Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
File: RKqBMTnAax3PG_6DMrm4Aas-swI.mft (raw, json)
Hash identifier: Qn584/beDIY5VFCeku5TYaFX52j09B5KBG8czPFHYhw=
Subject key identifier: F7:66:E9:E7:24:9D:94:A1:F4:13:A2:F5:DD:DC:19:5E:DF:7E:89:EE
Authority key identifier: 44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02
Certificate issuer: /CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302
Certificate serial: 01984889C71CE55953C0C8339949C0763430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
Manifest number: 0618
Signing time: Sat 26 Jul 2025 21:00:45 +0000
Manifest this update: Sat 26 Jul 2025 21:00:45 +0000
Manifest next update: Sun 27 Jul 2025 21:00:45 +0000
Files and hashes: 1: RKqBMTnAax3PG_6DMrm4Aas-swI.crl (hash: rlXdjPGn6bHt6UTyliSrvBBRvZNDki4hQh5Q2wvfx28=)
2: dulLD0ENjA9tfgPr9DrSQJxWn5k.roa (hash: ecAhh1+SnR4Xv8G0G+2S5KTuId8TsIACx8G94ng9hIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:c7:1c:e5:59:53:c0:c8:33:99:49:c0:76:34:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302
Validity
Not Before: Jul 26 21:00:45 2025 GMT
Not After : Jul 27 21:00:45 2025 GMT
Subject: CN=f766e9e7249d94a1f413a2f5dddc195edf7e89ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:16:b8:24:23:f5:db:42:49:17:8b:0a:f5:77:
c6:b5:92:19:4d:d3:a1:6e:34:89:f3:16:3c:7e:ab:
0b:36:57:40:a3:87:0d:e3:4b:18:9e:9f:b7:b7:64:
b1:b0:79:51:57:6d:b9:e7:2a:36:c9:b7:64:9e:96:
9c:d5:00:df:1e:17:7a:07:c6:42:e7:88:9b:39:ea:
09:ff:7f:99:c7:00:19:18:bb:1a:8d:ec:51:8a:ab:
ae:52:e4:07:ec:89:50:75:66:89:31:1b:ee:cd:f1:
39:b2:53:e5:cb:3a:9c:2a:76:17:8d:f2:35:e8:cd:
3e:55:24:bd:f3:ff:c7:61:1c:4d:79:c1:28:d1:2a:
0e:cd:a4:0e:7e:aa:fc:a6:b9:d9:d3:99:05:6b:24:
97:e6:16:44:d1:d4:5e:c4:e3:93:78:70:3e:eb:69:
ef:85:b7:d7:f5:f4:a1:4b:e9:ff:ca:9d:6e:b7:48:
19:93:86:ca:1b:92:39:c2:81:e8:7e:9a:33:10:0f:
1c:21:4d:d3:61:db:47:5c:ba:6b:3d:eb:c1:22:2b:
7d:fb:31:7d:93:da:30:54:fa:3c:b0:cc:4d:87:91:
52:98:e2:d7:34:4a:fc:db:6a:ba:11:69:55:1e:be:
2b:9a:de:81:39:6f:77:b5:c4:f2:fc:8b:b0:df:83:
62:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:66:E9:E7:24:9D:94:A1:F4:13:A2:F5:DD:DC:19:5E:DF:7E:89:EE
X509v3 Authority Key Identifier:
keyid:44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0d:22:5d:81:16:02:46:bc:bc:fe:fb:de:e1:62:91:74:d7:
c8:81:27:db:9d:10:28:7c:b0:7f:e1:0d:d8:47:2a:d1:e8:ab:
90:b6:3a:b5:8b:90:f0:71:9b:a3:77:f0:0c:07:fd:34:ad:a6:
c3:70:82:01:64:89:53:de:cf:7a:73:ad:36:1f:c5:df:61:e0:
96:36:1a:37:c1:bc:a9:ac:f1:7f:44:c7:2b:2b:b3:22:12:f4:
3e:3e:cc:05:4a:e0:99:68:26:98:ea:e7:0a:fb:05:01:6a:a5:
eb:45:3f:bf:34:88:4d:cf:4f:3c:4e:b5:b9:0e:eb:da:2f:9b:
5b:f9:d7:4b:1f:6a:cc:da:53:6b:24:a1:68:da:8f:8a:fb:38:
1c:83:f1:3b:b0:5f:fc:a8:99:22:99:cb:05:c0:03:30:76:b3:
c0:f0:13:3c:39:58:2b:b6:c7:d9:2a:f5:19:94:19:0a:6f:6a:
29:7d:27:e3:c7:b1:90:87:c7:7d:84:89:ae:55:7c:e8:1a:3f:
92:c9:03:4e:f2:e4:bf:17:5f:8d:65:65:59:38:91:64:39:61:
d8:8f:99:ea:82:fa:70:8f:dd:7d:27:fb:68:95:88:10:e1:78:
d6:83:0b:f6:44:d5:56:a7:ef:17:89:bc:88:42:49:41:86:05:
fc:71:ca:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:41:51 2025 by rpki-client