Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier: P5OiDJfLAgOIPZC6CltIvZ1IrmxJG/yjoO03vYBkx3k=
Subject key identifier: 4B:59:1B:6C:AA:A6:D5:0B:94:C4:2E:88:C1:F2:D9:84:EA:C8:93:90
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 01988731DC4F8E3A0FF659D95E883763BB47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number: 1625
Signing time: Fri 08 Aug 2025 01:00:48 +0000
Manifest this update: Fri 08 Aug 2025 01:00:48 +0000
Manifest next update: Sat 09 Aug 2025 01:00:48 +0000
Files and hashes: 1: 8FU11yYabBJRRjHXhYHw1w8tXqs.roa (hash: zgTg9U8qNVapSlofgSsQ7L6J3LMkMrbN8ivrl35eIuc=)
2: EEXNCtF9Q-r-jdLQHtiMKb2lX_k.roa (hash: sPo+QlStQLftRhFxrU43bCn4hciRtjvqBLkRQ+qUaq4=)
3: FCOMXnULUVL5uVnX_zvOHcdHJYc.roa (hash: 4uixJ9jDs2SwFvLmk4CIP+prYWqzHVN0aIW9iOFGL0s=)
4: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: 7/VjN4ku9iln9omT3ZrxOwQfjESR0rXapj+XmFmwIMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:31:dc:4f:8e:3a:0f:f6:59:d9:5e:88:37:63:bb:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Aug 8 01:00:48 2025 GMT
Not After : Aug 9 01:00:48 2025 GMT
Subject: CN=4b591b6caaa6d50b94c42e88c1f2d984eac89390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:fb:3b:17:7d:db:75:33:41:6f:73:0b:e2:
78:5b:fb:0f:20:bb:a6:eb:0a:ca:a1:2d:a0:b6:12:
dd:fc:a3:53:1b:e3:4f:9d:11:7b:8a:d3:fe:5f:c7:
1e:39:9d:48:d7:bd:52:1b:fe:c3:34:69:8b:36:59:
31:81:49:e9:ce:c7:46:85:27:6a:15:c9:52:60:f2:
2e:c5:14:f3:c8:b7:d5:83:c3:bb:8d:71:c3:57:fe:
29:61:6d:d3:71:31:d9:7e:f1:c6:13:d4:8d:9e:d4:
eb:b0:93:cc:77:38:59:88:89:ba:19:66:b2:c7:bd:
12:8d:70:79:e1:25:6f:cc:07:b2:4c:1d:c8:f1:fd:
3a:96:9d:d1:53:0a:59:ef:d5:40:9b:93:c3:67:fe:
13:6f:e8:44:05:07:bf:4e:f9:bc:8c:b6:30:81:ae:
e2:45:a1:77:69:85:d4:09:e2:21:2f:3b:87:90:72:
88:5f:b1:48:9b:95:f5:25:75:b8:4e:66:5b:3c:c3:
20:61:bd:56:c2:67:b8:84:41:67:d4:3f:46:2b:75:
50:a4:33:88:ce:bf:2a:fc:5d:03:cb:a2:8b:38:43:
ea:05:94:e0:01:d8:43:b9:1f:39:3b:75:2d:ae:5a:
a9:73:ef:8d:6f:48:e3:f1:4f:fa:99:a7:58:27:f0:
92:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:59:1B:6C:AA:A6:D5:0B:94:C4:2E:88:C1:F2:D9:84:EA:C8:93:90
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fd:4a:9e:30:40:00:4c:15:77:92:b4:cc:12:bd:27:fb:89:
99:68:d5:4e:f8:8e:77:88:57:81:07:87:f8:ba:70:cf:88:05:
5e:d9:7a:a2:b5:58:4f:db:4d:29:19:da:31:a7:2d:29:45:4a:
44:af:b2:ef:70:ed:1c:67:26:19:08:ee:0e:ab:4f:22:aa:5e:
33:4f:64:8d:92:ef:07:e5:b5:72:b4:83:32:1a:02:eb:a2:2d:
de:8e:0a:27:96:36:a1:df:dd:ea:c3:47:bc:ef:7e:c2:b7:10:
52:18:55:99:6d:de:e2:04:a9:c2:0b:0d:e7:d7:70:ed:04:7f:
b6:69:f9:c1:15:48:b7:dc:e7:7b:b3:71:ba:dd:f4:80:00:71:
f5:1e:c5:b2:83:94:87:5f:58:04:b0:f0:48:03:11:e0:c2:3e:
9c:77:8a:7c:e0:2c:1d:94:15:23:35:87:a6:9a:96:1c:e8:00:
3c:fa:3a:5e:87:fd:3c:d5:67:27:1e:db:7d:3d:7c:d7:f2:f7:
c8:39:77:07:44:a8:d6:58:c4:bc:0b:39:ee:f8:1e:3c:85:4d:
3e:f1:f6:21:75:70:a6:1b:20:db:b3:6d:b6:fa:06:a2:4f:90:
7d:f9:a0:90:e6:95:67:3e:a3:9b:0b:b1:15:a9:11:a2:f0:8a:
39:fa:35:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:20:22 2025 by rpki-client