Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
File: k--iv5CiNyiFJyfxJu3mUobDymc.mft (raw, json)
Hash identifier: I+NnMKVhr9Iy4vmr63EdBinokQxo44rwCz7wAF1yPfk=
Subject key identifier: 17:8A:A3:E6:C2:DD:28:01:E1:7F:21:9B:89:4C:70:EF:68:7F:30:21
Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
Certificate issuer: /CN=93efa2bf90a23728852727f126ede65286c3ca67
Certificate serial: 01987A51E8B9C5DB1E869671130ECD575D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
Manifest number: 03CD
Signing time: Tue 05 Aug 2025 13:00:44 +0000
Manifest this update: Tue 05 Aug 2025 13:00:44 +0000
Manifest next update: Wed 06 Aug 2025 13:00:44 +0000
Files and hashes: 1: 7kHtWJwf55jOxnVlDwQ_Pz_QbDo.roa (hash: 5xzI11cU+vDKS4SWJ2VW5NiWSSXP8uOI0oJRmaU/700=)
2: 7t7MlmcK5nHqyL8qD10NpjUf4kU.roa (hash: 9aqRdXb5dOWxjBFXvCoD8FGSfMTH7XxxsevlkYrw8og=)
3: k--iv5CiNyiFJyfxJu3mUobDymc.crl (hash: QVfGrR1CbNzpFpxKdBl2y3HVDmHIwCXHH4SAyfB0NNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:51:e8:b9:c5:db:1e:86:96:71:13:0e:cd:57:5d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67
Validity
Not Before: Aug 5 13:00:44 2025 GMT
Not After : Aug 6 13:00:44 2025 GMT
Subject: CN=178aa3e6c2dd2801e17f219b894c70ef687f3021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:47:08:5c:4a:df:a6:51:1e:10:71:70:45:
d0:4d:c6:87:5d:31:e3:1a:52:0a:fa:69:11:5f:0d:
32:e9:46:3a:54:f4:a5:de:eb:eb:20:ba:53:f2:7f:
f0:7f:9e:d9:a0:d4:ee:64:a3:55:12:36:2e:0d:40:
b1:67:6a:0f:6f:ce:3b:cc:41:13:c4:52:7b:73:44:
8b:63:8f:ba:3a:cb:80:42:e8:3e:d7:04:7c:50:9c:
a2:8a:7a:f3:25:21:53:e0:f4:ea:45:86:33:75:1f:
00:c6:83:76:93:cd:4d:f0:f2:58:c9:24:f2:5c:91:
ce:92:c4:02:9e:29:67:00:cc:45:5d:0e:9c:03:a5:
fd:f4:00:28:94:fd:af:e5:ce:7f:c6:de:34:de:63:
d1:56:f0:35:2b:9e:c9:8b:bf:d0:f8:db:2d:b3:3f:
35:02:12:13:7d:38:ea:16:92:a4:ef:9e:66:ef:ee:
26:e8:dd:55:26:12:96:a7:a0:54:d1:e2:8a:68:93:
d5:21:81:8a:02:d8:5d:c8:2b:f0:83:c4:9b:7e:23:
cc:3f:1d:2e:72:4a:24:cc:02:aa:ec:2a:4e:0c:0d:
8f:5a:cf:cd:cd:1d:5b:37:e4:d7:a4:d7:e2:7d:ba:
60:0f:0d:93:5e:01:e4:f9:19:c4:c8:c1:51:b9:e8:
ab:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8A:A3:E6:C2:DD:28:01:E1:7F:21:9B:89:4C:70:EF:68:7F:30:21
X509v3 Authority Key Identifier:
keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:73:89:55:97:61:11:67:db:43:1d:40:d6:e3:3d:93:15:83:
3b:6e:01:50:85:62:6c:4d:2d:54:be:44:f1:65:8d:0e:31:79:
bb:d5:0f:d9:6e:4a:0e:b1:a7:b9:47:e1:c6:94:de:72:35:28:
28:c9:32:7c:b4:21:e7:81:3b:8f:40:d0:96:29:76:64:14:89:
22:00:85:59:39:4b:a5:9d:a5:06:bf:c0:a3:c2:10:e7:f7:d4:
8e:65:0c:1f:ab:80:09:90:52:a9:5f:b2:d5:96:f0:e4:cf:50:
98:f6:7e:d2:e5:d6:ba:c3:09:14:66:ff:7d:74:12:1d:de:28:
20:2c:0c:ca:0f:d5:28:42:d5:65:b6:54:41:51:25:fc:15:1e:
4c:5c:50:77:d4:7f:21:64:73:b4:18:72:1a:82:f0:c0:bd:74:
7a:b0:81:04:d7:3d:6c:e8:d1:79:7b:23:db:72:29:f2:22:da:
88:35:9b:7a:14:03:a7:dc:fb:4f:6a:0a:63:41:22:32:30:35:
76:6f:81:8f:ac:c0:a7:e9:1e:8f:4a:5d:cb:f9:b4:7d:54:14:
a6:24:c2:86:38:a6:ea:ba:40:f3:ac:86:88:9e:1c:ea:ac:96:
07:78:0b:8d:ad:13:d1:4a:f0:d8:86:ea:71:0f:f9:59:85:b8:
e2:24:46:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:11:56 2025 by rpki-client