Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
File: k89OeSfhBJZOTJb0QWSc40F0zjo.mft (raw, json)
Hash identifier: UMXoxxznE1d1BdtO+YAUwFyscR17/a45zLTtyLsk1O8=
Subject key identifier: 98:49:E1:8C:46:E5:9D:9A:10:97:62:7C:23:02:C0:62:90:42:CE:B1
Authority key identifier: 93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A
Certificate issuer: /CN=93cf4e7927e104964e4c96f441649ce34174ce3a
Certificate serial: 01984708B4A1FCA691564F72F6EAA51CA1B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
Manifest number: 15FD
Signing time: Sat 26 Jul 2025 14:00:09 +0000
Manifest this update: Sat 26 Jul 2025 14:00:09 +0000
Manifest next update: Sun 27 Jul 2025 14:00:09 +0000
Files and hashes: 1: DVEsULbgc1uy6V52nNRIcIhepiA.roa (hash: XNV6aUJyGeh2Aa9mxZ1t5TwCl8DNIg+I/K5KbgR9/Ys=)
2: k89OeSfhBJZOTJb0QWSc40F0zjo.crl (hash: AKufLKrpwogJWW/ipbqVAtVGnuPIEKqQve2Bv4O/UN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:b4:a1:fc:a6:91:56:4f:72:f6:ea:a5:1c:a1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93cf4e7927e104964e4c96f441649ce34174ce3a
Validity
Not Before: Jul 26 14:00:09 2025 GMT
Not After : Jul 27 14:00:09 2025 GMT
Subject: CN=9849e18c46e59d9a1097627c2302c0629042ceb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:59:f0:7a:19:1b:8f:30:a3:67:4f:86:5c:
1b:bd:b0:a0:2c:95:ea:40:5a:7a:aa:39:bd:2e:5f:
ef:a1:8a:33:6f:ef:6a:29:68:ac:38:90:8a:e2:83:
8b:95:dd:dc:1a:e2:3d:05:8f:bf:22:7d:2b:42:32:
aa:db:80:1d:81:76:de:f7:77:cd:5b:81:d5:9c:62:
dc:7d:0c:0e:ae:7e:86:dc:ab:fd:87:9e:8f:48:f4:
5a:39:5d:e4:39:e4:00:9f:b5:b8:c0:b2:67:19:64:
cb:fd:98:90:d9:cc:93:d0:90:23:a7:b4:bc:8c:66:
86:67:0d:e6:f1:85:bb:b9:74:4e:d4:6e:b0:b3:33:
9b:98:ec:87:a8:b6:85:3d:ab:63:1f:63:74:31:32:
05:ec:c3:b8:5f:b8:08:5e:24:1f:fd:9a:fc:9a:26:
5c:f7:f5:1c:d4:ec:c6:19:d8:d7:74:66:bb:3a:3e:
87:6c:8d:cf:ca:9e:7b:34:44:cc:0c:60:2c:59:e3:
28:1f:10:6b:e7:3d:91:d2:5d:b7:42:c6:6e:07:4b:
81:6e:3b:fc:16:fa:18:f2:0d:81:43:b6:e3:b9:05:
30:91:ea:ca:4c:5f:ea:60:92:a7:81:11:72:a0:1b:
8b:6d:f9:72:1e:3b:9b:ed:d9:7e:25:6f:97:db:58:
5b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:49:E1:8C:46:E5:9D:9A:10:97:62:7C:23:02:C0:62:90:42:CE:B1
X509v3 Authority Key Identifier:
keyid:93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:93:39:de:9f:db:3e:d8:5b:7f:51:1e:12:55:a1:e9:8b:ef:
1f:11:73:44:b4:01:37:78:a5:94:06:a8:67:4f:59:5b:df:3a:
79:a4:62:6b:01:77:82:07:cb:31:59:54:48:5c:f6:2b:26:e6:
d7:65:91:27:d6:f6:85:c7:cb:35:b7:1c:3a:d0:bd:93:ac:41:
1f:34:22:b2:ac:1c:d2:00:14:7b:eb:17:bd:9e:d1:fa:61:29:
2c:4f:29:13:ef:4c:47:7c:de:29:c9:1d:ab:24:eb:b1:b8:14:
83:5c:8c:de:73:30:f0:6f:2b:31:15:e4:c8:f1:7b:49:90:66:
2a:de:e4:21:c1:73:53:d9:c8:61:11:17:a9:b6:4f:48:72:82:
4a:0e:a8:f5:5c:02:9c:60:67:e7:a3:72:29:3e:9e:c8:3a:46:
58:fb:14:90:1a:d4:a5:f3:8f:53:6f:2f:de:ba:cf:1d:66:94:
b5:48:28:37:1c:9a:fe:5c:e8:a2:20:19:f4:07:1d:e0:ba:14:
df:4e:22:58:c3:14:ca:89:54:47:b8:de:ac:b1:e8:7d:4d:fa:
6c:64:80:03:d0:09:ea:06:cd:70:a7:0f:31:91:a7:7f:ab:7d:
35:8d:a4:57:bb:e7:c5:d0:a9:2c:99:c4:a6:1a:f1:b2:10:30:
86:97:20:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:43:28 2025 by rpki-client