Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
File: k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft (raw, json)
Hash identifier: Jai0BTOdGrrkBcvMdZ6bGbrCSD2XQSDE4sXa7KuXRGE=
Subject key identifier: FF:0E:BA:24:3D:53:4E:48:72:53:59:67:56:56:A2:CA:B6:56:6A:06
Authority key identifier: 93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
Certificate issuer: /CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Certificate serial: 0198D5BC536953E1217AD66670115827DFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
Manifest number: 0581
Signing time: Sat 23 Aug 2025 07:02:25 +0000
Manifest this update: Sat 23 Aug 2025 07:02:25 +0000
Manifest next update: Sun 24 Aug 2025 07:02:25 +0000
Files and hashes: 1: eXKi70pVOkSciah0yxPymcceP7o.roa (hash: /QwJ8MrFkVplCOmNYJ6qPcPj5JI/tOF/FJ4aI1f1YYQ=)
2: k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl (hash: DMqn7XvsejsA8WS/Z48Ck/9TG/SqHQhgO6ZmE0XumEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:53:69:53:e1:21:7a:d6:66:70:11:58:27:df:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Validity
Not Before: Aug 23 07:02:25 2025 GMT
Not After : Aug 24 07:02:25 2025 GMT
Subject: CN=ff0eba243d534e48725359675656a2cab6566a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:4c:76:36:5b:ec:2e:88:8a:75:38:ea:a3:
dd:ac:c5:4c:89:10:ab:06:48:f9:fa:e5:ad:43:62:
d8:18:69:d5:27:56:6b:d0:ac:ee:27:72:d7:90:1b:
e2:e4:eb:13:1a:7f:53:56:0d:33:c3:1b:6b:ca:c4:
fc:33:ac:ba:51:ee:bc:56:cb:cf:72:03:30:9b:90:
9e:e7:0c:92:61:81:13:e1:e7:3a:08:d6:52:a5:09:
1b:d7:89:7f:e1:c1:ba:4f:7f:00:49:22:2b:0b:6e:
ae:4f:f4:fa:d7:45:e9:77:42:b8:3b:ba:92:94:8c:
62:9e:42:4e:37:dc:87:84:11:47:6a:8b:e2:8c:45:
84:62:b9:ca:2c:13:fe:61:ee:4a:16:91:e3:a9:0d:
5d:22:e6:75:01:ce:b1:ea:33:20:b0:19:97:18:09:
8b:a6:4e:31:df:a0:2d:c3:42:d6:25:ba:67:c3:ba:
91:8b:6e:db:96:a6:9f:cd:26:a8:45:83:bb:78:d0:
23:91:79:75:0f:ee:87:74:27:0a:3f:6e:ef:38:89:
9c:d2:fb:5b:8b:ce:c9:2f:dc:85:16:db:a2:08:c6:
e8:20:e3:76:18:03:44:d9:dd:5d:bb:c3:3b:1e:a8:
e0:61:f1:eb:4a:aa:6c:42:60:e2:07:40:9a:8d:a3:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0E:BA:24:3D:53:4E:48:72:53:59:67:56:56:A2:CA:B6:56:6A:06
X509v3 Authority Key Identifier:
keyid:93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e2:70:07:6e:29:d5:5d:c4:2b:75:f2:b5:1d:a3:b7:0a:af:
0f:78:ad:f5:8b:7c:c9:67:9c:bd:fe:51:59:85:eb:69:ae:4f:
00:9b:0d:b9:c9:e2:42:2c:c5:1d:73:57:8f:65:cf:52:e9:f7:
e6:e1:61:54:79:2d:40:9e:38:66:35:87:41:b9:64:2e:4c:fd:
a2:9d:f8:b2:3f:76:8a:2a:e1:29:fa:7e:28:32:19:1e:d7:60:
6b:0f:42:ff:7a:2c:50:2a:25:e3:8a:3e:26:52:08:e8:30:de:
10:15:00:25:a9:b9:9e:ad:6b:a0:ac:f7:1e:78:de:c9:b0:5f:
5a:92:3c:5a:e3:e2:d3:6e:68:30:64:a7:a7:76:74:c0:07:cd:
16:01:a0:86:e4:ea:7d:a4:d6:c3:33:de:08:9c:1d:f3:2f:34:
be:4c:8a:14:ad:9c:b8:e8:f9:c9:7b:b7:a9:93:f6:e5:a1:c6:
71:22:6f:a4:24:be:b0:fa:ae:76:c0:c8:d4:05:0a:e4:65:9c:
0b:9d:e6:b7:62:15:1c:a5:e6:19:70:4e:10:4b:6e:7d:b1:d5:
09:6e:91:75:a3:d6:a1:7c:5b:7f:81:eb:a4:7a:33:96:b3:9a:
b8:d3:23:08:e9:42:43:64:6a:d3:e0:90:69:0f:bb:b7:c8:9b:
84:6d:9f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:57 2025 by rpki-client