Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
File: sK_tekcdesOF47k2Wk6WASoBwJU.mft (raw, json)
Hash identifier: AnZVZqJ2Hy+v3xQI8ZZ9DUi5/Ks8nQqaS1JCTCuEnfU=
Subject key identifier: EB:AE:8A:CC:1B:B4:10:5A:5D:DA:DE:46:9B:EB:63:FD:53:1E:29:AB
Authority key identifier: B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
Certificate issuer: /CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Certificate serial: 0199228C933C0F830B9558290A6FE317DA56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
Manifest number: 0DD2
Signing time: Sun 07 Sep 2025 05:01:01 +0000
Manifest this update: Sun 07 Sep 2025 05:01:01 +0000
Manifest next update: Mon 08 Sep 2025 05:01:01 +0000
Files and hashes: 1: C3xtGxxSgp_Plz4Lpk-Ue-Bhuno.roa (hash: so9nDoVUdg/Us7gUe7/dKOyUe77DOJSLVO4IrdFOjZ8=)
2: sK_tekcdesOF47k2Wk6WASoBwJU.crl (hash: aj90OEM9IZq0STfen1+vODdGVV0VWFa9hswzTE8TBXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:93:3c:0f:83:0b:95:58:29:0a:6f:e3:17:da:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Validity
Not Before: Sep 7 05:01:01 2025 GMT
Not After : Sep 8 05:01:01 2025 GMT
Subject: CN=ebae8acc1bb4105a5ddade469beb63fd531e29ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a7:06:6d:24:c8:c4:3d:13:d3:b7:d5:44:2a:
2d:5b:d4:c1:9b:b3:01:44:c8:63:a8:56:62:02:44:
85:04:ce:00:11:a7:ed:10:d9:8c:89:4a:f9:8b:a3:
a0:f3:69:80:e1:7b:c5:28:15:e1:57:3b:8f:db:37:
bd:07:8b:85:e7:7e:22:27:13:39:be:5f:5f:a6:f0:
58:9c:ac:82:fe:7a:ac:bb:7d:50:5c:b9:75:f6:c3:
67:33:64:2b:99:39:54:40:eb:03:6a:52:81:2f:55:
6d:de:67:6a:71:f9:d1:25:e8:8b:9f:37:24:56:a8:
8b:9a:51:52:10:9b:f6:cf:29:f6:f4:84:19:e9:df:
13:fa:de:d7:2b:be:08:2a:9c:2c:8c:4c:66:bf:8e:
99:ae:23:fe:a2:18:e0:14:3c:97:ab:76:be:eb:99:
76:fe:1c:ab:e0:da:aa:4d:5e:3a:41:e0:cd:1a:57:
eb:6f:2a:57:84:a9:0d:29:36:92:4d:fc:ca:97:83:
89:49:b7:06:74:8b:8b:58:b5:ed:3f:36:b9:cc:45:
7c:20:ab:03:fc:56:d0:62:d1:c2:e2:be:db:7d:e1:
ce:8d:00:bd:4a:01:c1:c1:8c:e6:f7:e2:2c:bb:d8:
43:53:2f:13:36:57:60:20:c2:f5:67:32:a5:35:8d:
6d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AE:8A:CC:1B:B4:10:5A:5D:DA:DE:46:9B:EB:63:FD:53:1E:29:AB
X509v3 Authority Key Identifier:
keyid:B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c0:32:ba:e4:62:cc:b6:a2:0e:40:c5:b7:7c:f2:c2:c2:0d:
b4:29:5a:79:6e:3f:cc:f1:27:4e:56:12:33:77:e2:b0:79:a6:
4b:17:ab:a3:a5:52:11:1a:3a:5f:8f:66:f5:34:2a:c3:82:49:
77:39:cc:2d:d6:03:70:bc:72:f9:c2:5a:90:64:8e:92:e1:d2:
ad:7e:88:62:63:1a:ab:44:ba:e9:7b:a3:f3:08:f1:5b:fd:bf:
58:10:e5:24:db:16:92:ae:28:bd:35:44:31:65:7d:1e:83:d5:
88:c0:11:75:8b:6a:c7:8e:d9:d3:0e:fe:5d:9e:77:82:ec:35:
14:91:45:4f:c5:e5:c0:58:7e:f4:62:69:6b:a0:e7:f1:55:46:
db:f3:cc:d8:e6:6a:3a:b4:ad:4f:01:9b:e8:c2:04:54:71:c8:
2d:4a:a8:06:25:31:a4:7c:74:be:ea:99:28:a9:08:de:56:c0:
cb:1b:f6:05:8d:11:5b:33:29:a5:af:8c:9e:2e:2c:50:18:f4:
73:ec:19:49:98:6c:81:43:4c:17:e2:0c:dc:03:d0:cd:43:64:
a1:54:5b:5b:78:2f:32:c3:87:7e:57:82:73:b6:0b:69:af:c3:
fd:ed:56:a9:b8:aa:b8:9d:34:c8:5b:8e:c8:b3:23:20:f0:5e:
5d:42:41:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:32 2025 by rpki-client