Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: e/FQ2MX12J29O/SViUJWUJSbO9Ko2c4aeUgwEX0YDTo=
Subject key identifier: 3A:4B:ED:DE:6A:98:E4:D1:95:43:BF:F4:A4:44:64:E6:D5:05:30:4B
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 01984A783210881837A1A415AA4ADC2A7121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 06:00:47 +0000
Manifest this update: Sun 27 Jul 2025 06:00:47 +0000
Manifest next update: Mon 28 Jul 2025 06:00:47 +0000
Files and hashes: 1: Uc_eHHiK2oso3GTkmMSET3r6doI.roa (hash: 0NgJOw3Kd7PNm0qwiJH+X6KSvVouo/yd/FKitaaEd7c=)
2: acAq7MIcmx18UIHmz-jlBD_t3Ys.roa (hash: Zx8ySSl2DHqJTH9VbThnUkgVbOzhPotBL0G7iUFbFBE=)
3: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: 5KfqghyzK/+tb+LtZUWw0VFoiVeign5hJhlVeW8/jCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:32:10:88:18:37:a1:a4:15:aa:4a:dc:2a:71:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Jul 27 06:00:47 2025 GMT
Not After : Jul 28 06:00:47 2025 GMT
Subject: CN=3a4bedde6a98e4d19543bff4a44464e6d505304b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:d7:9d:30:28:5b:a6:c2:89:bf:fb:70:b4:
f1:26:04:8f:30:01:0c:a4:16:e0:74:d0:84:4a:31:
d5:bd:33:57:43:8d:ca:80:8b:f7:aa:38:94:7f:9e:
c6:ea:4d:dc:11:94:44:9d:f0:e1:7b:b7:87:d6:3a:
71:6e:5e:bb:62:4f:bf:92:8e:ba:70:f6:12:a2:f6:
85:fc:55:9c:bc:1f:62:57:7d:04:45:76:3b:42:c8:
3f:24:75:74:58:ba:4c:85:fd:e4:94:e6:e5:2d:e7:
a8:af:ea:fc:6a:a5:3a:7f:1a:c0:1a:a0:83:4a:88:
8e:98:fe:19:41:61:fb:a0:8e:6e:7a:7f:ab:de:41:
9f:1c:52:4d:69:20:b4:79:b3:60:e8:1d:93:53:c5:
c5:28:b3:11:42:30:be:ef:ae:6a:10:0a:b9:3e:48:
38:8d:55:40:41:6b:d7:52:a5:fe:08:19:bf:a0:67:
66:78:9b:c5:ae:01:8f:52:e7:32:3a:42:38:51:9a:
09:43:b9:dd:ce:32:b7:f8:d8:a4:66:de:7f:6f:e2:
69:bc:b6:02:2f:bc:e2:f0:85:e0:89:a9:f8:fb:a1:
fe:1a:47:41:3e:1e:03:c7:43:33:6e:bb:6d:f7:27:
da:8d:49:66:46:43:53:db:fc:a0:84:d3:52:a9:4c:
53:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4B:ED:DE:6A:98:E4:D1:95:43:BF:F4:A4:44:64:E6:D5:05:30:4B
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:73:f0:75:ca:1e:42:e1:4a:db:71:58:e8:43:b9:43:ae:9d:
05:dc:7f:85:01:49:8c:a5:df:d2:03:19:5f:4c:50:15:a9:14:
c1:07:01:00:61:b4:ff:da:17:1d:8c:86:b6:ad:1f:af:83:a2:
74:36:f6:b9:12:04:c4:28:ca:e5:71:88:8d:4d:ee:bc:35:2e:
2f:9a:77:91:66:b6:56:3a:1c:27:e9:c1:93:47:4c:1b:2b:41:
ea:ba:87:c3:9b:2b:1f:34:cf:10:7b:6c:63:78:59:2b:63:9f:
ad:63:40:45:ff:4b:a3:51:c6:a0:bc:b2:21:4b:5a:06:a6:94:
d6:66:ac:30:39:26:fa:3a:34:c2:ad:8f:f9:38:df:a7:7a:85:
4e:7b:87:1b:8e:c1:a0:4f:4f:3a:a8:14:ed:d6:0d:3a:6f:6a:
ab:64:2b:42:f2:62:70:28:a5:ea:f2:a0:a2:0f:60:c0:b5:46:
02:03:b5:bf:ac:6d:62:92:3d:34:82:ae:83:b8:cd:19:04:11:
b0:13:a5:95:1d:79:15:cb:6b:b3:e2:b0:18:d4:11:eb:78:9c:
16:32:3f:e7:17:44:de:22:c5:65:28:6c:6f:3c:06:79:f9:83:
40:49:c8:ed:cc:34:95:43:58:5f:af:b4:43:8d:b2:2c:48:29:
e7:41:6d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:36 2025 by rpki-client