Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
File: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft (raw, json)
Hash identifier: Gl2bj6IW9RFwPLkfvXcvrafONwAasoIlocMZv4GwE9w=
Subject key identifier: 17:92:9A:E7:6F:7F:C0:32:4E:91:B2:99:6A:C7:D8:DA:B2:D3:1D:CA
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 0198D773DD6458D8D23EA295906DED493AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 15:02:31 +0000
Manifest this update: Sat 23 Aug 2025 15:02:31 +0000
Manifest next update: Sun 24 Aug 2025 15:02:31 +0000
Files and hashes: 1: _Q5q23PPHO-mRvT-qL8ygRyZcq8.roa (hash: MlSwzzd2g428PzEfHlimkQJSWkAp7XxXXCW+AJUIUOw=)
2: jyrC-t0H_GkAg2c88y9tSfnyeDQ.roa (hash: QuK2j2bldMS2fMD4ill15moXvawQIfM3BSjaK9rkpUw=)
3: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl (hash: jKdCunQePUWaSOw7H25Gsj4adO1EHDAvSiDUoTa+aiA=)
4: rZAA3Y495kRkRNDpWyGUUlyfTzU.roa (hash: Fgv+FkEtI7c1vlophMoAf5XyRQp0aEoHwM68DDPsUbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:dd:64:58:d8:d2:3e:a2:95:90:6d:ed:49:3a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: Aug 23 15:02:31 2025 GMT
Not After : Aug 24 15:02:31 2025 GMT
Subject: CN=17929ae76f7fc0324e91b2996ac7d8dab2d31dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:20:fb:14:f4:45:41:97:cd:cd:18:ea:f9:
c1:3f:1d:93:2c:ed:e5:37:84:fe:2c:ae:2e:37:89:
9d:79:86:6a:2d:5d:8b:ce:7c:23:91:2f:b3:24:51:
03:5f:f7:7e:37:be:5c:9b:8f:77:a0:69:8b:6c:5c:
d8:0b:ec:82:b4:98:b7:c4:64:a1:f2:5b:18:d6:8c:
f5:df:60:f1:d6:5f:cd:31:fa:52:4c:65:2a:ce:a1:
b6:ca:57:9c:45:d1:ae:aa:cc:e1:1c:74:cf:50:1b:
df:39:67:cc:d3:c9:3c:a8:be:61:ac:17:e3:76:47:
67:a4:1c:de:fd:a0:bb:85:aa:92:60:7e:6e:9c:a9:
06:e5:8d:3d:9c:d3:84:6b:54:e9:14:ce:1c:8b:f7:
f7:3a:f3:e2:a3:ee:9d:26:95:70:85:c0:fe:27:1f:
f7:2a:51:59:d3:a5:6e:49:0c:a0:17:85:6a:bc:96:
21:2d:1f:ef:84:32:19:2f:ca:34:70:fa:c6:c2:e4:
2c:49:be:3e:85:86:fd:f2:a5:45:98:2d:44:4a:5f:
af:c4:c6:09:ee:21:12:3e:96:3b:a8:a0:3a:b0:35:
2b:fe:8b:93:03:e2:43:e2:5b:c4:37:aa:0a:bd:48:
ae:6a:06:5b:26:b3:67:b9:00:1e:e3:b0:42:72:a2:
e3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:92:9A:E7:6F:7F:C0:32:4E:91:B2:99:6A:C7:D8:DA:B2:D3:1D:CA
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:36:a5:73:5e:9d:b8:2f:27:be:38:86:70:a6:32:6d:6a:0b:
85:c3:a3:ea:b1:31:3d:ac:85:44:f7:80:47:c7:e6:df:41:3c:
e3:81:40:c3:6d:b8:0a:d3:1f:d6:87:ee:0e:2c:02:5e:43:c6:
a8:43:64:d9:00:9b:bf:73:6f:56:e2:dd:8e:08:06:33:27:93:
51:14:68:88:36:8b:1d:cc:85:b6:cd:f0:ef:f8:8d:b1:93:c9:
db:a5:6d:1b:84:fd:03:99:7c:95:f9:39:04:2a:e0:aa:84:02:
d1:45:4b:cb:08:59:a8:52:66:4d:7e:7f:48:05:19:78:6d:25:
1e:f2:b6:d4:d5:a3:f8:73:e1:00:a0:0c:2c:6f:6a:0d:59:e4:
62:c6:29:9b:e5:36:ed:18:49:ec:ef:a3:ec:8c:26:fe:03:e2:
cf:1a:d2:c8:53:d4:17:03:d0:0a:d7:6c:77:a9:dd:ef:16:34:
be:1a:66:c8:87:30:77:e5:53:3d:f7:f7:1b:6e:ee:a2:1a:91:
a9:8d:fb:eb:f2:33:02:b3:a5:63:be:37:ab:8c:75:85:ef:fa:
50:37:13:d1:c0:70:f2:72:01:2f:4b:49:47:b4:7f:c2:9a:27:
1b:11:80:03:a7:f4:1d:64:2a:70:a8:2c:1c:17:83:d8:3d:06:
f9:fb:cd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:05:37 2025 by rpki-client