Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
File: k680jsWk5l4MsTeCGuahOe1_rAA.mft (raw, json)
Hash identifier: zwR/Mhy7ot3+2i8DuiX/wENaA/x0NfBGYDkJeMsXd18=
Subject key identifier: 0F:AA:05:CE:62:58:BC:92:9C:9B:0B:F2:E7:78:C5:E2:19:A5:D5:1B
Authority key identifier: 93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
Certificate issuer: /CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Certificate serial: 0198733D93182743E8FF2944EB30D90D8793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
Manifest number: 15A7
Signing time: Mon 04 Aug 2025 04:01:11 +0000
Manifest this update: Mon 04 Aug 2025 04:01:11 +0000
Manifest next update: Tue 05 Aug 2025 04:01:11 +0000
Files and hashes: 1: gKy-M4ArOB2uxqprqRJ6fbGyEC8.roa (hash: MC8Gw1INJPJBRmJZki75GCuCmqozYCvUY/UxQ+rSFh0=)
2: k680jsWk5l4MsTeCGuahOe1_rAA.crl (hash: NjjCnZKp8d+Z2gQfEVC1O/Uvof33cA5OtoMxwBqw5ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:93:18:27:43:e8:ff:29:44:eb:30:d9:0d:87:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Validity
Not Before: Aug 4 04:01:11 2025 GMT
Not After : Aug 5 04:01:11 2025 GMT
Subject: CN=0faa05ce6258bc929c9b0bf2e778c5e219a5d51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8a:fe:78:e6:1c:14:ac:90:7d:8e:63:6b:d3:
f2:af:23:dc:0a:f0:e4:cb:c1:ff:ed:bc:b1:c1:f1:
f6:3f:47:a5:d9:70:52:06:c2:43:ca:53:0b:8b:97:
55:58:a2:af:55:64:9a:d2:b7:62:bb:e0:ee:a1:a8:
75:52:02:73:f3:7f:db:ff:d3:82:af:4d:58:bc:e6:
3c:f7:32:75:20:84:ea:11:b5:d3:e7:9a:8c:21:d9:
c1:3d:73:6a:b0:56:93:a9:42:6d:0f:ab:a7:1c:d9:
77:ef:05:ce:ea:5e:34:b0:5e:11:5b:0b:b5:ef:01:
97:70:1c:bd:57:ae:f5:d2:52:6b:82:52:d2:15:ce:
23:79:3d:17:bf:15:41:c8:17:df:63:5d:fb:11:8a:
ca:c6:08:ac:08:b6:24:30:92:1f:1f:7b:88:9c:6c:
f3:6b:59:5c:2e:b5:e7:83:98:fa:a5:f7:d9:40:fc:
35:9a:fa:9b:30:76:ee:8a:6b:e4:7e:ea:98:e2:d4:
7c:b7:39:fc:eb:46:2e:6e:8f:8c:d2:1a:80:4a:24:
d4:7c:e4:6a:06:4e:ab:85:a5:af:ad:b7:a1:3b:23:
b5:51:02:6b:0c:21:39:e9:01:41:65:68:19:e3:cd:
65:d2:0f:e8:db:7a:3c:fd:ae:89:a2:86:e2:51:9e:
36:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AA:05:CE:62:58:BC:92:9C:9B:0B:F2:E7:78:C5:E2:19:A5:D5:1B
X509v3 Authority Key Identifier:
keyid:93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:78:a9:21:6b:1a:47:ee:49:06:fe:58:34:6c:bc:8b:1c:e4:
84:39:e2:73:a1:34:49:12:dd:e9:10:d9:1c:8e:d2:95:76:6f:
d7:30:03:93:bd:97:05:2f:5b:68:10:a5:18:5b:f3:e4:81:a7:
c1:d1:b9:b3:49:d0:8a:e0:82:22:43:cc:6e:8c:e2:33:a1:5e:
f4:00:d3:f5:df:eb:ca:5d:57:81:c7:c2:db:c1:2f:1e:10:3c:
1f:4e:1a:3b:07:4e:3d:45:67:fd:30:9e:9a:d6:4f:76:3d:b0:
17:c0:5a:66:c7:79:5e:15:4d:08:89:5d:a9:41:d1:f2:0b:40:
cf:1e:20:98:10:b4:2b:d9:0e:62:f3:ac:d7:d9:a0:fe:06:57:
f8:83:5c:c1:e8:93:04:8f:79:68:06:d8:2b:55:03:23:40:2c:
ab:33:82:06:d3:24:cf:91:17:93:2c:76:ee:d3:8b:6d:87:3e:
cb:f2:e7:d8:24:ec:42:65:b6:2c:c2:3f:f4:7b:d7:4c:2f:9d:
68:88:f7:51:47:52:95:bf:cf:37:a0:57:ac:d2:20:92:71:4e:
b4:45:12:f7:7f:27:7d:73:21:4d:de:7d:6e:11:74:cf:09:fd:
8c:38:dc:12:ac:39:6d:3c:24:6c:5b:8c:35:1c:0c:26:bd:69:
f7:04:a0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:11 2025 by rpki-client