Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier: YhHNrPYvTtELbDxm7yOdgg+8jKf1gdBU6Y9GMQKFD0c=
Subject key identifier: BE:62:4C:25:09:F3:F4:0E:E2:9A:D8:DC:C1:25:81:02:E9:DA:FF:DE
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 0198466413B707A6204A4116B7EE922D2429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 11:00:20 +0000
Manifest this update: Sat 26 Jul 2025 11:00:20 +0000
Manifest next update: Sun 27 Jul 2025 11:00:20 +0000
Files and hashes: 1: 0vFjVDYAA-6QI2qHPCdosu1GYFw.roa (hash: IQ3S8+qzPktEg1qP0FjMswDmKCTlK9fgpP4sOBqgbxM=)
2: 8FU11yYabBJRRjHXhYHw1w8tXqs.roa (hash: zgTg9U8qNVapSlofgSsQ7L6J3LMkMrbN8ivrl35eIuc=)
3: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: aOSiOHO3tmksiR4xEwZbvg85c1mZKpINQDbewrDwUS0=)
4: n_A6Qzt5rx35hoVU_97TwDYIfYU.roa (hash: AiRnXdqpWHaW5BVZZURmZ+ZKd/dN4DFkv2OtB71gThk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:13:b7:07:a6:20:4a:41:16:b7:ee:92:2d:24:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Jul 26 11:00:20 2025 GMT
Not After : Jul 27 11:00:20 2025 GMT
Subject: CN=be624c2509f3f40ee29ad8dcc1258102e9daffde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:08:48:4f:a3:19:ba:6f:00:ab:a6:ed:e2:
55:bb:07:95:b4:2d:11:eb:4e:1b:13:47:33:fb:31:
a9:74:c8:98:4d:ab:0c:81:2e:e8:a3:4b:5f:35:dd:
4c:a7:13:8d:bb:b7:1e:e2:fe:49:63:af:80:53:68:
77:61:00:e1:82:2a:53:b9:cc:74:33:12:fb:83:1a:
f3:67:5a:e7:e5:12:03:0a:d2:a4:57:88:e7:1f:31:
4f:84:fc:5b:01:70:fb:bc:aa:e7:25:85:d6:b0:6e:
f9:6f:1c:3d:93:fb:eb:3d:80:8f:ba:4e:c5:87:e0:
d8:6b:52:82:7f:48:a1:a2:bb:bf:6a:46:c3:21:02:
86:e2:56:eb:4c:07:e8:7e:16:ac:d3:6b:2a:6d:94:
91:7f:d7:dc:9d:46:9e:62:46:09:73:3a:a1:50:de:
91:42:69:75:e0:b7:9e:3f:c0:03:a3:39:93:47:57:
f5:88:f5:a7:e4:33:1d:cc:dc:48:db:a6:7d:f5:21:
78:5e:7c:a4:cb:49:c0:9e:97:1c:0f:11:67:69:d2:
0e:dc:f0:2f:56:8a:0e:e2:af:c2:64:05:fa:5d:c4:
7f:74:5e:93:51:00:00:f4:c5:95:c7:4e:07:61:f0:
0d:d0:90:1b:0a:4a:13:26:1f:15:21:4c:89:e5:78:
5a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:62:4C:25:09:F3:F4:0E:E2:9A:D8:DC:C1:25:81:02:E9:DA:FF:DE
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6a:04:45:e8:05:86:50:ac:7d:3f:d7:b3:1c:74:29:f4:6f:
da:df:83:d3:73:e1:6c:83:f3:2b:d2:23:1f:a0:ce:d5:91:9f:
37:e0:54:16:68:8f:cd:cd:b4:3f:ee:91:24:fb:ba:a8:8a:a7:
dd:72:40:b2:8e:0e:8a:75:86:d6:76:f9:0e:4b:b5:d7:07:ad:
e2:4b:5d:ce:a3:76:2d:4c:3d:98:36:6a:fe:c6:b9:03:d2:90:
f2:d6:df:74:ea:90:7d:0b:04:84:fd:64:82:45:f1:27:93:08:
b1:11:3b:03:a7:f6:60:2c:dd:8d:5f:27:98:93:00:f0:29:20:
1c:f1:dd:af:5a:b0:62:99:9d:ff:fb:2e:c5:ee:8c:83:96:f2:
b3:6f:6a:f8:fb:6d:d1:e6:d6:56:f4:98:40:ad:01:9e:2e:c4:
70:e3:74:d3:4a:cf:7c:6a:59:97:6e:2c:db:e5:b7:60:3e:c9:
af:5e:6e:7c:09:95:11:35:c1:52:fb:54:a9:4b:78:62:4f:b3:
24:e8:d7:9c:e7:b7:85:22:e4:94:64:bd:31:e0:08:18:ef:5b:
39:48:29:be:2a:eb:3f:50:0b:69:6b:48:11:a8:48:26:d5:f7:
9a:9a:9e:f2:bf:2a:d0:ba:4e:0c:65:25:78:4e:9f:65:dc:42:
1c:ec:0a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:00:11 2025 by rpki-client