Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
File: KyJEyKPrSjxtd20EbOkqvwHGwi8.mft (raw, json)
Hash identifier: 2HPcZlMr4nEF0uf28KtqC5NGj/ays9bsxEunOGyIoqU=
Subject key identifier: E5:9D:69:F9:89:78:51:8D:39:12:DB:90:1C:D4:0A:DB:B3:65:C9:28
Authority key identifier: 2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F
Certificate issuer: /CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f
Certificate serial: 0198D5F13C68DA7F45DFA710F7577BC8D27D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 08:00:13 +0000
Manifest this update: Sat 23 Aug 2025 08:00:13 +0000
Manifest next update: Sun 24 Aug 2025 08:00:13 +0000
Files and hashes: 1: CWGhSuH7Prq7nBeXCwJSQ8R7MLY.roa (hash: kJD3A5DYARZjtb9aiv1WyX0nnGUXwOPoDx5EHff3F+I=)
2: KyJEyKPrSjxtd20EbOkqvwHGwi8.crl (hash: tVz2FcjoejNylJgKRtZnEoI/W1ZIRkqwCYVAGJbZJDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:3c:68:da:7f:45:df:a7:10:f7:57:7b:c8:d2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f
Validity
Not Before: Aug 23 08:00:13 2025 GMT
Not After : Aug 24 08:00:13 2025 GMT
Subject: CN=e59d69f98978518d3912db901cd40adbb365c928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:a0:e8:a4:a7:80:b6:f6:7a:c6:90:bb:be:
9b:9e:5a:34:34:dd:d4:a6:27:ff:64:d5:7c:61:7d:
ae:10:dc:20:67:58:05:5c:5b:65:50:82:cd:f8:52:
9f:5f:1d:28:5a:1e:d2:5f:78:5b:4f:94:7a:30:42:
72:04:bf:c2:73:38:20:bc:45:3a:6b:49:a4:a1:7b:
a9:b6:68:40:91:2f:4b:2b:c0:e2:74:13:f1:84:8e:
ff:dd:48:9d:94:58:e4:d5:15:2a:75:bd:55:7b:d2:
30:55:e7:df:e9:ec:ed:bd:98:ec:7d:83:d9:be:64:
6f:be:62:50:f0:6c:97:0e:ad:fb:b6:b4:89:d0:6b:
3c:94:51:5b:31:b5:2a:da:a4:82:9e:d8:61:d8:a1:
09:df:88:18:01:ff:86:f8:8a:85:70:9b:6c:69:1f:
9d:33:fe:f9:35:1b:14:c7:be:91:d1:3a:9e:4e:a1:
b5:da:5f:3d:48:5e:77:16:c0:22:30:4b:82:98:ab:
d0:b0:b1:ad:dd:d5:b6:82:f7:3f:1f:f0:ff:da:cb:
cf:36:11:47:f0:c5:16:38:b1:d7:57:ea:4e:b9:59:
9a:97:fa:33:2f:1e:65:85:91:e4:e4:b4:3a:7a:41:
5c:7d:bc:f2:b9:3b:e0:c9:bf:0f:17:e8:db:1f:c3:
b0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9D:69:F9:89:78:51:8D:39:12:DB:90:1C:D4:0A:DB:B3:65:C9:28
X509v3 Authority Key Identifier:
keyid:2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:cb:39:dd:1c:ec:c9:16:59:fb:28:f5:a8:13:01:c2:0f:27:
c9:16:a7:41:a3:6a:ee:b4:9b:da:58:52:4e:d0:7b:52:e3:1a:
a4:ee:9e:c7:71:2e:d8:8f:ce:e3:4b:57:06:54:8d:4b:dc:5f:
d3:3e:a4:7b:ac:ca:db:ce:92:7a:66:44:5e:a8:07:18:14:93:
71:c1:58:e0:1d:f6:ee:a3:5a:9b:ff:91:fd:cf:63:f5:c2:4a:
d1:f5:a6:b1:8c:b7:13:4f:97:1f:29:07:1b:a8:6d:46:28:8c:
5d:9e:52:10:d7:3a:e1:ed:e6:52:47:21:cc:c9:dd:85:cd:d3:
e4:e1:4f:cf:b1:23:d4:4f:65:d8:ec:e0:ae:55:c0:dc:b3:c2:
6c:e7:04:de:51:63:e7:05:10:43:bc:c1:97:9d:f7:16:2c:c6:
03:f2:c9:f6:90:45:bd:08:f3:42:d8:88:18:8a:c3:80:e5:cb:
7d:09:cb:92:ec:de:95:23:56:0d:93:33:92:50:29:1a:24:45:
71:b3:0c:d5:da:cd:74:fa:77:da:c5:ec:37:6b:f8:ef:4d:bd:
80:f3:13:5b:d0:8b:19:91:05:20:0e:ec:f2:16:50:72:3b:54:
0a:70:87:dd:23:2d:a5:48:e3:e2:03:91:c7:54:b5:d9:de:b3:
e8:70:da:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:53:40 2025 by rpki-client