Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json)
Hash identifier: fVKr0W3qDsJJdzCP3OhPlfEn8xKTakTkAGQ8l0h8f7Q=
Subject key identifier: E9:B3:43:83:34:0B:E4:E2:38:6E:EE:00:B7:B0:68:A1:37:DC:36:96
Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Certificate serial: 0198D9600610237735EC5A165A719764892F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
Manifest number: 1651
Signing time: Sun 24 Aug 2025 00:00:05 +0000
Manifest this update: Sun 24 Aug 2025 00:00:05 +0000
Manifest next update: Mon 25 Aug 2025 00:00:05 +0000
Files and hashes: 1: 0-pROOQXTsOCMh82qmUXoNFs4FE.roa (hash: 0vaU6zj0/sOrHvzQbJoSj9Sg3MRWFQ3zNRXZe2vIoxM=)
2: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: xibnIDomIiXnUNCo8rwwKftppDszTSAXo3vznlPNRMI=)
3: 2Cx8NesV2FgXdhnelF2G7i5Bybw.roa (hash: 8z2f0ixyt/V0YgUez4ATct6QO89AWHzLa+ZNoGbwCzI=)
4: 8YGP0hkU08CaSTjLusnYfNoY0P4.roa (hash: jWZuJOzMx9s5Np/gPv2mn1+ybL0gZ2yjh5jQEUREZ9U=)
5: MQiGNWbAlQR27bMbQEHKZB--EhI.roa (hash: AiFihDDBAGIMVUfPOtlJJbKjEh0jiKhW/hNN55RabQ0=)
6: g4GRCAwu2q3EL-X1WL9RVrJbAQI.roa (hash: slCTgIDY8YfOpbaBmeIbIqftrjDIQWNh6XUk0mKIj7o=)
7: i6OZnwSC6Nlsenhf0tdXitkE5-w.roa (hash: W6vwLHJCt+ThAPP53KTcgutvWVLILu8jqOoeNXpZV58=)
8: nFpp1sOKP4UepGIUoHswLN2IbRI.roa (hash: Ttm+Uf2laDwHJ/wFsX6jTAwI0vmckT+FtwvtYdaFusE=)
9: vYCLX9lBA7ZtzSrFDp94A_tt6ys.roa (hash: YmvWA4cqMB8VZpWwYryqd/wK/81/N7wIyQFXaVwROW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:60:06:10:23:77:35:ec:5a:16:5a:71:97:64:89:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Validity
Not Before: Aug 24 00:00:05 2025 GMT
Not After : Aug 25 00:00:05 2025 GMT
Subject: CN=e9b34383340be4e2386eee00b7b068a137dc3696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4b:7d:b3:e8:84:ee:4b:3b:8f:a7:b8:d9:41:
2c:06:37:0c:ba:0a:a5:26:84:55:aa:85:0b:db:28:
d9:8c:f2:a0:14:72:ee:8c:0a:91:72:5a:4d:e9:fc:
b6:ff:ea:3b:db:79:11:cb:97:e7:78:8b:e6:5d:f9:
fa:7d:87:e5:42:b9:d8:73:65:19:d3:3a:4b:12:9d:
55:4b:e6:a8:2e:77:2c:81:fc:5e:74:ee:b3:6b:fc:
fb:0e:8b:56:1c:de:1c:de:4e:28:7b:87:ed:69:88:
98:be:a4:9e:b2:77:bd:88:8d:b4:eb:15:1b:ce:91:
50:6e:b7:4e:73:7a:f8:84:1d:a8:2c:52:24:3a:db:
b2:b6:18:81:ef:2e:ef:a5:03:4c:72:95:cd:46:a1:
d8:d2:c9:9c:00:e2:68:e9:28:3d:f5:8f:21:0e:5b:
51:d6:b2:6a:6b:72:c3:cd:a8:de:ae:52:a7:64:f7:
6a:3b:3d:9f:bf:67:2b:0e:99:eb:46:c5:08:a5:3a:
55:99:32:ad:74:b8:db:0d:b4:c0:43:db:3d:b8:3c:
f3:bb:3e:eb:1c:09:a1:54:e5:e5:50:cf:6a:f5:03:
91:08:7c:95:24:19:0b:7c:76:a6:2f:38:f0:ee:d2:
93:a2:b5:6d:95:6e:36:ce:20:b1:4d:54:90:d3:47:
00:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B3:43:83:34:0B:E4:E2:38:6E:EE:00:B7:B0:68:A1:37:DC:36:96
X509v3 Authority Key Identifier:
keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:25:7b:78:6d:9c:4b:c8:a1:02:67:79:67:6f:b4:f2:24:af:
ff:73:9c:56:4a:d3:53:63:f5:7d:40:f6:8f:51:c0:8c:10:93:
22:f3:f2:a4:c3:d7:b0:fe:77:38:9f:90:b3:57:60:be:22:03:
43:a4:6c:66:e9:73:84:a4:55:65:e2:4c:47:a3:7a:fa:54:2e:
dc:b5:53:1a:6e:5e:7c:28:84:f3:55:12:b5:cb:e0:fd:c8:4b:
a7:ff:e5:be:19:64:da:a6:c0:e8:aa:1b:d9:e8:af:5a:23:4f:
9c:af:fe:cf:eb:73:15:59:73:0d:0f:5d:d4:ab:df:01:d2:dc:
c5:99:96:a7:e8:c4:0a:b0:84:eb:c2:78:ea:2d:19:54:1c:0c:
e0:29:fc:3c:79:f1:e7:a8:50:61:32:1a:e5:39:23:3d:25:57:
d8:46:91:0c:02:ec:17:1c:67:df:84:87:a8:e3:7d:63:05:02:
a6:95:73:35:90:87:e9:52:a4:26:a7:5a:68:de:94:1c:f8:c1:
83:e6:ab:f6:8e:e5:db:14:a7:4f:9c:72:44:e5:88:3e:09:97:
12:c7:8b:67:e2:8f:f5:3d:0b:20:23:1f:ad:bd:4a:1d:01:41:
b1:75:b8:f7:39:e2:94:83:a1:cd:b4:7c:51:2d:ba:f8:e9:f5:
60:39:4c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:02:58 2025 by rpki-client