Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier: n4CwVs86V+TmOiFxO888sOiTqO+muP+0iRuqZyp6Lzg=
Subject key identifier: 2E:BD:E6:0C:98:24:2F:FB:19:35:90:CE:94:C6:AF:BD:0F:2C:2D:EC
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 0198D583FAFADBB3E903D36B9823CC09B094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:53 +0000
Manifest this update: Sat 23 Aug 2025 06:00:53 +0000
Manifest next update: Sun 24 Aug 2025 06:00:53 +0000
Files and hashes: 1: VRs8CShO6bRg5uI1JwT1RKe3PrI.roa (hash: fbnkM+ZXK5PucV+W/pV7w3InLQ8yhq+sy8zU5D/9V1k=)
2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: T/Cn8bz7LMyn4RwFoe5yNjRnlO2+30nRwo9pUmbdb7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:fa:fa:db:b3:e9:03:d3:6b:98:23:cc:09:b0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: Aug 23 06:00:53 2025 GMT
Not After : Aug 24 06:00:53 2025 GMT
Subject: CN=2ebde60c98242ffb193590ce94c6afbd0f2c2dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e4:07:04:b9:b5:de:fa:c7:61:a5:fd:30:6a:
21:e8:c3:cf:71:77:bc:23:45:47:84:04:6b:a5:18:
a8:7b:14:10:dd:30:b1:e9:0d:de:09:d8:9c:fb:76:
6c:1a:74:e9:30:d8:6d:c1:e5:08:ee:3d:3b:56:b4:
b1:9e:b1:f4:1b:59:3c:5e:45:7e:cd:7d:e2:41:1b:
ab:17:78:fe:d2:5e:ee:d3:29:b6:87:6e:98:f2:99:
41:2b:20:92:94:91:1e:3b:b3:52:cf:b4:f2:45:0a:
a1:4f:4d:05:81:ae:d3:11:6b:2e:f2:5f:09:ba:52:
a1:46:42:19:e6:1c:d7:ce:e5:51:db:d8:6a:82:6a:
b2:55:21:06:5e:13:9e:24:3c:87:45:c5:f9:b8:1e:
10:c5:29:ed:a9:09:69:30:b7:ef:94:d5:1c:ba:ff:
c3:9b:3f:08:84:fc:5a:bb:1e:bc:47:3c:55:4e:a2:
39:c9:9d:2f:f1:4f:d3:54:4b:03:7e:d6:db:ed:ba:
e4:77:9c:cf:af:84:9c:93:5a:ae:ab:30:d8:10:bc:
ab:96:cd:27:7c:13:8e:54:0d:ce:a1:b0:47:7f:7f:
7c:f0:65:0b:8d:b3:cc:1b:19:ec:31:e5:e8:88:f6:
71:d2:9e:eb:4a:af:0d:cc:98:9c:c8:26:09:9f:df:
66:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BD:E6:0C:98:24:2F:FB:19:35:90:CE:94:C6:AF:BD:0F:2C:2D:EC
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:02:6b:40:49:1a:05:5d:e4:f7:00:55:34:86:2e:7a:32:57:
9e:60:ce:fe:74:99:1d:16:ff:57:4a:41:68:ba:1d:e1:06:5c:
22:c8:14:40:60:3a:af:08:3f:c7:58:d0:09:7a:ce:f0:3b:f2:
8a:22:5c:28:9c:70:3c:ed:31:11:fe:4b:0b:15:02:67:08:a2:
84:69:98:a6:a4:1b:71:26:95:67:50:9e:49:34:bc:70:66:17:
a5:dd:09:cf:e2:13:01:1b:e2:2c:ab:31:2c:d3:78:3e:a7:a6:
bc:7b:ad:a9:5c:1f:c0:44:6d:20:06:01:f4:46:bd:fa:2b:25:
94:13:b1:58:5f:24:7b:c5:be:bb:ba:e6:b1:75:f5:7a:23:46:
4a:68:37:2a:74:a5:45:69:b0:5f:55:44:7e:2d:a9:70:a3:6c:
50:55:1a:42:9f:25:24:ce:6f:5c:e4:7b:ac:53:05:22:5e:b8:
95:5e:4e:2f:3e:2a:69:6b:60:d9:54:e9:22:8b:5c:ba:31:40:
2e:45:c6:fe:06:2e:43:27:16:12:4e:be:4b:24:05:6b:75:ed:
1a:de:b0:34:65:24:45:92:fe:7b:71:27:ee:02:40:11:b6:0b:
fe:0e:89:70:25:be:c9:7f:94:50:23:d2:19:05:82:03:fb:72:
ed:a3:03:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:51 2025 by rpki-client