Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
File: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft (raw, json)
Hash identifier: LiVy/FSe7mz4GeTw+YLmfwsPbWmfsZW5lO4z5GFZw8o=
Subject key identifier: 54:A9:F6:B7:89:A5:41:E2:9D:09:F7:A4:F9:4C:24:3D:51:98:8F:8B
Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Certificate issuer: /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Certificate serial: 0198D4DFFF2994D785C2F829B1F141EC7748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 03:01:46 +0000
Manifest this update: Sat 23 Aug 2025 03:01:46 +0000
Manifest next update: Sun 24 Aug 2025 03:01:46 +0000
Files and hashes: 1: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl (hash: dISZ4ScvJZ0vm46yixA94x1MQWeuD62BfY5nJBiicTU=)
2: rIuFBAfmvp_-lxNjPhpoImYAjZk.roa (hash: UYHTUbb1Al1rBA78c79sngeNx1JvlEPhDvWJaFDSi+E=)
3: y4ueXY0ijBf4RZb4fGJVsXQLGA0.roa (hash: UvuMlXoUYXPwY2R/r9zwqG0BA2XfWQY7ClxJAXl4TJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:ff:29:94:d7:85:c2:f8:29:b1:f1:41:ec:77:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Validity
Not Before: Aug 23 03:01:46 2025 GMT
Not After : Aug 24 03:01:46 2025 GMT
Subject: CN=54a9f6b789a541e29d09f7a4f94c243d51988f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:c2:d0:cc:a7:2b:bb:8a:d0:d5:b4:df:b4:
cc:0e:19:43:3c:15:a9:41:f5:db:3d:e1:42:89:ea:
e4:a2:17:76:61:4a:b4:a8:fb:1e:a0:ea:cf:97:ef:
68:d7:c7:80:8d:17:55:00:f2:f5:21:5e:db:de:fc:
fd:79:79:c6:26:e5:5a:28:a8:66:64:ab:58:a2:85:
f6:62:3d:53:49:99:0e:43:d8:ac:97:85:16:96:76:
54:96:57:d7:43:9c:85:c5:42:b9:e7:c1:9f:e1:3f:
f2:44:08:f3:c9:f5:5c:48:b0:77:08:f4:21:75:94:
1f:a0:38:8f:d2:07:b0:99:fe:10:d1:21:4c:a4:b6:
a1:2b:61:be:a9:70:05:e7:bf:a2:6f:cf:70:01:4c:
2d:14:fb:ef:7b:e2:53:79:10:de:e4:1d:52:ce:6b:
e5:ca:fc:23:00:a9:56:eb:12:58:48:9d:80:61:ca:
90:1a:c6:d9:b6:e0:f6:46:25:64:0e:b9:cb:eb:ef:
2a:8b:07:60:93:5a:4f:96:2e:f1:b1:f9:b6:51:0c:
03:3a:33:47:c7:b9:6c:de:a8:c0:57:63:a0:2c:bc:
a9:6c:ad:44:e3:06:3e:53:c5:00:44:b8:f9:c9:96:
4b:74:22:38:41:31:bc:1f:be:52:94:f2:22:2d:ac:
21:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A9:F6:B7:89:A5:41:E2:9D:09:F7:A4:F9:4C:24:3D:51:98:8F:8B
X509v3 Authority Key Identifier:
keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9c:53:a1:2f:b1:2b:e8:ce:1b:d2:ab:7e:dd:a2:b5:65:10:
f1:66:ea:63:de:ee:60:19:cb:16:aa:1d:5f:55:48:55:44:d0:
5f:bc:92:73:b2:c4:c6:82:ae:a8:88:06:5b:60:d3:bb:fc:74:
72:f6:51:df:f2:7e:44:05:b2:1f:23:7d:d3:4d:53:d0:6c:9d:
9f:9d:48:32:8c:cc:e2:ff:fd:0d:31:53:41:49:8c:8d:dc:02:
31:0b:be:b7:2d:bc:2f:29:69:33:5a:a7:53:4d:97:0a:06:d2:
96:c0:69:14:28:fb:26:8d:45:02:47:29:23:9d:ae:17:de:68:
35:02:0e:6f:69:13:51:ab:35:1f:72:4d:aa:ff:ea:7d:13:44:
72:54:d2:5f:7e:01:32:a0:97:52:c0:dd:33:d1:a8:c3:3e:87:
04:df:61:fb:9f:1e:1d:77:3e:73:cf:d6:67:23:76:93:8b:66:
6d:29:f0:59:7b:08:d9:61:88:8d:23:3d:4e:9e:b5:7e:d7:a3:
87:17:81:4a:50:34:59:5e:00:c0:fe:61:aa:19:74:65:a1:32:
e6:8a:b6:48:e7:06:16:b5:f1:18:42:fb:5d:26:72:73:64:01:
22:90:37:49:fa:a1:6f:f9:44:f0:cc:75:97:43:c2:7f:3a:7e:
73:ac:2e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:40 2025 by rpki-client