Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
File: v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft (raw, json)
Hash identifier: yjFs41ylapf/YAFRKpi8rSQhI5TVBjIJdcCZydJSpBU=
Subject key identifier: 10:81:30:07:5A:BC:E9:3C:2E:2C:9B:97:5A:2C:96:96:17:02:1D:D0
Authority key identifier: BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
Certificate issuer: /CN=bf628b93661e905887359fc8e9a1888075db3cd8
Certificate serial: 019854FCBE0A725B7DDA8848A53D8A63FF2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 07:01:46 +0000
Manifest this update: Tue 29 Jul 2025 07:01:46 +0000
Manifest next update: Wed 30 Jul 2025 07:01:46 +0000
Files and hashes: 1: O8A-n_YJ3aGox49eBzm7Q8xhXdQ.roa (hash: EUscQTnmBwchHhwFPgGdViuEre/xVGQ6ryyvSQoTdUA=)
2: v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl (hash: /clrdUT12/wSgH6xljee862doLZnkuiZ1oFFGClk9mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:be:0a:72:5b:7d:da:88:48:a5:3d:8a:63:ff:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf628b93661e905887359fc8e9a1888075db3cd8
Validity
Not Before: Jul 29 07:01:46 2025 GMT
Not After : Jul 30 07:01:46 2025 GMT
Subject: CN=108130075abce93c2e2c9b975a2c969617021dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7e:fc:e2:ec:dc:f7:dc:e3:82:c7:f8:6e:00:
a8:7c:91:14:13:6e:04:9a:df:72:8d:dc:87:9c:6e:
62:db:25:6c:5a:52:5e:35:d7:20:e9:f0:a5:09:7e:
58:26:de:72:3c:0d:ce:ab:1b:f5:32:76:50:b8:8e:
64:00:27:67:1e:cc:d2:3d:9b:f7:01:7a:16:9e:20:
51:01:3b:d9:a6:16:6d:46:45:c8:15:e4:41:e1:5c:
04:de:14:13:63:45:6b:f0:a3:f9:ba:a7:bd:75:0f:
cf:e7:e7:50:d5:16:85:d1:c3:c2:f1:84:75:f6:7e:
1e:e8:d1:17:ac:19:a6:9c:d8:d4:3f:1f:01:c0:d8:
75:f0:a3:ab:c0:50:e5:a7:18:9c:6d:e7:68:8e:56:
c0:2a:31:3a:a0:e0:ed:74:26:dd:0f:8f:7f:b0:34:
5a:15:16:07:1a:70:10:b3:0c:01:a1:ff:19:03:20:
a7:44:2f:a6:83:6e:fb:64:14:a2:59:06:c8:dd:02:
1c:27:dc:e6:24:5f:63:ee:e9:8b:d6:39:94:e1:81:
eb:f0:ae:1f:44:43:d5:76:59:e5:71:0c:07:ff:d7:
e7:12:56:75:3c:4f:d2:45:f9:2c:95:79:a6:e1:cf:
37:74:bd:a5:cd:5d:3c:a2:4f:5d:62:69:99:5b:8a:
4f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:81:30:07:5A:BC:E9:3C:2E:2C:9B:97:5A:2C:96:96:17:02:1D:D0
X509v3 Authority Key Identifier:
keyid:BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4d:f5:a5:a2:b2:d3:c6:7f:a5:84:cc:0b:3b:cb:86:8e:ff:
a4:59:db:8e:82:8e:58:75:17:54:38:0b:b8:d6:29:21:34:30:
b9:81:ed:f1:d0:3a:a5:f4:43:99:0c:e6:ef:f5:38:55:44:ce:
52:2b:fa:43:a7:0c:f6:f6:19:89:be:52:f4:bc:34:f8:22:9e:
e6:8f:72:52:f3:93:cc:fe:5d:b6:fc:bd:5f:1c:24:b4:b8:26:
cc:77:f9:52:8d:e0:1d:1e:c4:08:cf:0a:ea:ac:5d:ec:5c:bf:
24:c9:c4:eb:21:32:5f:aa:01:ef:63:54:d8:1d:b8:51:6a:ca:
b1:9e:ba:5a:bc:7c:e0:48:f1:45:e8:85:53:ff:a3:a9:5c:bc:
73:40:03:17:f4:f3:58:b7:14:03:bc:ba:ea:e3:fb:73:b9:42:
97:8c:4b:6e:6b:87:24:98:0d:73:c1:71:95:09:6b:0f:3c:b8:
7a:a5:e7:34:e1:4e:c6:ef:30:35:fc:60:22:42:d4:a4:25:01:
fd:3c:de:c3:d3:60:17:32:15:e2:aa:24:59:0e:48:ed:9a:58:
6c:3f:69:a2:c8:af:8d:d2:ef:2b:5c:cc:21:f7:64:57:82:9a:
85:46:c5:e0:f3:68:55:f0:4f:0f:17:d9:65:43:e5:54:63:d9:
e2:80:56:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 11:04:55 2025 by rpki-client