Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
File: kRxMdux1VljUX9DT9co8yOvTdLc.mft (raw, json)
Hash identifier: BaA+o0DV+RyvCWtfy2rGR/ahugbIQR7dCW4Fcz4BOig=
Subject key identifier: 06:92:F3:E3:F9:94:93:B8:DD:75:C4:54:00:B5:F4:12:1F:BD:AD:97
Authority key identifier: 91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
Certificate issuer: /CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Certificate serial: 0198D5BC109A357E6980627A9E17B222C330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
Manifest number: 1044
Signing time: Sat 23 Aug 2025 07:02:08 +0000
Manifest this update: Sat 23 Aug 2025 07:02:08 +0000
Manifest next update: Sun 24 Aug 2025 07:02:08 +0000
Files and hashes: 1: MRhTTHAkH95ULYTfOcPsfcxXr14.roa (hash: IE5WDUc9dmCUsWg7sthCjIhrzs4McHIG0OGY+bFwg+8=)
2: kRxMdux1VljUX9DT9co8yOvTdLc.crl (hash: dVrWOdkwX/XLuc6LGkKEQ2YfsdFdgo2jDjl1T+EKOiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:10:9a:35:7e:69:80:62:7a:9e:17:b2:22:c3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Validity
Not Before: Aug 23 07:02:08 2025 GMT
Not After : Aug 24 07:02:08 2025 GMT
Subject: CN=0692f3e3f99493b8dd75c45400b5f4121fbdad97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0a:ab:32:67:7f:f5:0f:ce:3c:d3:16:3a:aa:
d3:37:98:e1:8b:fe:19:3d:49:6f:a1:a3:49:e6:dd:
91:4c:48:43:c8:2d:51:b2:bb:e7:f4:d4:82:46:e2:
4d:6e:9d:ee:73:44:b2:17:b3:18:e9:83:8b:7a:c3:
35:d4:c1:c9:a7:01:3a:a5:10:06:06:b3:9f:2f:5f:
ed:b7:c5:85:87:43:4e:db:f1:37:81:a6:59:c3:f7:
80:8c:3a:de:df:f3:e2:78:bd:ce:55:12:cd:1d:9f:
c8:6b:07:98:db:0f:01:0c:b8:dc:96:18:cb:ac:a0:
f5:df:cf:9c:b7:3a:9a:60:e7:bd:14:38:14:01:ce:
ea:50:24:cc:ff:74:85:25:1d:1d:6b:4e:a5:02:f1:
44:d0:94:6b:a5:9f:5b:fd:72:14:b5:1f:d5:25:0d:
35:37:26:e4:7f:0f:1b:73:b9:16:72:de:d1:b1:01:
36:46:4a:c3:11:17:cb:7b:0e:6e:47:14:c0:1c:b2:
9b:3f:a3:13:9d:b5:8e:87:73:ed:15:ea:c5:56:05:
1e:52:9d:ea:26:19:c5:41:72:17:ea:8f:69:58:8d:
33:67:2c:2b:4c:f0:39:0c:46:83:6e:9b:b4:de:84:
9f:4a:d2:f2:5d:73:46:6b:de:3e:cb:78:6e:62:2c:
86:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:92:F3:E3:F9:94:93:B8:DD:75:C4:54:00:B5:F4:12:1F:BD:AD:97
X509v3 Authority Key Identifier:
keyid:91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:33:be:f7:12:4a:2e:6c:b9:11:22:6a:96:28:9a:67:29:88:
fb:ef:dc:9c:ad:c4:b3:b6:83:d8:ae:47:36:35:90:f8:c7:0b:
b4:22:9d:46:24:a7:da:30:23:b5:7d:84:37:dc:47:d8:5b:32:
15:22:e0:ed:cd:a7:f1:05:4b:84:4f:83:fa:7c:5e:26:98:47:
d3:73:e2:09:5a:f8:66:eb:07:53:4c:b0:ad:d0:64:bf:63:32:
de:85:f6:12:ea:5e:58:63:53:06:b6:98:a1:e9:d1:eb:34:0c:
67:4c:50:ab:52:99:12:54:70:3b:32:bb:79:b3:cc:7b:2b:0d:
c0:04:28:3d:28:04:d7:81:5e:6e:5b:e5:75:50:8c:1d:db:32:
a5:2e:58:02:34:66:1a:02:f3:87:92:62:f8:9e:28:bc:e6:0d:
a9:17:80:39:2c:f8:fa:79:aa:ec:10:ff:0d:a4:22:65:ca:0b:
63:0e:5b:23:8d:1e:37:82:43:a4:05:0f:a4:d0:95:cc:d5:96:
99:6b:c2:2c:a9:73:58:8c:17:3c:ba:70:02:6e:19:1a:99:82:
a1:7e:be:31:31:79:8f:3a:68:64:97:aa:ed:5a:b2:a1:59:db:
db:14:4c:d7:89:a0:7c:4f:65:88:c0:8e:91:69:2b:49:43:d7:
8e:1c:5a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:40 2025 by rpki-client