Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
File: koDT5GcpaPhuiVXbYgy3ZdudcUI.mft (raw, json)
Hash identifier: WhTfL3XKKAad8jbg56w/RFu/1nEyec0VeLb460tIOlA=
Subject key identifier: 52:B4:8A:6A:B2:1D:05:CB:AA:FD:37:97:65:94:91:F5:13:BF:9E:E3
Authority key identifier: 92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
Certificate issuer: /CN=9280d3e4672968f86e8955db620cb765db9d7142
Certificate serial: 0198D4A7B9F449536B2597192C137CD4AB95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
Manifest number: 0A78
Signing time: Sat 23 Aug 2025 02:00:18 +0000
Manifest this update: Sat 23 Aug 2025 02:00:18 +0000
Manifest next update: Sun 24 Aug 2025 02:00:18 +0000
Files and hashes: 1: HJG2LfZbcdQILd5mjrG6JouJjB8.roa (hash: AJsKTbmetLnV+AkJjtEMj7IQPl7myVO7TWx6kpWmD6s=)
2: koDT5GcpaPhuiVXbYgy3ZdudcUI.crl (hash: qJvaYvUdwOacp20POpmH7S+foHjg2z//INhpE3ZwDxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:b9:f4:49:53:6b:25:97:19:2c:13:7c:d4:ab:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280d3e4672968f86e8955db620cb765db9d7142
Validity
Not Before: Aug 23 02:00:18 2025 GMT
Not After : Aug 24 02:00:18 2025 GMT
Subject: CN=52b48a6ab21d05cbaafd3797659491f513bf9ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:33:d4:dc:7f:25:64:64:4c:ff:e9:b4:0f:
4e:ac:e6:37:6e:63:42:66:7d:23:60:c8:de:65:d9:
4f:f0:e4:37:75:e8:0f:56:7b:90:31:c0:a5:71:65:
b7:d9:3a:46:26:e1:d0:87:4f:24:90:b7:c6:ae:06:
73:a7:14:a5:5b:b4:a2:c7:12:c0:96:fd:79:8d:86:
54:01:9f:4d:49:5c:0e:8d:d2:e1:0f:09:c7:b5:cd:
03:28:d1:ae:86:5b:69:cc:bc:68:46:98:ec:42:09:
c7:89:84:43:d5:f6:ac:7e:ce:b2:93:92:e6:0b:a6:
ff:4f:87:21:07:c5:5b:4e:49:80:7d:55:fa:c3:29:
fd:ea:81:26:78:54:4b:e0:7e:24:08:3f:df:63:24:
79:09:79:eb:1f:2c:96:c8:12:ce:91:e2:11:df:49:
33:a8:86:a0:1f:97:15:9a:a5:9f:e6:c4:3a:db:c7:
56:fa:c2:ac:81:39:e4:23:ac:f0:05:15:4e:4f:38:
86:1f:d0:2d:2d:29:5b:e9:e0:6e:91:f1:bd:64:42:
2c:60:54:2e:64:72:d8:c5:94:60:09:d1:31:74:37:
7c:50:73:7c:dc:36:32:72:71:24:6b:26:10:9a:fa:
6b:c6:eb:6e:b9:e6:5d:d1:7e:64:d7:ef:ac:b2:ca:
ab:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B4:8A:6A:B2:1D:05:CB:AA:FD:37:97:65:94:91:F5:13:BF:9E:E3
X509v3 Authority Key Identifier:
keyid:92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:bc:2a:e6:d8:9e:50:37:79:3b:ef:08:ef:d5:9b:b2:e9:2a:
a0:8b:54:73:49:8f:0b:80:54:c7:f6:5a:42:8d:7c:d0:1c:25:
85:50:f1:02:fc:df:3d:5f:d2:2f:5c:7a:e7:47:8c:39:a7:6f:
f2:57:2c:7b:da:87:ec:d4:99:68:0c:62:70:5d:fc:ca:f7:51:
d4:50:20:44:ff:6c:c4:01:9e:95:f4:21:17:ee:17:53:f1:d5:
74:22:be:f7:42:ed:b8:53:eb:ef:a9:7d:e8:b8:d5:a4:1c:5a:
03:dc:e1:a8:8a:f0:2d:35:81:cb:9f:f6:7f:b9:5d:f1:89:b0:
d2:86:5b:4a:4b:11:8c:7f:22:eb:bb:60:8a:97:59:74:e6:99:
da:91:6c:74:23:db:ed:bd:e0:3b:f1:80:9d:8e:a3:a9:b7:16:
7e:f4:54:28:1c:e2:45:a8:1d:2e:f7:4e:cd:52:90:3e:39:76:
3c:f9:9d:eb:24:05:98:8b:f1:eb:90:05:b8:db:12:65:c9:3e:
d0:bb:a9:bd:71:94:61:2b:00:0c:68:12:a9:99:b1:e1:43:ea:
c2:9b:e8:c7:a6:ee:ea:be:f5:3c:e4:f6:84:a5:89:36:a9:03:
26:68:4b:d5:0c:ca:1d:68:b2:c9:f1:98:3f:15:40:cc:e6:de:
1e:5e:30:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:25 2025 by rpki-client