Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json)
Hash identifier: Z31Dm1mMGnJiB+oKxU9j3VGXw/zEdW3sQsJ6ouCf5H4=
Subject key identifier: A4:D8:D2:57:01:7C:0A:F0:74:FB:03:7A:25:F7:12:35:BB:C8:E2:19
Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Certificate serial: 0197B88F9D3CF113B2E1A87901F53FAD2C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
Manifest number: 2B
Signing time: Sat 28 Jun 2025 22:01:48 +0000
Manifest this update: Sat 28 Jun 2025 22:01:48 +0000
Manifest next update: Sun 29 Jun 2025 22:01:48 +0000
Files and hashes: 1: dlXIk7WimVWVHc3ungqiNoZMusw.roa (hash: RfuMfcHrLbRg0Y3xsz3a1+VdHPSrzNKZ40aYKpVDn2E=)
2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: +Ddb8oflXX4LN3sAgxcd5B1W6BaCltQKwXVTKbyc63g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:9d:3c:f1:13:b2:e1:a8:79:01:f5:3f:ad:2c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Validity
Not Before: Jun 28 22:01:48 2025 GMT
Not After : Jun 29 22:01:48 2025 GMT
Subject: CN=a4d8d257017c0af074fb037a25f71235bbc8e219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c8:75:05:ee:45:bc:d0:42:20:61:0e:49:3d:
e3:16:8c:d1:73:24:72:60:38:68:22:39:39:d8:4d:
3d:c1:7f:a0:56:28:a7:33:f2:31:ca:bd:2a:05:dd:
1c:0a:05:50:55:6d:24:ab:82:76:60:24:ea:ea:8e:
db:19:33:9c:35:72:ea:b2:95:a4:99:88:c3:16:45:
61:aa:35:1e:ef:9a:ae:13:2e:1d:e9:81:1e:d9:36:
b2:5e:f5:5a:7d:c7:79:79:78:9d:19:1c:50:56:e9:
77:5a:1e:b3:e0:d2:12:1f:e4:8e:e5:ee:21:f6:96:
fc:84:f1:ab:04:39:d8:9a:06:15:e4:6f:22:7d:1d:
41:0a:b6:86:c7:48:b7:5b:a4:11:87:d8:cc:2b:bf:
ab:78:ad:a6:1f:8b:19:86:19:2b:32:9d:44:8e:5e:
73:0d:c1:16:f8:b4:e3:1b:ff:1a:38:1c:c5:49:7e:
de:e5:aa:de:9b:32:79:a4:6c:78:11:70:3c:31:2f:
3f:37:de:60:68:f4:ac:b0:5c:e0:9c:03:67:ff:db:
18:48:87:1e:73:20:51:fb:7e:bf:f5:36:da:e9:9e:
f3:0b:b2:c3:3b:cf:39:06:e2:d6:d8:61:81:b1:25:
7f:36:f1:8a:a2:02:38:71:b4:18:29:47:2c:fd:44:
7c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D8:D2:57:01:7C:0A:F0:74:FB:03:7A:25:F7:12:35:BB:C8:E2:19
X509v3 Authority Key Identifier:
keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9a:99:d5:21:67:ad:18:80:7b:40:c7:d1:a3:3c:2d:c8:84:
3d:35:77:f5:1f:b9:49:2c:7d:6e:7a:d4:a8:23:6a:53:ae:23:
ab:f0:ae:81:fa:df:a5:6c:c1:89:b2:f1:c4:c7:3e:10:48:5a:
49:7e:88:51:4a:62:e6:bf:ba:bf:e7:a6:00:a3:d7:01:d4:cd:
8d:4c:3a:56:72:fe:29:a9:c7:01:71:9e:87:8b:52:64:2a:a2:
a4:35:b5:fb:40:70:18:5f:d0:68:c6:9b:de:43:12:be:45:4e:
96:65:5c:d6:40:19:67:bc:7c:9a:8c:42:3e:e8:7d:3d:20:49:
52:d3:2e:37:fd:45:cf:05:51:c9:0f:ca:0b:7a:8c:51:15:b2:
ce:dc:b6:83:0b:77:b7:3d:6c:48:6e:22:8a:23:7f:cc:db:f0:
ce:30:32:6b:43:d0:09:a9:25:7b:c4:0f:25:af:af:05:3d:2c:
d7:44:7d:5f:7b:54:6a:c7:1d:55:fc:ce:40:fd:f9:7e:5b:70:
cb:66:a4:0b:28:6e:90:0c:31:39:67:6d:11:f0:48:24:47:b6:
95:3c:2f:84:1d:c6:3c:bd:b6:d7:83:32:7d:3e:4d:df:81:5d:
5c:6e:b2:d4:36:19:e5:20:e2:06:06:52:10:a2:a5:b4:57:b2:
0a:50:57:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:17:09 2025 by rpki-client