Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
File: kTgbyWneatw9HdwOuJve6s6YBc0.mft (raw, json)
Hash identifier: wdqYaoR+IrCyL+L4dkmUygwCQW35Tm95qbJDez6UL8Q=
Subject key identifier: FA:4D:36:0E:AF:28:BA:9A:E7:F3:13:52:4D:2C:47:39:EA:9E:1A:27
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 0198D4E0AFD78DB917548B9AE705E808AAB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
Manifest number: 0A3D
Signing time: Sat 23 Aug 2025 03:02:31 +0000
Manifest this update: Sat 23 Aug 2025 03:02:31 +0000
Manifest next update: Sun 24 Aug 2025 03:02:31 +0000
Files and hashes: 1: REM4mLJG7EnsBgBtsv162D0wKhg.roa (hash: lvlcTJIeXHpqeTqGfZTwiMwS8+bWAY5YDqELcR5epC0=)
2: Tkqht9ZvM7aeuWPx5RB29sIJQsY.roa (hash: GjW60rpkATBwTZcA2wdYPAVMSlJOCTBR0jsl1OrgYgE=)
3: XddNSlbeSdL2BDOBSBtXKwmbrLQ.roa (hash: YTwv2DMMu/UpDiaZkqxeVtYaDul2+Oka8KEh6z36NkA=)
4: b10-uyzSDsE84X1NxkfqXsdCqjM.roa (hash: 656/1JM/Gtv27/XvapYOtDJ81ebQFKIEF9n9ARvTwoo=)
5: bXzPu6L2HXchD9ZujQmLXPM_bDM.roa (hash: KqR406WMI/nRws1aNrGcGP+z2vKLl1H8bxnYaFt2+LA=)
6: kTgbyWneatw9HdwOuJve6s6YBc0.crl (hash: 5vCm8kH7+/KiVJBTIdikAYEOm4tgRsgs6dYLxMez+5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:af:d7:8d:b9:17:54:8b:9a:e7:05:e8:08:aa:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: Aug 23 03:02:31 2025 GMT
Not After : Aug 24 03:02:31 2025 GMT
Subject: CN=fa4d360eaf28ba9ae7f313524d2c4739ea9e1a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:5f:35:c2:c8:35:e4:ac:40:8b:64:71:fd:
f5:5c:6a:67:4d:33:b8:db:b5:0c:a4:9b:73:9e:a1:
b1:97:05:db:3c:ea:79:0b:bf:96:78:69:60:a5:31:
65:88:d5:8e:36:10:44:e2:a5:98:8e:a4:01:bd:ac:
fe:ea:d8:43:93:59:6e:c1:68:b8:79:e5:cf:a7:5d:
8c:d0:fa:30:5f:d9:0e:d1:7d:d4:46:db:b0:9d:01:
35:65:bd:3e:44:c5:1e:12:81:36:22:64:07:23:7b:
ec:dd:55:b6:13:db:7e:5c:ea:7f:8c:a8:cb:df:f3:
b0:d4:f8:cc:0f:6a:fd:ee:11:7e:7f:6f:f6:37:2c:
f1:d3:98:f7:c2:63:f1:04:90:71:8d:7d:14:57:6e:
64:d7:d5:ff:a0:e2:09:23:0c:84:89:5f:ed:6e:6f:
0e:d8:48:50:dc:7b:27:60:4e:95:ea:14:5d:91:70:
9a:a2:c2:f6:44:46:89:1f:e1:e5:25:94:27:ca:5e:
dd:e6:9e:2a:77:69:b6:0e:2f:0f:09:82:c5:af:b4:
bb:b4:f5:db:da:4d:9f:3b:07:e9:aa:d6:6d:6d:ac:
f5:2a:a4:f4:5a:c5:87:96:4f:09:8a:b6:3f:b8:25:
a9:22:ae:a1:28:e3:2e:5d:43:90:f3:db:0c:2e:c8:
8b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4D:36:0E:AF:28:BA:9A:E7:F3:13:52:4D:2C:47:39:EA:9E:1A:27
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b6:4b:b3:f4:de:9e:0e:1f:d5:f1:f4:98:e1:2f:14:aa:f1:
8f:5e:7c:43:59:ad:82:f1:d6:a4:d8:60:55:11:4d:64:19:75:
24:74:95:4d:ce:e7:a0:38:8c:81:45:1f:84:d0:f5:14:d8:03:
52:21:41:66:95:10:2d:d8:21:e4:dc:fd:a4:70:73:f2:92:ce:
b4:0e:74:51:bd:de:39:28:c1:cb:46:8e:fd:92:e1:4c:41:86:
56:67:af:d2:1a:34:47:1d:66:20:0c:f8:c8:92:ce:b0:d3:80:
03:68:ef:bf:06:ea:a0:b4:a1:0b:0c:d3:4f:c0:fe:62:a5:fd:
bf:de:24:23:7d:7b:05:73:8e:b5:4a:46:14:a1:81:75:f6:67:
3b:99:9b:29:36:2d:a9:e5:80:0f:ec:c5:b0:c7:b0:47:1c:a6:
cd:17:60:ea:ad:5b:13:18:42:58:26:34:20:79:d3:7c:de:93:
75:4f:43:0c:67:1b:55:3f:6e:9d:d5:e1:a2:3b:f5:1d:c8:2b:
df:70:bb:97:76:6d:2e:f8:d2:83:00:1c:3f:65:8d:96:ae:c3:
dc:04:bb:be:94:6f:f7:98:d9:2d:46:df:64:ef:2b:e7:69:92:
9c:db:96:b8:2e:da:37:0a:44:32:c1:01:4a:8c:a2:60:8a:04:
5e:3b:b8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:24 2025 by rpki-client