:d1:8f:a2:8d:18:4f:33:67:8a:
39:0f:e6:61:c4:43:2f:83:63:ac:91:88:f6:1e:0e:91:04:d4:
91:32:02:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:09 2025 by rpki-client