Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier: ThiuBnf9vlGT84I2PgzbTLFSAP27GM8K2l9Lyq2qFnc=
Subject key identifier: 46:AE:B1:E3:68:28:71:7C:5B:FA:A1:31:46:13:14:09:64:1C:98:44
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 019849D3027C8025B1051769987599CBC6F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number: 0F59
Signing time: Sun 27 Jul 2025 03:00:22 +0000
Manifest this update: Sun 27 Jul 2025 03:00:22 +0000
Manifest next update: Mon 28 Jul 2025 03:00:22 +0000
Files and hashes: 1: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: r6zGxZDCl/DtE1zCjiHqLFVp4CeeCZJTaHpY8W/HDq0=)
2: ju7OLwWOvoLnlAHiuO4kBTFVzwY.roa (hash: e9FAsffXnl64K8Cv3+KjxTUevpgUYG3UY/wewoBEVBQ=)
3: nbL7-TNKQqJ1-yJVoHEn9a5u6DU.roa (hash: tfXwKToKmsCep/7a6KKpGiz+Hfu7rsnL13FXZOQiKEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:02:7c:80:25:b1:05:17:69:98:75:99:cb:c6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Jul 27 03:00:22 2025 GMT
Not After : Jul 28 03:00:22 2025 GMT
Subject: CN=46aeb1e36828717c5bfaa13146131409641c9844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:09:fc:49:41:66:de:27:0c:f7:e7:3b:de:
8a:bd:df:76:65:25:5d:d8:31:4e:33:82:c5:d7:25:
ea:28:2f:0f:9d:3e:ac:d2:40:14:a3:7d:8c:40:04:
a0:75:ee:b4:c5:0f:33:9b:af:6d:2c:56:d1:b0:3a:
b1:97:65:0e:69:93:08:57:3d:33:dc:97:ae:81:44:
23:ac:98:5c:1a:c5:f7:d7:e8:36:a4:46:d3:af:bf:
e3:fd:9a:5d:81:2c:56:f6:af:0c:ab:09:35:e6:4f:
2f:c7:7d:d0:12:27:b5:94:b6:f3:5d:59:67:0f:72:
e9:ad:d4:7b:0a:2a:85:0f:85:6e:65:e0:9f:ba:b1:
34:3f:b2:a8:2c:d9:10:5c:a4:c6:cc:24:29:45:91:
97:7c:fb:3d:9c:86:70:46:98:19:51:30:5c:dd:01:
b4:a4:00:11:0f:82:3c:be:4f:86:47:5a:08:51:e8:
fe:4d:5d:14:05:eb:4e:5d:52:d5:d9:7a:0c:d6:21:
e7:b4:6a:a2:18:b7:da:46:a8:18:0c:a1:b9:28:39:
e9:64:d9:63:52:47:c2:a9:d6:6f:c4:12:0a:32:82:
3a:e0:aa:a1:b0:4b:b5:ed:4c:b9:ae:d8:00:df:96:
03:6e:f6:ac:b1:bb:18:da:ac:5c:42:ef:7f:8f:a9:
13:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AE:B1:E3:68:28:71:7C:5B:FA:A1:31:46:13:14:09:64:1C:98:44
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:01:45:c9:5c:22:05:91:f9:6a:d2:2e:0e:84:fb:a9:75:ba:
07:f4:22:f5:b7:9a:a6:6b:3b:7a:e0:01:93:95:2b:38:37:4c:
f2:9c:dd:82:30:bb:dc:e1:7a:54:05:32:85:d8:56:7a:34:cc:
d6:9d:12:92:9b:7b:3a:2d:bc:9f:0d:36:f3:5c:cb:18:67:a5:
5c:3b:eb:e2:65:33:d6:87:34:a9:29:8f:49:9f:0a:93:63:de:
2f:d6:90:e4:63:6f:9f:d5:f4:05:d1:63:5a:c4:c6:76:34:3e:
cc:cd:4e:eb:5e:7d:b4:68:56:7f:cf:da:bc:64:ce:e8:0f:ff:
04:41:9b:d4:79:8f:61:f9:c1:22:e1:81:bf:11:6c:8c:4c:61:
0b:8c:78:5e:43:72:da:f6:9f:d2:a7:81:e1:cf:a4:5d:0b:b2:
cd:50:7f:ef:99:e2:f9:4f:b5:4d:66:90:e5:d1:7e:91:5c:1b:
90:6a:a7:0e:c4:66:18:fb:b8:80:c4:05:02:60:03:89:dd:e4:
10:61:35:a7:1d:cd:5c:eb:be:e3:48:f7:b5:00:09:6c:e5:8e:
6c:81:97:17:64:b8:f6:e5:98:a8:5c:35:26:6a:d3:ff:12:98:
d0:89:a6:95:6a:40:f7:84:c3:aa:0f:2d:27:70:bb:77:27:55:
21:fa:4d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:45:51 2025 by rpki-client