Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
File: kR2gx6mUBcRrqthMudk-g0WZyOE.mft (raw, json)
Hash identifier: mM5Q+LVICOvdiBfKA0pmYc0hEfr6CVd72mqtbOkjZMc=
Subject key identifier: 3D:99:6A:57:26:8B:67:85:1B:40:65:A0:2C:AC:EA:18:C8:B8:E3:D1
Authority key identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
Certificate issuer: /CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Certificate serial: 0198D54E03EEEEBC6051534F22506BE2C45E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:01:56 +0000
Manifest this update: Sat 23 Aug 2025 05:01:56 +0000
Manifest next update: Sun 24 Aug 2025 05:01:56 +0000
Files and hashes: 1: EpBy5lEF1BDLVRWSQ7QWoN5zbUU.roa (hash: 1y3tSjFaZERbPwiKrhlP5/eJ5GlotVuhhvMAWtoaIrk=)
2: kR2gx6mUBcRrqthMudk-g0WZyOE.crl (hash: WauWtP8mMzRT1+y0uvSSp/s9QhTvjpO3WNJUHVrQANU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:03:ee:ee:bc:60:51:53:4f:22:50:6b:e2:c4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Validity
Not Before: Aug 23 05:01:56 2025 GMT
Not After : Aug 24 05:01:56 2025 GMT
Subject: CN=3d996a57268b67851b4065a02cacea18c8b8e3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:69:59:fb:8b:af:42:6d:09:fe:ab:e6:67:5e:
bc:b5:42:58:74:06:04:37:53:af:1c:ab:10:bd:ed:
4f:82:c3:d9:18:12:38:1e:85:9f:34:35:94:a0:0d:
b5:f2:22:0c:fc:66:68:1f:96:22:e9:3e:82:c1:be:
18:9e:32:ba:d2:bf:5b:a3:e3:0e:17:7b:08:3c:2a:
bf:62:fc:75:fa:69:60:7b:dc:3f:8f:a3:63:25:ed:
ea:0b:c9:5d:45:09:f9:ec:dc:6d:e6:4a:89:11:50:
f5:16:f7:d5:6b:09:35:01:c2:52:bc:22:3d:7c:d1:
ef:2f:33:de:3b:a4:86:71:e3:72:f5:da:58:8a:cf:
4a:25:97:af:5e:85:3b:eb:66:cd:74:79:91:c6:70:
bc:5e:a2:90:b3:df:d3:4a:53:77:cf:ad:4d:c5:6f:
99:2b:71:fb:4d:9a:7a:73:a6:17:7b:07:e0:c4:56:
79:10:82:fb:3a:39:7a:b5:77:44:0c:5b:1b:27:15:
fa:d4:5b:9c:40:2e:f8:88:e3:e6:e8:05:1d:7d:35:
08:c0:e4:30:6c:08:e9:4e:05:1f:67:0d:34:98:d8:
70:a1:43:81:93:c0:85:11:f3:ff:4b:26:d9:68:e7:
49:db:4b:71:97:12:a3:be:6e:79:ec:86:b1:77:0d:
9a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:99:6A:57:26:8B:67:85:1B:40:65:A0:2C:AC:EA:18:C8:B8:E3:D1
X509v3 Authority Key Identifier:
keyid:91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:10:e3:01:b7:d9:88:24:d0:24:e6:3e:e7:a5:5c:5b:32:01:
d5:55:ec:22:2e:27:47:0a:86:11:9c:c0:9d:2d:17:66:7b:8b:
11:fc:cf:45:36:99:c6:02:17:d6:5a:6f:3d:03:3b:15:2e:cd:
52:15:f9:fa:74:4b:00:6f:dd:a7:4d:eb:5f:5a:06:a9:43:99:
c6:9e:b3:0e:42:a5:e7:eb:78:b0:c7:3f:bb:ec:e2:14:7c:42:
75:95:db:f1:05:4a:bf:d7:01:52:e9:51:98:89:43:f7:be:e9:
96:ab:05:84:d5:8d:7b:f2:7b:14:44:f4:8d:20:58:76:8a:2e:
55:bc:89:d5:18:38:17:c2:17:26:d8:a8:f4:cd:1e:f3:f5:3f:
76:9c:5e:91:a8:ab:12:90:b5:39:91:44:a9:a7:b3:f0:f3:89:
50:04:f3:a8:91:90:a6:18:1d:7f:78:f1:9e:d4:5b:28:6a:34:
be:5d:d1:fc:e7:9b:48:af:2f:2f:22:d6:d3:0a:d9:6e:11:c1:
c0:21:d0:d0:a0:cb:4c:77:ac:7d:f6:34:c3:39:e5:d1:91:79:
bd:50:e9:5e:f9:a2:d7:36:c7:90:75:18:c2:66:4f:0f:61:2d:
5a:a9:b4:81:05:61:f9:e6:4e:6d:50:76:55:1a:c9:aa:f4:64:
b5:22:74:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:27 2025 by rpki-client