Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
File: kNzOkQAEUUlMQ8FdFy2i651beVY.mft (raw, json)
Hash identifier: xRCcXhWUeX6KD0FDx93apzLOlRvut7+TNCrbg4MhHWc=
Subject key identifier: F8:FB:A0:EB:35:B1:CF:E3:08:ED:69:CB:70:18:03:7A:48:AB:46:F9
Authority key identifier: 90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
Certificate issuer: /CN=90dcce91000451494c43c15d172da2eb9d5b7956
Certificate serial: 01984889AA94CC44BF43E805E4DFB6953903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 21:00:38 +0000
Manifest this update: Sat 26 Jul 2025 21:00:38 +0000
Manifest next update: Sun 27 Jul 2025 21:00:38 +0000
Files and hashes: 1: 4COA7EoK---RVhokcyyZ55j8IXE.roa (hash: 7qjze9UZTxm2x0zZOdskcsGbC7b8KEyBHHGZAVSSicA=)
2: kNzOkQAEUUlMQ8FdFy2i651beVY.crl (hash: MHsa3Jctv/t4OevJd0hT4JBN35GiYDiZrVyyQ33g1DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:aa:94:cc:44:bf:43:e8:05:e4:df:b6:95:39:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcce91000451494c43c15d172da2eb9d5b7956
Validity
Not Before: Jul 26 21:00:38 2025 GMT
Not After : Jul 27 21:00:38 2025 GMT
Subject: CN=f8fba0eb35b1cfe308ed69cb7018037a48ab46f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:97:05:45:18:cf:00:d2:3d:d1:0b:dd:46:
eb:70:01:f4:65:79:b1:64:97:05:5f:bd:c8:29:fa:
09:b4:ed:2c:8a:7b:31:1d:54:53:69:10:8a:75:aa:
61:11:9a:1b:0d:3c:f3:6a:ec:05:35:33:c5:94:34:
9c:f4:ac:a3:b4:2e:35:55:57:8f:96:1b:90:71:4c:
28:39:7e:5e:05:62:fc:1b:c5:b8:a1:d5:ac:29:a6:
61:c6:56:3a:9c:32:46:1e:12:7c:2e:ca:ec:cd:e3:
7b:5d:bd:0c:31:c5:7e:4e:34:ff:0c:07:e4:1f:1f:
29:0c:fe:60:42:09:fe:f0:0a:10:f4:7f:d9:99:39:
e6:fc:30:69:3d:9c:ba:f2:f0:c5:82:a9:c7:65:17:
4c:12:5b:2a:e7:80:68:fd:0f:db:a3:1d:e7:c4:5b:
6f:4c:31:b5:0a:b8:c0:4b:26:1a:c9:93:e0:df:c9:
5f:93:df:15:62:a4:f9:46:35:ec:62:97:9a:20:1f:
aa:dc:25:be:d2:00:4e:52:d9:08:26:a2:58:5e:22:
b6:0d:c2:68:06:ae:fa:34:ea:c9:83:4d:15:4e:1c:
4f:83:b7:d5:99:aa:41:5d:4a:79:11:ca:44:e3:44:
83:e5:51:7e:97:28:6f:59:e8:7c:59:62:50:5f:df:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FB:A0:EB:35:B1:CF:E3:08:ED:69:CB:70:18:03:7A:48:AB:46:F9
X509v3 Authority Key Identifier:
keyid:90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:3d:88:34:1e:89:c0:f5:2b:72:fe:46:65:ab:40:51:cd:7e:
30:66:2b:24:13:d6:fd:a1:0f:6a:61:0c:e0:4c:65:04:45:b1:
fc:20:30:0f:3f:bf:2f:f6:fe:a7:62:61:6d:29:8d:15:9b:b7:
32:93:a9:1c:c7:0b:eb:99:ba:15:49:af:67:ad:dc:3a:bd:d9:
2e:a0:ec:9e:f6:6a:b6:10:ca:1e:88:a8:1a:d5:3f:07:97:4e:
08:c0:dc:92:9b:9d:9a:f5:34:b4:84:99:46:2f:50:c6:b7:33:
24:96:50:ff:2d:6c:57:8c:b1:16:5e:d4:2f:b2:77:58:1b:86:
a0:17:46:45:65:00:ea:c1:75:42:87:24:37:3c:f7:9c:bf:3f:
9f:c2:e7:e5:52:65:d8:19:33:ab:d0:bb:a4:a5:e4:67:c5:27:
c1:d6:eb:23:84:29:b4:66:fd:3e:a8:b4:aa:f3:a0:93:16:e5:
5e:ed:5b:f3:e3:1d:1e:97:8b:1d:30:f7:13:c3:ae:97:04:73:
db:0a:54:44:2f:9c:15:67:41:8d:2d:aa:d7:5e:d5:e6:ab:50:
ca:03:9c:24:63:58:a3:29:fc:a2:df:35:3e:a6:fb:a2:a6:c8:
76:3b:cb:9d:b5:04:be:bf:6e:27:d7:43:e2:5c:93:a5:86:37:
9b:22:29:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:20:03 2025 by rpki-client