Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
File: k8JEvms6_7bU5Ufy4ePF6sGyarI.mft (raw, json)
Hash identifier: zmO0S5ZpZCzlPXASCWNqHxTMWB4a1TKk32WUSj2mQhg=
Subject key identifier: FD:16:CC:24:EB:61:D1:A5:0B:04:2E:F2:B0:6A:8A:5B:BF:5C:15:0C
Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
Certificate issuer: /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Certificate serial: 019918088FA4F97897AD9748AA93BD367185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
Manifest number: 0D7E
Signing time: Fri 05 Sep 2025 04:00:38 +0000
Manifest this update: Fri 05 Sep 2025 04:00:38 +0000
Manifest next update: Sat 06 Sep 2025 04:00:38 +0000
Files and hashes: 1: W--ZKr5ij0BtuIXs5rvJyXt3d8w.roa (hash: GOtvHAAEQEDyzwtDsA3aSlZZHxuWNeU6Rlg4PiHPszw=)
2: k8JEvms6_7bU5Ufy4ePF6sGyarI.crl (hash: mUYZxTxY1RbeKY2edpS+Nu796xMaonKVe6IeTGK32fE=)
3: uG74c7I0myUDPmZfaSmD4tc9rV4.roa (hash: gFdqnU7r/rSwGKvKSrZSTL5gnMsfd1TYUTvAqWItcO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:08:8f:a4:f9:78:97:ad:97:48:aa:93:bd:36:71:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Validity
Not Before: Sep 5 04:00:38 2025 GMT
Not After : Sep 6 04:00:38 2025 GMT
Subject: CN=fd16cc24eb61d1a50b042ef2b06a8a5bbf5c150c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:cb:c4:d2:6b:ab:25:b2:e9:09:63:42:0e:
05:06:fe:84:39:4d:bd:83:58:39:ee:55:15:3c:82:
64:f9:c4:df:34:27:99:3a:42:6c:81:0e:7a:6d:f9:
dd:e6:0a:35:7d:3d:83:e6:e8:cd:73:bd:1a:03:da:
6a:f3:ac:ab:5b:3d:49:00:30:d1:68:b9:11:7c:ff:
aa:e5:05:a5:cf:54:2a:d9:85:97:cd:bf:50:ab:d6:
2d:8b:40:db:b6:13:0e:5c:99:6e:57:fc:ad:9f:b9:
ae:61:10:90:1a:c2:11:0c:15:02:48:94:7b:f7:74:
e6:c5:14:2e:17:24:f8:19:b2:21:5c:a5:04:b1:a2:
1c:4e:8c:7e:d1:cd:05:7d:2b:ab:c8:23:8a:36:8a:
77:98:fd:fe:ad:11:3a:0e:e8:af:cb:99:5b:06:a6:
0a:70:dd:5f:04:33:03:95:f8:12:d3:3e:7b:a9:4b:
6a:f0:0f:6c:a5:a1:d0:fc:b5:76:84:d7:35:71:83:
12:4f:61:6f:83:cf:81:ca:bd:cc:d1:cb:f4:8d:d6:
89:8c:b7:29:4f:d3:fa:09:2a:60:de:59:89:da:44:
6d:de:56:1d:05:b9:88:53:bc:60:78:52:71:b6:0c:
3b:c3:5c:58:06:c8:51:2e:39:ae:cf:d8:e1:74:ad:
89:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:16:CC:24:EB:61:D1:A5:0B:04:2E:F2:B0:6A:8A:5B:BF:5C:15:0C
X509v3 Authority Key Identifier:
keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:45:20:07:06:e3:76:83:f0:fd:ae:7a:48:3c:f9:f1:33:b1:
91:e1:4a:1f:19:18:bd:5a:37:e5:78:7c:34:7e:15:0c:c2:94:
cd:e9:97:2b:f8:98:21:c3:5f:f5:40:70:d1:2a:75:24:eb:ad:
b5:d0:04:e5:b2:16:aa:b4:69:d7:2d:c1:24:dc:d2:e6:1b:06:
d1:35:19:e2:db:f1:bd:45:a5:37:45:a3:ec:84:16:c1:69:9c:
1e:a3:78:e2:05:fb:68:c2:00:45:a2:59:a3:8f:6b:da:52:dc:
bd:40:de:7d:2a:8e:70:d7:0d:74:a6:25:78:94:6c:3a:d7:17:
fc:52:85:38:69:24:2a:3c:6c:75:69:08:70:0d:2b:bb:28:0f:
b2:50:ba:1f:26:a2:df:6e:9a:f9:94:80:51:e8:ca:95:06:43:
4b:3a:b9:97:2d:bf:cd:41:4c:52:5c:55:db:43:39:f7:22:de:
a9:a4:5f:f4:2b:40:91:4a:dd:f4:9c:d1:3b:20:48:16:bd:68:
c8:2d:b3:bf:60:96:dd:37:95:70:b2:80:76:49:37:ea:7e:e4:
6d:39:6b:d7:1d:c3:f4:d1:df:c5:89:3f:57:11:96:d9:cf:74:
06:70:cd:bd:7f:95:2b:08:9e:a5:e8:36:01:2c:f6:69:6b:79:
c5:83:28:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:34:08 2025 by rpki-client