Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
File: kYkBZiqOxf9NP0jSkJkjCgV17Io.mft (raw, json)
Hash identifier: Mut431LDj6IWZRIyMdV+uKbvPQKykXfiWmOz64gy3qI=
Subject key identifier: E7:9C:D3:46:40:62:4A:B4:EC:DA:17:8B:9F:E9:E2:07:28:6A:8A:F8
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial: 0197CA94E0A6DA5CCFD7F109776B441A4B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
Manifest number: 0ECF
Signing time: Wed 02 Jul 2025 10:00:43 +0000
Manifest this update: Wed 02 Jul 2025 10:00:43 +0000
Manifest next update: Thu 03 Jul 2025 10:00:43 +0000
Files and hashes: 1: GWLdQp63HdvOf4msAVGTJwa7Pc0.roa (hash: lF9IocpGAD+RCCazxV1bkIzHwzFIWOektkqyFGjVilw=)
2: NXDT_tx5Vl2oHF11vBi6wOJ0LL8.roa (hash: 5chLz8e80WncT0K4TRUx46Jx2KFlA/OouooGEChtx14=)
3: ZcvBTfoXIkdWjCXtigYCRkxwU_E.roa (hash: OrUuvu33nOrNM9H7GJKTSRXbyuxdfvDLNi4s7scTDWk=)
4: kYkBZiqOxf9NP0jSkJkjCgV17Io.crl (hash: pjLQjxn56EAXslA0jsC7TOLeEyKxmMVjL4vXzPEawQ8=)
5: r816-sGxaSURDTSpC0B66tGRbZs.roa (hash: Cpfj6jfuACJLukpFk9QhkAV4pZmQtjlQ3iLHO8mpk3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:94:e0:a6:da:5c:cf:d7:f1:09:77:6b:44:1a:4b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Validity
Not Before: Jul 2 10:00:43 2025 GMT
Not After : Jul 3 10:00:43 2025 GMT
Subject: CN=e79cd34640624ab4ecda178b9fe9e207286a8af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:6c:42:34:63:3c:5c:c4:51:34:d4:95:66:
4a:94:dc:75:7e:9a:bc:c1:54:f2:8d:11:96:6a:f3:
d9:a4:e5:4d:10:82:6a:86:91:b2:05:c0:46:0d:ed:
0d:18:18:42:bf:b0:ad:48:7c:7d:fa:04:26:34:28:
5b:90:35:08:3e:19:10:ec:91:b0:32:03:91:f8:fa:
00:86:9e:74:ad:14:f8:00:60:24:18:81:cf:9e:d5:
a9:da:83:4f:98:47:86:ea:0a:ef:ce:66:75:8a:49:
c1:b7:9f:3f:8d:59:69:b0:9e:f3:59:0d:62:30:61:
7c:1b:55:05:3b:e6:f2:84:23:7a:ad:8c:29:fd:f5:
19:8e:55:2f:60:eb:43:05:af:72:71:b6:35:3b:c7:
4f:a3:91:ba:57:71:2b:47:93:0f:7c:a8:80:09:09:
07:39:ae:d7:16:1a:f7:be:7e:0e:7c:a1:73:88:62:
72:7c:1b:ed:8f:eb:8f:f7:fe:f5:f9:9b:7f:8f:bf:
1c:ac:49:60:5f:97:83:55:af:9d:47:63:64:4a:e8:
ed:cf:6f:fe:da:d8:98:23:c9:f0:95:5c:3d:4c:43:
52:ba:c2:9f:81:68:fc:b7:a5:8f:3f:db:49:a2:6d:
31:b0:35:17:18:0c:e2:b5:df:ba:b0:06:d4:e9:7f:
50:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9C:D3:46:40:62:4A:B4:EC:DA:17:8B:9F:E9:E2:07:28:6A:8A:F8
X509v3 Authority Key Identifier:
keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:12:04:95:82:81:b5:16:c2:ba:74:23:7d:b2:66:11:23:ed:
66:6f:de:d9:28:5e:19:f9:0a:b7:6e:d7:a9:cd:e1:2c:5f:fd:
ce:d8:cb:6f:8d:9e:ff:15:60:67:52:b3:a0:1c:f4:1b:d8:75:
ba:7c:f2:db:c5:12:66:d5:00:3d:37:90:d8:17:0c:54:7b:68:
c6:40:74:fb:2c:b8:28:06:dc:a6:9a:d6:9e:c8:24:4d:6a:3f:
3f:f4:a8:c5:e3:e5:30:58:d3:93:7f:ae:0f:a5:c6:c6:c1:5e:
3d:16:52:9d:0f:62:3b:2c:24:a2:f1:58:9a:ed:16:bc:f3:cf:
c5:7d:88:81:86:74:42:fc:42:bf:0e:7c:f4:f7:c3:a3:03:8e:
70:3a:80:83:04:b2:b3:b0:b2:bf:8a:b5:c0:63:6e:ef:00:9d:
ca:ca:c5:98:a8:d2:3c:e2:47:33:96:ad:14:5f:78:03:88:93:
fc:2f:0f:c5:fd:d5:32:3e:2d:61:e5:6a:d7:dc:9c:f5:3e:98:
ed:01:10:42:16:98:38:23:17:3a:f3:96:c0:7b:d9:37:65:e4:
d5:9b:30:5d:6d:21:e5:ae:8e:45:f5:14:15:a4:b7:07:03:04:
20:6c:e8:20:b5:8a:b6:ee:e0:e9:4d:1c:b2:81:11:a2:e4:bd:
59:b8:68:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:12:10 2025 by rpki-client