Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File: k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier: Gu+Sx7rvFxXDdHMqnInwW6ZzVjkO9+kD419HSNZ4Tzs=
Subject key identifier: 04:77:5B:F9:B0:E8:D2:5E:E2:77:0B:FD:E4:AD:DA:90:A9:73:9B:05
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer: /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial: 019845F6664AEA4B32E43D3F3D86A5684322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number: 1064
Signing time: Sat 26 Jul 2025 09:00:32 +0000
Manifest this update: Sat 26 Jul 2025 09:00:32 +0000
Manifest next update: Sun 27 Jul 2025 09:00:32 +0000
Files and hashes: 1: 1-CkrT83J2r6H2IArRB97VaFfjh0.roa (hash: BhTDJ77YgLb9cA09YBYRFayzA/zGCXfnlywl/s38PZA=)
2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: 8ihRZQCkKtQC6N2lc7WmHQO882cfI52mKcAVsirW88Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:66:4a:ea:4b:32:e4:3d:3f:3d:86:a5:68:43:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Validity
Not Before: Jul 26 09:00:32 2025 GMT
Not After : Jul 27 09:00:32 2025 GMT
Subject: CN=04775bf9b0e8d25ee2770bfde4adda90a9739b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:ec:a4:09:0f:d1:b4:aa:8c:97:6f:90:a3:
0b:c2:0a:fa:c6:82:37:b6:6e:ad:a4:a5:93:46:93:
2c:73:42:97:ca:95:65:f4:76:b2:b4:1a:b1:f6:c3:
f5:9d:28:d8:48:19:55:e2:bf:2c:d3:f5:74:e3:9f:
6d:7d:8b:76:ee:16:33:e0:20:5a:8b:b1:4a:b2:d6:
d4:78:ac:56:14:c3:0b:80:c1:8d:77:bc:1c:65:fa:
5c:b9:b8:99:5a:3d:17:83:d0:07:7a:28:47:ff:53:
b5:bc:40:b0:f0:11:ad:4d:96:c2:25:df:43:e2:1e:
84:02:d9:0a:c5:63:3e:5c:d8:42:88:9c:ca:2c:3d:
6a:d1:23:cc:2a:c7:ac:e7:91:be:db:3f:fe:1b:89:
34:56:17:bc:ab:2c:aa:16:45:c8:47:0e:fc:89:4a:
4a:f3:ed:96:58:50:e0:fe:ef:ca:c0:f6:c3:21:62:
25:4f:20:f1:59:af:45:b4:2c:b3:c4:58:38:20:15:
09:ee:a1:71:79:b3:a3:08:ed:32:30:de:77:bb:b6:
f2:4c:a4:e8:b6:4f:51:72:0c:bd:3a:7e:04:45:4c:
46:43:d4:1b:6b:57:a6:2f:fb:b5:fc:14:2d:0b:54:
fe:f5:f8:e8:ea:79:e7:75:fa:17:06:cb:d8:b7:87:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:77:5B:F9:B0:E8:D2:5E:E2:77:0B:FD:E4:AD:DA:90:A9:73:9B:05
X509v3 Authority Key Identifier:
keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c8:eb:c6:c2:42:e4:dd:c5:f9:7c:5d:c5:b3:61:82:42:9c:
5b:84:bf:b4:e7:b1:00:38:48:ff:78:83:12:a6:a8:69:06:7d:
40:d2:c9:b8:46:bb:1a:5f:7c:3c:78:98:e2:07:ca:68:c4:d8:
7d:96:78:7c:4f:f1:39:eb:02:03:64:9d:26:1b:84:62:3e:4c:
43:fa:04:32:26:7c:5f:c6:ec:fe:46:bb:f0:65:31:15:51:67:
ce:82:20:95:b4:02:7b:e5:7a:06:e6:41:5a:10:fd:ad:ca:86:
9e:3b:ab:34:25:f9:52:5c:7c:03:49:e0:13:eb:2e:24:2f:84:
8d:57:21:9c:00:f6:02:57:7a:03:0b:c6:c3:8a:97:c3:6f:ce:
da:60:df:96:89:48:6b:7e:05:de:3b:c3:87:22:c8:ba:18:58:
cb:83:90:6b:e5:bd:c0:19:5c:ce:34:da:81:41:83:f2:2a:70:
59:7e:59:23:c8:1a:b2:eb:e1:e8:16:c3:fd:44:23:c3:25:cc:
65:24:af:a0:4f:e6:0e:b9:c3:e0:bb:b5:86:91:ca:ea:66:ba:
78:35:7a:8b:d8:0a:93:1a:9e:2f:e5:f0:59:e9:5f:83:fa:c0:
a3:57:29:35:55:dc:4f:b1:ef:e8:70:5d:e1:a5:1b:e3:32:e4:
c9:4b:f3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:08:28 2025 by rpki-client