Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
File: k--iv5CiNyiFJyfxJu3mUobDymc.mft (raw, json)
Hash identifier: VdjHqTKGDUXfDgEQoLR4dFlfpVBoSZhRpO2SrONsSGQ=
Subject key identifier: F3:C6:3A:9C:84:94:83:F0:69:E6:51:3C:9D:76:AA:C9:AB:55:82:21
Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
Certificate issuer: /CN=93efa2bf90a23728852727f126ede65286c3ca67
Certificate serial: 0198C97FD117E601A9CF7299C2AF075600C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
Manifest number: 03F6
Signing time: Wed 20 Aug 2025 22:00:53 +0000
Manifest this update: Wed 20 Aug 2025 22:00:53 +0000
Manifest next update: Thu 21 Aug 2025 22:00:53 +0000
Files and hashes: 1: 7kHtWJwf55jOxnVlDwQ_Pz_QbDo.roa (hash: 5xzI11cU+vDKS4SWJ2VW5NiWSSXP8uOI0oJRmaU/700=)
2: 7t7MlmcK5nHqyL8qD10NpjUf4kU.roa (hash: 9aqRdXb5dOWxjBFXvCoD8FGSfMTH7XxxsevlkYrw8og=)
3: k--iv5CiNyiFJyfxJu3mUobDymc.crl (hash: akkSxSD0iqEz8whi4s3l5eboQTBCnk/axvHees1Pw6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:7f:d1:17:e6:01:a9:cf:72:99:c2:af:07:56:00:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67
Validity
Not Before: Aug 20 22:00:53 2025 GMT
Not After : Aug 21 22:00:53 2025 GMT
Subject: CN=f3c63a9c849483f069e6513c9d76aac9ab558221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b0:ef:ed:1d:8b:c0:6c:b1:66:89:fe:4b:59:
4c:42:d3:32:a6:c6:55:8c:05:7c:c1:99:3c:16:2b:
27:64:b8:d9:bb:21:b7:9d:53:e4:86:30:79:45:04:
c5:50:dd:3d:a9:e3:25:ae:d9:79:20:73:7d:8d:6d:
fc:4a:e1:75:5d:ca:1b:bb:b7:4f:ea:03:bb:3a:d0:
f2:2d:39:7c:9e:98:c1:50:f2:fa:17:66:c9:8b:8f:
ab:7d:ae:a9:36:b5:32:30:7b:2a:d6:b7:2f:ec:3b:
07:28:42:a7:95:8d:3d:d7:82:99:3c:a4:07:90:c5:
02:f5:ed:8a:0f:5b:9f:8d:f3:e6:e0:8c:c4:63:ae:
59:3b:02:23:2f:0b:25:72:d9:95:b7:39:08:a5:63:
b7:73:0a:ec:e0:3d:62:14:16:e2:71:6e:e0:ab:c7:
56:e4:19:05:a0:7d:05:f6:86:82:69:a6:5a:0a:c8:
ea:ef:c8:c7:97:e8:ef:73:9f:c6:fb:95:1e:cb:73:
a2:5e:68:c8:9e:c5:67:b0:0a:e2:ef:7d:97:e0:fa:
84:8b:79:7a:4a:a4:55:09:1b:20:30:a4:26:98:bb:
c4:f9:76:a4:f4:e9:71:65:1e:54:fb:5d:28:6c:0a:
9e:40:ed:20:b8:f2:b4:59:7d:bd:70:96:89:ea:fd:
9c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C6:3A:9C:84:94:83:F0:69:E6:51:3C:9D:76:AA:C9:AB:55:82:21
X509v3 Authority Key Identifier:
keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:38:76:82:af:bb:7f:ee:95:04:a7:24:4d:63:33:3d:f5:1a:
03:4d:d1:4e:06:ec:3f:f9:59:98:80:03:9f:29:22:84:cd:cc:
ab:5a:2f:8a:55:b6:68:af:8b:01:5d:f4:e7:7a:41:71:33:fc:
4d:f0:df:50:42:a6:05:e2:b8:70:d7:90:de:67:c1:4d:56:80:
94:7f:5c:b0:d5:a9:6e:3c:f3:ce:35:53:53:11:7c:bb:8b:50:
0d:50:a2:24:91:63:5d:8b:3a:c3:80:8f:9d:04:11:39:6a:0b:
01:48:ca:e9:e6:69:a1:b7:dd:a7:8b:b6:87:06:0f:40:82:d2:
0b:dc:b5:64:d3:dc:b2:3b:54:61:4b:e7:0b:22:2d:cb:18:bf:
e0:a4:7b:29:70:d9:55:b4:e6:ed:bd:ef:d9:6e:a7:90:ce:ce:
40:26:89:b4:b4:6c:f4:4b:75:71:b4:59:db:82:a2:93:a6:58:
20:c8:28:3d:34:e3:c8:4f:96:6c:69:17:a2:3a:19:2b:86:3a:
33:cc:71:6e:3b:a4:09:84:dc:61:e9:0a:5a:5a:4c:51:7e:e0:
86:6b:f7:73:29:6a:97:ec:75:e2:69:80:4e:5c:32:5b:76:b6:
69:11:1e:06:ee:0c:3d:67:4e:78:3d:36:2c:f0:b5:50:9f:4e:
fd:59:51:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:56:42 2025 by rpki-client