Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
File: k4otcueQJvUr9WV-l__RsRvohkE.mft (raw, json)
Hash identifier: +1EPIUscFlXcF6f5HMBGGhH0/Y2uGSbyRGKbTlS+E4M=
Subject key identifier: 50:D4:9C:33:C4:6F:17:5E:6F:87:FA:CC:75:63:13:D3:6B:C0:72:55
Authority key identifier: 93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
Certificate issuer: /CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Certificate serial: 019896A6A5BE393F4A296300F71CEDE9AF07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
Manifest number: 0788
Signing time: Mon 11 Aug 2025 01:02:40 +0000
Manifest this update: Mon 11 Aug 2025 01:02:40 +0000
Manifest next update: Tue 12 Aug 2025 01:02:40 +0000
Files and hashes: 1: GdYDqrOhgB8exVYYyIqPRX61C-I.roa (hash: NWfhvpFN96SLGPQqqCOWVE/72vTziFHwtrYFSPDHX60=)
2: k4otcueQJvUr9WV-l__RsRvohkE.crl (hash: zG3kxzmJxZGS5exPj7YmbBpBnfRzUL2LBLZnFa6+ezI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:a5:be:39:3f:4a:29:63:00:f7:1c:ed:e9:af:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Validity
Not Before: Aug 11 01:02:40 2025 GMT
Not After : Aug 12 01:02:40 2025 GMT
Subject: CN=50d49c33c46f175e6f87facc756313d36bc07255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b5:db:fc:62:cd:43:f7:e0:00:80:37:1a:8e:
43:1a:96:ff:60:73:b7:09:c2:d0:22:d2:47:9b:80:
4d:7a:5c:d2:b7:e9:5a:b2:6d:18:68:0d:10:88:09:
a0:c7:6a:7b:cf:d0:9d:c2:f0:6a:77:dc:bf:97:30:
bb:ca:9a:b4:b5:68:0c:10:58:dd:9a:df:7c:8a:3a:
30:dc:f1:6d:f4:1f:fd:0c:82:f3:26:91:4d:d1:e5:
4d:b4:4f:fb:fb:89:75:f1:37:b7:53:f8:b7:d5:33:
f6:2a:2c:08:d7:04:f6:6b:7e:81:aa:cb:03:c8:18:
a7:98:09:25:a4:bd:b4:98:bf:91:0e:f0:92:52:ea:
67:df:36:96:32:bc:ef:3a:e3:56:f1:5c:fa:d8:cc:
da:a2:5b:d3:53:91:32:23:07:93:11:45:27:8d:68:
db:e1:28:15:b3:4e:0b:63:3b:1f:68:f9:36:96:02:
13:df:53:15:19:c9:fe:ff:80:6f:88:90:48:8f:86:
cd:00:01:19:08:20:76:03:63:30:8c:94:94:82:ae:
e1:84:d3:da:29:86:d9:d1:d9:43:39:92:e6:59:31:
48:56:b3:8d:32:d9:51:bd:72:40:60:00:19:61:45:
4a:07:52:3e:bc:c9:a7:79:66:dd:3c:25:c8:7d:a3:
e2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D4:9C:33:C4:6F:17:5E:6F:87:FA:CC:75:63:13:D3:6B:C0:72:55
X509v3 Authority Key Identifier:
keyid:93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:88:7e:4c:1b:12:05:d4:65:bf:a9:a5:99:76:1d:75:ca:c6:
bf:f4:14:29:9f:32:9f:fd:1f:52:55:be:05:69:e9:ee:a9:a7:
0b:f9:b5:07:64:3f:0d:4e:1f:15:e3:26:fd:49:b9:9f:d7:d6:
9b:36:9e:33:ce:e6:b7:b4:b5:80:69:5f:34:8d:7f:13:06:d4:
2b:ba:47:56:7f:5e:fc:2b:23:f7:f3:8f:32:e7:c3:a6:17:5c:
79:b9:d3:93:e8:cf:ed:b7:d2:19:77:7f:04:44:cc:b7:a2:43:
27:e2:de:f1:93:ac:1c:43:d4:f1:00:29:78:fe:8f:a0:1d:28:
53:64:61:b8:f1:67:0e:61:5b:dc:83:b2:d0:66:52:5f:49:d5:
97:71:02:4e:fb:2d:82:f0:cd:38:53:6a:4b:af:cc:a7:48:48:
c6:72:7f:96:9e:6f:1e:83:d1:78:93:2d:88:01:3d:f3:b8:ff:
62:21:c7:8d:ab:b3:52:51:08:73:4b:6c:e9:6b:58:6a:45:46:
e2:fc:b4:0c:03:f8:01:02:2a:a7:24:07:09:c2:b7:a6:53:e8:
fc:c8:80:c5:5d:7d:f8:60:ae:5e:e8:36:aa:22:8f:81:0c:71:
ce:36:47:f4:26:10:0f:d9:bd:c6:13:76:20:de:e7:e0:d4:ec:
da:c4:1c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:15:51 2025 by rpki-client