Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File: klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier: alyifPbmgNcGTKAGKbd9vJGjrSoG8f5o0o486F6iAGM=
Subject key identifier: 0F:16:E2:29:7F:04:D7:DB:87:AA:18:47:6D:5D:43:29:D3:B4:0E:5C
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 0198D6980AE20181ABC2D3A1C7911CDB4717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 11:02:25 +0000
Manifest this update: Sat 23 Aug 2025 11:02:25 +0000
Manifest next update: Sun 24 Aug 2025 11:02:25 +0000
Files and hashes: 1: 7U4mLLCZOK9jPZHgW6zPsanLT3o.roa (hash: zZ/3JaVashrdH1tPBAExwSunuDftYH55jv3g8RDnCrA=)
2: kDuhU048DTixv805ND5N0u_g9CE.roa (hash: XMPtRafhUHkyRUyzV4cxQSEk7ukN2f738Fahel2JBqI=)
3: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: 63x5huQGgKpkXospLWT4ZxNETxOwnGgRsoiXd19iivY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:0a:e2:01:81:ab:c2:d3:a1:c7:91:1c:db:47:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Aug 23 11:02:25 2025 GMT
Not After : Aug 24 11:02:25 2025 GMT
Subject: CN=0f16e2297f04d7db87aa18476d5d4329d3b40e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:c8:10:b6:7d:29:50:da:44:b9:41:12:2f:
0c:b4:c7:b7:1a:25:5c:7f:f2:26:44:cb:45:ff:b9:
2b:16:ce:5d:e1:4e:4f:d5:9f:9e:83:65:ca:46:7c:
0c:d8:fa:c5:10:b3:a1:48:67:c9:72:79:09:d5:cd:
3c:b9:54:3f:ca:14:7b:96:75:11:29:b5:fa:67:7c:
20:fe:3f:2c:95:3f:ea:2f:89:55:9c:99:9e:8b:43:
92:d2:9c:ab:58:2e:b3:8f:3e:fd:04:24:b9:b6:fa:
a9:b9:d6:fe:93:29:59:1d:7a:08:38:20:da:77:f5:
92:f4:b6:ec:7e:3c:1d:84:73:31:39:b9:72:9b:eb:
dd:bc:59:8f:aa:e3:ae:f9:0d:0a:2a:67:27:d4:83:
a6:b8:c1:81:cb:ad:8f:40:54:bb:20:e0:92:6b:58:
b9:c0:80:b5:2e:ea:ff:9e:09:d7:df:9f:0f:db:c9:
4f:d7:24:92:a6:3e:92:29:3d:d1:b7:1e:ed:f2:72:
3d:52:c8:f7:4a:14:17:69:1e:50:0c:1f:46:fd:15:
8d:c8:37:19:a3:68:8a:79:34:ab:3e:37:17:62:ca:
25:62:34:e2:49:6f:92:13:84:04:af:6e:cd:1c:ab:
f8:be:fa:94:55:ee:b5:d7:7a:77:5e:c3:ed:d9:b1:
2f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:16:E2:29:7F:04:D7:DB:87:AA:18:47:6D:5D:43:29:D3:B4:0E:5C
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:11:be:bd:d7:6d:bc:45:96:36:e6:81:7d:c3:a8:02:e5:f0:
52:12:ad:48:d1:f9:c8:53:f0:7b:4a:32:12:64:ae:e2:c4:c5:
8a:d8:27:49:43:e6:9d:4b:65:7e:3c:fe:86:8c:64:99:b7:5d:
cf:c5:de:72:52:a2:96:04:9c:4e:d0:90:7f:06:5f:26:d0:f2:
18:29:86:9b:4e:48:07:92:09:b0:91:dc:90:df:9f:2c:85:6d:
de:23:73:34:24:c0:4a:93:16:2a:2c:f3:a3:cb:c8:7e:c3:71:
d5:2e:03:f2:fd:c2:59:0f:66:e7:61:a8:ca:3a:63:78:1f:be:
f3:11:d8:e6:06:8f:a6:03:c7:dd:90:4c:cb:64:ae:57:09:4c:
83:f1:75:ee:c0:90:67:a7:6b:3c:87:f7:07:90:d9:11:ad:bd:
9c:46:76:5c:cb:00:9e:40:f3:39:45:3b:e7:47:3b:c9:83:78:
1c:0c:a5:1e:1c:77:f8:28:27:bc:ee:78:b7:dc:de:dd:7c:12:
bc:ab:68:e8:d9:65:c5:9e:49:f3:5a:ff:1a:c5:60:64:41:d5:
78:b9:a5:f1:5b:46:2c:63:8a:6f:2b:10:8d:5d:83:ab:90:6b:
9e:fb:81:cf:e0:da:0e:2d:90:5a:c3:24:02:e2:da:3b:4d:26:
84:68:17:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:53:59 2025 by rpki-client