Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a264a8-a666-4c87-851c-ada24ef310ca/1/rKKhlS5xiUSkBDSg6-__2iv-7V8.mft
File: rKKhlS5xiUSkBDSg6-__2iv-7V8.mft (raw, json)
Hash identifier: WDj6238OMg8L18/a4xny4IT6OZIH2mTScQIAvcjp+xo=
Subject key identifier: D3:50:89:23:6E:69:C8:F4:8F:C8:E2:ED:06:63:D0:60:F8:62:BF:65
Authority key identifier: AC:A2:A1:95:2E:71:89:44:A4:04:34:A0:EB:EF:FF:DA:2B:FE:ED:5F
Certificate issuer: /CN=aca2a1952e718944a40434a0ebefffda2bfeed5f
Certificate serial: 01984A782E9CDA9171740B201161A9A2417A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKKhlS5xiUSkBDSg6-__2iv-7V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a264a8-a666-4c87-851c-ada24ef310ca/1/rKKhlS5xiUSkBDSg6-__2iv-7V8.mft
Manifest number: 12BE
Signing time: Sun 27 Jul 2025 06:00:46 +0000
Manifest this update: Sun 27 Jul 2025 06:00:46 +0000
Manifest next update: Mon 28 Jul 2025 06:00:46 +0000
Files and hashes: 1: mN-Gq3CnQOseJQb6vbylzDVdWSg.roa (hash: fOE9ILnEXk1PyxS5P7XqjGQMPFnkivt3IHprv8lvkaM=)
2: rKKhlS5xiUSkBDSg6-__2iv-7V8.crl (hash: d1u98VB122rF/I1Q1ZFI63ufoKWoKfktQd/Ge/JoCkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a264a8-a666-4c87-851c-ada24ef310ca/1/rKKhlS5xiUSkBDSg6-__2iv-7V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a264a8-a666-4c87-851c-ada24ef310ca/1/rKKhlS5xiUSkBDSg6-__2iv-7V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKKhlS5xiUSkBDSg6-__2iv-7V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:2e:9c:da:91:71:74:0b:20:11:61:a9:a2:41:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca2a1952e718944a40434a0ebefffda2bfeed5f
Validity
Not Before: Jul 27 06:00:46 2025 GMT
Not After : Jul 28 06:00:46 2025 GMT
Subject: CN=d35089236e69c8f48fc8e2ed0663d060f862bf65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0e:3b:15:9c:bd:f0:13:b7:ed:0d:0c:4b:e8:
60:3d:ef:6e:6c:62:bb:2b:09:9a:dc:6a:4a:e8:a0:
8e:30:3c:93:12:6e:bd:c7:23:45:ce:f0:3a:a3:a3:
00:1c:33:5f:ca:6f:fe:a8:45:72:49:d6:36:84:44:
3c:1f:86:1c:48:68:a9:d7:2d:fb:5f:a8:13:ea:76:
73:d3:52:32:7a:c4:87:4f:88:93:5c:c1:2a:37:c6:
c6:7d:dd:43:83:95:4b:9d:68:45:c9:93:66:ed:97:
43:64:c5:52:73:9d:4b:4d:20:00:b9:e5:56:73:ea:
1d:7b:3d:4d:6a:95:01:62:2c:76:ab:bf:14:db:c3:
21:30:8a:3c:d2:67:a5:57:2e:27:2d:76:09:54:b1:
c4:28:3d:c5:d1:95:14:12:f4:01:1d:63:83:9f:dc:
05:96:b1:4d:b0:a9:a7:2d:a0:a5:d4:d4:e2:8e:d8:
b7:47:d9:3c:f1:05:29:7c:85:32:b0:ab:53:51:a7:
f1:e4:0f:9d:54:92:70:c9:3b:fe:6f:7b:80:44:4c:
d2:32:5a:2e:f8:d1:34:f5:db:80:49:3b:ed:53:c3:
49:75:47:25:d7:df:02:ca:08:cc:21:3a:23:06:f4:
e9:e7:b8:d0:c5:ab:f8:08:e2:f8:fd:97:6f:93:58:
ad:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:50:89:23:6E:69:C8:F4:8F:C8:E2:ED:06:63:D0:60:F8:62:BF:65
X509v3 Authority Key Identifier:
keyid:AC:A2:A1:95:2E:71:89:44:A4:04:34:A0:EB:EF:FF:DA:2B:FE:ED:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKKhlS5xiUSkBDSg6-__2iv-7V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a264a8-a666-4c87-851c-ada24ef310ca/1/rKKhlS5xiUSkBDSg6-__2iv-7V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a264a8-a666-4c87-851c-ada24ef310ca/1/rKKhlS5xiUSkBDSg6-__2iv-7V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5d:ab:61:22:6f:cc:c4:1a:4e:2b:48:44:55:ce:57:2b:4f:
55:98:26:bf:db:a0:be:97:07:74:06:fd:1b:3b:22:a3:9e:d9:
35:f9:84:5a:8f:ce:61:4b:a0:2d:cc:f0:f5:2c:70:23:7d:f9:
b5:24:b3:2f:47:cc:5c:8e:d9:6d:c8:a9:d6:b1:7a:10:1a:55:
1f:11:28:71:08:db:8e:5e:02:6a:cc:f1:7a:e0:1f:a3:b6:79:
b4:48:d6:3a:90:e1:c4:89:b1:b4:53:ba:ff:50:27:43:28:8b:
29:3a:66:ca:6d:83:62:29:39:fe:d2:58:02:fd:52:fb:93:de:
3a:e1:ca:aa:90:5e:b5:82:f3:33:fe:b6:d7:c9:39:6d:18:d2:
a1:bc:45:ef:d5:3d:68:02:20:7f:d9:40:d1:0e:49:a7:0c:54:
5a:4a:a3:60:6c:c6:3f:05:30:c2:10:5c:94:5d:ff:80:94:0a:
5c:2e:ae:e1:58:9a:df:fd:9d:3f:90:05:c3:10:b5:24:55:e8:
31:6e:5b:5d:6d:58:7d:6d:5b:6e:8f:76:93:37:05:5c:fd:f2:
a4:d5:50:69:d4:70:34:2e:b7:f0:cf:ce:73:a6:dc:71:7e:0b:
93:42:12:2a:b5:5f:66:72:c0:c4:1e:f5:13:f7:ac:52:c6:8c:
ff:36:09:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:16 2025 by rpki-client