Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
File: rKjs_uUfaNX4A6rm-_wf3EGQJio.mft (raw, json)
Hash identifier: VUJuR0G+0Q6D4+w6kH9ld9vXkAi8mzatpwMdhxrKbBI=
Subject key identifier: F7:04:5A:3B:86:A4:6C:8C:E3:1D:E0:4A:1B:4A:DF:9D:01:89:14:48
Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
Certificate issuer: /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Certificate serial: 019849D3AC83C19554521F0F3653F19522EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
Manifest number: 0D38
Signing time: Sun 27 Jul 2025 03:01:05 +0000
Manifest this update: Sun 27 Jul 2025 03:01:05 +0000
Manifest next update: Mon 28 Jul 2025 03:01:05 +0000
Files and hashes: 1: TNPcdBpnbKooEgmUt2YrkLdYDmQ.roa (hash: WQcIls3E5pX4tymrsMPubCPP31sHiDGN5xYJkHTcWEg=)
2: rKjs_uUfaNX4A6rm-_wf3EGQJio.crl (hash: uX4v2Ukwnk5xd4U8Z9o5wcCp+738+hfSWTR/lROq7gQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:ac:83:c1:95:54:52:1f:0f:36:53:f1:95:22:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Validity
Not Before: Jul 27 03:01:05 2025 GMT
Not After : Jul 28 03:01:05 2025 GMT
Subject: CN=f7045a3b86a46c8ce31de04a1b4adf9d01891448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:29:8a:04:8e:e0:f6:12:4d:ee:a5:26:d9:
06:a7:9e:f5:e7:5b:db:3e:53:77:a3:5d:48:19:f2:
c6:c1:dc:bd:b2:3b:71:6c:65:37:b8:73:d3:af:19:
8b:d7:2f:6b:e2:2b:69:c2:b1:14:95:29:8e:fc:01:
e1:81:e0:35:06:d9:23:97:08:c9:27:70:31:48:4d:
6f:17:2c:46:25:a5:a1:26:06:56:27:d5:2a:a6:58:
d2:f9:46:69:43:15:b8:19:6f:2a:32:6f:ce:7a:da:
0d:18:de:27:bb:34:dd:7a:6a:99:83:c4:2d:cc:7e:
ee:c6:9c:c7:16:0f:67:13:2f:d5:b7:ee:cb:88:d0:
07:f7:3f:34:1e:da:23:52:59:fd:35:61:b4:1f:39:
cf:f5:e3:e0:30:3c:3d:e4:58:e5:85:e6:d5:e2:e3:
53:68:cd:bd:40:a2:67:87:0e:3a:cb:fa:f7:14:70:
25:f7:a1:c3:0b:c0:df:7d:6d:e4:d7:45:71:57:0d:
6c:61:67:6c:48:05:8f:49:3e:f2:13:31:32:7b:29:
f3:3a:6e:f8:9a:55:9a:3c:2e:cf:04:b4:1a:e9:bc:
1b:d2:d2:2f:95:ca:21:b7:6a:2d:4a:e8:fd:64:d3:
eb:57:ac:d5:63:fb:40:14:4a:90:11:ec:e6:a1:5a:
6f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:04:5A:3B:86:A4:6C:8C:E3:1D:E0:4A:1B:4A:DF:9D:01:89:14:48
X509v3 Authority Key Identifier:
keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ee:34:b5:a5:5f:13:0f:60:46:a3:a3:6f:2a:ac:01:01:40:
b6:e5:bf:70:49:37:2c:46:19:1e:0f:e3:68:b9:9e:73:24:3e:
90:24:28:85:7f:82:1c:1d:35:6b:01:38:84:7b:ba:03:cd:92:
db:0a:97:46:d6:34:91:f4:9b:32:5d:1b:00:69:61:18:aa:cf:
22:66:da:64:95:69:94:73:34:aa:b7:a2:d5:b5:b0:39:21:92:
59:9f:8e:d8:5a:9f:64:5b:23:23:bd:97:89:9a:e6:4a:86:76:
cd:62:9b:a3:f5:d9:27:67:c0:e2:89:7c:d2:78:78:74:95:31:
68:0f:fa:3d:d0:82:78:bf:c9:db:56:ad:ed:72:f9:7c:b8:64:
e4:59:71:32:f6:bf:23:64:ca:6f:19:47:ff:c4:87:70:bc:e3:
96:8b:22:93:6f:9d:9d:32:85:59:db:8a:65:5b:f4:a3:6d:0a:
40:b3:26:a6:72:bc:1b:b5:47:36:4d:85:15:f8:77:4f:87:9a:
4c:69:84:88:40:07:c8:67:b2:44:3c:a2:7a:4e:3c:fd:f6:89:
be:55:4f:30:d5:22:95:7a:ed:e2:49:47:f6:c2:c0:1b:b5:76:
61:d0:13:ee:e1:d5:ab:ff:1d:5d:14:25:c6:bd:19:ad:0d:95:
2e:8c:fd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:55:40 2025 by rpki-client