Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
File: Rk2NgKs3p1e503SClf5mn04JOyM.mft (raw, json)
Hash identifier: UGOvON9nV1lpaJAU9sPyOecXNgTf355ajl9f4gEpox0=
Subject key identifier: 8E:32:F2:B1:11:C4:27:74:4E:FE:95:3B:B4:34:3C:96:2B:94:89:B3
Authority key identifier: 46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
Certificate issuer: /CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Certificate serial: 01987306CE972C3CD2C3E7DE83693EEDDB7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
Manifest number: 105F
Signing time: Mon 04 Aug 2025 03:01:22 +0000
Manifest this update: Mon 04 Aug 2025 03:01:22 +0000
Manifest next update: Tue 05 Aug 2025 03:01:22 +0000
Files and hashes: 1: Rk2NgKs3p1e503SClf5mn04JOyM.crl (hash: 7XzkNDIJveXevmgXhCjHLMSHib2QlbROiC8NIr7LDQw=)
2: xJnPr2RyvvePQVXn-sWgNe1aA9M.roa (hash: yJ4J4gghIQZp1yxWa+HqkTzf9ODjqBVN9nX0iZFZokQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:ce:97:2c:3c:d2:c3:e7:de:83:69:3e:ed:db:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Validity
Not Before: Aug 4 03:01:22 2025 GMT
Not After : Aug 5 03:01:22 2025 GMT
Subject: CN=8e32f2b111c427744efe953bb4343c962b9489b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:3d:06:b4:c9:f3:8d:a7:6e:c6:1b:32:76:
4c:68:0a:50:7d:43:f1:2d:49:f3:ba:f2:4b:1a:c1:
bf:90:f4:fa:19:3c:e2:83:df:85:89:46:a9:bf:dc:
a2:8b:4f:88:81:4f:66:1e:37:58:24:96:a3:1e:e3:
60:fb:bc:40:39:f8:5f:d5:0f:c9:b8:da:33:43:e4:
df:ac:bf:9f:c0:7a:d3:aa:32:a3:88:55:f4:53:34:
ab:15:6f:d7:b9:e7:b7:47:48:63:82:dd:1a:e4:5a:
80:09:c7:fb:3e:f4:d1:98:59:74:9b:ca:c1:a7:39:
d2:86:38:cb:7b:99:9d:eb:d8:36:63:34:d0:29:46:
8b:3c:33:e2:1b:a5:a8:6e:e2:22:60:ae:ff:d0:48:
53:e1:1e:ae:31:a4:30:e0:80:a9:0e:8b:05:6e:3a:
39:6a:7c:51:d4:e9:60:a4:f2:4d:81:6b:db:13:b7:
12:0a:90:63:f1:8e:9e:19:f5:9d:c7:46:33:da:56:
3c:d4:25:f2:91:2c:2a:d2:a3:0d:ca:13:47:35:ee:
1a:ef:ca:45:5c:cb:ba:34:db:64:1c:f0:dc:79:bc:
9c:83:d5:9b:f3:fa:e2:a5:b2:5d:e8:e8:08:11:27:
26:5a:5c:29:22:eb:22:16:37:7d:2b:41:d2:57:4d:
40:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:32:F2:B1:11:C4:27:74:4E:FE:95:3B:B4:34:3C:96:2B:94:89:B3
X509v3 Authority Key Identifier:
keyid:46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e6:b8:8b:8a:64:90:ac:e4:e0:b1:f6:23:ea:0f:a4:ec:25:
97:a9:00:95:18:83:6b:05:8c:92:f7:04:fd:a4:0f:8f:f3:4d:
09:58:be:c9:38:a2:ef:a2:fa:4e:a0:33:62:55:c3:f6:b9:34:
eb:4a:a0:34:16:81:ec:8b:51:aa:54:b3:48:4b:9d:0c:be:6d:
0f:4c:2c:83:2e:6a:9c:8b:b5:56:15:03:d1:6d:75:ee:60:2b:
1c:96:61:b1:f8:fc:de:68:e7:3c:2e:7e:27:74:55:2d:4d:20:
fd:c0:0b:da:c3:53:60:ff:d5:a8:2c:3f:1c:a9:8a:2c:13:c9:
0a:c0:4f:13:ac:48:04:7f:1e:29:1a:16:c2:e6:ae:81:c5:d6:
7c:33:1f:2d:75:d5:54:c1:26:9f:70:02:3d:f1:bc:63:30:6b:
1b:31:a1:2d:2f:91:89:89:5b:ce:4c:88:2c:25:42:0a:ef:25:
f0:16:2f:55:97:e5:22:cb:7e:6b:08:50:e2:9e:d7:60:34:40:
94:da:cc:2c:8a:f6:65:1b:02:ba:c7:78:d1:ca:75:d8:6f:19:
83:8e:52:26:c0:44:28:83:48:77:22:31:91:cf:ba:1a:7c:e3:
73:84:1d:53:43:23:43:89:08:95:40:a3:99:f2:a9:a0:8d:85:
89:86:f1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:01 2025 by rpki-client