Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
File: kERLB53wCKfHy-KPy6Xb4GIOjhc.mft (raw, json)
Hash identifier: PVapP8nUKK84VJa17I1+9jGVcPWcjIuRV3f69wzlFZA=
Subject key identifier: 35:99:C6:78:E4:A9:DD:28:EF:13:1E:76:3D:F0:48:FF:46:57:94:BF
Authority key identifier: 90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
Certificate issuer: /CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Certificate serial: 0198D54E457967EE6640E22FA988589FAA7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
Manifest number: 14BC
Signing time: Sat 23 Aug 2025 05:02:13 +0000
Manifest this update: Sat 23 Aug 2025 05:02:13 +0000
Manifest next update: Sun 24 Aug 2025 05:02:13 +0000
Files and hashes: 1: kERLB53wCKfHy-KPy6Xb4GIOjhc.crl (hash: +4YiMio9uudATyl/YP84MuhUlcvTO9JU5qz6lwudthc=)
2: o9Mrd_Zp-119sDj-V8VZv-bH4Po.roa (hash: T/Zr25wueuSL7uIuxkLz/YPHfupfyL0OiqXaAJQQ9Uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:45:79:67:ee:66:40:e2:2f:a9:88:58:9f:aa:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Validity
Not Before: Aug 23 05:02:13 2025 GMT
Not After : Aug 24 05:02:13 2025 GMT
Subject: CN=3599c678e4a9dd28ef131e763df048ff465794bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0b:74:bf:20:47:ce:26:28:53:9b:99:66:99:
6f:1b:60:d1:04:e8:fe:70:72:27:59:82:f0:95:c2:
e0:21:1d:1d:4f:1c:c9:9c:44:ce:a4:72:52:e7:77:
13:19:85:04:77:22:c2:0b:41:0f:3e:70:e9:f7:68:
69:37:d1:36:ef:61:79:96:72:c4:9a:90:d1:69:ed:
c7:a2:a5:96:32:90:53:2f:14:e3:5f:fc:4b:d9:c7:
90:4c:80:38:55:e4:cc:5e:5b:6f:9a:c8:17:56:ab:
ea:c0:8c:ab:a3:98:a4:6f:22:39:dd:43:e0:12:d4:
97:10:a3:a7:fb:3c:18:e8:99:42:41:d1:51:10:5b:
92:9f:11:03:6f:f9:66:a7:d8:54:ab:be:4a:ed:36:
db:7d:82:45:bc:b9:ec:be:0e:fd:22:17:b0:75:2c:
84:cc:dd:3c:46:ab:12:1a:9b:c8:92:59:77:ba:9c:
c3:49:3c:58:6d:6f:3b:1a:5b:93:0a:0f:96:9e:4e:
ce:d9:13:a5:48:90:88:22:e0:86:ff:99:93:44:20:
d0:8e:57:16:67:23:90:b4:01:49:20:7d:d3:e0:66:
2a:08:42:98:44:61:ab:ba:63:dc:fc:75:8b:a3:da:
8d:88:4f:3e:0a:fb:82:6d:20:30:1e:b9:cb:77:97:
79:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:99:C6:78:E4:A9:DD:28:EF:13:1E:76:3D:F0:48:FF:46:57:94:BF
X509v3 Authority Key Identifier:
keyid:90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d0:86:d5:20:c3:64:b5:f4:fe:f7:d0:8f:76:08:e2:88:ed:
e7:b3:60:ac:97:23:a4:5e:35:7a:cd:fe:a2:51:f4:3c:1d:cb:
9b:11:f9:3b:0d:de:e5:89:1d:4d:58:84:d2:28:23:88:28:d8:
ea:84:52:4c:44:5a:2c:10:f6:cb:a1:e2:ab:19:e7:2c:d7:3e:
39:9e:d6:b7:02:b6:37:69:72:c1:bb:7d:27:4b:44:e7:7d:ae:
c0:fa:86:03:a4:39:c0:15:b6:a6:99:23:b3:43:55:e4:78:ce:
51:10:7a:26:c6:19:9d:92:46:ae:c6:4d:df:a9:7e:dc:33:b4:
db:ed:a3:b1:c7:37:94:4f:87:04:ec:96:8b:2e:fb:d0:52:4a:
e8:c9:f2:45:c5:8e:0c:74:a6:fc:6d:f1:42:ed:a5:69:f7:a3:
a7:39:4a:96:07:3f:d6:dd:d5:46:c9:a0:28:f5:ef:eb:9d:1e:
fe:ae:44:0d:db:f8:35:f1:ce:a7:f7:64:77:cf:46:3b:34:8d:
14:c2:48:48:14:d3:3e:8a:95:a7:1c:21:6e:f0:a1:1e:d4:77:
57:fa:09:8f:e3:a6:94:0b:37:58:13:e2:e7:54:7c:c2:2c:05:
c9:04:f9:4e:f9:5a:57:09:56:0f:e9:10:fe:96:bf:af:aa:b5:
30:7b:4e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:57:15 2025 by rpki-client