Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json)
Hash identifier: +/EKOgePatkmgcMvcDYIOcpVTyvMWjnnbcWbVoRpCWw=
Subject key identifier: 29:87:4A:EB:60:3E:82:75:B8:29:13:53:4B:90:F7:6D:34:A5:2D:2C
Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Certificate serial: 019873E3DE27EB8DAD413A98E8BEE2F1FE56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
Manifest number: 8C
Signing time: Mon 04 Aug 2025 07:02:50 +0000
Manifest this update: Mon 04 Aug 2025 07:02:50 +0000
Manifest next update: Tue 05 Aug 2025 07:02:50 +0000
Files and hashes: 1: dlXIk7WimVWVHc3ungqiNoZMusw.roa (hash: RfuMfcHrLbRg0Y3xsz3a1+VdHPSrzNKZ40aYKpVDn2E=)
2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: XaVJJVNmvLNnc+uPbEJ8a+EDaQXXzcJ+oUgbJOhwTPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:de:27:eb:8d:ad:41:3a:98:e8:be:e2:f1:fe:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Validity
Not Before: Aug 4 07:02:50 2025 GMT
Not After : Aug 5 07:02:50 2025 GMT
Subject: CN=29874aeb603e8275b82913534b90f76d34a52d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:60:b0:c0:da:3a:9b:f0:5c:fe:db:79:63:
07:96:a1:71:7c:62:ab:27:c0:dd:e7:a6:07:cc:16:
ca:bb:c5:a1:cf:7f:83:8c:8d:48:81:61:4f:db:4f:
3e:3d:cc:39:a0:e1:8e:42:6c:9d:01:57:c8:8e:d9:
fb:80:5f:3e:fc:9d:8a:c2:f6:7e:57:ec:b8:a2:cf:
74:42:e1:70:da:6b:f1:95:3d:45:24:ae:20:5c:02:
a7:12:a7:92:8e:50:15:03:78:c8:1b:9d:d2:17:c3:
0b:e7:e6:ea:6b:eb:21:21:0c:84:0e:87:e0:0e:36:
dd:06:8a:6a:6b:97:08:41:8a:12:1f:f6:01:6e:a1:
2c:37:70:8e:38:ab:7f:85:23:78:46:38:38:18:25:
b5:62:20:d2:9b:b9:f9:8b:56:47:06:52:5b:cf:aa:
4c:e6:be:ba:bc:2a:75:d5:9e:c0:21:38:05:2b:f4:
4d:4f:c3:76:95:f3:22:a3:ca:18:38:ac:01:e1:f5:
75:2e:11:fb:f0:c9:a3:d3:60:4b:5d:2c:d6:ad:9c:
b6:03:85:8d:f8:25:4a:29:36:75:ae:32:8b:30:89:
cf:ac:bf:8c:15:55:57:90:4d:ca:32:fc:5c:c6:34:
da:a8:b5:f3:15:27:b6:7c:94:56:52:3b:be:81:de:
93:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:87:4A:EB:60:3E:82:75:B8:29:13:53:4B:90:F7:6D:34:A5:2D:2C
X509v3 Authority Key Identifier:
keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c4:e6:22:eb:67:25:85:d9:65:35:59:51:50:2b:1d:75:9e:
1b:52:ae:74:54:ea:d3:25:3e:b7:a3:b0:3a:53:38:da:bd:a9:
8a:a0:fb:55:65:de:81:14:ab:8a:24:2f:d8:0d:f3:a8:2d:1e:
04:f8:a0:ab:0d:82:95:2f:79:49:54:0c:6c:ba:dd:55:41:77:
10:f8:f8:14:75:17:e9:20:f0:aa:57:5d:86:7b:2c:3e:ed:64:
6b:15:0f:de:fb:b6:65:84:97:80:79:5d:ab:f2:e5:2d:40:4a:
c2:00:e8:8b:eb:99:04:d5:81:3e:bb:77:b9:0a:31:72:f2:c4:
84:6c:d4:33:4b:c4:7c:5b:37:7e:6f:b3:6b:89:1e:89:26:85:
32:81:7f:57:e7:ea:2b:3a:d5:93:dd:06:4e:eb:28:d2:46:87:
91:5e:ef:2b:dc:ba:98:15:4b:8c:d6:0f:9a:86:26:aa:db:45:
63:80:63:06:b1:d8:a8:08:cb:cd:d2:0b:3e:6a:4e:c1:a1:5c:
4d:c7:d5:ef:c7:c8:d2:21:98:80:f1:45:5b:cc:26:fb:25:99:
1c:7e:6c:02:1c:44:31:87:42:9b:1f:32:59:57:87:5e:2c:ef:
81:6b:8f:e7:66:31:5e:41:56:77:69:a2:11:81:9f:b5:f8:af:
9a:1a:e0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:31 2025 by rpki-client