Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
File: k059UV3emgPC3Ic4mi_KTn1YxOw.mft (raw, json)
Hash identifier: J6QJpayfYiwR9qN6YwhuTsp8TrO1xmCOQMXkhMPaYoE=
Subject key identifier: D6:C9:8A:10:45:37:16:AE:17:00:43:F2:BA:F7:4F:76:10:C5:42:D6
Authority key identifier: 93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
Certificate issuer: /CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Certificate serial: 0198D5838C02A3AC9BB14940D8A7AC8C00FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
Manifest number: 1344
Signing time: Sat 23 Aug 2025 06:00:24 +0000
Manifest this update: Sat 23 Aug 2025 06:00:24 +0000
Manifest next update: Sun 24 Aug 2025 06:00:24 +0000
Files and hashes: 1: Xv-bUtmsrHjQ28dXxWqb3uBJRDg.roa (hash: 0bOsSKKdGKKiMo/FFhxHgHDZgsrzyzkqrbIyGUoQTCk=)
2: cL-keBkm4oIskLWJO5aafKhJ0jo.roa (hash: s9gkn4aSVId/ngfYN3hJphayygttMpgwEt/RQqhzDWs=)
3: k059UV3emgPC3Ic4mi_KTn1YxOw.crl (hash: 8PyaLCPrDPHs5UPjRlmgI1DcAxs1VWnLKiGWDpe0tm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:8c:02:a3:ac:9b:b1:49:40:d8:a7:ac:8c:00:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Validity
Not Before: Aug 23 06:00:24 2025 GMT
Not After : Aug 24 06:00:24 2025 GMT
Subject: CN=d6c98a10453716ae170043f2baf74f7610c542d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:3c:12:9c:3a:da:72:22:c0:b2:fc:af:74:
e7:4c:13:88:e9:18:08:19:bc:99:7d:dc:3c:26:95:
66:5f:69:e3:63:1b:cc:c7:46:4e:cf:2d:44:38:c3:
3c:ee:8f:22:70:81:97:a4:2a:57:66:e3:cd:29:e7:
f4:10:fa:a5:25:5a:d9:fc:68:be:3c:87:c1:e2:f8:
e2:dd:63:c2:b5:23:a0:6f:2c:ca:4c:74:40:88:70:
1a:fb:c8:60:f1:ed:ae:8a:3f:34:85:c9:28:79:fd:
a2:46:b7:ae:c5:3a:51:06:59:49:91:7e:ee:78:23:
a2:1f:37:3e:e2:ef:87:2f:86:5d:ff:cd:97:54:84:
b0:15:c2:e0:94:3b:fb:8f:67:9e:49:c6:4b:e8:1c:
ce:10:af:71:a8:3a:8b:e1:fd:dc:77:85:02:f9:02:
5c:18:0a:cf:9b:b4:82:f8:cf:1d:8f:1b:7f:c4:3b:
8c:1e:07:2d:d0:8e:95:6b:10:8b:ed:fa:97:96:28:
b1:5b:34:4a:96:9b:3d:e5:a8:9a:fb:f1:08:d4:94:
4a:a5:69:e2:79:cd:a0:eb:19:de:78:c0:0a:22:e5:
d6:b0:46:d5:8f:39:b0:55:ab:08:a4:ca:23:5f:59:
7e:fd:98:69:10:0b:6d:81:ab:6e:02:b6:88:a8:47:
5a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C9:8A:10:45:37:16:AE:17:00:43:F2:BA:F7:4F:76:10:C5:42:D6
X509v3 Authority Key Identifier:
keyid:93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:27:fd:46:1a:86:ad:e1:ba:cb:92:54:26:7c:d3:22:e4:90:
e0:72:8c:a5:3b:23:f6:31:f8:eb:bf:5b:3b:fc:a2:af:60:6a:
6f:20:55:0c:c3:3e:88:d2:42:d4:7e:35:d1:2c:6f:c5:71:9d:
7c:c8:55:44:ed:0a:a2:33:db:f8:41:35:d5:c9:48:cf:d4:f6:
9d:30:88:97:53:58:57:34:8e:08:5e:54:08:dd:d1:e1:7b:dc:
ce:d5:78:82:96:47:9a:40:b8:16:4f:30:8e:6e:b6:05:3e:1d:
70:1c:8d:69:08:17:6b:7d:ae:08:4a:50:de:15:f9:f4:91:68:
96:12:4a:8a:34:ee:85:d1:0b:97:35:2b:1a:14:2d:d0:fb:35:
3f:52:a0:eb:92:0a:c3:c7:58:e6:e6:74:48:5f:ee:1b:4f:04:
6c:13:d1:5f:ad:9a:b5:2f:f5:46:68:5d:ad:60:dd:2b:08:5d:
d7:61:85:2b:84:bd:ef:49:ee:cb:99:07:88:eb:f7:a5:10:3a:
6a:2a:36:23:2f:33:9e:e7:5e:e8:f2:e5:46:f2:11:a5:82:aa:
e7:00:b6:6f:d2:dc:a3:31:05:c0:38:ed:51:99:26:38:c9:77:
61:c2:6b:ec:cb:be:c9:2d:df:b0:44:dc:df:cf:92:42:9c:78:
08:17:1c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:52 2025 by rpki-client