Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
File: k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json)
Hash identifier: 5EHdZCREyxqSt4FDLkjO0b+iN+rYPUz3Egg1K8gWbw0=
Subject key identifier: 5C:DE:B2:0C:7F:00:BD:08:3E:BA:FE:2B:DE:18:63:26:D4:85:45:05
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial: 0198D54E93D14850AA3F1D4805A526B3898B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
Manifest number: 0D2E
Signing time: Sat 23 Aug 2025 05:02:33 +0000
Manifest this update: Sat 23 Aug 2025 05:02:33 +0000
Manifest next update: Sun 24 Aug 2025 05:02:33 +0000
Files and hashes: 1: 1QST1OPlWGgU_KfeCd6-eSc5Fws.roa (hash: 0IX3SPWo/YRidApWFZTcBmj27iQz+V20vqeZhxHtpTk=)
2: UOcYa9_wijcIRHEowaEFsvhzcW4.roa (hash: tUwVIAhXZ1HVd/+8k4HpFkWguLhngA3Bv+h1B/N8dK4=)
3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: lsTjH3PVuoNBCR7BFD9yA+Z6XaNp3msI/Pyxxbd/OWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:93:d1:48:50:aa:3f:1d:48:05:a5:26:b3:89:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Validity
Not Before: Aug 23 05:02:33 2025 GMT
Not After : Aug 24 05:02:33 2025 GMT
Subject: CN=5cdeb20c7f00bd083ebafe2bde186326d4854505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:15:51:a7:d7:e7:fd:61:5e:3b:50:94:1b:
12:2c:4f:d4:40:02:b1:76:e3:7b:1b:25:eb:d9:0f:
02:15:50:ca:99:17:f4:67:7e:0d:6b:ba:cd:a9:15:
39:e4:9a:b5:78:d4:44:42:67:70:a2:a8:40:dc:d1:
06:1c:c0:d2:aa:8f:b6:f0:e0:0b:36:08:7b:65:f1:
fe:20:72:71:52:3f:4e:45:e7:3b:a9:07:ca:f7:24:
93:6c:75:5a:35:d4:d0:e2:d1:c3:1a:4f:5a:7f:12:
46:7f:1c:d7:32:4e:eb:c4:8f:e3:90:a0:f1:ba:37:
df:eb:ec:a1:42:fd:84:a2:5a:e8:1b:ab:aa:3e:a6:
42:0c:3f:6c:2b:23:8a:f1:d8:f4:c9:c6:dd:4b:d3:
93:1d:7a:7f:10:bd:6a:51:e9:09:01:02:89:3e:e2:
86:d6:68:fd:18:8a:6a:08:ee:73:0b:08:de:74:8e:
17:7f:34:bc:e2:31:da:32:3d:d6:69:ca:99:3c:a2:
29:31:3f:fe:5f:cc:66:aa:85:ee:95:59:3f:11:44:
f1:6d:59:9c:0b:0e:7e:77:76:b0:7d:d9:43:d1:2f:
7b:e9:13:6e:8a:2c:9a:0d:5d:ef:cf:b7:5b:d9:8a:
a5:5d:e1:18:6c:c9:a8:b9:fc:34:f3:86:0a:19:85:
a8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DE:B2:0C:7F:00:BD:08:3E:BA:FE:2B:DE:18:63:26:D4:85:45:05
X509v3 Authority Key Identifier:
keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ba:a1:0d:10:85:7b:1c:66:46:15:62:b5:8c:02:dd:98:65:
53:4f:5c:e8:68:18:09:67:f1:e0:ea:0f:65:b8:c0:76:b7:f5:
38:0d:ff:52:a2:c4:ca:28:4d:76:a6:f2:51:20:01:25:67:aa:
2e:87:5b:a5:fc:94:69:6d:ba:39:a6:bb:78:52:f7:2d:db:06:
0b:c2:55:07:af:24:e5:79:ac:b9:98:a2:3a:63:d5:80:ec:5f:
18:0f:fe:72:3f:5c:de:df:2b:df:1d:dd:9a:d0:91:72:d0:16:
7a:9a:9a:73:2d:7b:05:78:b5:43:4d:2d:e5:04:84:13:c2:c1:
60:8b:97:2b:3f:d4:30:f7:eb:5d:a2:22:6b:dd:a1:7d:10:f8:
d7:4b:6b:22:67:8e:c3:90:c0:72:83:0c:5a:85:6e:62:7d:d5:
3e:a9:80:2b:84:11:f5:0d:50:04:8f:80:ba:4b:fa:24:e5:2c:
a4:92:8e:3b:9f:e5:a8:79:97:cc:91:6a:b0:c3:1c:0e:0d:a4:
b7:3b:2f:24:67:e7:3f:45:2f:0a:04:91:9c:bf:76:aa:3e:43:
05:75:bd:3b:dd:47:13:50:cb:48:e5:32:d0:b5:b0:6c:8e:0a:
36:f8:99:91:e0:f1:dd:eb:a1:fe:b0:58:7a:9f:96:25:dd:18:
32:fa:6f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:49:42 2025 by rpki-client