Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier: 0VPtGThubZD6SlK5aWEnDIqOSd9awN3Buw4mB6M3QIU=
Subject key identifier: CA:4A:3F:52:49:E8:BC:D1:6A:17:80:B4:CD:15:7C:DC:FD:65:70:1B
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 01984C667D10ED5557EFA3C5AD6C3ED4E9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 15:00:41 +0000
Manifest this update: Sun 27 Jul 2025 15:00:41 +0000
Manifest next update: Mon 28 Jul 2025 15:00:41 +0000
Files and hashes: 1: VRs8CShO6bRg5uI1JwT1RKe3PrI.roa (hash: fbnkM+ZXK5PucV+W/pV7w3InLQ8yhq+sy8zU5D/9V1k=)
2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: mqfsh/LSqW3vJioULtFQ9nqZXziPGFDJouVPaLpMWJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:66:7d:10:ed:55:57:ef:a3:c5:ad:6c:3e:d4:e9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: Jul 27 15:00:41 2025 GMT
Not After : Jul 28 15:00:41 2025 GMT
Subject: CN=ca4a3f5249e8bcd16a1780b4cd157cdcfd65701b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3f:0c:1c:c4:2c:3b:da:1d:1e:62:d0:4b:85:
26:a3:62:8a:c3:50:32:34:51:38:8a:19:92:4f:fd:
6b:bc:b9:d6:0f:74:f8:27:7f:c4:60:28:b5:3e:80:
71:00:15:ae:b0:14:dc:5a:3a:16:aa:4e:1d:e6:4c:
33:e5:7d:3f:65:e7:1a:40:af:c6:52:cc:e4:38:4e:
1d:15:11:97:a5:78:2e:7e:2f:9c:ab:82:1b:6b:43:
1a:83:a6:a8:66:42:3b:1e:2f:8d:fe:86:29:10:a6:
c0:73:d3:6d:02:b5:73:6a:ea:4a:c9:a2:5c:f7:53:
76:cf:68:95:57:aa:aa:6a:a9:89:46:77:4a:39:35:
9a:fb:eb:f3:7e:e5:a6:95:a1:f0:23:f2:36:3b:a5:
f8:50:36:48:31:9b:71:f2:26:29:7f:dd:99:81:d8:
53:f5:fe:18:d5:e9:34:8a:26:78:7f:4d:68:dc:10:
90:cc:f1:a2:47:86:30:8d:26:85:13:aa:63:01:c9:
6c:de:b3:67:19:b4:85:66:f2:8e:5a:73:b2:5c:98:
53:60:5d:a5:9b:fb:c9:6d:c4:2d:6b:45:10:2f:23:
a5:bf:52:e8:20:cd:3a:9c:84:02:1a:4d:1f:32:3c:
0c:ef:27:e5:ae:2f:6e:28:a0:e0:5a:b2:8f:14:a5:
90:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4A:3F:52:49:E8:BC:D1:6A:17:80:B4:CD:15:7C:DC:FD:65:70:1B
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:29:a8:35:0e:b3:9a:9f:94:a2:c8:aa:d0:42:5f:ca:03:86:
50:81:94:c8:32:8e:3b:af:5d:71:85:b7:d9:3a:55:04:e7:54:
4e:42:c9:97:84:4a:d8:c3:a7:bb:3f:41:72:d6:1f:a0:95:c3:
d5:a4:50:fb:d9:ce:87:88:df:0a:ee:52:f4:27:9d:f0:aa:6f:
b1:0e:e9:dd:ce:59:21:75:c3:0e:63:30:48:b1:93:1a:b7:e1:
15:86:56:69:c0:d7:f9:6d:98:10:96:31:e6:a3:6c:36:dd:f0:
f3:b6:ea:df:25:16:8c:38:27:60:49:92:23:bb:54:4c:b6:d5:
65:f8:7b:2e:0c:45:9d:b4:93:0d:d0:ff:79:a6:c9:67:7d:7a:
a6:e7:7d:0f:ec:e2:09:c8:52:05:2d:03:c5:f7:9c:a7:cd:6e:
0f:ee:f3:ae:7c:db:f9:62:5e:1c:da:00:df:fc:5c:c9:db:a3:
87:54:fa:36:b4:18:0a:77:79:eb:c0:4d:2c:47:0f:11:c2:e7:
a0:69:63:07:7b:33:23:4d:f6:79:8f:45:fd:95:b2:a8:5c:3a:
78:bd:4c:71:c2:15:fb:de:fb:99:e5:77:08:4c:78:a5:54:62:
6d:ca:c2:64:48:7f:61:71:76:c1:db:b6:f6:c0:7f:f8:2b:2f:
fb:93:1a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:07:39 2025 by rpki-client