Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
File: kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft (raw, json)
Hash identifier: XAHThNyzYBbn4lyN27k5AAQgE7PUjVqxr3DgIkJgpb8=
Subject key identifier: B8:D1:E4:92:0A:D3:76:94:F5:72:16:A1:5A:61:50:2B:B3:4A:18:CE
Authority key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
Certificate issuer: /CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Certificate serial: 0198D77374DB250B0015E47C938CC5107699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 15:02:04 +0000
Manifest this update: Sat 23 Aug 2025 15:02:04 +0000
Manifest next update: Sun 24 Aug 2025 15:02:04 +0000
Files and hashes: 1: SuMbqKGSv1qKom1gMOOpsF5R60A.roa (hash: HQDAgM/9d4KyNdepm39greMFmuo/Jazn0GZwtBbpXbw=)
2: _Rwv4lbUJs8Qf1QGuOxJ2FBF-c4.roa (hash: 3ZyAz71Zk7+/HMhaF+5MnrlGpcuPtXopbpfn+/PpDpY=)
3: kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl (hash: XSV1jMTvP9ky2SCxdIl1jAKoJmFySVzHxvNWrJic1Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:74:db:25:0b:00:15:e4:7c:93:8c:c5:10:76:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Validity
Not Before: Aug 23 15:02:04 2025 GMT
Not After : Aug 24 15:02:04 2025 GMT
Subject: CN=b8d1e4920ad37694f57216a15a61502bb34a18ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:63:f0:7b:da:57:cb:14:ed:a3:5d:4c:76:ad:
54:9b:b8:9f:9b:18:67:f0:01:29:10:b3:45:74:03:
a3:03:16:e2:ce:90:55:d4:6e:0c:38:d2:17:42:7f:
99:86:ca:f3:3a:49:e5:45:56:68:ea:ef:ca:36:db:
d2:56:eb:68:24:9f:a3:02:fc:49:71:08:9d:7d:f7:
a4:a5:bd:59:a4:e6:2c:31:21:32:cf:67:81:78:f5:
a3:ec:f7:b9:e4:d2:58:2a:b1:3d:81:48:f2:8c:06:
bc:06:df:21:e7:cb:d0:e3:35:ac:b9:4c:7a:be:af:
75:62:14:de:4e:4a:76:7a:6d:3b:d6:99:aa:ce:40:
09:7a:52:ce:5e:38:20:12:b6:31:ae:00:14:42:9f:
e7:20:f3:97:c3:61:51:58:98:62:0c:71:ab:08:27:
b8:19:73:78:e0:c5:00:db:a4:4b:fd:5d:83:2a:47:
72:d4:f7:67:27:8c:35:8c:2e:54:94:04:02:50:7a:
0c:dd:1e:32:05:a9:93:21:d6:66:66:b0:a2:5a:34:
83:b3:f4:0e:83:d5:c6:39:43:f0:99:33:2b:aa:af:
c0:48:c7:84:6e:97:b5:e5:dc:7f:bd:73:cd:f8:ee:
15:0d:28:f5:50:04:71:85:a4:6c:f5:87:ff:8f:5d:
51:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D1:E4:92:0A:D3:76:94:F5:72:16:A1:5A:61:50:2B:B3:4A:18:CE
X509v3 Authority Key Identifier:
keyid:90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:d0:f0:16:c4:96:f5:1b:87:4b:dd:41:b2:fb:d5:1b:bf:63:
d1:5b:d8:11:c9:b6:41:e6:2b:73:63:77:7a:03:b6:10:d7:bd:
9a:69:b7:20:f7:8f:e1:41:8b:e1:94:a0:64:06:cf:9d:1a:8d:
44:3d:46:5f:2a:c8:41:32:c5:71:07:76:8e:e6:de:8b:af:26:
6e:97:c3:f1:e1:90:b5:55:ed:69:7e:e4:e7:d6:9f:75:20:cc:
de:a0:11:d7:47:84:aa:49:58:37:ea:93:d6:64:3c:81:6c:7e:
79:ee:87:2b:33:20:49:b0:73:82:2f:e9:4f:bb:59:58:bb:ea:
1d:bf:50:df:40:38:a2:04:c7:78:19:80:d2:13:92:cb:a1:3f:
56:12:61:d4:f0:f8:e3:aa:1b:e0:28:f4:01:33:7b:37:3a:54:
2a:43:67:af:df:f0:70:1a:5e:f4:bf:cf:9d:3c:f1:b1:b5:fb:
0a:3e:59:24:2b:56:8b:0b:88:0f:9c:86:6b:d6:29:72:91:17:
56:9a:9e:56:45:87:97:11:ee:33:ce:ce:5c:ec:6d:5e:47:19:
b4:7a:f7:43:00:e6:6b:03:11:3b:76:3f:b2:9b:16:a2:f5:3d:
da:97:1e:e2:b8:7c:c0:19:6e:2a:d3:8f:7c:3c:94:71:fb:c7:
3a:9a:bf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:41 2025 by rpki-client