Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
File: sK_tekcdesOF47k2Wk6WASoBwJU.mft (raw, json)
Hash identifier: amucRZCRgubl8yyVmzrFsgmMHTynfqHNpSBDRxbblXE=
Subject key identifier: 59:74:70:87:87:3A:79:2C:5B:97:15:58:6F:B6:26:71:7C:30:22:C3
Authority key identifier: B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
Certificate issuer: /CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Certificate serial: 0198D73B4E34E7C0F64E1F7CDDC5EAEC15FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
Manifest number: 0DAB
Signing time: Sat 23 Aug 2025 14:00:44 +0000
Manifest this update: Sat 23 Aug 2025 14:00:44 +0000
Manifest next update: Sun 24 Aug 2025 14:00:44 +0000
Files and hashes: 1: C3xtGxxSgp_Plz4Lpk-Ue-Bhuno.roa (hash: so9nDoVUdg/Us7gUe7/dKOyUe77DOJSLVO4IrdFOjZ8=)
2: sK_tekcdesOF47k2Wk6WASoBwJU.crl (hash: jT7LUz0BFxQR9ZsvlarELYCYLLr6avdr3nBiq1R4ga4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:4e:34:e7:c0:f6:4e:1f:7c:dd:c5:ea:ec:15:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Validity
Not Before: Aug 23 14:00:44 2025 GMT
Not After : Aug 24 14:00:44 2025 GMT
Subject: CN=59747087873a792c5b9715586fb626717c3022c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:07:96:cb:de:76:99:b5:45:f3:d5:4f:ce:
fc:40:7a:a0:ea:37:d7:e5:4e:47:fd:8e:08:74:02:
fa:4c:82:a7:7d:2e:92:dd:3d:f8:50:d7:2b:9e:d7:
b7:00:49:28:34:16:31:8f:5a:15:dd:8c:0e:ad:e8:
c4:6d:d1:39:05:3a:26:81:18:96:f8:fb:58:e3:5c:
4e:c1:92:eb:0a:e5:96:dd:fa:a4:8d:7a:e3:55:99:
63:1e:5f:c3:8c:39:d0:34:73:5a:11:5f:de:15:28:
42:c4:72:92:5c:45:1c:d1:d7:a5:90:94:56:19:10:
e6:c3:b1:58:45:a3:f1:b3:4c:54:bb:07:88:1f:8e:
0d:93:fa:e1:99:70:1c:e8:63:50:68:b9:22:d3:fe:
dd:96:67:a4:10:02:7c:b7:cf:f5:25:f5:49:72:8a:
73:96:84:99:3e:b4:fc:64:e1:55:98:2c:ff:25:0f:
69:49:22:a2:c6:81:f8:f8:49:da:f3:b5:59:fc:9d:
7c:89:c9:d4:c6:a4:d5:26:fe:42:90:0c:4b:cb:f1:
0d:bc:e6:04:6e:f3:b0:9e:d6:e1:9f:f1:7f:be:ba:
26:02:7e:a1:70:37:cf:7f:5c:4d:2e:36:2d:72:3a:
28:0c:38:69:c8:e6:54:c3:64:4c:63:02:b2:61:0d:
0d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:74:70:87:87:3A:79:2C:5B:97:15:58:6F:B6:26:71:7C:30:22:C3
X509v3 Authority Key Identifier:
keyid:B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3e:52:6f:24:9e:84:6d:b8:00:9f:4f:de:2b:f4:ee:32:4c:
30:a6:2b:c1:09:3c:3a:3c:41:44:44:d3:a6:0d:ab:0e:44:75:
92:16:2c:a9:66:c5:33:d4:14:1a:e6:6e:99:b5:fb:b6:09:75:
f2:28:f5:42:34:47:9a:85:72:56:1c:18:6b:02:c0:78:e9:00:
94:c6:49:63:45:72:f7:98:03:ca:ad:38:e6:cb:2f:dc:0f:6a:
dc:aa:29:bb:30:1d:9c:e0:2e:db:32:cb:c9:56:5f:a1:b8:b1:
30:40:4a:16:58:fd:ab:75:83:00:13:77:56:a1:d4:d7:3b:e3:
79:49:c7:80:4e:30:7b:4a:ca:69:01:22:df:2a:2d:a1:d4:ad:
20:26:7c:c3:17:1c:fe:31:f4:a3:02:f0:f2:89:80:75:37:60:
6a:2a:39:5d:ce:b4:4b:4b:07:64:4f:e1:da:c6:8f:4f:47:69:
6a:ba:eb:f9:f8:fd:fa:c8:14:5d:a2:6b:f4:84:98:06:f9:6a:
36:69:b2:8a:27:04:64:ba:e3:7c:cf:86:0a:d0:6f:cf:88:df:
de:8d:0e:da:6a:30:bf:ec:fa:a9:46:42:96:16:de:63:b8:eb:
84:83:bf:12:93:06:dc:ce:3d:95:d5:65:24:43:19:bb:12:13:
ea:7d:c6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:49:35 2025 by rpki-client