Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
File: K04tNMzuRXa1znYFoITmwIUiwig.mft (raw, json)
Hash identifier: yvOf9qPIVtG7bdsQQB8VRv1NpcxUM0OsKLBL6gGenmg=
Subject key identifier: 7C:3A:26:B9:E4:0D:C6:63:4E:8B:9C:19:FB:B7:7F:14:AE:9C:1E:1F
Authority key identifier: 2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
Certificate issuer: /CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Certificate serial: 01987DF7BE0DF1611475440D06A723390C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 06:00:44 +0000
Manifest this update: Wed 06 Aug 2025 06:00:44 +0000
Manifest next update: Thu 07 Aug 2025 06:00:44 +0000
Files and hashes: 1: GSpTlfTO5KcQK2jI527EKT02SMc.roa (hash: TpoUJbGzlzV0iUGibBYOB2or2f2ZUtWBHSlc5utMfHk=)
2: K04tNMzuRXa1znYFoITmwIUiwig.crl (hash: kjPlDvmQMu2VUAXDqn1HHQIXFNX79MEqkjk9+Byd+pE=)
3: inTF6SWHroBiGHmy-0U30O5ydnA.roa (hash: evzJBNLsSCaxTpI1F1FxS8W2lXJa9MwPxDq+MYhTrqw=)
4: qgbAAtOcnU1uj0vsxF1XX4uS6aw.roa (hash: sqwZAEeBQvSXLjPqcFlAmMMOVHBKwCNCWM9uKLuZCYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:be:0d:f1:61:14:75:44:0d:06:a7:23:39:0c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Validity
Not Before: Aug 6 06:00:44 2025 GMT
Not After : Aug 7 06:00:44 2025 GMT
Subject: CN=7c3a26b9e40dc6634e8b9c19fbb77f14ae9c1e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:20:e3:a9:74:dc:4b:9c:48:e0:30:e5:30:b8:
46:ba:3a:54:52:10:2c:4d:e3:c4:fd:00:5f:71:39:
b7:dc:c1:30:48:ad:9d:ef:dc:d3:8e:ec:fd:e8:1b:
da:8c:91:7e:36:24:8b:34:01:54:3f:02:bb:dd:19:
27:a0:85:4d:f2:3a:56:f3:b1:3e:67:f0:21:49:2c:
4f:5e:3f:d5:d1:dc:25:75:d6:c1:d9:09:f0:f7:df:
88:b5:3e:94:9f:b3:3e:25:db:9e:21:c6:1f:71:25:
92:80:53:71:35:8d:76:96:8f:98:64:a1:93:e0:eb:
c1:37:68:92:b6:88:9b:e6:72:36:ff:3d:55:a7:b0:
9b:0f:48:e3:50:94:31:ed:34:4f:71:32:d6:8c:52:
2c:3e:17:25:cb:64:fb:0c:8e:42:40:9f:c0:db:c3:
a4:9d:44:b8:f8:85:a9:1d:b7:e8:9b:96:20:82:88:
32:d6:91:9f:58:58:f9:c9:19:35:1e:d1:ad:cb:12:
3b:10:d0:cb:89:c7:fb:06:ef:34:e6:a8:9f:33:6a:
a4:05:76:07:b0:63:48:16:2c:7f:ae:63:43:5f:4c:
0d:4b:a3:19:93:80:e7:4c:67:89:ee:09:60:e6:df:
b7:15:5a:a8:a9:88:b3:af:4d:25:6f:5a:0a:f4:f8:
86:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3A:26:B9:E4:0D:C6:63:4E:8B:9C:19:FB:B7:7F:14:AE:9C:1E:1F
X509v3 Authority Key Identifier:
keyid:2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f7:07:ea:45:d3:d9:ab:56:b6:f6:85:1f:84:7e:e9:92:c3:
7b:d1:93:d8:db:e7:cb:b2:c3:9e:0c:43:20:3a:16:11:df:8e:
13:94:bf:53:33:4d:cd:22:67:53:3a:f9:6d:13:d9:7b:a9:09:
f0:86:19:76:01:1f:cb:99:11:ab:17:b9:35:8e:e2:5d:c7:9f:
b8:57:f7:c5:5b:98:28:97:f4:9b:38:cf:d2:5b:32:83:8a:38:
6b:81:32:2e:df:16:52:a1:1d:66:bf:67:4e:54:ab:3b:0f:a2:
55:9d:bd:99:2d:c8:c6:c6:0b:77:0c:9e:3a:1c:2d:7c:e8:d1:
e1:88:97:ce:66:8f:c4:0c:44:49:c9:87:ea:c0:24:b7:18:b5:
3f:6b:3b:cb:4b:8d:ef:72:78:60:f7:e0:2d:b1:f3:cc:df:16:
b5:cf:83:79:de:c0:28:59:13:26:2a:59:b1:97:8b:e7:f7:6b:
7b:f2:b9:be:10:cd:2c:b5:f6:8e:12:d6:78:70:d2:b9:a7:fa:
7d:39:f8:1b:2d:84:2c:fd:7e:6d:51:1b:d3:1d:61:6d:10:aa:
78:05:51:e8:e3:93:fe:18:60:2f:40:94:13:fc:cb:e8:b1:fd:
c8:8c:69:a4:55:00:8d:ad:4c:c6:f2:32:83:a0:85:26:99:fd:
62:56:3d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:10:28 2025 by rpki-client