Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
File: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft (raw, json)
Hash identifier: FeEgsJCOHfNNA5qxC4Bohdg+lBWdp8gaAUd3qXTvvvU=
Subject key identifier: 95:40:33:27:E9:9B:A9:2C:D3:EC:D7:FF:93:5E:CB:BF:DE:8F:32:C6
Authority key identifier: 93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
Certificate issuer: /CN=936cb336c1beb71d4fbbaae243b23352c6270061
Certificate serial: 01984AE56E816E3118489E6BC9AE864B55F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
Manifest number: 0E5C
Signing time: Sun 27 Jul 2025 08:00:06 +0000
Manifest this update: Sun 27 Jul 2025 08:00:06 +0000
Manifest next update: Mon 28 Jul 2025 08:00:06 +0000
Files and hashes: 1: 77Da0cUu_C8djIEncMxzodElOpE.roa (hash: O6xd7yyxwxYfy10toui/N1cFeV/zSXBxnL9OigcdZr0=)
2: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl (hash: p8njZ7eyNkv6YuK0krWIP+Ukx3Nkh/eBJ9DCvVDRRP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:6e:81:6e:31:18:48:9e:6b:c9:ae:86:4b:55:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=936cb336c1beb71d4fbbaae243b23352c6270061
Validity
Not Before: Jul 27 08:00:06 2025 GMT
Not After : Jul 28 08:00:06 2025 GMT
Subject: CN=95403327e99ba92cd3ecd7ff935ecbbfde8f32c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:24:91:14:3a:18:f9:b5:74:bd:0d:54:78:bf:
a7:c7:8d:f5:9d:98:6a:38:26:e1:2c:c2:80:62:a3:
eb:ea:76:76:40:0a:71:ff:4f:cb:16:46:71:dc:91:
ab:40:5d:00:ef:22:f6:7e:89:db:bb:ec:9f:f0:6a:
1f:4c:1c:13:c0:73:44:11:6a:f4:ba:85:22:42:15:
99:5c:8c:09:1c:f7:51:b0:69:dd:a1:28:81:99:b3:
92:5b:0a:a1:1d:1b:48:9c:1c:9c:8a:c0:58:1d:73:
f7:35:22:58:31:8b:0f:d9:96:4d:5c:cb:85:ef:6f:
05:6b:88:63:ac:15:46:2f:92:e8:39:eb:27:97:3c:
35:a9:5f:7c:20:c1:8a:62:e7:94:68:59:90:ba:a4:
43:47:2d:c5:07:05:d0:cf:32:c5:45:7d:24:3d:67:
69:1d:55:69:0f:60:8f:70:a5:c9:97:7b:72:c1:30:
e7:b4:3c:c4:73:43:1e:ef:ad:3b:11:d4:7f:6c:a4:
ce:24:b0:c0:dc:1d:d0:df:d7:05:99:d3:91:d9:dd:
d4:1b:dc:14:67:22:ed:9a:f5:0c:1b:69:d3:b8:cf:
db:b8:c0:38:ed:60:2b:ff:1d:90:16:99:8a:0f:d7:
07:8c:be:b5:29:cf:60:96:5b:13:7f:d1:76:4d:b5:
b9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:40:33:27:E9:9B:A9:2C:D3:EC:D7:FF:93:5E:CB:BF:DE:8F:32:C6
X509v3 Authority Key Identifier:
keyid:93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c2:6c:63:51:c4:0c:fd:ab:ce:2e:38:46:35:a5:a3:67:94:
ff:b6:28:7f:3e:16:56:3c:33:49:fd:bd:d9:bd:3d:3f:05:73:
93:55:ed:17:18:fa:2a:45:aa:06:e2:10:e9:7b:4a:36:e6:06:
ad:af:f9:8c:a9:16:d4:6d:8a:50:cd:08:a2:35:db:ed:30:fd:
8b:6c:4c:e8:13:11:8a:6c:1c:f3:ae:be:80:d2:3d:5d:92:63:
c7:36:47:bc:e6:81:af:09:2e:85:8d:35:6d:d5:52:23:fa:54:
d6:00:1d:93:9b:ea:2b:b0:2b:07:1c:53:9d:9e:2b:ee:e9:d6:
a5:b3:11:16:85:3e:5e:91:35:0b:e8:58:22:6e:98:c2:d0:d4:
ba:d9:06:8c:07:dc:dc:9d:ed:33:ae:2a:f7:0c:82:ef:6b:d7:
11:77:30:47:16:ee:aa:cd:45:5d:a6:e9:af:60:b3:bc:d7:6b:
5c:30:b6:e1:a1:e0:47:c4:e0:47:12:93:c6:ff:28:32:43:d7:
d9:e3:2d:a3:e1:0d:4d:b6:9c:de:6e:97:20:ae:3a:7f:8d:2d:
54:c2:ae:25:36:ee:fe:7f:f6:8f:8a:62:bc:9a:43:71:7d:19:
09:00:0f:dd:32:e0:53:23:d6:0e:89:36:1b:86:8e:23:08:ed:
91:42:36:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:12:18 2025 by rpki-client