Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
File: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft (raw, json)
Hash identifier: C27uisPOn8Qb/lhjXGlB5ppWDgU1tgobddximdkuIOA=
Subject key identifier: 4E:7B:02:AB:D1:6F:65:F8:3D:EF:16:39:1F:6C:08:F4:46:8C:5E:BE
Authority key identifier: 93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
Certificate issuer: /CN=936cb336c1beb71d4fbbaae243b23352c6270061
Certificate serial: 0198D9CE5EA3BD541587D27BF7EC2DB3E0E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
Manifest number: 0EA6
Signing time: Sun 24 Aug 2025 02:00:36 +0000
Manifest this update: Sun 24 Aug 2025 02:00:36 +0000
Manifest next update: Mon 25 Aug 2025 02:00:36 +0000
Files and hashes: 1: 77Da0cUu_C8djIEncMxzodElOpE.roa (hash: O6xd7yyxwxYfy10toui/N1cFeV/zSXBxnL9OigcdZr0=)
2: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl (hash: WimhuyKDFCibH0PK5Yv19hq/usDTw1BOshajfNSPhio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:ce:5e:a3:bd:54:15:87:d2:7b:f7:ec:2d:b3:e0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=936cb336c1beb71d4fbbaae243b23352c6270061
Validity
Not Before: Aug 24 02:00:36 2025 GMT
Not After : Aug 25 02:00:36 2025 GMT
Subject: CN=4e7b02abd16f65f83def16391f6c08f4468c5ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:18:cb:9e:4a:ab:5b:0a:ea:91:ec:65:bf:58:
28:83:29:bc:00:d5:5f:d4:53:e8:c3:fb:e6:59:34:
e8:79:c2:84:c2:6c:dd:9d:d6:63:0e:3d:58:f2:70:
95:32:9a:72:af:42:f1:be:30:09:87:a6:26:b3:c8:
a1:95:33:d1:9f:b6:21:ca:ad:46:dc:ca:2c:36:07:
72:40:00:f0:fe:15:2d:e9:4f:86:04:e3:d0:f4:85:
05:2c:7c:00:c4:da:d1:59:00:51:19:c0:03:23:0a:
9b:bc:11:5f:49:8a:45:3e:8c:82:88:60:dd:27:51:
4c:81:2c:03:74:41:de:85:9b:30:d1:1c:fa:21:ee:
8c:8c:e6:e8:bf:aa:49:e1:fa:fc:e1:aa:49:50:f2:
96:06:57:6e:0e:64:e4:64:62:5e:db:65:eb:dc:43:
38:6c:de:ae:c1:e2:6b:64:33:0e:47:ed:b4:61:14:
a9:88:50:e8:98:32:cc:2d:66:91:33:5d:00:09:c2:
73:24:52:df:d9:80:bc:8e:32:11:5b:c5:37:e5:a9:
5d:e4:60:ff:ad:41:41:b7:af:91:6c:de:31:31:bb:
52:92:08:d0:6e:b0:b5:3b:85:ab:40:36:31:bd:6b:
90:bc:63:ca:1d:57:71:f3:fa:bb:94:f5:0f:f4:31:
e1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7B:02:AB:D1:6F:65:F8:3D:EF:16:39:1F:6C:08:F4:46:8C:5E:BE
X509v3 Authority Key Identifier:
keyid:93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a0:7e:d7:78:8a:93:3e:1d:5e:18:0e:80:c6:f0:3d:10:01:
f3:b9:cb:bb:88:bc:ab:f5:04:e4:1e:c7:cf:88:5c:08:41:0f:
2f:1c:fe:45:b1:0a:2f:7e:b1:5a:4c:a0:26:90:94:c6:9a:b7:
14:84:01:b0:55:c3:ab:76:7e:a6:62:f0:61:e9:32:3c:36:f4:
ad:15:3c:49:c8:d6:26:a1:f0:57:06:2b:cc:2b:e7:48:50:e1:
b5:d4:1a:f6:a5:2a:96:f4:f8:1b:0d:1e:19:1e:dd:01:a1:15:
ea:69:4d:7b:7a:c8:f9:57:2b:b3:7a:e8:e1:a5:5e:65:ca:97:
50:60:b7:bb:d4:99:36:4a:76:b7:fc:f5:cb:4d:74:d6:84:41:
c8:38:08:79:4d:74:52:ec:f6:fc:70:d3:bc:97:76:6c:d8:e3:
ff:56:92:16:5a:0f:d9:32:b0:b6:57:67:22:e5:4f:28:4d:82:
28:ca:1e:cc:e9:09:53:ef:38:d8:14:19:61:d4:84:93:fa:4c:
d1:32:58:34:72:d7:0e:58:fc:e5:13:89:a9:55:4b:b6:a1:70:
c5:98:9a:56:f1:cd:eb:0d:e9:c8:7a:5f:c7:e8:57:a5:3d:c8:
7a:0c:7c:c8:f7:06:ea:6f:fa:70:fb:37:77:19:2e:64:ed:fc:
c2:f3:41:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:27:14 2025 by rpki-client