Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
File: K04tNMzuRXa1znYFoITmwIUiwig.mft (raw, json)
Hash identifier: 6CDpKkx3Q0rPNiwe3dcZSoCPwHSRsyHMkAPrmLprUbU=
Subject key identifier: 5F:15:15:0E:6D:0D:10:61:09:90:6E:78:E4:91:72:98:8A:DF:A9:29
Authority key identifier: 2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
Certificate issuer: /CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Certificate serial: 019847E48E8B001E6959F1F9B1FAF45FD009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 18:00:17 +0000
Manifest this update: Sat 26 Jul 2025 18:00:17 +0000
Manifest next update: Sun 27 Jul 2025 18:00:17 +0000
Files and hashes: 1: GSpTlfTO5KcQK2jI527EKT02SMc.roa (hash: TpoUJbGzlzV0iUGibBYOB2or2f2ZUtWBHSlc5utMfHk=)
2: K04tNMzuRXa1znYFoITmwIUiwig.crl (hash: 2OKwTk4ecseoqsLgestCpBq4aAjuD9DKuMvSW9F63iU=)
3: inTF6SWHroBiGHmy-0U30O5ydnA.roa (hash: evzJBNLsSCaxTpI1F1FxS8W2lXJa9MwPxDq+MYhTrqw=)
4: qgbAAtOcnU1uj0vsxF1XX4uS6aw.roa (hash: sqwZAEeBQvSXLjPqcFlAmMMOVHBKwCNCWM9uKLuZCYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:8e:8b:00:1e:69:59:f1:f9:b1:fa:f4:5f:d0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Validity
Not Before: Jul 26 18:00:17 2025 GMT
Not After : Jul 27 18:00:17 2025 GMT
Subject: CN=5f15150e6d0d106109906e78e49172988adfa929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:bd:62:3a:e6:05:09:54:54:77:14:3f:70:
9b:22:4c:bb:2a:7c:f6:45:8b:ab:e5:05:db:23:f8:
46:ee:bc:a8:d1:bc:3e:88:1c:f9:b3:99:af:2d:f9:
47:44:d1:2f:23:73:ba:52:e6:a6:3b:61:46:d5:82:
7d:dc:22:d2:47:8f:da:d9:ea:99:89:ed:3a:f1:53:
65:49:5c:1e:31:fd:a4:89:3d:17:9a:dd:d8:c7:8a:
a1:8e:8a:23:d4:f2:c2:99:6c:4c:87:61:fb:83:4a:
43:99:27:2c:b0:41:af:97:bc:e3:31:74:dd:68:78:
06:d5:e9:86:af:b6:59:89:49:e2:6d:47:9b:e8:1e:
83:8f:18:2b:01:52:7a:51:9d:19:ca:85:90:f5:a2:
2c:85:36:4d:96:4a:67:56:4f:b0:73:43:47:9d:95:
57:fa:6d:3c:5d:e0:69:56:e1:e6:6b:ae:58:34:cb:
ca:b6:5a:e7:9a:19:31:9c:7e:d7:d3:e9:9f:f8:54:
91:31:27:30:29:12:7d:a5:eb:48:da:4c:c0:b5:52:
b4:32:89:33:89:cf:78:cd:b5:05:c9:d1:fa:28:c8:
44:23:18:71:7b:4b:93:2f:68:b6:a7:2d:0a:68:e0:
8c:da:6e:39:cb:ad:e6:87:80:00:8c:86:6e:62:b6:
b4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:15:15:0E:6D:0D:10:61:09:90:6E:78:E4:91:72:98:8A:DF:A9:29
X509v3 Authority Key Identifier:
keyid:2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:88:ee:10:d9:33:8c:f2:1f:be:ff:3d:db:cc:fa:13:a6:26:
d9:b8:9a:81:07:87:c7:1b:40:3d:ba:60:eb:c3:fb:ec:51:2d:
3b:e8:0a:5f:f9:56:f2:f0:3c:c9:08:bc:b0:61:08:26:c1:14:
eb:9a:77:48:b0:8b:ad:d1:3f:f3:bd:bc:38:bf:17:45:be:4c:
f4:ad:c8:c6:d3:b7:22:6b:9a:d7:72:73:f9:96:62:06:64:e0:
9f:3d:4d:10:a9:35:da:1e:2f:59:06:c0:5e:c5:2b:2c:e9:d5:
8c:a3:31:da:4f:5a:4f:93:7f:d3:41:21:3a:f4:25:81:97:3a:
e7:97:77:fb:0d:89:a2:5d:52:d6:50:c1:97:6a:70:47:3c:09:
c8:e2:11:56:30:fa:be:36:0d:53:04:25:5c:3e:94:91:a8:6f:
2a:a4:93:df:0d:33:48:f0:07:a9:60:8e:ea:de:c4:17:91:2d:
24:35:fd:8c:3e:f9:c5:07:b3:5e:5e:8c:25:73:ea:4e:b2:e4:
20:67:e6:22:8f:86:a3:7f:b7:7a:96:7e:60:87:cf:40:fc:cb:
e3:10:8c:17:9b:d7:8f:72:35:51:9b:f0:1e:82:e6:06:80:33:
7e:7e:8d:bd:e6:60:d5:0c:16:af:fd:48:ce:6e:10:c6:8f:16:
b6:2d:1d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:49:06 2025 by rpki-client