Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: ASAIsO2KYIzlPtmWPSGfwUAtUdk16bP/3o1aMdHO+gA=
Subject key identifier: 4A:03:96:40:A5:71:0F:F3:5B:22:B5:11:DD:F3:2C:D7:7C:19:00:F4
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 0198D5BC269D6B61586165A7033AB4FF930E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 07:02:14 +0000
Manifest this update: Sat 23 Aug 2025 07:02:14 +0000
Manifest next update: Sun 24 Aug 2025 07:02:14 +0000
Files and hashes: 1: R0_MeNcCGsgFbXPPMSbNiNB6onw.roa (hash: jCCdHzd1f1vyFj3zrZb6H/YnXBVmEiivGeOlhoHJWc0=)
2: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: aaV9+xXRVDhFvS04YMoq4EQsYwVn3UFjzVwlHzUvfsg=)
3: xiLzP1pUVJ4HlLptpzl15fneHrg.roa (hash: Oybd2JrzjZp9Unasli0WI1/BduGFzHUQWKvicye2j54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:26:9d:6b:61:58:61:65:a7:03:3a:b4:ff:93:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Aug 23 07:02:14 2025 GMT
Not After : Aug 24 07:02:14 2025 GMT
Subject: CN=4a039640a5710ff35b22b511ddf32cd77c1900f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:24:1a:6a:91:0e:94:6a:78:e6:5f:60:1d:7b:
ab:c6:e5:ee:03:d1:a3:8c:97:10:05:e1:d8:4b:fa:
93:b0:0d:ca:8a:2a:8e:9f:2f:d4:64:50:a2:33:fe:
45:20:2d:ee:6c:4d:72:73:da:dc:77:2f:0d:b8:1e:
85:7a:58:62:d4:e7:e2:06:ee:52:c7:c0:5d:b2:01:
d1:ca:d8:e2:2e:dd:c8:01:47:4a:13:84:45:df:af:
b3:35:6b:2d:75:f6:6e:f8:65:e9:59:1e:30:c5:f4:
4c:0d:60:b1:d8:be:14:f7:53:ac:82:22:80:65:5e:
06:58:ff:97:7d:34:1c:73:20:f9:8f:57:45:3c:53:
3a:75:16:54:f1:97:94:d6:72:c8:b5:dc:5f:b1:80:
24:3d:f0:2e:15:73:33:f0:59:70:bd:fe:e6:2c:2c:
77:04:53:5b:f9:05:f3:1a:e1:90:df:3d:19:10:a8:
6c:65:67:3f:3e:e7:e7:04:2c:05:22:96:4a:c5:4c:
54:6d:1a:44:75:9b:1c:96:71:e9:95:bf:97:4a:3d:
bd:ca:4c:44:a0:c8:60:31:c2:44:6d:bc:eb:2a:20:
87:44:2d:4d:06:d5:d1:f4:06:51:ce:d9:8a:bc:da:
bf:a8:2b:2b:1c:66:ab:27:8f:50:9a:90:7f:24:8e:
f6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:03:96:40:A5:71:0F:F3:5B:22:B5:11:DD:F3:2C:D7:7C:19:00:F4
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:93:97:bf:04:83:73:8b:8c:25:7c:f6:a8:6c:dc:58:41:d0:
35:f2:ec:f9:f2:f4:29:2c:08:f1:00:bf:68:12:fa:b4:58:1a:
08:54:83:86:49:71:15:0a:8b:dc:f7:5e:f8:b5:c7:9d:f9:a5:
3b:88:2b:29:29:8b:e5:8b:a5:42:e8:2c:9b:af:c3:b7:4d:86:
21:b1:ad:e1:73:92:a4:7f:b0:9d:d8:c7:e1:46:be:5a:b2:04:
bf:32:20:30:a9:68:45:b8:af:9e:1a:62:60:5e:8f:ba:d3:ea:
16:7c:6a:90:e5:5f:ea:79:1a:8c:bb:00:67:2d:43:9c:33:4f:
43:95:22:25:10:dd:c4:58:97:65:f2:ef:5f:a8:16:d3:1e:fc:
fc:2f:cd:0c:b8:14:13:11:2f:b5:57:f9:a2:c3:b7:28:3d:28:
0f:c1:37:59:99:20:8f:14:95:ca:3e:50:92:89:ff:07:8d:8c:
cf:3f:cb:d2:12:81:ac:57:0c:0f:44:c8:43:54:c3:d3:47:38:
27:50:54:f9:86:18:e8:89:e0:38:f3:78:c4:76:5a:4f:65:82:
60:4d:32:a2:02:4a:a6:37:ec:15:6c:92:76:22:95:ce:19:52:
c3:19:17:bf:2f:70:4d:e2:d1:fa:a7:45:e9:3e:bc:3a:3d:63:
ba:45:9c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:39 2025 by rpki-client