Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: SSfJ4OwBQS+Cqg55yWluQpkG5UJL1542N40JPevtZZM=
Subject key identifier: C6:24:EB:30:0B:79:F1:A0:52:E1:83:6D:36:70:66:70:F4:78:BD:E3
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 019922FA9370C9D207A9F63AE157C22018A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 1679
Signing time: Sun 07 Sep 2025 07:01:11 +0000
Manifest this update: Sun 07 Sep 2025 07:01:11 +0000
Manifest next update: Mon 08 Sep 2025 07:01:11 +0000
Files and hashes: 1: R0_MeNcCGsgFbXPPMSbNiNB6onw.roa (hash: jCCdHzd1f1vyFj3zrZb6H/YnXBVmEiivGeOlhoHJWc0=)
2: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: eeTaAAGA27IKVoXwFd3xfHmjLP63XE3mfWA/YOGC2g4=)
3: xiLzP1pUVJ4HlLptpzl15fneHrg.roa (hash: Oybd2JrzjZp9Unasli0WI1/BduGFzHUQWKvicye2j54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:93:70:c9:d2:07:a9:f6:3a:e1:57:c2:20:18:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Sep 7 07:01:11 2025 GMT
Not After : Sep 8 07:01:11 2025 GMT
Subject: CN=c624eb300b79f1a052e1836d36706670f478bde3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ed:b2:25:46:1f:59:3f:91:e6:1c:31:9e:af:
62:be:36:ed:05:7d:88:92:16:c6:a2:09:41:cc:85:
92:7d:ab:df:7c:bf:0f:a6:55:63:a5:bb:6d:bd:7e:
74:ba:42:aa:e9:dc:d9:79:04:e5:d9:c7:52:76:5c:
18:e1:2e:5e:56:49:72:23:be:bb:d7:d9:62:5d:19:
6d:2b:85:03:04:dd:6e:c5:21:dc:87:3e:2f:7d:e0:
10:a5:2d:4d:e7:aa:75:45:64:a9:74:88:9b:a2:72:
dd:49:a2:36:c4:1e:a8:a8:45:eb:63:55:21:bb:01:
ad:68:6d:79:63:91:23:b3:6d:b8:75:33:2d:36:e2:
6d:e7:74:04:0c:88:d7:d6:e1:f0:6c:6e:87:6b:55:
ab:af:59:47:09:2d:89:6b:3c:35:13:43:52:05:6c:
82:0a:d6:fc:61:02:a9:18:02:01:7c:11:6e:cf:63:
a4:bc:8f:9a:b6:91:b7:ac:d1:fd:e0:9c:9b:f2:ac:
da:a2:b7:6f:13:b0:66:f4:05:45:c5:96:b9:40:78:
bc:19:71:57:16:63:bd:21:19:31:cd:41:a0:23:cc:
82:6d:df:91:60:fe:74:b8:61:a3:1a:cc:94:28:61:
e9:a7:ab:f7:96:74:9f:81:8e:71:1a:c5:c1:92:86:
69:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:24:EB:30:0B:79:F1:A0:52:E1:83:6D:36:70:66:70:F4:78:BD:E3
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a1:6b:cd:88:30:55:4f:70:a2:44:f3:af:82:ee:15:4c:e2:
42:9b:fd:9e:be:a8:d3:cd:7a:80:d4:98:2a:cb:48:a7:64:98:
e7:98:c2:d4:0e:0d:95:ac:62:c7:4c:ff:d2:79:48:71:c3:6b:
7f:db:b4:ad:b1:1d:0d:2d:1c:88:46:8e:aa:b7:0a:3a:62:bc:
a7:46:bb:8a:17:9b:bd:8a:1d:47:9f:bc:1d:89:33:4a:d1:c5:
e0:1e:c6:da:84:1c:d5:19:84:e5:9b:32:8e:1b:13:2d:db:63:
47:d6:78:6c:58:c4:e5:13:87:42:e7:e0:d7:3b:17:9e:b6:94:
76:3a:e6:72:0d:eb:02:ca:e1:06:49:b1:fd:ca:be:28:e1:b2:
6d:b3:3d:b1:2a:2a:ed:dc:99:b6:cf:2c:1c:d2:63:f8:d6:4a:
13:b3:7b:68:88:73:b5:6f:1d:f8:46:61:79:f7:c8:3b:d6:15:
c8:be:57:97:66:0b:b3:cb:af:8c:bf:96:1c:c0:79:46:21:e8:
9f:6a:55:46:14:89:93:4c:31:0e:47:88:9b:eb:bc:b5:09:e6:
da:f8:be:cd:86:5f:5e:fd:d9:9f:9a:8b:8a:68:d0:33:7d:3d:
a3:f2:cd:fd:08:cf:f2:f4:6f:92:4e:c9:6d:fa:2d:47:53:65:
5c:3d:39:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:58:27 2025 by rpki-client