Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: 6dFzbKYD2+UcFnJosOo4O0JIrUlgqXBokiZs/UjbjGc=
Subject key identifier: 3D:57:4E:F2:A4:BA:97:7E:BB:C9:34:5C:46:88:F6:F8:9B:87:B1:B2
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 019874F5219993304AD856E33490D321E4D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 12:01:18 +0000
Manifest this update: Mon 04 Aug 2025 12:01:18 +0000
Manifest next update: Tue 05 Aug 2025 12:01:18 +0000
Files and hashes: 1: Uc_eHHiK2oso3GTkmMSET3r6doI.roa (hash: 0NgJOw3Kd7PNm0qwiJH+X6KSvVouo/yd/FKitaaEd7c=)
2: acAq7MIcmx18UIHmz-jlBD_t3Ys.roa (hash: Zx8ySSl2DHqJTH9VbThnUkgVbOzhPotBL0G7iUFbFBE=)
3: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: udOg4gngbiL3XKkFokdQaHJyC//wEeNbgZvW1uD1adY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:21:99:93:30:4a:d8:56:e3:34:90:d3:21:e4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Aug 4 12:01:18 2025 GMT
Not After : Aug 5 12:01:18 2025 GMT
Subject: CN=3d574ef2a4ba977ebbc9345c4688f6f89b87b1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:d9:b1:0b:8e:21:17:3a:17:6c:89:ea:b8:
55:7e:8b:8d:d1:29:2b:9d:b9:f6:89:cd:d5:11:65:
c9:c0:f8:25:4f:65:c2:ea:2a:c4:3b:c0:40:6f:24:
69:0d:2e:b9:c9:ca:f9:86:08:52:fe:ff:3d:25:ba:
27:37:c1:76:6e:b7:f7:3e:76:e2:68:ef:17:27:4d:
09:c7:19:ad:ab:f9:6f:f1:25:c6:11:a2:65:bb:3d:
f3:0a:5c:a0:96:a6:4d:84:5a:ed:54:2a:f5:ff:9d:
1e:c0:5f:b8:06:fe:40:72:3d:ed:36:a9:5b:c3:aa:
d1:4e:18:8d:84:d5:2b:5a:1f:15:33:dc:d4:29:bc:
37:b1:39:db:3a:02:a2:03:a4:a7:2b:65:e1:40:bd:
d4:11:d2:37:1e:86:6b:7a:a5:d6:9e:e7:7b:0c:8b:
44:32:39:d1:10:6d:c3:66:4c:f0:45:a2:93:a1:29:
e9:dc:d6:08:9a:96:e2:cb:0a:25:14:f4:4e:1c:8e:
bc:29:13:70:67:ed:28:a7:b4:fb:ff:aa:a1:e8:60:
b5:41:ef:d5:dd:ec:8a:2e:57:b1:ca:4a:53:f0:9c:
04:08:7a:42:93:2f:eb:6e:89:d2:04:19:c1:a5:54:
03:f4:4b:15:75:cf:af:a2:96:19:29:8f:9b:ef:e0:
23:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:57:4E:F2:A4:BA:97:7E:BB:C9:34:5C:46:88:F6:F8:9B:87:B1:B2
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b1:9e:2e:49:56:70:26:60:4c:a3:05:0a:9e:3d:41:92:27:
dc:a2:a2:79:a3:6a:bc:5d:02:d4:3e:ac:f6:db:da:29:57:6a:
b5:c8:c1:85:b3:97:7b:3b:a5:54:6a:8c:d5:05:c7:ed:d5:28:
02:f1:4f:44:26:a8:6d:9c:35:66:82:44:97:9c:89:49:55:4c:
25:13:ba:27:a1:f9:84:bc:e7:c9:b8:47:2a:f3:bc:52:bb:4c:
8e:9d:04:af:c8:e1:84:c0:f8:ea:da:f2:54:2e:fa:ab:c9:14:
9d:e5:d5:de:8a:2b:b7:ad:53:b7:d9:86:9d:d1:3c:0e:3d:8f:
74:1c:bb:55:a0:89:15:ac:b4:e9:f6:4a:aa:de:70:e7:28:66:
42:a6:16:25:aa:10:21:0b:de:57:6c:ce:54:b2:ac:2f:c5:44:
09:f4:ca:fe:4a:c6:8e:4b:72:65:5f:38:2d:67:86:df:72:ef:
60:7e:02:e6:e5:b6:08:09:09:61:69:a9:3e:f9:60:bb:82:a1:
ff:92:ab:a3:1a:13:21:fc:85:e3:90:58:96:84:59:5c:0c:ea:
a5:13:ae:16:02:1d:ab:f6:89:d5:81:6e:2d:a2:1c:42:3b:d2:
cf:2e:43:b7:0e:b1:9a:20:44:bc:3e:ea:47:5c:6f:0c:95:5f:
50:60:c0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:32:37 2025 by rpki-client