Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
File: RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft (raw, json)
Hash identifier: kby4JBDvbjmJu3PSpdlW33AE+dug3XGyMszVwJx0Ku4=
Subject key identifier: D2:54:48:B3:F1:AB:D9:67:A6:0F:80:ED:AF:28:C6:91:25:59:4C:76
Authority key identifier: 46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96
Certificate issuer: /CN=464528d9080c665db0551d8ad8b0f71f7bb76996
Certificate serial: 0198D73BDD15DD306369B3F442DA9C2926CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 14:01:21 +0000
Manifest this update: Sat 23 Aug 2025 14:01:21 +0000
Manifest next update: Sun 24 Aug 2025 14:01:21 +0000
Files and hashes: 1: RO-2xcQ-C0WrDSJ7Eu00WY23rS4.roa (hash: Avrv1nDidaSbZAK1I64G61mkaNMT6r8igSyRsacO8hw=)
2: RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl (hash: o/oc0TVsCMdvYzKzLOv/qBVK4isDt4co9dEJtsGAis4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:dd:15:dd:30:63:69:b3:f4:42:da:9c:29:26:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464528d9080c665db0551d8ad8b0f71f7bb76996
Validity
Not Before: Aug 23 14:01:21 2025 GMT
Not After : Aug 24 14:01:21 2025 GMT
Subject: CN=d25448b3f1abd967a60f80edaf28c69125594c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a1:55:76:0d:60:ae:fe:6d:38:83:ee:e6:68:
9c:82:40:f5:fb:15:47:90:28:ba:64:1c:9c:a9:af:
88:e1:f0:32:22:ab:00:ea:c9:1a:28:2a:de:2d:be:
de:8d:27:a2:a2:b9:6c:59:c0:ad:6a:93:8e:5c:dc:
c9:5a:7c:0d:f9:69:a7:0b:e0:ed:c4:6d:9f:8f:53:
d7:ab:bc:53:07:92:0d:76:fd:e8:88:93:e1:96:6f:
72:3d:22:da:ce:69:be:95:5a:e9:73:3c:5d:62:24:
03:4a:c9:46:be:c1:58:16:88:47:b0:ac:ed:85:2a:
33:fc:a6:1e:0a:42:c0:94:e9:fe:2a:80:a1:75:29:
ce:7b:53:09:8c:22:18:7e:8b:1f:25:29:27:63:84:
1e:9c:60:af:7f:15:78:eb:5c:dc:7e:26:2b:14:ce:
e7:3b:03:f5:ac:e3:5e:d7:f4:17:db:23:42:ad:66:
41:58:9f:2e:42:3e:30:2b:ad:c1:8f:b5:74:00:ca:
37:85:2b:f0:08:bd:67:f9:e0:68:c0:11:97:72:e3:
ef:d7:e6:87:da:cb:94:fa:bf:36:e2:c2:05:f9:7c:
0b:bf:20:b3:76:bb:f4:45:a1:48:5e:0d:12:30:75:
7a:b2:41:ae:57:a2:44:94:2e:7f:30:4f:c3:d4:69:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:54:48:B3:F1:AB:D9:67:A6:0F:80:ED:AF:28:C6:91:25:59:4C:76
X509v3 Authority Key Identifier:
keyid:46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:dd:5b:5d:8e:2f:63:27:ad:88:70:c5:80:d9:c8:e8:bf:c3:
4b:d2:2d:01:e3:20:ed:1d:28:38:78:13:f4:1f:84:18:d0:9f:
42:f8:e2:22:b0:13:45:c5:56:dd:b0:a6:06:23:cb:70:05:9c:
68:20:4f:b8:08:9a:53:fa:ee:66:ed:b4:74:12:f5:44:02:ea:
4a:e9:29:0a:9d:75:44:da:bc:6b:34:20:d2:35:9e:44:f8:3f:
9d:ae:d8:8a:ef:59:8c:36:4e:f7:cf:92:e5:69:e6:69:04:34:
69:26:bb:85:6b:bf:b6:2f:7d:62:85:c5:a1:3c:a4:99:40:c6:
47:be:58:eb:18:60:28:59:f7:e8:79:4a:1b:2f:78:76:2c:1f:
33:65:c2:e5:d7:e4:1a:9c:57:12:5a:71:af:db:63:58:d8:25:
5f:4a:45:2a:94:e4:79:0e:a6:a2:9c:9d:35:55:07:4a:f2:d7:
3d:b4:b3:c7:2c:7c:43:5d:26:ea:b2:c1:64:df:92:65:98:75:
f4:30:74:24:4b:91:64:b7:f2:75:4d:a1:82:85:e0:6c:37:00:
ad:6a:04:7f:b1:13:de:75:b1:10:4b:42:3b:37:18:73:b4:f8:
61:42:ae:b4:60:5d:28:1d:d0:f8:85:13:63:3a:69:f8:e2:f1:
b4:27:45:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:03:36 2025 by rpki-client