Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
File: k680jsWk5l4MsTeCGuahOe1_rAA.mft (raw, json)
Hash identifier: b5AqIREThf4tGg9jE3hMuTp8Ill3Va1PaccVvEojNHs=
Subject key identifier: 2D:35:A0:7B:B0:25:4D:04:E7:27:97:04:05:F2:2A:BB:72:AF:8C:12
Authority key identifier: 93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
Certificate issuer: /CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Certificate serial: 019846D23807A1B0F3FE9BB499B5A3F0C323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
Manifest number: 1590
Signing time: Sat 26 Jul 2025 13:00:38 +0000
Manifest this update: Sat 26 Jul 2025 13:00:38 +0000
Manifest next update: Sun 27 Jul 2025 13:00:38 +0000
Files and hashes: 1: gKy-M4ArOB2uxqprqRJ6fbGyEC8.roa (hash: MC8Gw1INJPJBRmJZki75GCuCmqozYCvUY/UxQ+rSFh0=)
2: k680jsWk5l4MsTeCGuahOe1_rAA.crl (hash: xY+7BRRZfSDEVQFdhoRfrCel4vK7yhphI0vlrn8Fu4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:38:07:a1:b0:f3:fe:9b:b4:99:b5:a3:f0:c3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Validity
Not Before: Jul 26 13:00:38 2025 GMT
Not After : Jul 27 13:00:38 2025 GMT
Subject: CN=2d35a07bb0254d04e727970405f22abb72af8c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f0:48:ce:06:4d:c7:2d:ac:30:8e:72:26:20:
f8:e9:36:4e:ed:92:6b:43:54:87:44:c4:3d:35:d4:
ab:55:f6:b2:6c:ad:96:cc:8f:79:b3:3f:56:8f:45:
51:1f:c0:0d:f8:a3:3e:f3:00:26:fa:d5:7b:52:0f:
3c:e4:2e:4b:f3:49:5d:ca:86:cb:52:2a:9a:b4:4e:
a9:2c:c8:79:c0:fa:a0:89:f6:c3:de:ab:67:82:dd:
f9:cb:ca:8a:94:bc:2e:24:2b:b1:b7:41:03:e4:2a:
81:df:f4:45:d7:99:ae:53:dd:0c:53:3a:a5:40:f4:
7b:02:dd:1d:f6:35:ab:2b:a7:58:78:49:18:6e:b2:
21:17:7c:00:54:8d:73:74:79:90:c1:8b:94:ab:32:
e1:54:0e:34:fb:2a:7f:d2:a4:fb:79:95:4d:1f:c1:
6b:17:e3:05:17:a8:39:8d:67:6a:43:a0:28:6b:74:
ec:98:8f:59:63:94:55:6e:87:51:a6:1f:be:c9:ac:
c7:24:6d:ea:26:2a:87:e6:74:2d:e3:82:8a:8c:85:
99:b0:1c:af:ce:fc:ad:a5:4a:09:fa:c3:93:54:7f:
de:fb:91:c4:5a:0d:96:07:84:dc:58:aa:e7:b3:bc:
fe:30:fc:a1:81:43:4c:46:60:78:f6:6d:1d:eb:6d:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:35:A0:7B:B0:25:4D:04:E7:27:97:04:05:F2:2A:BB:72:AF:8C:12
X509v3 Authority Key Identifier:
keyid:93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a7:c1:e6:a1:80:ed:11:63:8b:94:ae:32:d4:1c:a6:c8:d5:
6b:ab:c2:0f:3a:c3:a0:e4:ce:cd:2c:e0:71:4e:7f:61:90:53:
25:10:c1:74:bf:29:d5:11:46:35:4d:80:3f:0b:e6:b6:fd:44:
08:83:77:f4:a7:fa:27:14:fd:b1:d9:75:dd:54:6c:93:1a:2f:
ff:35:ed:bd:f5:6f:78:bd:98:54:e7:fb:84:21:47:fe:78:dc:
11:25:74:75:a5:31:e1:00:cf:82:b1:80:0d:65:73:8e:9b:23:
7f:5d:05:5e:61:d8:a9:ea:8b:01:f5:3e:c4:e1:f8:47:dc:a7:
0c:5a:d9:6b:90:01:55:c6:47:23:fc:a0:17:31:65:c7:a8:9e:
6f:4e:04:72:64:35:aa:ac:b2:85:8a:ed:e2:8f:d5:46:b2:f6:
4d:e0:a3:b0:41:e0:f4:5b:ac:c3:bf:86:d9:99:87:d7:18:43:
83:9c:c0:c4:47:5c:8f:82:af:d2:75:e0:e6:d8:da:e4:b4:12:
13:7a:a5:74:4a:4a:d6:f2:28:59:f4:d6:81:14:b8:20:42:67:
8e:3b:72:6e:1e:85:42:03:ac:4f:df:43:ed:41:3c:42:1a:59:
54:76:1e:0b:89:50:93:de:84:90:ff:bf:db:db:85:e4:aa:66:
62:9f:c9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:53:40 2025 by rpki-client