Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier: M8fMNc1D8gCleJqT7Ya3z69tk9igoZ+vMcXVY4UbokY=
Subject key identifier: 68:89:F7:DD:A1:A9:47:E0:BD:BF:33:59:08:FC:18:6B:C9:38:09:97
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 0198D5BC29EF38420F9DCE1E6E5001F0AC22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 07:02:15 +0000
Manifest this update: Sat 23 Aug 2025 07:02:15 +0000
Manifest next update: Sun 24 Aug 2025 07:02:15 +0000
Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: qwupSPpiaTa9sTaNsTFwpnEVfNDuUVfJK4xXkDXgC3s=)
2: W9bI_JNQHDDt7Tw4mN0K9_OAUEo.roa (hash: H3aapZtXnHfhVIDiayaGFZvNcV7JScFiYfbfDkzVZMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:29:ef:38:42:0f:9d:ce:1e:6e:50:01:f0:ac:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: Aug 23 07:02:15 2025 GMT
Not After : Aug 24 07:02:15 2025 GMT
Subject: CN=6889f7dda1a947e0bdbf335908fc186bc9380997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b8:da:7d:b3:a9:22:5d:b1:36:c1:a9:76:03:
c4:e9:80:18:eb:21:c8:e3:d3:ae:8d:8e:4b:60:ba:
07:b1:3f:96:62:81:a2:44:be:96:37:ad:57:2f:73:
da:8b:34:16:a6:a0:0a:b8:8d:f2:59:99:63:65:66:
34:80:f2:aa:9a:62:fb:0c:ff:d9:52:92:87:6e:58:
89:60:ed:eb:2c:18:e8:2f:05:f3:fa:3a:72:50:c7:
e5:2c:7c:8b:70:56:09:2f:6e:94:50:0e:94:41:7b:
99:08:10:6e:8c:54:04:87:e9:57:d9:44:9d:6f:8b:
47:de:9f:09:4c:c0:c4:70:29:bf:db:93:88:8c:13:
d7:0d:4c:fb:b8:e5:f5:2d:8c:25:ed:f0:49:18:4e:
0b:1d:c4:a2:3b:28:28:57:7a:6c:67:ea:31:ed:54:
98:63:ef:19:e1:48:01:48:ba:0d:a3:e3:7e:8d:2e:
d6:05:6d:ec:88:a8:d5:59:29:85:a5:55:ab:12:ee:
8f:c0:df:f8:92:78:d4:1f:b7:e7:50:5f:e0:7f:1e:
4c:40:1d:36:22:2e:1a:e0:e1:8e:2a:81:92:73:25:
4c:ec:82:05:76:f4:33:bc:1d:02:9c:d5:1a:22:d9:
24:41:98:16:4a:c6:5c:fb:8e:f6:e3:12:42:10:4b:
90:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:89:F7:DD:A1:A9:47:E0:BD:BF:33:59:08:FC:18:6B:C9:38:09:97
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:53:fc:34:b9:1a:b4:a7:ce:30:07:0e:d3:80:52:45:58:32:
07:da:27:3b:cc:c6:24:60:30:81:70:50:f5:2f:44:67:b1:fe:
45:af:df:71:d8:ba:ab:42:f5:ee:99:8a:e8:6c:bb:6e:1c:e0:
97:71:98:4a:bc:07:d9:e5:13:59:4d:81:9d:49:67:a1:dd:ac:
a8:07:d1:82:d9:98:d4:3d:1d:f4:d0:65:12:74:dc:fc:aa:aa:
86:9e:bf:5b:58:26:2b:6a:69:47:1f:f3:d1:da:61:b5:54:f3:
8a:fa:b4:4c:97:77:9b:07:e9:91:af:d7:e3:fc:0d:5e:05:48:
60:f5:1d:a6:c5:c6:64:a1:8c:41:e9:63:b3:fd:c2:59:dd:5e:
34:02:40:eb:0b:a7:1d:d0:2a:e6:98:1e:3d:97:e4:4d:54:fe:
32:f0:ef:f0:38:20:14:69:af:4d:c2:3b:33:ab:9c:76:26:cf:
6e:50:ac:35:74:2c:e8:3e:d3:17:32:36:7b:5b:71:98:ee:0a:
8d:5d:93:66:de:3c:77:84:e0:9f:b0:86:0d:e3:c2:51:f0:f0:
ef:46:9f:6e:59:57:1d:ba:61:e4:66:a9:49:c7:27:e2:2f:54:
f8:5a:04:0a:ca:8c:77:79:b1:47:4b:c5:bb:db:28:58:7c:2e:
67:de:3c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:24 2025 by rpki-client