Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
File: kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft (raw, json)
Hash identifier: qDj+TzBxEnZziwBxjgHlzmLqIiBqxico9GbFrzrwOME=
Subject key identifier: 32:59:DA:0E:E4:D7:87:C2:E1:B6:33:AA:E5:BA:09:2B:B4:F1:24:EF
Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
Certificate issuer: /CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Certificate serial: 0198D65FF07EA46F20AB8FFDA79ACDA090E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 10:01:08 +0000
Manifest this update: Sat 23 Aug 2025 10:01:08 +0000
Manifest next update: Sun 24 Aug 2025 10:01:08 +0000
Files and hashes: 1: 3onxhQW4_iFcT0AIPYrLYgqTYV0.roa (hash: Mu7Xz4DaWXehDK3cRMePZg9doIVwsj8HrvkMJvgs9bM=)
2: kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl (hash: aDRUGDmIn3lbVrDqPZlbE5IR5z3RSHG7p2wNZVXEIUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:f0:7e:a4:6f:20:ab:8f:fd:a7:9a:cd:a0:90:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Validity
Not Before: Aug 23 10:01:08 2025 GMT
Not After : Aug 24 10:01:08 2025 GMT
Subject: CN=3259da0ee4d787c2e1b633aae5ba092bb4f124ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:95:e3:ae:78:fb:c0:a4:1d:68:6e:a6:b1:
23:eb:25:c1:4b:9d:4f:70:81:2b:60:17:6d:66:ed:
5b:a5:23:cf:51:3e:58:44:d8:9f:32:af:8b:1f:84:
89:46:49:ea:84:97:1a:bf:f5:d2:2f:22:f4:5e:21:
e1:6b:96:77:53:1d:5f:91:a4:92:8b:09:00:51:3c:
f7:ca:49:03:82:b6:3f:e1:92:52:0a:c7:6e:23:be:
22:a8:0e:34:87:63:06:ae:6f:05:01:70:cd:ee:3f:
ec:cd:75:51:a4:11:9a:40:24:09:da:43:95:c2:c1:
42:f7:d5:93:af:77:f6:f9:4c:6c:e6:a5:32:06:4e:
da:66:64:f1:96:79:5d:71:29:67:89:91:a0:24:e1:
c0:f4:95:aa:4a:7c:77:27:89:03:7e:e4:58:70:39:
b8:65:db:c9:87:1d:a3:95:6e:83:d1:48:08:7e:52:
e4:62:fb:44:70:59:01:b9:ac:e7:ba:bd:0d:73:89:
d2:27:0f:40:a7:55:61:b0:61:74:42:9e:9e:78:50:
62:a4:94:c6:a5:6b:6d:33:02:b9:31:81:26:9f:97:
aa:8b:12:46:2d:fd:be:96:70:b8:fb:0a:14:dd:b7:
56:8d:23:06:f8:e5:94:49:8f:9e:ea:0d:63:b4:15:
78:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:59:DA:0E:E4:D7:87:C2:E1:B6:33:AA:E5:BA:09:2B:B4:F1:24:EF
X509v3 Authority Key Identifier:
keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4f:93:5d:80:90:79:0a:35:09:af:a3:6e:4e:f9:3d:b3:09:
34:d7:9e:fb:00:39:f7:7d:1f:66:54:fc:e4:c5:89:95:74:7b:
5e:42:57:2d:5f:af:a5:a7:62:c8:de:67:27:54:f4:c6:32:66:
b7:73:b8:d6:e4:35:ab:8e:45:4b:ab:d4:df:2c:e5:6e:27:3a:
92:9f:6b:bb:53:77:22:0b:9c:7f:67:9a:a1:73:aa:e0:7c:ef:
4b:53:5c:48:de:dd:bf:80:6b:5a:f8:ac:dd:9b:cf:80:f6:15:
ba:63:14:db:8f:d7:b3:31:22:59:ce:ce:15:f0:7e:b9:a4:58:
af:25:78:ea:a5:f1:0a:39:1d:63:66:4e:59:5d:1b:3e:d2:04:
09:0b:d8:48:d3:a0:9b:d8:a1:62:f8:67:40:f8:cb:a5:d9:69:
ce:5e:56:20:7e:b4:30:95:79:a7:4c:31:3b:33:d3:72:3c:04:
31:8e:0d:c0:c8:84:c8:4b:d6:85:d1:3a:8a:f3:9b:e5:24:f9:
70:4e:ea:86:23:7e:8a:b5:eb:55:73:83:0b:73:aa:72:62:1e:
53:72:fa:7f:7e:61:47:49:e7:09:a5:c8:37:e9:77:e3:51:99:
92:df:73:1b:fd:cd:05:2d:ec:5f:95:fe:6a:0a:9b:25:29:06:
8c:36:91:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:33 2025 by rpki-client