Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
File: kd3H2eAtRMa_jGNcHQcV9uicEBI.mft (raw, json)
Hash identifier: ObqGIIItFFnYxrG6b2qC8E8lwHlaHKFTThH40hjsJ68=
Subject key identifier: CD:95:2D:5F:C1:3A:95:31:CE:52:7D:91:3A:89:33:2E:18:4A:66:29
Authority key identifier: 91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12
Certificate issuer: /CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012
Certificate serial: 0198D4A842111B60DE59F11587C1E52ADD07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
Manifest number: 04
Signing time: Sat 23 Aug 2025 02:00:53 +0000
Manifest this update: Sat 23 Aug 2025 02:00:53 +0000
Manifest next update: Sun 24 Aug 2025 02:00:53 +0000
Files and hashes: 1: kd3H2eAtRMa_jGNcHQcV9uicEBI.crl (hash: 6e9yEA0RVuBXiFeywIg9qGP+v6LkQB9cV1cOSvsvMW8=)
2: s5q2oTWE63BKKJHezuXxV23_1ao.roa (hash: kxGqoLV/rWB0wj/sYCOZiA+1BQk6TjqEiRvVL8/Fnps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:42:11:1b:60:de:59:f1:15:87:c1:e5:2a:dd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012
Validity
Not Before: Aug 23 02:00:53 2025 GMT
Not After : Aug 24 02:00:53 2025 GMT
Subject: CN=cd952d5fc13a9531ce527d913a89332e184a6629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:d7:db:29:86:3f:c0:11:9f:bd:83:42:60:
f0:54:1a:25:97:03:8d:db:8c:d7:2f:37:f7:31:08:
3d:9b:54:5b:4f:dc:e6:c9:be:b5:0b:d1:12:7b:60:
92:6b:de:b8:ef:56:d7:3e:fa:ff:06:55:14:24:a6:
83:9c:31:1a:88:52:0d:d0:b2:f3:63:bf:1c:98:2c:
ce:9a:85:d5:e3:06:07:c9:ff:d0:4e:23:1a:d0:45:
0f:82:5d:bc:49:d2:2f:16:3f:29:69:24:67:d6:64:
4b:73:29:53:27:57:61:8d:21:ac:ea:09:9a:76:e6:
9b:28:ee:6a:96:93:ce:1d:b3:a2:85:6d:5d:6f:df:
fd:77:f6:63:f9:94:67:91:ae:ff:fc:2e:a4:bd:04:
90:3e:7b:af:d6:63:0e:db:2b:4a:8a:68:78:27:a7:
b3:8a:2e:bd:d5:dc:9a:9e:84:c7:f8:37:e7:96:48:
8e:33:4a:d6:f9:58:22:06:14:84:8e:9d:81:83:15:
16:d5:1f:97:a4:9b:0f:fd:6c:91:d9:eb:6c:4b:4c:
80:5c:25:8b:f0:ab:d6:9e:6b:61:55:e7:65:d3:39:
f2:6d:83:56:c1:5a:b1:fa:7b:6f:11:e2:5d:84:c3:
89:ae:3b:87:fd:b4:4c:f4:fe:94:44:61:49:0f:b9:
6c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:95:2D:5F:C1:3A:95:31:CE:52:7D:91:3A:89:33:2E:18:4A:66:29
X509v3 Authority Key Identifier:
keyid:91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:79:db:ed:31:64:19:c3:41:9c:21:8d:cf:e9:4a:11:f0:07:
c6:a4:a2:81:04:ff:2f:7e:fa:b5:b9:41:fc:42:ea:4b:c0:82:
2e:8d:07:ab:92:34:e3:bf:71:c2:ad:31:37:ff:62:f2:e6:26:
7e:c7:53:8f:d4:bb:e5:95:9c:34:36:b4:78:f6:4f:fd:07:c0:
ff:71:96:29:0c:57:5b:fb:6f:9a:34:82:bf:6e:00:e6:a8:1e:
16:5b:af:2e:70:23:f0:9f:76:42:b1:b4:3a:81:b4:4b:67:8e:
17:b7:eb:7c:28:b6:a8:fc:93:b0:73:64:b0:26:b4:8f:48:c4:
05:83:95:1f:78:a7:0d:32:50:27:0c:d6:36:43:85:51:39:b3:
45:1e:4c:1c:b2:57:8e:50:63:f3:01:f2:b5:b8:12:92:70:c9:
f3:ee:f3:e1:77:3a:7c:fc:40:ca:aa:f4:38:46:5b:73:f7:d2:
cd:f0:66:e2:d2:56:22:05:42:8e:eb:3f:b4:4f:0c:bc:f2:3a:
c7:93:3d:3e:a6:cf:67:ec:75:ae:2c:27:73:1d:fc:13:c5:e4:
d3:9c:ea:c3:49:7a:10:85:e0:09:d7:a1:7e:21:99:e7:8e:a9:
7e:aa:66:02:05:05:4a:34:9d:d0:90:23:13:cc:4d:73:7f:bc:
86:09:52:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:51 2025 by rpki-client