Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: 0GGVQa25993WFdhfm0RRer9C/Z4MaRINd/SEp7QuRe0=
Subject key identifier: F4:0D:5A:AD:55:B9:C5:14:1D:B4:33:39:1D:B0:B1:F0:99:07:3D:B1
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 0198D4048F38BEF094BC1026849BA99E3E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 1521
Signing time: Fri 22 Aug 2025 23:02:05 +0000
Manifest this update: Fri 22 Aug 2025 23:02:05 +0000
Manifest next update: Sat 23 Aug 2025 23:02:05 +0000
Files and hashes: 1: YV0LpnxtBTAq4lz06bEpbCvyfLw.roa (hash: 9MkObNOUwLuOccH80DPJr9LOnHYQQUzirjuDL+0jWhk=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: bzFRO3FZq8LYpu7mX1qX2kEmfz6sWzmY0wEFkDhovbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:8f:38:be:f0:94:bc:10:26:84:9b:a9:9e:3e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Aug 22 23:02:05 2025 GMT
Not After : Aug 23 23:02:05 2025 GMT
Subject: CN=f40d5aad55b9c5141db433391db0b1f099073db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1d:a3:a2:ae:3d:0e:bd:9f:e5:09:71:13:41:
cc:41:6c:bb:91:a7:d4:0e:a1:e6:c1:cf:22:23:54:
81:21:b6:60:e0:cb:8d:44:c6:97:63:76:b0:86:cc:
af:13:79:19:8f:19:1c:89:f3:bd:ae:13:3b:ea:cc:
c0:bf:b6:2b:f8:a6:91:61:9a:8d:c6:db:1d:d6:88:
19:4b:38:50:c3:1c:55:12:dc:a7:69:f3:a6:fd:78:
dc:17:a4:b6:e2:c2:02:f6:a9:4e:e8:7f:eb:ee:06:
c3:0a:4f:3e:96:da:66:4e:8a:e3:c3:68:db:4f:7f:
d3:cc:3c:54:cb:1a:fa:85:2f:9c:08:0d:a3:cd:3f:
59:29:aa:2e:82:4c:84:43:27:28:19:9e:f9:80:b0:
97:a5:7f:0b:21:5d:da:30:3e:2e:32:8f:c0:88:20:
cc:a1:97:76:99:3c:e0:79:64:aa:70:33:11:d6:c9:
40:9f:6f:ec:99:3c:18:8c:3f:59:a0:11:ac:86:14:
73:fd:da:0c:a1:ab:51:d3:64:23:75:31:8a:fd:2d:
8f:db:dd:12:70:5c:84:ea:a5:3f:3f:32:99:67:93:
4f:f0:42:f1:ac:04:c2:f4:4b:cc:2e:6e:be:81:12:
ac:1b:0e:ab:1c:4d:1e:45:b3:9b:9e:0d:62:5d:90:
61:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0D:5A:AD:55:B9:C5:14:1D:B4:33:39:1D:B0:B1:F0:99:07:3D:B1
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c7:21:10:a5:3a:4f:d6:8b:5d:fb:1d:a9:3d:98:58:42:b6:
b3:d5:77:cb:94:1e:7c:ae:81:ea:d0:48:19:1f:0a:2b:50:7d:
4a:18:2c:fa:56:12:dd:9e:57:a1:9b:fb:7a:de:45:7e:5f:cd:
d3:fd:b3:21:59:f2:fa:cb:5f:ac:21:c2:81:7a:64:34:a5:28:
a1:e1:38:fd:e7:75:ad:1d:fb:74:85:c4:7b:2d:ac:f0:43:6e:
bc:bd:39:5a:9d:92:60:1e:26:0b:31:6a:68:21:59:3a:48:8d:
84:2a:c9:51:22:60:cd:4f:f9:46:5b:d9:63:8b:78:6d:4d:35:
14:a6:de:ce:f9:7f:4c:e4:77:61:10:ce:48:dc:f7:71:2b:b5:
1e:b1:13:04:96:65:51:08:3f:8e:43:38:a7:92:1d:88:69:6e:
ff:83:b4:be:ac:a8:fc:17:d3:32:5c:bb:2a:43:10:18:e7:92:
b7:ee:f4:b3:84:ef:d9:25:36:f4:14:fb:75:19:14:bc:ac:2a:
7e:ac:c4:e7:8b:0d:d5:bb:bf:4a:51:4f:bc:ee:0a:77:6b:dd:
32:33:a0:0c:56:fc:0b:63:ed:13:11:56:c4:21:46:74:f5:0f:
88:7f:c9:01:1c:e2:2a:ad:f2:76:45:d2:5e:69:9a:b2:97:e5:
24:e2:d7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:37 2025 by rpki-client