Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
File: k4yI3syI92r_E7wIWNs4eDS-FxE.mft (raw, json)
Hash identifier: voyHdwE52GXvLcKvqbl+oa18gIfT5TVN9v21mw60Ta8=
Subject key identifier: 1F:F3:0E:46:16:A8:E6:33:DD:4F:00:CD:AB:7B:8E:13:F3:7C:B8:7D
Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
Certificate issuer: /CN=938c88decc88f76aff13bc0858db387834be1711
Certificate serial: 0198D5F167C3182760F2CDD7D2FADFDBC217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
Manifest number: 10EB
Signing time: Sat 23 Aug 2025 08:00:24 +0000
Manifest this update: Sat 23 Aug 2025 08:00:24 +0000
Manifest next update: Sun 24 Aug 2025 08:00:24 +0000
Files and hashes: 1: GzSJNC8rXvHPR5ECqFrqBc47EjY.roa (hash: DpRxP+N8EisPg5SdQn8IRQde36mD1fsRwPBj23IbYe0=)
2: k4yI3syI92r_E7wIWNs4eDS-FxE.crl (hash: 9wt0YDq1GqwpH7EejGl2Oqankm1cx5dCAkqM02O8Up4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:67:c3:18:27:60:f2:cd:d7:d2:fa:df:db:c2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938c88decc88f76aff13bc0858db387834be1711
Validity
Not Before: Aug 23 08:00:24 2025 GMT
Not After : Aug 24 08:00:24 2025 GMT
Subject: CN=1ff30e4616a8e633dd4f00cdab7b8e13f37cb87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:60:d9:89:99:39:c4:ea:37:03:d0:67:80:70:
f3:47:5d:78:02:df:12:ee:fc:f3:b0:fe:85:af:33:
2c:9f:6c:be:16:a3:d8:3f:13:8c:19:63:7d:09:24:
b9:c5:11:b6:44:04:3f:0b:7b:ef:0a:9e:11:e9:95:
fb:da:c6:3a:4f:80:92:04:94:4b:05:cf:76:79:db:
0a:fe:47:d5:72:1b:5f:2b:b2:0c:3c:7b:0b:d3:95:
8e:fe:b8:d8:ba:e8:91:f4:2d:eb:61:60:9b:30:07:
66:2c:f1:5c:54:4f:7d:31:55:2c:10:65:63:0a:55:
04:b0:40:53:67:58:e7:0d:7d:39:c3:9e:29:02:d6:
7b:e6:6e:4c:79:5e:2f:5c:3d:81:44:8d:78:5e:57:
ab:a6:e7:b6:bf:88:e3:a3:8d:69:29:4c:dc:a0:92:
44:49:6f:ff:90:98:eb:fe:4d:14:09:0b:8c:b7:e5:
6a:55:64:f3:57:9f:c8:40:48:c2:c2:78:61:0a:f3:
e1:1b:d9:bb:2b:68:90:c8:ae:74:b0:45:30:a0:27:
3f:92:b8:eb:d0:aa:88:7d:56:9c:0d:e3:32:e6:79:
c3:80:df:f5:1c:51:cd:76:59:dd:c9:57:18:a6:f5:
6d:1d:da:36:5a:4e:c4:f3:2f:ea:0a:a3:d6:62:c4:
86:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F3:0E:46:16:A8:E6:33:DD:4F:00:CD:AB:7B:8E:13:F3:7C:B8:7D
X509v3 Authority Key Identifier:
keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fb:b2:da:e8:10:97:4f:c3:9d:52:c4:c8:ee:17:5a:0c:a6:
f0:ac:d8:01:f6:ab:da:df:8f:61:dc:b2:97:d1:13:a8:bb:23:
6b:6e:1b:43:8d:31:9a:6e:af:f6:10:b4:a2:72:7c:08:38:8f:
98:4e:db:41:0c:c1:b8:b7:86:8d:af:1a:1e:e0:1b:11:1b:e6:
a5:00:50:22:f5:fe:1a:92:30:20:77:01:f9:bb:7f:25:89:6c:
c0:9a:3c:52:47:33:c1:3b:6a:63:8c:2f:cd:e7:81:7d:e4:cb:
d4:c3:50:56:97:1d:25:11:ee:5d:66:59:bb:d2:67:51:87:d8:
7d:6c:38:66:19:6e:20:da:a2:10:15:0e:84:a1:57:fe:dd:f5:
a4:43:8c:b2:8e:8d:21:e1:57:c2:7c:92:d1:bb:75:02:1f:0b:
68:60:e0:46:dd:a5:9f:f3:aa:ff:1c:62:e3:8d:73:71:bc:63:
f7:a0:c9:a4:df:77:18:2b:a8:09:74:dc:5e:5c:42:01:00:7a:
15:3d:f7:7d:a6:40:0b:88:5f:3b:46:68:83:bb:0d:f0:f9:e0:
60:ee:5b:58:a1:07:dc:40:b3:1b:77:46:2f:d1:71:42:e5:d5:
bd:77:3a:44:66:1e:fd:54:18:b8:0f:bc:5b:8e:8f:bd:e9:3d:
9d:e1:66:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:36 2025 by rpki-client