Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.mft
File: kNQmIJvYxAXL7-5XQbGlJUgBK6s.mft (raw, json)
Hash identifier: VCYX+dgAQvhIkSWiB2vy5e6qW5jli4XOvWQ81MAoCI8=
Subject key identifier: 68:81:89:D5:6C:04:A4:09:12:C9:A9:07:C1:00:ED:F0:99:52:29:63
Authority key identifier: 90:D4:26:20:9B:D8:C4:05:CB:EF:EE:57:41:B1:A5:25:48:01:2B:AB
Certificate issuer: /CN=90d426209bd8c405cbefee5741b1a52548012bab
Certificate serial: 0198D8F2D373CC80BCF64112355F2B996E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNQmIJvYxAXL7-5XQbGlJUgBK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 22:00:49 +0000
Manifest this update: Sat 23 Aug 2025 22:00:49 +0000
Manifest next update: Sun 24 Aug 2025 22:00:49 +0000
Files and hashes: 1: 7jOhIlGMYtpzhKm6UF5jgqFBiMc.roa (hash: C4mpTuEk6wGFVxeEj+/or69TPysG1QX13HP+3u1HlsQ=)
2: RsHjDR2OTT48ECIrfV-t2KLa3VY.roa (hash: MiP+2WgYd2OzzgUSXRhJ1Hkihb6X5kSHAkKwMaypLhA=)
3: kNQmIJvYxAXL7-5XQbGlJUgBK6s.crl (hash: XpMLps7IlbMSNnW96gNWZJQ+G8K2rP0VVjYSZCsJa9M=)
4: sHQUcBnaxcQs5QBN7CoHP0TQfAo.roa (hash: 3Pm0yK1qEDhcBE/2rywkt/F+KpY0x3xgqvvhDhQ/kfQ=)
5: uyoeIqkVYsWycgSBqi99XOoWohc.roa (hash: XI5SEPc9hU2Gd4vosOPLL+DY7PoBl65PrChe9/PrbCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNQmIJvYxAXL7-5XQbGlJUgBK6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:f2:d3:73:cc:80:bc:f6:41:12:35:5f:2b:99:6e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d426209bd8c405cbefee5741b1a52548012bab
Validity
Not Before: Aug 23 22:00:49 2025 GMT
Not After : Aug 24 22:00:49 2025 GMT
Subject: CN=688189d56c04a40912c9a907c100edf099522963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:13:5e:44:b7:d0:20:bf:1c:54:64:e5:10:
23:fb:3a:7a:7c:61:cf:17:c5:80:40:ca:2a:af:7b:
32:d0:f3:05:da:88:28:b5:8d:86:b5:35:aa:2d:a9:
37:bd:82:39:bd:43:d3:f3:42:23:0c:3c:91:90:91:
ea:e6:ce:1a:a4:5f:c5:e9:d8:b1:e6:bd:9b:e9:1d:
3e:7b:a8:ad:f7:55:5c:d2:40:32:8d:c0:25:33:a9:
02:52:d8:fb:ea:8d:bd:8f:b0:80:b2:35:87:05:3e:
1e:5d:6a:83:96:00:4c:ad:d5:6d:4c:d2:ed:ab:d7:
ec:38:ec:24:3f:49:20:c4:c7:ac:15:93:da:b1:3d:
3b:00:21:a4:ff:61:26:86:c4:c6:13:2c:94:e9:04:
0c:db:ec:3d:ee:93:19:34:18:86:7a:6c:4e:1a:19:
fa:d9:90:d5:94:00:a0:c7:74:47:9b:f5:0e:d1:59:
09:71:bc:db:d6:11:90:7b:4a:62:d5:ff:f0:06:4f:
87:da:29:99:80:9c:fb:b6:31:36:21:4c:dd:67:8e:
92:81:8f:1d:b9:d7:fa:17:dd:5a:d5:5f:df:8e:ef:
a1:b1:a0:89:c4:30:5f:9c:d6:13:a4:59:ee:85:d9:
2a:56:35:b5:44:46:f6:18:0a:c2:ab:a1:59:9f:35:
a5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:81:89:D5:6C:04:A4:09:12:C9:A9:07:C1:00:ED:F0:99:52:29:63
X509v3 Authority Key Identifier:
keyid:90:D4:26:20:9B:D8:C4:05:CB:EF:EE:57:41:B1:A5:25:48:01:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNQmIJvYxAXL7-5XQbGlJUgBK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8a:6e:ef:96:1b:c8:61:73:95:82:e9:fb:d8:6f:60:a3:27:
55:f1:2b:0b:58:b3:10:a7:2f:05:18:6e:e7:7c:63:a8:79:b7:
11:54:dd:4f:ad:5b:56:f6:9b:00:36:2f:4e:3a:8a:cf:93:45:
72:89:1a:d0:52:05:86:ac:8c:e6:10:16:8a:67:74:13:0c:cc:
ef:51:09:35:cb:c9:18:f3:6c:e3:4a:44:a1:ba:06:cc:48:6a:
89:27:39:0c:1a:86:b8:75:e1:17:c3:7b:a1:e0:d6:87:df:c9:
53:cd:48:1b:cd:e6:8c:94:b9:f0:d7:3a:d7:7b:9b:fc:be:57:
44:2e:27:6a:b7:b3:a0:a9:1f:d5:d6:7e:69:36:8b:0a:46:01:
e7:d7:63:20:bd:0b:24:a4:0b:12:fd:87:9f:e5:02:df:c3:ca:
bd:73:61:2c:53:72:43:ed:b1:00:cf:23:89:ff:23:33:9e:ac:
fe:4c:62:36:41:b0:65:84:b3:04:a9:a3:9d:d5:5a:a4:62:60:
c2:fb:10:db:3d:bc:15:e5:17:78:5a:20:83:5c:a6:62:34:ee:
03:d6:b9:e0:c9:97:28:65:37:9b:21:70:60:16:ff:69:5a:ae:
39:95:10:ac:c8:8c:a2:8b:72:0c:0a:c1:36:e9:1e:94:0d:86:
02:0b:3d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:31:40 2025 by rpki-client