Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
File: Kq8k6REaiJ202uCH5ICeEIbjP4I.mft (raw, json)
Hash identifier: wfsERMKbmjr8TAAIZ9hltLmHnR7jqsPUzz+l22vSdXQ=
Subject key identifier: 4F:8A:C8:A4:04:DD:C7:6F:D2:63:1B:41:87:67:A5:BA:C1:A6:41:A6
Authority key identifier: 2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82
Certificate issuer: /CN=2aaf24e9111a889db4dae087e4809e1086e33f82
Certificate serial: 0198D70646FF5DC4124D8201B637A6ED5E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
Manifest number: 15A6
Signing time: Sat 23 Aug 2025 13:02:49 +0000
Manifest this update: Sat 23 Aug 2025 13:02:49 +0000
Manifest next update: Sun 24 Aug 2025 13:02:49 +0000
Files and hashes: 1: 5sMxgmIczAQ4fn8JJ0_j3DrMjS0.roa (hash: VTfvZnzv8Q2Rd2Q6njhUyXmObqB+4ygm6Iue4TDP3ic=)
2: Kq8k6REaiJ202uCH5ICeEIbjP4I.crl (hash: ZHaZOR1m+sesfdwVKrCTmweONc92puPDNkCG/oQuu70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:46:ff:5d:c4:12:4d:82:01:b6:37:a6:ed:5e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaf24e9111a889db4dae087e4809e1086e33f82
Validity
Not Before: Aug 23 13:02:49 2025 GMT
Not After : Aug 24 13:02:49 2025 GMT
Subject: CN=4f8ac8a404ddc76fd2631b418767a5bac1a641a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:86:38:6c:ac:a6:c8:68:9d:50:12:5b:c3:69:
cd:cc:fe:78:17:7e:8f:a4:70:d2:47:4d:e7:18:34:
f9:91:2e:17:b1:0b:4b:3b:51:f5:2c:d8:ae:5e:c3:
58:1e:f2:82:1e:46:ab:c8:d0:f8:86:48:dc:d1:67:
72:f3:7d:f1:14:8a:d0:63:66:eb:ea:ba:ab:fc:f2:
97:56:0f:dd:f5:c9:8d:0d:f4:fb:a8:de:59:c4:d7:
cf:09:24:b3:0f:d4:66:1a:a3:93:f9:d8:da:6f:e9:
f0:ee:06:56:5d:6c:1b:e6:88:25:51:c0:da:42:d5:
c7:eb:fb:ee:3d:27:eb:0b:22:5e:8a:b4:b5:e5:40:
67:82:4d:6b:d7:43:4a:d9:ec:de:0e:e3:8d:15:e7:
95:05:33:6f:84:05:4f:2a:ac:df:7c:16:ac:e6:66:
23:6f:20:16:a0:80:46:42:2e:f7:4c:ff:19:ee:46:
57:63:06:77:f3:7a:db:43:27:0e:c0:78:c1:f6:cc:
f2:ef:8b:9b:1b:e6:ce:8b:49:c8:92:94:51:85:2c:
2e:f3:88:32:8e:5b:00:84:e3:d2:9b:25:e7:30:91:
4f:fc:75:ce:c1:0a:cc:c7:ab:88:41:02:20:16:f1:
d7:89:63:dc:15:da:27:df:3d:db:7a:2d:93:3d:2f:
f1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8A:C8:A4:04:DD:C7:6F:D2:63:1B:41:87:67:A5:BA:C1:A6:41:A6
X509v3 Authority Key Identifier:
keyid:2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:77:98:87:f5:70:6f:e8:11:a3:ae:5d:e9:79:30:ad:fc:52:
e6:4f:6a:9e:ad:ed:22:cc:0d:3a:4e:c6:33:6f:40:b4:4c:c1:
02:75:89:cc:68:1e:b3:94:1f:31:cf:80:ea:d4:0b:32:5f:31:
8a:22:b7:a1:2e:f5:0a:30:1d:4e:7a:d9:f5:59:3f:5f:ef:61:
2f:6c:17:37:df:fd:88:4b:7e:48:19:82:ee:bf:48:36:b3:6b:
39:40:45:4a:48:0c:0f:f7:0f:ab:fe:b1:a4:9c:80:db:67:b6:
f4:7e:37:f5:9f:4f:a7:1f:51:bc:e5:db:30:9a:bb:4a:9d:62:
0a:74:61:f6:98:eb:c1:23:96:eb:ed:5d:e5:37:95:80:7a:60:
82:27:af:12:69:44:eb:52:08:b6:1f:0c:63:15:a5:3b:14:d9:
0c:95:bf:3d:44:60:77:46:f9:f4:6f:33:fb:3e:3c:80:2a:54:
7f:f0:0f:d4:56:0c:40:f0:9b:5a:63:81:8f:54:7e:2d:2c:ba:
f4:85:28:aa:9f:e5:78:2d:63:7d:06:f8:fc:97:f8:8b:57:cd:
4d:be:06:d8:b1:34:d3:bc:db:4e:f6:7a:b7:60:fa:aa:62:ae:
ed:fe:3e:c2:7f:9a:f0:dc:f8:ce:a8:9b:7b:c1:41:1e:0b:e6:
4c:c4:56:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:28:31 2025 by rpki-client