Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json)
Hash identifier: kKWWdUIPoBnfErQoTcQO6/e3HRBfcx1465aW29xQD38=
Subject key identifier: F3:C1:A4:AF:BD:AB:85:77:F7:2D:87:BB:D2:E5:20:44:A1:F1:CD:A9
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 0198D5835509F3CFFAF2B36A4DB3571F438C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
Manifest number: 0E09
Signing time: Sat 23 Aug 2025 06:00:10 +0000
Manifest this update: Sat 23 Aug 2025 06:00:10 +0000
Manifest next update: Sun 24 Aug 2025 06:00:10 +0000
Files and hashes: 1: 5pnBu3tf1gh9PcNOyoNyWCndFPU.roa (hash: aDoSOawNOT1pzaKswy1pRUEDLgJ0J0KdcXZxORUFm5g=)
2: JlZMu6ELMWjh5VfPR-EMHwwwoJI.roa (hash: rcX300zaEAsELfD8QJxpkD3Bk9B/Y8LQIcz2cA6/7q4=)
3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: NgTDYUDE0FmEuawf1Lbh09wCrDdescv2CcVlDUHYJa8=)
4: bzccdE_nNPzPnSlliioVj-7hRew.roa (hash: 4glX8OcaCyXvmeuybZ7zpnmmIAAdCSrGViopmHl3Q8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:55:09:f3:cf:fa:f2:b3:6a:4d:b3:57:1f:43:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: Aug 23 06:00:10 2025 GMT
Not After : Aug 24 06:00:10 2025 GMT
Subject: CN=f3c1a4afbdab8577f72d87bbd2e52044a1f1cda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:5f:b2:1b:66:ef:43:21:f7:50:f9:85:ad:
b5:b6:b0:d5:05:7e:c4:67:85:95:30:a3:09:85:68:
98:45:34:17:d8:17:a6:bd:82:2d:37:48:55:08:cd:
51:80:f7:17:75:01:13:2b:d0:9e:a7:78:b9:e6:fe:
b1:7f:48:c7:0d:ab:c9:9e:2f:fc:6a:7d:19:ac:3f:
d8:2d:76:3f:f4:22:3f:cf:ea:64:42:6a:2c:30:76:
58:a1:16:3a:f1:2b:cc:f3:16:5c:b5:fd:0b:88:66:
f9:95:77:66:2d:ee:b6:df:9c:33:5c:61:17:0e:9b:
00:58:67:bc:dd:a9:ab:61:15:61:52:39:b7:c0:b2:
b6:38:7d:20:2f:e5:9b:f1:f0:ea:06:71:4d:76:79:
e7:05:10:82:d8:19:e1:f2:05:ab:b7:46:90:ff:f2:
1d:54:79:ea:d3:c6:e4:bb:29:fe:1c:82:b9:05:ef:
8a:bc:1d:f9:0b:3f:fb:d7:67:c9:be:1e:ec:fd:bd:
22:50:ff:fc:e3:12:39:48:d8:75:61:fb:9b:ea:65:
e7:61:a3:5c:0c:fd:86:fe:74:ea:7c:39:8c:5c:cc:
d9:c4:0a:92:4f:d1:9d:be:1e:63:05:5a:03:98:6a:
ef:a2:d7:92:ec:21:8a:fe:ef:a0:5e:bf:31:db:66:
68:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C1:A4:AF:BD:AB:85:77:F7:2D:87:BB:D2:E5:20:44:A1:F1:CD:A9
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4e:5f:82:4a:c0:f4:5b:69:72:76:c6:1b:30:17:32:d9:f5:
a1:a1:50:96:b6:64:17:e8:ef:4c:58:ba:75:e9:39:8b:e6:22:
a4:80:37:c1:5d:0e:45:a9:07:9c:5f:28:97:62:ec:e4:ef:c0:
41:0f:a9:46:3a:d2:df:6a:76:6f:9f:30:d2:c5:46:06:16:87:
cc:f8:b5:4f:1c:a9:54:5b:42:af:b1:d9:9a:eb:db:4d:f2:10:
fe:ad:f7:0b:a3:ab:6a:69:09:d1:e4:f0:d0:83:99:ad:9b:7b:
1a:0f:91:91:6c:db:e5:d4:ba:1a:0b:df:36:13:e3:e2:74:ec:
1e:a1:79:31:03:d5:55:f3:3b:f6:3d:f1:fc:64:41:c9:99:93:
ea:e6:44:2a:f9:96:5a:05:d4:ef:84:4d:0b:86:77:6f:e4:6e:
e4:15:64:d6:78:fb:11:24:83:1e:b4:1a:9c:bf:04:fa:cb:c0:
fe:d2:9c:fa:5e:f2:1e:38:f2:29:db:d1:41:47:b7:a7:72:93:
97:58:3d:a4:1a:75:4b:2b:9c:6d:0f:0b:cd:2f:48:84:a7:cc:
a2:c0:2f:ff:bb:1c:33:9a:8e:25:ac:c8:de:ad:6e:58:18:64:
6a:c6:16:c5:cd:d8:e6:04:fb:59:d0:62:07:09:6d:c0:f9:c8:
16:10:fc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:39 2025 by rpki-client