Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: ++9GeVdXiZGssrFydNKJEZdz5CYlShBVt2nY3c/Ucf4=
Subject key identifier: FF:61:E5:75:12:E6:B4:AE:76:97:F1:40:BE:20:63:94:C7:EB:FF:66
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 019827EC925A34B81A70EE6AF1E08F00A9EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 15F7
Signing time: Sun 20 Jul 2025 13:01:11 +0000
Manifest this update: Sun 20 Jul 2025 13:01:11 +0000
Manifest next update: Mon 21 Jul 2025 13:01:11 +0000
Files and hashes: 1: R0_MeNcCGsgFbXPPMSbNiNB6onw.roa (hash: jCCdHzd1f1vyFj3zrZb6H/YnXBVmEiivGeOlhoHJWc0=)
2: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: tQXlhN4iPCdimWegxi8RqkGtG7srqL4JAcGghkQ1bfM=)
3: xiLzP1pUVJ4HlLptpzl15fneHrg.roa (hash: Oybd2JrzjZp9Unasli0WI1/BduGFzHUQWKvicye2j54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:92:5a:34:b8:1a:70:ee:6a:f1:e0:8f:00:a9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Jul 20 13:01:11 2025 GMT
Not After : Jul 21 13:01:11 2025 GMT
Subject: CN=ff61e57512e6b4ae7697f140be206394c7ebff66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:14:bc:af:77:e5:be:e6:88:d4:d6:34:69:5c:
d3:cf:18:cd:13:53:15:8b:b4:70:1c:b8:88:2d:3b:
36:24:cf:8e:e1:73:54:55:8b:6d:6f:6f:7d:2c:b7:
22:0c:7d:6f:aa:66:b3:b6:98:41:e9:1f:58:66:f6:
64:fb:c5:49:fe:1e:58:92:79:b3:63:92:e2:f9:f1:
1d:26:da:8d:90:e8:7b:68:2e:d5:9e:6c:d4:8b:e7:
20:be:1e:0f:0d:64:92:c0:0d:be:10:ad:50:2f:61:
37:ff:8b:70:27:9d:f8:bf:cc:d7:4f:69:83:25:c3:
fe:45:02:a2:c3:86:0b:98:7f:12:7b:3f:31:28:f6:
67:d7:7f:d0:21:76:bd:c2:cb:e6:9d:be:81:0f:a0:
59:6d:6b:b3:9c:e7:58:12:63:cb:2b:25:28:f0:6f:
ff:72:23:05:7a:56:0e:72:8b:eb:1d:fd:31:ac:10:
06:ea:03:b2:c1:e3:da:bd:e3:c7:3e:52:eb:e5:75:
77:aa:36:08:4f:79:1c:24:8d:0e:1b:70:10:9f:f4:
8a:42:74:77:41:31:5e:a5:3e:bc:26:bc:f5:58:73:
22:aa:02:11:b0:a6:c5:9a:a1:a2:25:58:98:be:a0:
f0:e1:71:9a:12:cb:02:3c:a1:af:0f:fa:6b:86:92:
b5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:61:E5:75:12:E6:B4:AE:76:97:F1:40:BE:20:63:94:C7:EB:FF:66
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:cc:c9:20:9b:48:c9:a2:f3:dc:61:b4:e3:2d:53:8b:c4:bd:
6a:91:c9:03:be:f6:23:4b:89:4c:a9:05:cc:b5:f2:27:52:e8:
77:03:90:d1:79:2b:a2:b8:8c:d5:d1:f7:4f:09:a2:74:80:27:
87:73:cc:d2:42:52:2d:ae:d0:85:fd:01:aa:b3:57:35:4b:7b:
f0:f7:a5:a7:ea:b6:fb:af:0c:a2:e1:89:2b:a9:9b:4f:b7:79:
20:32:2a:6b:35:d1:11:79:69:a5:a0:b9:28:fb:09:a1:18:8f:
7e:39:86:c3:28:03:87:fd:ed:ca:80:73:b9:0e:9f:42:7c:97:
ba:fa:63:dc:e8:4a:80:a1:bf:fd:66:15:c2:cb:af:e7:c7:4e:
80:dc:93:8f:74:be:88:c4:42:bf:7b:a8:64:ab:e6:59:42:29:
0a:3a:20:d6:c9:ab:70:7d:50:7c:f0:02:00:8d:fd:d2:a3:12:
6b:7d:0a:f2:95:8f:ac:85:d8:fa:1d:a9:e4:e1:f8:bd:28:6f:
ad:c9:b6:5e:12:f6:de:73:73:e6:78:7f:a2:5a:9f:64:8a:b2:
c1:65:25:cf:c9:38:b4:f2:0d:d5:43:db:19:8a:f0:75:4e:f4:
e6:98:69:d7:9f:f6:8b:8c:e1:58:7e:e2:1f:91:ba:ec:8a:4c:
67:42:3e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:56:29 2025 by rpki-client