Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
File: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft (raw, json)
Hash identifier: Zv671MOT6NsVXiViXhay78N4iz7a9rZuOM2ljN1RzGg=
Subject key identifier: 27:95:AC:0D:FA:52:36:D3:11:FC:65:C4:72:A8:38:B4:EF:C0:7F:70
Authority key identifier: 93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
Certificate issuer: /CN=93515f25986e4b572a78b109d995c9ddf5da1266
Certificate serial: 01987E6597DB47789CBD045BBF1917ED9993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
Manifest number: 0EDD
Signing time: Wed 06 Aug 2025 08:00:43 +0000
Manifest this update: Wed 06 Aug 2025 08:00:43 +0000
Manifest next update: Thu 07 Aug 2025 08:00:43 +0000
Files and hashes: 1: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl (hash: 8XbNnF2SJqSMrd+V+H+ZfyRtm80tpgsWM8CVqqJjPIY=)
2: rqMllQ155A2S7SS_4PQfBNAn4gw.roa (hash: fS87JWrPgH68/hK1SJfJVRTn1bsQGrCVPuQ1+n82lao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:97:db:47:78:9c:bd:04:5b:bf:19:17:ed:99:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93515f25986e4b572a78b109d995c9ddf5da1266
Validity
Not Before: Aug 6 08:00:43 2025 GMT
Not After : Aug 7 08:00:43 2025 GMT
Subject: CN=2795ac0dfa5236d311fc65c472a838b4efc07f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:ef:26:c8:66:8f:f7:c8:d2:85:69:f3:0f:
6c:a7:2d:bb:e9:44:e0:4e:c4:f7:ea:3a:2d:3a:e8:
57:ad:38:07:33:e8:bf:19:6d:f3:9b:68:85:3b:79:
dc:09:06:61:38:5f:78:07:16:30:fa:f3:47:35:ba:
72:1f:1a:13:2d:22:2a:cc:bb:20:c7:79:3d:a9:1c:
b6:69:96:f6:f4:dc:cf:e3:a1:4f:b7:f5:ef:5c:a8:
5f:b3:78:95:5b:97:21:f0:e4:7b:57:3e:ef:e1:10:
49:bd:11:35:28:02:63:f0:b5:00:33:fb:e2:d3:ae:
6d:6e:94:57:09:57:c2:6c:bb:6a:46:9d:20:f9:25:
27:8f:ef:ef:19:6b:e9:0a:97:e4:1c:dd:84:7c:12:
95:05:84:55:16:aa:c6:50:0d:48:15:6d:99:d5:55:
2f:42:bc:fc:13:df:c1:11:b8:33:c9:b4:6f:21:6b:
39:98:19:03:80:a0:aa:97:1e:23:5a:92:53:3e:a5:
5d:6d:f6:3d:cf:02:88:4f:dc:dc:7b:f8:aa:46:ba:
bb:41:18:ef:67:c9:b0:d5:eb:0e:51:b1:1f:f0:ba:
73:b1:f5:a1:57:bc:a5:9b:ca:71:e3:db:82:d1:1a:
52:fd:35:8b:5b:5e:8a:d9:68:04:00:cc:45:8f:a2:
07:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:95:AC:0D:FA:52:36:D3:11:FC:65:C4:72:A8:38:B4:EF:C0:7F:70
X509v3 Authority Key Identifier:
keyid:93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:51:a9:47:17:61:aa:04:83:90:89:07:f4:cb:46:ef:b1:0d:
46:5f:78:17:d4:49:8d:66:bc:51:09:a3:14:fb:e6:e4:c0:1b:
da:14:1c:a3:d0:22:d4:8c:12:11:7f:61:e4:dd:55:79:bf:bf:
f5:86:4b:3f:2c:57:56:57:4f:49:f4:b7:a5:19:d6:60:66:5b:
44:d4:05:e3:5f:9a:70:d7:5c:db:4b:84:16:f8:a9:49:e7:72:
18:7d:b5:a8:4a:9c:b7:29:71:1a:a2:50:35:94:a8:9e:ae:63:
52:e4:9f:a8:ba:ba:ef:40:4a:e5:31:21:56:8f:db:9f:db:40:
fb:ec:91:40:ca:0a:a1:88:db:7d:a6:e1:e3:12:d2:b4:1c:05:
61:da:c6:b1:a7:59:a5:20:24:0d:22:e5:92:0a:ed:35:10:a7:
8f:20:ae:e9:10:e3:86:11:06:c1:94:fc:9b:34:4a:d2:04:8f:
9e:37:95:c8:ff:d3:e8:53:e7:bd:2f:e0:89:53:76:70:fc:69:
a9:d3:77:73:f6:f5:ed:2a:01:b3:cc:68:e0:5d:77:73:1e:ac:
75:f9:1e:f2:42:58:4f:05:d9:cd:08:16:f7:ae:bd:57:0a:2d:
a7:20:77:5e:2e:31:79:15:b4:14:8f:ef:a6:5c:36:fb:36:eb:
cb:bf:1e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:16:29 2025 by rpki-client