
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
File: k8JEvms6_7bU5Ufy4ePF6sGyarI.mft (raw, json)
Hash identifier: w5laUfIXu7yrT9EFeGtW8vRKPsYRTEDhRDUkSDqEoto=
Subject key identifier: BA:AB:87:E0:B8:D2:5B:1A:36:C2:94:D2:E1:00:00:81:44:58:F5:EB
Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
Certificate issuer: /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Certificate serial: 0198D65FC7AA291C1E982992B7297A450325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
Manifest number: 0D5C
Signing time: Sat 23 Aug 2025 10:00:57 +0000
Manifest this update: Sat 23 Aug 2025 10:00:57 +0000
Manifest next update: Sun 24 Aug 2025 10:00:57 +0000
Files and hashes: 1: W--ZKr5ij0BtuIXs5rvJyXt3d8w.roa (hash: GOtvHAAEQEDyzwtDsA3aSlZZHxuWNeU6Rlg4PiHPszw=)
2: k8JEvms6_7bU5Ufy4ePF6sGyarI.crl (hash: Sanj2SdKMUkAKoWRmlUxEEuipGuTKhE5LwbWHJrQmhQ=)
3: uG74c7I0myUDPmZfaSmD4tc9rV4.roa (hash: gFdqnU7r/rSwGKvKSrZSTL5gnMsfd1TYUTvAqWItcO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:c7:aa:29:1c:1e:98:29:92:b7:29:7a:45:03:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Validity
Not Before: Aug 23 10:00:57 2025 GMT
Not After : Aug 24 10:00:57 2025 GMT
Subject: CN=baab87e0b8d25b1a36c294d2e10000814458f5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b9:a2:e4:f2:2f:4e:59:6f:98:c1:75:c9:dd:
5c:78:16:96:0d:1d:9a:06:1e:39:7c:97:0c:d4:8c:
78:ce:91:8e:3c:de:51:7e:1b:ce:a4:43:37:6e:45:
f8:7d:d4:93:a1:16:8f:7b:a8:b4:3a:64:52:3e:7b:
38:42:a5:8c:d8:7a:27:82:d8:b4:d5:17:58:51:9e:
73:c7:1d:d5:ed:e9:8c:c7:ad:6c:49:ce:bd:c2:56:
65:d2:4d:c3:b0:17:3b:23:c0:b8:9b:a2:aa:38:68:
eb:db:1b:ec:42:5e:52:b0:f2:b3:ad:be:7d:31:40:
44:03:91:39:63:d7:8a:07:63:ae:7e:53:92:61:50:
37:ee:ce:71:aa:8e:33:f7:22:4d:39:5c:87:9a:19:
e4:e0:1a:ea:38:e8:ab:a7:3e:fa:0f:f1:0c:4b:a6:
9b:84:f5:3d:09:7b:fc:bd:3a:00:13:c8:f9:9e:26:
cd:bd:f5:ed:50:bf:e2:63:f6:12:7a:31:77:8a:d2:
3d:8e:53:8c:67:b5:cb:4d:2a:55:57:00:3f:ae:05:
90:b3:8c:e0:78:89:33:c7:b5:eb:28:5f:d3:8c:85:
9e:c1:78:58:26:01:c9:fb:79:72:28:75:02:32:2e:
26:0c:06:15:1e:5e:ca:67:50:33:c9:00:6a:28:2c:
0d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AB:87:E0:B8:D2:5B:1A:36:C2:94:D2:E1:00:00:81:44:58:F5:EB
X509v3 Authority Key Identifier:
keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e0:6c:ae:43:ea:a7:59:d7:83:1b:b5:67:b2:a5:11:29:4d:
27:31:4c:62:1a:d3:a6:d3:dd:6a:40:11:ab:7f:fc:61:19:9f:
7c:2b:5e:3b:7c:f2:f5:5d:b1:74:d5:7f:e8:3a:55:53:24:82:
52:36:16:0e:2f:2c:92:bc:d8:ea:d1:99:ad:31:53:14:2b:50:
c5:a4:0b:50:71:f1:dc:d8:43:c7:9b:f2:a1:c1:f5:54:1a:8b:
0d:87:fb:c0:78:41:a5:6f:1d:05:ff:b9:96:83:2d:5c:4c:12:
10:63:42:c4:e5:d5:33:ef:54:a6:7f:22:31:db:1e:e7:52:a4:
bc:33:63:be:d1:bb:07:b8:4b:64:03:29:f7:10:71:15:61:d2:
73:df:1e:48:4c:59:c4:60:49:8d:fe:8a:da:ec:17:02:5e:ec:
b3:1d:39:40:c0:48:16:00:1e:22:a6:c5:fc:70:27:a9:92:15:
4c:21:8a:d8:4d:e0:61:f9:c6:32:13:ad:1f:93:1a:fa:b0:87:
53:58:a4:89:d7:bc:c3:29:c2:7a:e0:f7:05:60:7d:4f:26:93:
48:ba:cc:26:f7:73:b7:a5:27:28:e1:a9:1d:53:34:18:3f:cb:
55:26:41:b5:cb:ef:74:9b:89:0f:e8:c0:1a:9d:0f:cd:c9:39:
c4:e4:fa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:06 2025 by rpki-client