Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
File: RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft (raw, json)
Hash identifier: xrs0kwqkRKcxyVb8jgrgjouYYzyWRv6iJlWTxFPv99k=
Subject key identifier: 88:16:AC:18:BF:6E:8B:B7:3A:C8:3D:6C:EE:44:85:E8:23:A9:50:72
Authority key identifier: 46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96
Certificate issuer: /CN=464528d9080c665db0551d8ad8b0f71f7bb76996
Certificate serial: 01984A41261115BBA7514277661158F7C1A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 05:00:40 +0000
Manifest this update: Sun 27 Jul 2025 05:00:40 +0000
Manifest next update: Mon 28 Jul 2025 05:00:40 +0000
Files and hashes: 1: RO-2xcQ-C0WrDSJ7Eu00WY23rS4.roa (hash: Avrv1nDidaSbZAK1I64G61mkaNMT6r8igSyRsacO8hw=)
2: RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl (hash: tSHlH9ft/rm3UmcfauPmtCd2kuJytQXe4d9pH9kUuQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:26:11:15:bb:a7:51:42:77:66:11:58:f7:c1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464528d9080c665db0551d8ad8b0f71f7bb76996
Validity
Not Before: Jul 27 05:00:40 2025 GMT
Not After : Jul 28 05:00:40 2025 GMT
Subject: CN=8816ac18bf6e8bb73ac83d6cee4485e823a95072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1e:01:12:95:c5:00:14:65:b7:61:db:21:8e:
e2:0f:c9:72:d5:94:3d:0d:e9:01:33:e9:f0:37:a7:
f7:99:14:1c:1a:46:8a:bf:99:fe:cf:1c:7c:6f:19:
a4:f4:ea:23:2c:3a:57:87:56:e6:6d:7d:40:39:e2:
b4:ed:59:52:9c:58:13:5a:84:50:8f:00:72:74:0b:
1f:58:c5:de:be:74:38:fd:ea:8b:fb:f9:76:cc:ab:
bc:25:44:2f:f6:f1:8c:d1:53:1e:2d:75:fa:06:cc:
21:6e:aa:e0:ea:2a:65:e3:f6:50:e3:b3:f2:3f:d5:
49:3c:11:f6:2c:88:54:3c:4a:97:5a:af:cf:d0:85:
99:e6:84:38:46:a0:0a:e6:5e:bd:11:00:16:54:18:
d6:8e:63:78:74:64:dc:db:da:3c:73:b1:d6:c6:21:
b8:f6:7a:f1:ec:68:40:0f:d5:4e:d7:04:3d:e6:c0:
e8:b1:4d:96:36:22:21:8f:44:09:83:f4:aa:18:38:
ac:7a:cb:5f:08:35:e4:96:e5:ac:68:21:e5:13:8a:
0f:37:b7:c6:3c:27:02:90:61:4b:6f:b7:cb:22:fc:
fc:08:37:fa:fc:79:0b:e3:3e:da:c5:b0:0f:38:cd:
a2:4c:9a:d1:64:96:91:c9:93:e3:d8:43:95:3a:4a:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:16:AC:18:BF:6E:8B:B7:3A:C8:3D:6C:EE:44:85:E8:23:A9:50:72
X509v3 Authority Key Identifier:
keyid:46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ff:85:cd:04:d3:90:8a:5f:c7:41:5e:05:20:5b:f5:1a:26:
c1:75:aa:50:14:c6:25:df:ad:17:a2:fe:8c:d9:85:1f:7e:b9:
e0:99:7f:62:2d:b1:fd:ef:29:aa:b6:40:75:83:a0:f5:60:fe:
e2:69:e9:60:df:37:a2:8a:f1:59:e1:cd:95:4c:7a:51:3a:e6:
8e:0e:44:83:38:b9:33:c7:b0:bc:4c:98:70:bc:7a:0d:52:04:
9e:84:8d:e4:a3:0e:34:aa:f2:29:b7:f3:a1:e2:c6:1b:e3:60:
be:de:af:d7:8a:5c:aa:21:e9:f4:8b:05:b4:54:62:86:90:09:
3a:04:57:e0:57:1c:e3:0c:36:fb:b9:25:b3:1b:5c:1a:c7:dd:
c8:4b:2a:4c:52:85:c9:32:47:66:03:41:d8:7d:ef:0a:48:10:
20:d8:3c:2f:0c:f4:23:43:e0:37:ad:a6:8e:e9:8f:3c:e8:86:
d3:01:9e:6c:3f:ec:95:29:d1:a1:fa:f4:0d:54:27:c7:51:5d:
82:6e:ed:21:7e:8f:bb:6c:e3:7d:db:48:08:cd:53:12:cf:0d:
e1:61:bb:4b:0f:be:1a:5c:b9:77:fb:41:48:c3:3c:6d:8f:98:
39:6b:a6:9f:d1:e7:40:6b:2c:4f:b7:a0:34:b0:50:93:31:72:
a5:bf:f4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:20:20 2025 by rpki-client