Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
File: _KmLHQ7MzE9v8afn24S0uy9VsI0.mft (raw, json)
Hash identifier: GGNbCva4Txt+BeG0fwFQp9WW51W2es3C2Yj/SKLIIrM=
Subject key identifier: 4C:13:4D:A8:21:5B:A0:EB:E6:96:00:B7:7F:45:C0:7F:86:9A:9E:11
Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
Certificate issuer: /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Certificate serial: 01987F0A2F4FBFF479D8E13023FFE00ADA07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
Manifest number: 15E2
Signing time: Wed 06 Aug 2025 11:00:30 +0000
Manifest this update: Wed 06 Aug 2025 11:00:30 +0000
Manifest next update: Thu 07 Aug 2025 11:00:30 +0000
Files and hashes: 1: MIfmeAoWN0nwDc_PxEMHlVixhH0.roa (hash: BGlglgWDBdgW/hvSdFfJEQ+q//PCVjKwrtXl1XRe9nc=)
2: _KmLHQ7MzE9v8afn24S0uy9VsI0.crl (hash: B7+0kXicRffXpZFEG9k6AE1euerz7Ua1foWnAWNaSX8=)
3: ok0D6AFy1nokMBW7AtTQbtvoy-Q.roa (hash: OI8j87WnUAa44hUR7Jr4hBgPSlGVFL5uAjQD5u8Uzmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:2f:4f:bf:f4:79:d8:e1:30:23:ff:e0:0a:da:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Validity
Not Before: Aug 6 11:00:30 2025 GMT
Not After : Aug 7 11:00:30 2025 GMT
Subject: CN=4c134da8215ba0ebe69600b77f45c07f869a9e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:3e:37:b6:d4:6b:1e:cf:81:c5:a7:76:6c:
94:61:56:1e:3d:dc:b5:37:db:44:4d:85:12:15:8a:
69:69:10:58:b3:84:ae:33:d6:07:7a:25:da:d3:bf:
a1:10:63:3c:a6:07:e8:52:5a:d1:85:9d:1b:31:67:
ba:14:95:17:1a:be:6d:f5:c2:c0:50:fa:f3:96:6e:
0b:70:34:df:24:d3:30:16:cc:41:ec:cc:2f:43:c9:
f1:43:49:9b:a4:8e:cd:2d:68:e6:5d:52:2d:79:c5:
68:75:78:cb:44:df:0d:55:ab:2d:9b:26:22:bc:d4:
93:9d:b2:5e:af:1f:99:85:2a:3a:63:3c:4e:c7:c5:
0d:62:47:36:aa:f3:81:57:b0:15:39:d7:6d:b6:9b:
c8:db:fb:7c:1a:20:3f:c7:7f:ab:4e:94:9e:72:bf:
15:89:49:8f:83:35:1e:f0:e8:1c:a7:d9:c2:a2:c7:
f7:90:1a:8f:11:b4:83:5a:1b:f7:ee:0e:85:bc:be:
4f:19:8c:3b:46:3a:bc:9e:5b:1a:d0:c5:df:ab:69:
5c:36:5b:67:29:b2:db:d1:11:66:4a:0e:49:71:0e:
4c:3e:61:31:94:ce:52:7a:a9:f3:41:bd:a6:c4:30:
c5:de:f1:8c:73:b7:0a:ef:7f:0a:29:ce:1d:07:1d:
b7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:13:4D:A8:21:5B:A0:EB:E6:96:00:B7:7F:45:C0:7F:86:9A:9E:11
X509v3 Authority Key Identifier:
keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:60:03:f2:6b:b8:dd:47:cb:13:94:8a:5b:66:8a:a1:18:b4:
9e:ee:2d:57:cd:3c:b9:fc:84:a1:7d:7a:bb:32:c2:ac:9d:72:
e7:4e:57:bf:bd:58:ba:80:c3:c1:2b:c7:37:ce:b1:31:4c:2f:
e5:95:fd:08:81:e2:0f:9b:9b:8b:e8:12:72:93:98:07:f5:71:
0a:db:31:24:29:35:fb:48:08:9c:96:80:3c:e7:30:7a:02:b8:
84:5d:f6:bd:65:57:a5:2e:79:8a:88:63:00:ce:61:1d:06:46:
b8:c0:60:3e:b2:33:ec:42:5a:17:27:23:0d:59:9f:1e:5d:fa:
aa:f6:64:f7:52:25:36:f3:45:03:f2:4f:a5:b7:d5:fd:9d:8d:
c3:f7:58:0b:90:b0:0a:43:05:c9:ef:a7:70:0d:a8:9f:25:49:
76:6d:b7:97:dc:35:30:73:cd:b6:d5:22:fd:68:87:4c:0b:c8:
60:95:d9:9c:99:a0:63:ba:40:45:36:bd:25:67:4d:25:a7:4d:
45:47:28:5e:62:a6:a0:a0:be:60:3e:5a:ff:c0:1a:f6:7c:11:
2a:93:3d:43:75:ee:f2:df:36:38:46:13:4f:c6:50:4c:c6:3e:
5b:3e:40:b2:7c:47:65:d4:8e:dc:b8:aa:9a:f6:8e:c3:96:d8:
12:45:5a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:05:46 2025 by rpki-client