Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
File: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft (raw, json)
Hash identifier: pKWTug4M7RXsnxgyTZe0gg4yCqbXa1iE1sNqnIm/7Cg=
Subject key identifier: 9E:51:87:D9:31:4F:91:E7:A2:54:87:ED:95:32:2C:BA:DB:15:64:91
Authority key identifier: 91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
Certificate issuer: /CN=913836859c6ce1869340edf1f273709b8094d9d4
Certificate serial: 0198D5BBA89748FB17ADE77F63F11DA25F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
Manifest number: 15B1
Signing time: Sat 23 Aug 2025 07:01:42 +0000
Manifest this update: Sat 23 Aug 2025 07:01:42 +0000
Manifest next update: Sun 24 Aug 2025 07:01:42 +0000
Files and hashes: 1: i0znYyDIsk78QzCDDCTg60lK9ig.roa (hash: aeDo1wq5VczgcfrDX0J+4eB6IcjwVsRwiJM6vkXROSk=)
2: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl (hash: H4YyIcLaf8k2Ovl6s4mjd4YUxxZ6g6StnHdcR3EMagE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a8:97:48:fb:17:ad:e7:7f:63:f1:1d:a2:5f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913836859c6ce1869340edf1f273709b8094d9d4
Validity
Not Before: Aug 23 07:01:42 2025 GMT
Not After : Aug 24 07:01:42 2025 GMT
Subject: CN=9e5187d9314f91e7a25487ed95322cbadb156491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:01:c4:97:c9:9e:53:b7:88:31:d0:17:80:
f6:73:04:85:39:66:96:a9:10:2f:62:9c:37:47:54:
ac:2c:9a:2b:79:de:c3:16:6c:45:9b:e2:0e:dd:2c:
e6:f1:85:4f:73:7e:cd:3c:21:c1:1f:44:37:03:05:
f1:5c:f1:ef:8e:7c:c1:4b:ec:61:2b:3f:5c:8a:51:
97:39:69:98:05:fd:b9:e0:f8:2a:86:37:d2:b0:43:
e7:67:16:5b:d5:c8:f2:32:79:96:97:a9:f7:93:22:
25:e1:fd:51:a1:fc:86:d4:cd:25:56:2d:bd:9d:fc:
3e:7f:f1:cd:07:87:63:dd:18:cc:8b:f7:e9:77:44:
50:d1:75:2e:ea:71:74:51:3b:a6:58:10:74:a5:b3:
fa:ba:63:7d:80:cc:cd:95:cb:4b:a8:7e:c2:b7:f9:
4f:95:e7:59:f4:88:25:67:ca:78:f6:2b:a5:58:59:
3d:68:fc:9e:fa:c0:fb:8f:cb:40:3e:20:83:93:eb:
c7:2e:3a:6e:07:03:70:e1:c0:67:86:cb:7f:cf:f2:
4a:06:df:15:5f:b1:bb:9e:da:9e:e5:6c:8d:f0:88:
b5:3f:c0:a4:5c:1d:8e:7a:f1:20:95:3b:92:b8:94:
39:1a:fb:6e:b1:dd:2e:07:f1:76:4f:61:6c:0c:4c:
dd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:51:87:D9:31:4F:91:E7:A2:54:87:ED:95:32:2C:BA:DB:15:64:91
X509v3 Authority Key Identifier:
keyid:91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a1:38:b0:9e:19:9d:e4:a1:32:b3:b9:01:d3:0d:ae:30:c0:
c9:15:fc:91:7b:c2:f3:52:30:68:a6:c5:58:16:30:a7:2c:99:
aa:63:33:0f:4f:d4:ce:f4:ed:10:74:fc:2c:79:9a:ad:42:f8:
75:1f:ad:3b:6c:e6:f8:75:ca:90:81:2d:54:29:c2:4d:64:1e:
06:9a:43:8a:1f:40:2b:d8:0e:55:df:28:a8:fa:1b:39:c9:e0:
4c:b0:ca:02:c5:7b:12:f8:6e:17:dc:cf:e9:7f:e9:87:ea:4f:
ac:19:65:2c:0c:ca:d9:9f:82:83:d5:ba:79:b0:b7:e4:fe:6b:
73:37:20:7c:01:b2:83:91:30:ad:c1:69:c8:61:e6:a3:56:1d:
cb:f3:3c:d2:21:28:03:11:5f:b2:f9:62:57:1f:f6:3a:49:26:
2a:13:e9:59:e3:86:c8:05:e5:f1:ff:6e:ad:42:68:e7:71:f3:
58:85:9c:5b:77:9c:fb:71:13:c9:19:74:6a:a9:6a:52:d9:5a:
41:b5:cc:bb:6f:92:c3:43:98:1f:64:4f:c3:8e:83:fc:ad:bd:
24:84:7c:fc:fd:f1:08:f0:f0:54:e9:31:65:98:3a:f1:02:f6:
05:d8:4a:5c:63:23:64:9f:55:b7:5d:9b:23:8d:a2:cc:7a:13:
85:f7:13:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:03 2025 by rpki-client