Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
File: k19T9eQH5VojMNnVI6gEwHIspWU.mft (raw, json)
Hash identifier: rW8Sj40Ats4/Vl2LzDZqEpuzjQFl3M4js9uFL4stzYw=
Subject key identifier: 84:78:33:BE:0F:87:5C:90:B0:3F:21:63:54:49:81:21:66:D7:3D:43
Authority key identifier: 93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
Certificate issuer: /CN=935f53f5e407e55a2330d9d523a804c0722ca565
Certificate serial: 0198D54DF7C9316DF30DD31AB83636C36701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:01:53 +0000
Manifest this update: Sat 23 Aug 2025 05:01:53 +0000
Manifest next update: Sun 24 Aug 2025 05:01:53 +0000
Files and hashes: 1: CEKF3MXHpQR2CGHCMQpTxxuuRIY.roa (hash: Rh5DOeHi5/pgsxZpTOekiFMDHUB1zlvv4XKyE6PrDFE=)
2: cXHMvnYXUn58neLwmoRSc042tjs.roa (hash: SBDcDeTpbKOEPbrOKMYmcpYN3NXUYeqARSNljTNUetg=)
3: k19T9eQH5VojMNnVI6gEwHIspWU.crl (hash: utXdIjk+P6hglwN2ANpIMYMd+z8USaX4V0qNG5Cp25o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f7:c9:31:6d:f3:0d:d3:1a:b8:36:36:c3:67:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935f53f5e407e55a2330d9d523a804c0722ca565
Validity
Not Before: Aug 23 05:01:53 2025 GMT
Not After : Aug 24 05:01:53 2025 GMT
Subject: CN=847833be0f875c90b03f21635449812166d73d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:1b:c7:3e:d9:b2:38:f6:71:f8:ac:00:d4:
06:06:48:09:da:b0:27:fb:4d:8e:7d:17:01:bb:c6:
82:9d:de:b4:d2:ed:7b:8b:ff:59:58:ac:0b:30:31:
f3:fe:fa:a7:90:0f:58:24:13:3b:e7:6c:4d:9d:05:
56:cf:67:d1:6d:a3:ff:2e:15:0d:99:eb:c3:ac:2d:
70:f1:0f:4b:d4:7e:42:05:47:64:35:35:ae:b9:02:
45:45:e2:e3:b1:0b:e3:7a:81:f6:a5:a2:e5:86:25:
45:f5:b3:6c:66:9a:9b:38:71:04:1e:ae:85:c3:a8:
0e:b5:e3:d4:e5:8a:a9:f3:0b:23:02:ee:11:f6:0c:
88:1f:37:b4:b4:08:22:5e:03:2f:32:7f:6c:36:aa:
d9:38:14:a2:cc:30:c6:67:44:36:98:ea:06:74:b0:
26:bc:a9:ae:07:c7:b1:24:66:1b:2c:8f:f7:03:40:
8b:6e:ef:65:7a:d9:29:f7:6b:ce:1e:fa:4d:cf:f9:
00:59:dc:8c:45:ec:c0:b1:a7:da:3f:b4:a2:df:68:
e8:e7:90:fb:df:b1:ea:74:94:4c:d4:0c:d7:55:8e:
20:d3:49:ad:c1:73:d9:84:ad:d6:6a:10:75:ba:51:
33:c9:a6:87:ab:c8:2f:6f:14:38:68:f6:4a:0d:7e:
c5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:78:33:BE:0F:87:5C:90:B0:3F:21:63:54:49:81:21:66:D7:3D:43
X509v3 Authority Key Identifier:
keyid:93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:7f:bd:da:3c:58:cc:ea:32:54:6b:12:36:2b:bf:4c:f2:4d:
90:29:03:68:f3:85:b3:1f:89:fc:65:01:9a:45:a2:90:d9:aa:
31:ee:f4:64:a4:3b:cc:cb:8e:29:32:8e:e9:a6:66:f6:c1:e0:
b4:2f:b5:da:0d:28:9c:00:e7:ab:3d:58:7d:88:c2:a7:11:81:
9f:cc:b5:e5:c7:64:0d:ee:3e:e6:8f:7b:7f:44:98:b0:42:51:
d4:ed:ca:87:9d:d9:4d:c8:95:fd:3a:57:56:ba:d5:ab:a3:f9:
31:df:33:b1:a8:9f:df:6d:94:5e:af:bf:bd:28:41:eb:f7:1b:
3e:03:98:4e:4e:0f:aa:3d:1e:0b:26:bd:33:e1:29:70:01:e1:
2e:b2:07:e0:b0:c9:bb:05:ca:43:c3:77:ff:7a:c2:3b:66:34:
02:ec:50:99:3b:d5:21:e1:ff:29:61:81:d0:6c:38:32:a9:45:
b9:f3:6a:98:e5:1c:74:93:b3:e5:7e:3e:75:76:e6:04:76:f5:
c8:64:1e:06:1b:cc:6b:9d:c2:84:4e:b4:bd:21:6b:03:29:18:
f8:23:2f:c1:ac:b2:a4:68:4a:0d:a5:83:f9:39:e1:4f:a3:8f:
01:9f:cb:09:40:7e:1b:6c:2a:c5:6c:43:49:45:c5:bd:38:18:
1f:da:69:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:05 2025 by rpki-client