Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json)
Hash identifier: vcc+l97415anukXvYVnCvIQ7WSzAeRLQlHqB6RkmgUk=
Subject key identifier: 08:16:6D:7F:3D:BC:8B:62:AE:0F:B2:CB:5C:CB:D7:F9:46:5B:22:29
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 0198D5BC22E505368483FECFC96B73B7B002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
Manifest number: 11D8
Signing time: Sat 23 Aug 2025 07:02:13 +0000
Manifest this update: Sat 23 Aug 2025 07:02:13 +0000
Manifest next update: Sun 24 Aug 2025 07:02:13 +0000
Files and hashes: 1: Hvxuzsj6EczQMtzXmG3ZXMTDSzY.roa (hash: IsEfb4XnUiiJKA1AVKZnGfwgI7NGrVN9fX4TxNoqt/g=)
2: RZ8C7kJw0WnSALfkl5thd-tNGAc.roa (hash: siN5gEDK5XnJ7yawdzNqRM0ni+t0tEVv4a0T208KnEI=)
3: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: kP502DklKGtAFvrAdYKJ6zN0z6NJs+P89iX+zu0scg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:22:e5:05:36:84:83:fe:cf:c9:6b:73:b7:b0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: Aug 23 07:02:13 2025 GMT
Not After : Aug 24 07:02:13 2025 GMT
Subject: CN=08166d7f3dbc8b62ae0fb2cb5ccbd7f9465b2229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fe:72:21:f0:b9:cd:88:6a:5b:86:cf:dd:e6:
1c:f4:85:84:0f:0a:25:62:9a:7b:b5:1f:cf:f9:0f:
2a:11:31:56:ec:86:cb:a3:01:91:90:70:b6:53:7e:
32:25:f1:05:08:cd:88:1c:59:10:aa:5c:76:d5:d5:
a4:60:1d:a6:3f:55:93:7a:73:f1:c7:bb:b7:a6:65:
04:76:ce:da:ab:ce:16:e5:1a:17:12:b6:75:1c:f4:
1e:a2:16:18:16:54:09:2e:91:2c:76:5c:c9:49:0c:
2a:ab:40:06:af:83:cd:06:6c:0f:fd:34:1d:d2:ef:
10:4f:2b:ef:43:0a:8b:cc:64:e4:ae:2c:05:83:16:
dc:85:d7:0a:6e:d5:4b:68:11:c5:c9:2f:6a:ff:32:
7d:2b:90:3b:fe:f1:43:1f:f7:64:d8:49:12:76:7f:
04:29:8a:18:58:56:9d:61:1c:8f:64:2c:e2:0b:d4:
f6:51:ac:ec:b0:14:66:93:34:f0:bf:53:95:66:d9:
5c:53:af:5d:3e:a6:54:b9:91:80:4a:6e:f1:29:90:
6e:f7:7d:22:3e:aa:3b:bb:88:30:89:af:7e:cc:d5:
b4:81:bc:9d:88:33:75:26:40:d3:f1:aa:f8:ae:ea:
16:1e:17:fc:70:69:0c:8b:6d:62:3c:5a:72:a6:c1:
ba:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:16:6D:7F:3D:BC:8B:62:AE:0F:B2:CB:5C:CB:D7:F9:46:5B:22:29
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:dd:f5:e9:af:8b:75:99:3c:86:83:92:c7:ef:34:85:a8:09:
a5:11:01:2b:e0:ac:70:7a:1e:c4:bc:ac:46:2c:da:b3:55:f2:
d8:c2:d2:72:01:6c:41:28:9a:21:1f:21:a5:fb:76:16:9d:4d:
57:c8:0e:27:51:c6:28:31:8c:1b:06:88:b0:33:9b:a7:11:12:
b1:76:a6:37:55:f7:95:a5:94:d7:c1:fb:42:e3:90:a3:33:e5:
88:9d:24:f1:97:c7:e0:70:59:10:68:d7:cf:cc:1b:e6:3d:73:
52:3e:d5:3c:3f:d6:cc:cc:72:c5:85:99:11:ab:e4:d6:8b:ea:
f2:50:64:24:85:4e:3e:9b:2a:ec:94:9a:06:93:37:b7:53:7e:
19:bd:b9:11:78:82:c6:6c:b2:52:42:9e:af:25:90:64:7a:55:
a6:cd:40:a3:68:71:ae:08:40:f2:1d:17:67:0f:08:7a:01:78:
b0:ae:1e:00:ef:98:58:3e:35:08:74:95:29:a4:ba:c6:a1:5e:
78:09:11:d0:71:d4:a0:22:03:c7:cd:36:34:5a:69:93:f1:43:
d0:5f:f4:77:ce:25:b8:6c:ed:c8:86:04:72:fc:73:e0:83:e8:
e4:2a:24:35:d3:2b:62:1b:74:1c:18:c7:23:d4:35:eb:5f:34:
ae:1b:ae:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:55 2025 by rpki-client