Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
File: kUXq2NPxKEQCtvdWFKhyV1A84bw.mft (raw, json)
Hash identifier: i00djMxl9fDA2lk3M6MxHtQi+Cd70hwm50yr55kxJB8=
Subject key identifier: A3:85:D3:18:9E:C1:52:E9:D2:79:BF:67:90:B3:45:D6:6C:0E:E3:BF
Authority key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
Certificate issuer: /CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Certificate serial: 0198D474A3CB8D5FF4ACD9D9CF4F603FDCA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
Manifest number: 1402
Signing time: Sat 23 Aug 2025 01:04:30 +0000
Manifest this update: Sat 23 Aug 2025 01:04:30 +0000
Manifest next update: Sun 24 Aug 2025 01:04:30 +0000
Files and hashes: 1: ELPDypl8AO7yu9Qb_T04CJHIAmc.roa (hash: uMxQfCf54KpZ6vXVJrK4LBRwbGjKGq0Ym1Kz/m5o7Z0=)
2: h7jotg4RS-yoMxmLNwMHtqMIvTo.roa (hash: 0RvIPvSKfKKYiob3W8lnsFljStCAR/IAjli0EYtRtIQ=)
3: iRTljilS88fdbTnqXefNcD2KdQw.roa (hash: SYC9aJR60HZt276fl/3G18s2lWN51c7daVgQyb0yCnk=)
4: kUXq2NPxKEQCtvdWFKhyV1A84bw.crl (hash: ieXM89IpFLIFtsOJWG+eYT4rdJQmnNkl4nCdiEhsFqA=)
5: vEwnUG1RajWkcLEBWJPnIiLLgBM.roa (hash: sSHl9JnRfzO2J5TGzVLlmHvYGgd6KK351LDclJH6UZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:a3:cb:8d:5f:f4:ac:d9:d9:cf:4f:60:3f:dc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Validity
Not Before: Aug 23 01:04:30 2025 GMT
Not After : Aug 24 01:04:30 2025 GMT
Subject: CN=a385d3189ec152e9d279bf6790b345d66c0ee3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:35:bd:5c:5b:8d:f1:b4:f4:45:1e:3c:bc:e7:
6a:ec:09:f2:81:78:85:ea:24:ec:fd:d4:79:a2:4e:
d5:be:88:a3:5f:ff:5f:6a:a1:6b:27:0f:c4:3e:05:
4e:e7:4a:e6:37:12:3a:2c:06:33:ef:be:75:cb:4a:
2c:45:31:01:69:61:c6:28:cd:5e:f7:1a:2f:95:2b:
86:0e:2c:c7:7b:ee:b9:5d:81:59:5d:6f:c6:36:14:
68:12:40:07:20:f5:46:9c:3c:10:5e:80:0b:81:cc:
76:f5:e2:86:4f:72:bc:04:e6:a2:37:77:df:7f:7a:
68:47:1b:26:77:61:02:dc:ef:1c:f8:72:d5:1b:bf:
a4:dc:00:2b:0d:a4:2a:09:08:3f:61:bf:32:fd:77:
3a:c6:01:aa:33:1c:2f:70:7f:38:4d:44:68:61:cd:
fb:40:52:e3:3a:1a:7c:44:68:18:0c:d1:ca:09:59:
60:a5:9a:f9:22:30:b5:18:70:88:f5:9c:0a:35:37:
61:16:b1:ad:2f:f8:44:c6:30:5b:e9:1d:60:a6:38:
b7:b3:4a:88:fc:81:32:2b:ec:c2:b7:6e:8c:ee:3c:
f7:8f:66:5b:dc:60:c0:95:c8:30:b2:e7:fc:07:d1:
47:bb:d9:05:a8:70:5f:1b:f2:8c:63:4f:a9:03:b1:
a9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:85:D3:18:9E:C1:52:E9:D2:79:BF:67:90:B3:45:D6:6C:0E:E3:BF
X509v3 Authority Key Identifier:
keyid:91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:51:42:e2:4d:02:20:e1:23:c7:c8:a6:9f:56:02:9d:73:f3:
50:fe:9b:7a:c8:0a:9b:1f:41:5e:b1:d0:dd:3b:5e:3d:04:c6:
5f:e3:38:c4:dc:fe:46:2a:4c:7f:8d:37:b9:87:01:82:c5:15:
1e:62:39:60:37:0c:81:23:5c:c5:09:26:8f:40:9a:4d:01:e4:
10:f7:8e:f5:6b:94:25:14:e7:0d:81:99:ce:06:67:50:84:bc:
f4:1c:8a:e6:a6:4d:96:90:36:04:2f:ff:35:df:66:4a:3c:ad:
9e:33:10:90:86:19:48:ed:a2:c6:9c:a7:d1:ed:53:d0:b2:05:
70:e2:8d:42:78:a6:41:48:b5:f2:b2:17:57:a6:49:de:d0:6c:
e6:7c:4c:14:6d:de:a3:8d:ce:aa:81:95:52:52:2e:0d:dd:8b:
07:fc:3d:f6:e4:6a:18:6f:ea:83:7a:43:b0:d5:63:77:4c:6b:
85:fb:e2:b4:95:15:56:1c:c8:20:2b:85:6a:cb:d5:5c:5c:1a:
b2:74:2a:66:a8:36:46:2a:22:23:ea:59:6b:1f:d2:47:39:a7:
60:c8:16:5b:94:fa:b1:57:3c:25:fa:8e:a2:1b:75:b6:65:9a:
5b:11:48:20:f1:d2:01:e8:ab:12:92:71:f7:10:4d:5e:ff:03:
4a:46:57:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:18 2025 by rpki-client