Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
File: klA6rxJq980DHKw84eOYwXS4LgI.mft (raw, json)
Hash identifier: Q8w3UGO/F4V/ysNNHTCyk4ra37h6mcAdnSdmGqh1AN8=
Subject key identifier: A4:B5:D1:F4:98:8B:36:32:EA:3E:5F:0B:E8:4E:6E:1D:42:22:EA:01
Authority key identifier: 92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02
Certificate issuer: /CN=92503aaf126af7cd031cac3ce1e398c174b82e02
Certificate serial: 0198D404BF4DF9EB56255BD29F43989277B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
Manifest number: 0DAC
Signing time: Fri 22 Aug 2025 23:02:17 +0000
Manifest this update: Fri 22 Aug 2025 23:02:17 +0000
Manifest next update: Sat 23 Aug 2025 23:02:17 +0000
Files and hashes: 1: LyKlqkZe1vL0FqTF3iiSvFK7hTQ.roa (hash: 2Vj99SsHB7IFNM1FIg40rxpKy12rqtdylkU9a0vtpMc=)
2: klA6rxJq980DHKw84eOYwXS4LgI.crl (hash: /puW2I52z92Dz74/SnDwWiwIgxVZ2c5wWugtjBBLTkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:bf:4d:f9:eb:56:25:5b:d2:9f:43:98:92:77:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92503aaf126af7cd031cac3ce1e398c174b82e02
Validity
Not Before: Aug 22 23:02:17 2025 GMT
Not After : Aug 23 23:02:17 2025 GMT
Subject: CN=a4b5d1f4988b3632ea3e5f0be84e6e1d4222ea01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:8a:b7:d3:40:35:2a:58:bd:21:0a:eb:68:
0e:d7:58:ba:54:9c:92:c0:29:8c:7c:04:cd:05:a5:
e1:65:21:5d:22:3d:b9:12:79:7b:50:9a:ca:5b:6b:
19:1c:2a:cd:73:fb:53:95:a7:c5:e2:e5:09:0c:ac:
1c:f4:f9:10:33:80:40:25:c4:82:80:c9:39:c7:9f:
ea:c1:3a:53:85:af:65:2a:3f:8d:6e:8b:ce:91:c1:
43:2b:f8:6c:b7:19:8e:23:aa:b2:c8:e4:9f:9f:d4:
76:d5:96:21:e5:2a:76:13:08:95:4b:45:d4:0c:0e:
f6:f9:5c:3b:14:9f:c4:dc:11:26:48:d7:c6:a4:bd:
33:c3:05:eb:94:6a:46:eb:b1:f9:21:d8:cd:2d:f3:
38:2c:06:59:24:4e:e2:ec:bb:bc:21:58:b6:12:76:
ff:30:1f:f2:9a:63:1c:4c:57:36:0c:d9:82:82:06:
e3:bd:90:cc:30:f3:ba:07:01:60:c0:c4:1f:80:4f:
1e:0e:a9:54:b0:12:f4:f1:1b:1a:2e:d9:ad:c8:87:
65:9d:0f:40:e2:10:d9:7d:16:b9:0f:93:42:ab:02:
98:21:96:6e:cf:3e:90:6c:56:76:fc:a1:f0:15:82:
9a:22:02:62:df:01:b6:4d:37:48:78:af:2d:af:f4:
af:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B5:D1:F4:98:8B:36:32:EA:3E:5F:0B:E8:4E:6E:1D:42:22:EA:01
X509v3 Authority Key Identifier:
keyid:92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:0a:54:65:9d:ed:85:b5:d9:33:69:c3:3a:d4:72:3e:05:9a:
4f:94:ab:f1:52:af:42:5b:32:07:37:ca:a3:9a:ed:a6:a4:f1:
f4:f3:3e:c4:13:49:cd:4d:07:a1:1f:d9:7c:65:a4:1f:ce:57:
7d:08:17:d5:55:57:8e:e7:91:25:e3:01:34:de:fe:4b:d7:bd:
65:37:9e:66:50:10:22:1d:88:b2:04:b5:89:d2:bd:fb:50:e5:
0a:ed:4e:d1:cc:c6:20:96:18:45:71:84:6c:4c:29:ed:e1:4e:
42:69:56:02:43:9b:0c:79:e5:9e:08:b2:6c:c0:3b:38:a6:3e:
60:8b:cf:14:83:e3:5e:35:3b:5c:09:39:7d:d5:ab:26:9a:c9:
82:c6:c5:7b:a9:cb:73:38:de:20:e2:52:eb:71:57:98:5a:c3:
62:5f:7d:85:e8:e3:a4:3e:5e:d4:cc:a6:23:a9:4b:83:72:fb:
0b:d1:ac:2b:be:b5:c4:cb:a3:64:36:f1:71:bc:b8:6f:04:cd:
01:e5:98:c3:33:f0:fd:9d:36:da:5d:15:71:7b:1d:41:3d:01:
c0:2b:b8:42:88:ab:48:0e:92:61:d9:92:d1:bd:04:35:ae:1c:
13:68:ef:66:bd:ce:27:f0:03:f0:37:cb:da:15:e7:fd:ac:c2:
1f:7e:43:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 04:00:45 2025 by rpki-client