Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier: oZk1I0OAlEJH71rGEZYcFnoZ/wfiKOB2LfbEPR+nzGs=
Subject key identifier: 64:C6:B6:A0:72:0D:0E:C6:FA:89:64:F1:0A:C2:55:C4:54:47:6C:87
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 0198488940855BFD3C55786BD62DB7A3D068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 21:00:11 +0000
Manifest this update: Sat 26 Jul 2025 21:00:11 +0000
Manifest next update: Sun 27 Jul 2025 21:00:11 +0000
Files and hashes: 1: 9w7Z5uUGAiM-_Df1voiT4N-AIgQ.roa (hash: MPq4XPIwVMd5VTIFEn8awNds0lwWw2BnIcp13WOQH2k=)
2: BDePhfa6XjPm6GJ2nhEOB22J0Cc.roa (hash: +yLTNZd1DxNd/w4/Tt21tkQYSV5rMNl3vDHxAq0lK+o=)
3: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: uKTHy4ZQCklW887oXScpLD7XRo5gI3hHm90E/yEoES8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:40:85:5b:fd:3c:55:78:6b:d6:2d:b7:a3:d0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Jul 26 21:00:11 2025 GMT
Not After : Jul 27 21:00:11 2025 GMT
Subject: CN=64c6b6a0720d0ec6fa8964f10ac255c454476c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:5f:ff:d9:1c:18:15:a2:2a:e3:2b:48:bc:
23:0a:d0:35:8c:aa:f6:dc:96:55:d7:70:3e:28:ee:
12:00:86:d3:1b:3b:80:3f:db:27:bb:6c:a8:b6:60:
2a:9d:89:03:fd:32:61:2b:48:97:a3:95:1d:61:7e:
49:fe:c0:3b:ce:a7:0e:e7:bf:8e:b8:43:ef:16:52:
4f:34:33:20:da:c0:b8:c5:14:41:8e:96:56:ac:25:
ae:20:6c:38:cd:a5:d4:61:5b:32:99:fa:5e:c6:98:
29:b7:e5:bf:71:14:60:04:7e:d5:8c:ad:e9:d6:8d:
82:45:28:2a:b1:3d:b0:d3:15:c1:b1:7b:c5:a1:b4:
76:2b:d7:25:82:c5:31:d2:db:18:e8:86:b4:37:7c:
80:93:1e:0e:bb:3d:c4:43:f8:97:da:a5:1a:bd:43:
85:45:33:6c:3c:0f:cd:7c:30:83:3b:d7:44:dc:81:
04:2b:d1:33:b7:ec:8d:0c:30:1a:4e:77:7a:8f:58:
9b:40:04:b2:19:af:90:ae:d4:d4:b8:b7:e4:1a:bb:
32:f5:7c:16:01:e8:19:e1:0a:79:88:bc:fd:c1:53:
1e:76:3e:85:f6:ae:09:dd:92:df:0b:dc:43:23:b4:
a1:b0:6f:d1:87:e6:d2:61:90:72:0d:07:30:6a:70:
ed:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C6:B6:A0:72:0D:0E:C6:FA:89:64:F1:0A:C2:55:C4:54:47:6C:87
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6a:38:d5:34:03:b6:cb:47:2d:3b:75:f5:0d:fa:af:35:2e:
00:b6:d3:da:4a:74:75:27:d2:04:63:ab:78:c8:62:13:8a:09:
f8:2c:4a:d4:ea:69:2b:39:7a:3c:ad:4a:7b:b1:c3:37:30:d6:
2f:2a:b8:79:10:dd:d9:2d:e1:74:97:6a:2f:e3:9d:4d:ae:d2:
28:1f:b7:95:49:15:3e:2c:f5:c5:df:dc:6c:e5:68:79:38:29:
3a:85:79:74:ce:a4:d6:10:c2:37:fa:b9:22:9d:d1:1d:2c:f6:
86:82:a2:4f:1a:b7:a5:b9:c1:cc:61:d2:7b:39:e8:67:9d:bc:
74:ef:d8:c6:9a:1c:de:59:be:db:c8:25:7c:6f:3c:11:b6:23:
cb:18:cc:63:16:92:33:fc:f1:78:2a:18:f1:d3:98:b6:5a:f2:
3b:5a:48:91:88:53:3a:4f:4b:cc:10:91:4c:02:0b:24:69:ca:
79:7a:02:81:eb:02:d9:a1:8f:c9:99:a6:24:9a:7b:d5:ef:01:
4c:0f:ef:7f:f4:22:14:a2:15:df:36:25:3b:50:13:77:72:e3:
42:cf:9c:e1:f1:7a:fe:b5:61:32:d7:ff:23:00:91:44:76:b7:
09:95:1e:3c:82:49:e4:d6:23:e0:9a:1f:46:26:8f:2e:e4:11:
fb:63:a1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:27:54 2025 by rpki-client