Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
File: k19T9eQH5VojMNnVI6gEwHIspWU.mft (raw, json)
Hash identifier: A8hKoVTYrElmlMhWERMj6+cSlgPUDiWW1U5UZ/noWjA=
Subject key identifier: 2A:D5:8D:2D:63:90:B6:28:1E:6C:CC:59:66:F2:AD:58:DF:F1:20:C0
Authority key identifier: 93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
Certificate issuer: /CN=935f53f5e407e55a2330d9d523a804c0722ca565
Certificate serial: 019848529EDA4234936A0BBC2FC25E58C7FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 20:00:30 +0000
Manifest this update: Sat 26 Jul 2025 20:00:30 +0000
Manifest next update: Sun 27 Jul 2025 20:00:30 +0000
Files and hashes: 1: CEKF3MXHpQR2CGHCMQpTxxuuRIY.roa (hash: Rh5DOeHi5/pgsxZpTOekiFMDHUB1zlvv4XKyE6PrDFE=)
2: cXHMvnYXUn58neLwmoRSc042tjs.roa (hash: SBDcDeTpbKOEPbrOKMYmcpYN3NXUYeqARSNljTNUetg=)
3: k19T9eQH5VojMNnVI6gEwHIspWU.crl (hash: RWp7WLYNXZ/fSIYBbbeVKGfvlD3t6hvpwwLgN4wY714=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:9e:da:42:34:93:6a:0b:bc:2f:c2:5e:58:c7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935f53f5e407e55a2330d9d523a804c0722ca565
Validity
Not Before: Jul 26 20:00:30 2025 GMT
Not After : Jul 27 20:00:30 2025 GMT
Subject: CN=2ad58d2d6390b6281e6ccc5966f2ad58dff120c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7a:81:47:64:11:80:0f:98:e1:65:28:76:08:
f0:cd:07:44:66:a5:8c:29:38:bb:07:af:75:28:8e:
35:8f:ad:dd:3a:d0:6e:e2:af:db:1f:91:5b:6b:0e:
44:9f:9d:37:d0:ad:f7:11:cd:f5:20:c2:cb:3e:34:
4d:5d:db:71:6d:87:a2:01:5d:a7:bb:b1:25:6a:0d:
9b:e7:ef:0b:eb:ab:64:fc:eb:8b:80:32:76:cb:c8:
a4:c2:20:0a:5e:93:c9:dc:05:bf:ac:3c:55:01:5f:
a1:a8:39:ce:d0:6f:2b:28:90:bc:5a:70:48:5e:af:
61:2e:d4:b7:b7:25:e1:77:32:7f:d3:c0:0f:59:4a:
42:36:bc:14:c8:de:c3:2b:6d:8c:68:c0:cd:a6:17:
ea:d7:49:3c:72:55:60:c5:6b:4e:95:f8:a4:56:1b:
06:83:76:cf:60:d4:7d:25:f3:e5:25:64:49:26:75:
06:85:d1:b2:0b:fe:58:98:f9:cc:b8:33:f0:79:a1:
e6:8e:ac:2d:3a:bf:40:e4:17:a8:11:16:3e:af:2d:
ac:c3:57:50:20:9f:bd:6c:fb:e0:f3:54:a9:d8:8d:
97:b7:b0:fa:72:37:67:d7:fb:e2:d5:d5:a6:5a:aa:
71:b4:55:a9:6c:f2:6c:40:2f:8c:b5:52:56:1f:b2:
85:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D5:8D:2D:63:90:B6:28:1E:6C:CC:59:66:F2:AD:58:DF:F1:20:C0
X509v3 Authority Key Identifier:
keyid:93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d0:53:e4:c3:ff:16:71:4e:fb:69:d1:f7:4b:dc:39:16:ef:
62:7a:07:05:ad:c9:59:f2:1f:f6:08:d1:b2:40:c5:44:e9:8e:
5c:00:24:cc:3c:8b:27:b5:7a:5d:83:1a:b5:46:46:e6:4e:20:
86:ce:f5:41:73:d7:88:e2:96:c0:1e:12:9d:54:c4:e5:f2:64:
b2:36:b0:26:2e:a7:41:e6:c8:c3:9d:e3:a7:a0:be:89:13:30:
8e:de:86:68:40:d1:de:9d:e7:19:cb:9b:0f:84:94:8c:d2:e1:
57:6f:ed:17:d3:ae:55:2e:c7:4e:18:ab:09:c8:be:92:a7:e4:
a3:da:53:36:fa:0a:d7:7d:8a:6e:92:57:93:d8:45:e1:b5:e9:
f5:dd:ad:c6:c8:dc:a6:a8:7f:8e:69:40:e3:70:50:c1:06:a4:
ff:85:85:ba:0f:73:7d:be:6b:7a:f5:90:53:4d:9a:3a:19:05:
20:a8:e7:9f:8b:10:fe:0b:6e:78:d8:9e:e9:4b:1c:5b:61:76:
4f:bd:74:10:cb:63:fa:35:20:af:d4:2f:06:6d:0d:ae:d6:51:
b2:f5:b2:36:a4:51:18:6c:0d:d6:18:b9:09:74:e9:ce:ea:12:
f7:f3:97:0f:56:38:da:67:77:c2:89:e7:13:d8:a7:d8:33:ea:
5f:a7:bf:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:12:26 2025 by rpki-client