Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft
File: kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft (raw, json)
Hash identifier: OaiwpLdUQIWJ1+w+dXlPiYaPFkV5Pa31VMDyhfui3s8=
Subject key identifier: 6A:85:24:37:CF:69:B8:AF:18:96:58:FF:51:E2:3B:EE:D2:97:EA:E5
Authority key identifier: 91:18:8C:A6:4C:46:70:A6:EB:56:B4:2A:50:A1:05:88:AD:96:47:EE
Certificate issuer: /CN=91188ca64c4670a6eb56b42a50a10588ad9647ee
Certificate serial: 0197D4AAEA6AD836697490A09C701C70289F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft
Manifest number: 0A58
Signing time: Fri 04 Jul 2025 09:01:00 +0000
Manifest this update: Fri 04 Jul 2025 09:01:00 +0000
Manifest next update: Sat 05 Jul 2025 09:01:00 +0000
Files and hashes: 1: JyQo8VWrljsbu7fdBUyCLnp2fRo.roa (hash: PYNlAKDVxyxJWLdDPpsz5WMXt3MO3ZloO8y7DclxK3I=)
2: kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl (hash: 8KpidmmdnPFbuT0zmY5jzkoRCmXI5UQZ+E/+c0L5/gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:aa:ea:6a:d8:36:69:74:90:a0:9c:70:1c:70:28:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91188ca64c4670a6eb56b42a50a10588ad9647ee
Validity
Not Before: Jul 4 09:01:00 2025 GMT
Not After : Jul 5 09:01:00 2025 GMT
Subject: CN=6a852437cf69b8af189658ff51e23beed297eae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bf:b6:b8:69:91:bd:39:7f:d2:ab:1d:fa:d4:
8e:9e:d8:a1:ab:7c:8a:4f:b0:af:1a:34:eb:93:99:
85:3d:91:7e:30:aa:8f:8a:15:e0:f8:86:d2:2d:1e:
1b:8e:09:b8:bf:a1:33:36:25:4c:80:6b:a2:33:0e:
dc:1c:95:72:99:e7:d1:4d:39:0e:a2:25:29:0f:37:
88:c1:cd:6f:7c:fa:36:7e:f5:e1:1c:ce:b9:64:24:
eb:98:bf:45:96:71:c6:81:71:0d:09:6e:2d:ff:52:
8d:9e:1f:36:25:d9:ee:c8:18:6d:4f:f4:9a:12:32:
26:31:a7:e7:ff:e3:0b:a6:b9:3e:9a:bc:e5:e6:8c:
cd:88:4a:cb:6e:f6:4d:4b:4d:3c:d8:9f:1a:9e:bb:
9b:18:c9:97:3d:a6:98:4a:47:1b:b8:f2:66:91:d0:
7c:e9:9a:a7:33:13:d1:90:68:54:75:8f:c1:69:5b:
21:98:b3:7c:cd:92:91:8a:59:5f:f2:51:f0:17:fd:
e7:7d:33:03:80:10:1e:af:77:af:5d:15:c1:40:33:
69:54:ed:e0:28:68:2e:9f:34:26:5e:26:91:ce:e2:
1b:42:81:02:46:07:3f:28:f5:32:d9:e7:42:42:1f:
5d:eb:31:d1:96:04:77:54:8c:c0:b7:f6:e2:84:e0:
e1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:85:24:37:CF:69:B8:AF:18:96:58:FF:51:E2:3B:EE:D2:97:EA:E5
X509v3 Authority Key Identifier:
keyid:91:18:8C:A6:4C:46:70:A6:EB:56:B4:2A:50:A1:05:88:AD:96:47:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:03:28:0d:63:ff:af:67:f5:3d:83:e2:b5:b2:b5:c4:4a:a5:
e1:9c:cf:2f:90:cd:e0:8e:e4:8d:95:37:50:13:89:dd:43:fd:
6d:73:89:32:dc:3f:e2:4a:d8:48:0c:60:a7:e2:cf:81:a4:7c:
77:4d:c2:00:07:b4:af:bb:10:e5:a9:08:99:27:f9:f8:fc:d6:
31:42:f9:4f:7a:4c:ae:15:d0:bc:7a:88:ed:5d:c7:5a:32:c4:
fd:e3:62:bb:41:3e:5a:60:7b:84:ee:54:e9:e9:f8:a9:ec:53:
56:6d:ad:74:f2:18:34:ed:87:46:f0:f3:6f:5e:c7:16:81:63:
54:6b:35:4c:d0:d5:3b:f4:14:e8:ff:dd:df:f4:66:b8:a2:49:
0f:15:ae:fb:f2:e7:3a:c9:0f:2e:58:7d:a9:d0:35:a1:9a:05:
16:c8:12:49:6b:f0:f7:9f:26:d9:8c:2c:16:44:29:3c:9f:6d:
de:e6:55:67:d3:97:37:2e:6e:72:24:60:f7:c3:d6:1b:b4:37:
a3:68:ff:7a:1c:88:0b:d2:e9:cb:39:32:e9:a8:1c:93:5c:43:
04:5b:45:7a:45:07:76:54:f7:a2:a5:8a:64:f7:02:78:59:cd:
6b:3d:40:11:84:97:a7:cf:dd:45:ac:f1:8c:c5:58:3b:d5:73:
7f:a6:be:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 11:14:10 2025 by rpki-client