Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier: DT2IX/vAmvzuOASis3i+2OqV+KwmvcOgvuxOlVDyOl4=
Subject key identifier: 8C:CD:94:04:B0:7B:60:25:6E:9E:04:2D:03:E9:A1:A4:6C:36:52:BB
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial: 01993537C2C63728A94D8FB08C11D481CD50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number: 1679
Signing time: Wed 10 Sep 2025 20:01:10 +0000
Manifest this update: Wed 10 Sep 2025 20:01:10 +0000
Manifest next update: Thu 11 Sep 2025 20:01:10 +0000
Files and hashes: 1: 3y9VMN9BUcZB2fmchyviGBmGtxw.roa (hash: WvArAvEQlUAHpEjB63U5q0z8PqLe+6GgRYCWBvbd2yM=)
2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: 1GbgweEcnlN3caBtIgM1P7VlP6VppSNdgyl/p7+Et+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:c2:c6:37:28:a9:4d:8f:b0:8c:11:d4:81:cd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Validity
Not Before: Sep 10 20:01:10 2025 GMT
Not After : Sep 11 20:01:10 2025 GMT
Subject: CN=8ccd9404b07b60256e9e042d03e9a1a46c3652bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f6:d7:f7:7b:54:a8:23:79:30:b6:e1:e6:2c:
6c:5e:d1:e1:6e:99:f1:0e:f2:cf:47:41:29:36:fb:
a3:36:b9:c0:90:b1:a2:0c:79:4c:ee:51:ac:53:51:
8c:d7:0b:af:c6:da:11:c7:75:ec:e9:fd:c1:62:d9:
f3:f7:1b:ca:9d:3a:28:db:6a:99:6a:05:2d:55:26:
be:01:b3:7a:ce:02:c1:46:18:91:1b:13:6c:3f:40:
3f:a3:94:ad:f4:04:f3:12:e1:28:ad:9c:eb:24:7b:
12:60:c2:e5:b6:d2:c3:d6:12:1d:3f:44:d3:dc:ce:
12:c1:c3:8e:15:aa:7a:4e:6e:32:cc:3b:8f:28:9d:
5d:20:6d:fb:00:b3:d2:9e:bc:ed:49:f8:56:f3:07:
6d:72:a8:59:a3:36:d3:29:40:01:5e:84:f9:85:b3:
76:07:31:96:53:9c:0d:b1:9e:44:79:4f:6a:93:3b:
5f:03:9b:2f:d8:96:04:58:6a:e1:ca:88:36:5a:27:
fd:38:ce:62:cb:fc:c0:13:5a:cc:f3:7a:8a:72:b3:
bb:f3:3d:1b:91:45:f8:3f:db:e4:b3:f4:77:47:9c:
40:b7:0f:38:37:7d:bc:6a:3f:5b:c7:2a:f9:d7:e9:
75:9a:99:61:35:30:25:1f:ad:0f:83:9c:f4:d7:c3:
34:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CD:94:04:B0:7B:60:25:6E:9E:04:2D:03:E9:A1:A4:6C:36:52:BB
X509v3 Authority Key Identifier:
keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:70:4a:2a:4c:d0:12:92:02:11:8b:05:59:a8:64:89:0b:41:
bb:21:f7:b7:50:bd:50:46:dd:02:92:6b:4f:a1:c9:03:3e:6a:
5d:4d:67:26:7a:a6:44:96:2f:03:cc:dc:27:3a:46:6a:cf:f2:
6c:4a:8b:a6:1a:18:17:e9:ed:29:8c:3b:e5:b6:2a:0e:61:9c:
a0:fe:90:c7:45:7d:f8:c1:cf:c1:25:1b:d7:1d:64:4a:b3:38:
8b:0e:b9:08:0e:6b:52:9a:d5:58:2b:00:23:e0:24:06:ec:72:
d2:bc:e5:95:cd:bf:e1:4f:79:f2:2e:a7:74:4a:71:61:af:21:
9c:ff:52:12:df:4d:ba:a1:d5:4c:30:bf:21:7c:06:01:41:bd:
a4:d3:ad:21:3b:d8:14:9b:7e:11:f7:a5:8f:56:07:74:0a:f2:
7a:15:a6:2d:82:07:c5:aa:fe:66:e5:18:a3:e5:9f:0b:94:b9:
d0:18:51:1b:9a:10:e8:a9:65:1b:30:2b:e3:de:b0:50:8e:e3:
e2:42:c8:2d:aa:a2:87:dc:de:1c:3d:29:34:bf:7a:4f:1c:3e:
58:24:cc:d1:cc:83:70:7b:7f:24:ef:e0:ef:14:ce:b2:3a:0f:
3b:84:5c:f0:a8:b2:7a:ad:0f:ec:88:19:c2:1d:c3:7c:f7:c0:
0a:fa:0d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:32:41 2025 by rpki-client