Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
File: kUXq2NPxKEQCtvdWFKhyV1A84bw.mft (raw, json)
Hash identifier: dX6Cm+CQ6iy8w72WefRYN/mDNdZNhkBT6KJ3sYUfOJ0=
Subject key identifier: 5F:E4:6B:DB:D4:C3:66:53:8D:75:A8:E2:57:58:37:14:22:61:6A:4F
Authority key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
Certificate issuer: /CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Certificate serial: 019845887F56ED94B345443420D61A69D1D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
Manifest number: 13B8
Signing time: Sat 26 Jul 2025 07:00:30 +0000
Manifest this update: Sat 26 Jul 2025 07:00:30 +0000
Manifest next update: Sun 27 Jul 2025 07:00:30 +0000
Files and hashes: 1: ELPDypl8AO7yu9Qb_T04CJHIAmc.roa (hash: uMxQfCf54KpZ6vXVJrK4LBRwbGjKGq0Ym1Kz/m5o7Z0=)
2: h7jotg4RS-yoMxmLNwMHtqMIvTo.roa (hash: 0RvIPvSKfKKYiob3W8lnsFljStCAR/IAjli0EYtRtIQ=)
3: iRTljilS88fdbTnqXefNcD2KdQw.roa (hash: SYC9aJR60HZt276fl/3G18s2lWN51c7daVgQyb0yCnk=)
4: kUXq2NPxKEQCtvdWFKhyV1A84bw.crl (hash: sE76JDrkGbwq979TeW+18Q3JejUz7vxSCDGLvCjR01M=)
5: vEwnUG1RajWkcLEBWJPnIiLLgBM.roa (hash: sSHl9JnRfzO2J5TGzVLlmHvYGgd6KK351LDclJH6UZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:7f:56:ed:94:b3:45:44:34:20:d6:1a:69:d1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Validity
Not Before: Jul 26 07:00:30 2025 GMT
Not After : Jul 27 07:00:30 2025 GMT
Subject: CN=5fe46bdbd4c366538d75a8e25758371422616a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:e3:a1:cc:42:77:43:5b:cf:8c:e4:97:f5:
0d:f3:6f:87:db:db:ea:26:80:92:5b:e2:ac:a0:9a:
6a:df:e8:77:16:bd:54:b8:47:12:c1:83:0e:cd:95:
de:fd:75:d9:17:fe:08:39:4a:b3:56:67:78:81:b0:
bf:f9:ec:bb:a7:06:9c:ac:c0:7d:54:ac:4e:03:e1:
68:53:7d:a5:1a:91:b4:ca:46:5b:69:70:a9:a0:0b:
a1:66:19:c9:e7:3e:20:73:50:ef:10:53:39:4d:08:
eb:38:1f:20:3a:b0:01:f9:39:ec:5e:c7:83:59:18:
e2:e9:c5:ff:c3:ea:04:ae:00:2f:50:d9:b6:81:2a:
c7:01:5a:f4:dd:5e:9d:0f:c6:71:cf:b8:17:11:52:
f4:a6:37:93:47:a0:05:ba:a3:d5:e7:64:02:27:84:
bd:71:cb:ed:67:5a:ee:ed:09:4c:61:bf:b6:31:9c:
9b:a3:af:9b:63:8a:a1:b3:aa:22:62:0b:b7:7c:c5:
8d:ee:14:89:32:31:dd:7a:a3:08:94:07:52:02:0f:
2f:25:e0:09:c0:20:f1:55:42:0b:c8:bd:08:bf:bd:
fd:0d:62:96:69:66:58:a5:24:6d:40:c8:fa:e7:fb:
c9:12:fb:f1:a4:8d:9d:fd:95:b3:57:eb:a3:a2:f6:
fb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E4:6B:DB:D4:C3:66:53:8D:75:A8:E2:57:58:37:14:22:61:6A:4F
X509v3 Authority Key Identifier:
keyid:91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6c:96:72:69:68:01:b6:77:db:97:ef:37:93:c0:9c:0e:92:
af:c1:0b:5d:8e:b9:b7:32:fa:a8:0b:45:2a:de:96:4f:39:30:
43:2b:4d:96:6f:59:ac:88:64:5c:a0:c7:3d:c0:4a:c8:18:de:
24:f1:b0:75:b9:e9:95:33:17:d0:74:6b:e1:5a:f7:b9:bf:0f:
b9:58:35:1b:06:d0:c8:4f:16:77:23:32:fd:f1:aa:2e:bb:f5:
0c:ae:b6:f9:3c:9d:56:67:a4:d2:63:5e:8f:23:2a:cd:ca:2e:
dd:57:7e:18:ea:a4:d6:c6:c4:63:61:9c:6e:45:f7:fe:c7:fe:
fa:f8:f0:87:c0:19:fa:f6:8b:96:39:7e:e3:7c:03:cd:da:34:
9d:18:36:2d:38:64:92:2f:00:6a:9e:29:c2:37:25:d2:df:5a:
4c:b2:f4:08:59:1e:a8:11:9c:c8:22:ae:cf:aa:95:7b:42:bb:
18:64:b8:ba:70:5c:8a:50:e1:46:2f:ee:a7:e6:4a:91:0c:5f:
e7:50:d3:db:43:a4:8a:11:68:d7:19:72:f5:12:15:b2:37:e4:
85:e8:11:e8:4c:48:13:fe:63:e4:e1:9e:1b:08:18:21:c5:81:
6b:ce:f2:4b:03:0e:90:22:8d:ac:ab:af:b4:6c:81:b3:71:5c:
87:25:a7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:01:20 2025 by rpki-client