Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier: IQaYFEBCGwKxF6eB5OpcDwk4rDOepxyUmeN3qLZT/8o=
Subject key identifier: 77:3E:65:15:FE:60:FE:3B:C3:B6:22:E2:B8:75:72:50:D8:51:8C:A5
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 0197BB9001E77DF8D16DDBA3A2FC2FD71334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 12:01:06 +0000
Manifest this update: Sun 29 Jun 2025 12:01:06 +0000
Manifest next update: Mon 30 Jun 2025 12:01:06 +0000
Files and hashes: 1: VRs8CShO6bRg5uI1JwT1RKe3PrI.roa (hash: fbnkM+ZXK5PucV+W/pV7w3InLQ8yhq+sy8zU5D/9V1k=)
2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: y7ZevDFl+XErbYpUlqoec5P4of268MIUB+um8xdWHDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:90:01:e7:7d:f8:d1:6d:db:a3:a2:fc:2f:d7:13:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: Jun 29 12:01:06 2025 GMT
Not After : Jun 30 12:01:06 2025 GMT
Subject: CN=773e6515fe60fe3bc3b622e2b8757250d8518ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:84:60:dc:b7:be:b7:79:4e:dd:1f:8b:52:
8a:5f:1d:69:08:0b:d4:53:75:2e:a2:5d:63:0d:28:
33:6c:3a:8d:a4:e2:90:81:aa:e3:ae:58:f5:27:09:
f1:d7:09:60:33:d1:36:fc:e8:b5:87:9a:55:49:63:
5e:ac:1b:9e:8d:8d:5b:ae:39:39:69:f3:c7:c7:d1:
00:4a:74:c4:66:00:d1:16:9d:c5:99:a8:f7:8b:85:
c7:d7:e9:48:9c:20:18:db:02:a2:67:ea:f6:34:48:
a0:b5:9f:38:0f:fb:4b:7e:3c:e7:50:03:b8:56:f9:
00:14:f5:7b:82:5f:73:6b:97:20:12:47:a3:23:e9:
87:cb:f4:22:50:f8:5c:1a:49:de:ed:05:b6:9f:16:
a9:a4:f9:a1:70:27:58:dd:e9:9a:4c:30:70:8c:30:
ef:d8:c2:0c:70:ef:c8:a7:e1:c3:4a:75:6b:3a:3d:
a4:aa:b5:7a:79:ee:38:6b:98:41:8e:19:5b:2c:2f:
91:10:6a:77:32:75:91:9b:c4:61:72:b3:1f:59:e0:
39:00:04:b8:7d:e7:ca:da:4c:8a:69:41:08:09:5b:
bb:8a:d8:40:6a:5a:d1:07:72:ff:2a:7d:3a:1a:12:
60:6e:55:ec:46:76:b8:94:1e:b8:48:8f:e1:b4:7e:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3E:65:15:FE:60:FE:3B:C3:B6:22:E2:B8:75:72:50:D8:51:8C:A5
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4c:e2:10:ed:dc:6d:f0:a5:72:00:f2:ed:45:5e:7a:44:9c:
7e:7f:5f:23:2b:18:8f:d8:e9:b7:64:89:22:ea:8f:6b:e4:76:
3e:dd:2e:7e:dd:29:3e:72:b2:23:56:2d:48:1a:9b:4a:34:67:
03:2b:e0:07:e1:51:71:36:dc:e1:81:b5:ec:8d:6c:2c:4a:37:
ca:68:e3:e8:73:30:1b:91:f8:a5:4b:10:28:ef:b2:21:fd:04:
c9:04:81:76:bc:70:11:88:29:ad:36:a5:6d:e2:46:4d:f9:71:
2e:c2:9a:45:bb:d7:59:27:19:b9:f1:b5:99:c9:e8:a9:f6:c7:
21:fe:0e:35:77:95:8c:aa:1e:5e:df:62:c2:78:4f:6e:1d:0d:
4a:65:c9:2d:a2:c7:e4:b2:5c:29:32:40:4d:50:43:cc:3c:82:
7a:d9:79:37:1a:6e:ba:dc:bc:03:7b:90:02:5f:63:33:de:48:
86:34:5b:1f:c0:4d:26:1e:f1:eb:c9:bc:3d:a2:6a:c7:46:39:
15:54:fd:60:e3:42:a1:93:d5:c9:f2:69:d5:a5:7c:45:8b:b5:
78:f5:28:60:33:a2:97:10:cb:64:0d:fb:13:56:db:34:92:1f:
8c:2a:69:ae:ca:97:11:2a:67:f4:5d:28:df:b3:19:99:d5:31:
58:6a:d0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:52:23 2025 by rpki-client