Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier: drwQsKKGurmshGRhm3shbnfZPEgOohbFNGcVfH5FAys=
Subject key identifier: 99:5A:8B:D8:16:27:BD:C6:7D:B0:31:C6:AE:C9:09:A8:F4:B0:DA:67
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 0198D66022CE2E3EA0BAB8912102E0931F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:01:21 +0000
Manifest this update: Sat 23 Aug 2025 10:01:21 +0000
Manifest next update: Sun 24 Aug 2025 10:01:21 +0000
Files and hashes: 1: deIOkmJ8ssMd2RwtI-v-jMre1M8.roa (hash: 1DQjFOIdMCv4n8BARwPWSteFX1+/0FvbC04tqMoZb0Q=)
2: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: dXYXWovDIM5n9WVjAGYlVz4q1/NfoGP9OJ/BCXRWlOM=)
3: pNxIm0SmH7kBUMbare2mFQXDHOk.roa (hash: FL47b2q1GAJAcT+EDiWHDQ+iV/Lo12DMIiUY1wrMTeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:22:ce:2e:3e:a0:ba:b8:91:21:02:e0:93:1f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: Aug 23 10:01:21 2025 GMT
Not After : Aug 24 10:01:21 2025 GMT
Subject: CN=995a8bd81627bdc67db031c6aec909a8f4b0da67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:48:66:03:4b:92:1a:61:27:df:46:6b:9d:
57:7d:68:fb:14:5c:e1:22:f5:c0:3e:ef:f8:a2:d7:
0e:21:a8:a6:0b:28:20:ea:98:85:1b:e3:cd:55:83:
96:80:f4:c1:89:e5:79:c1:16:91:d8:4b:49:69:a4:
8b:73:6f:70:58:c7:7e:6e:e0:92:3e:97:78:a0:64:
95:12:4b:ce:cc:10:d3:69:d9:20:20:0c:99:9e:71:
79:f5:81:f5:e3:22:82:74:59:e7:6d:ba:1f:e1:48:
6d:36:d9:d7:11:d5:d8:e7:c2:b5:60:1c:a1:c2:e1:
02:99:5b:b5:ab:d6:ff:d9:2d:cd:cc:a5:d0:1c:b5:
af:5a:71:a7:9c:f2:2b:9f:c8:ff:0e:8d:e3:97:c4:
5f:a0:2a:a7:3d:f5:6f:99:f7:4e:e8:58:ca:4d:e0:
72:8d:cd:c0:93:d8:0f:e0:76:2e:94:69:2d:2c:af:
00:24:c3:24:c0:f2:84:cb:c5:49:89:af:13:16:41:
30:9a:95:1c:38:59:6b:65:84:3e:b6:75:db:15:72:
7b:95:61:de:4e:d0:94:5c:39:b7:c1:1d:3f:e2:d0:
4d:a2:d5:7c:18:72:7b:84:b1:89:b9:f4:19:4e:64:
5b:e5:a8:d1:59:df:6c:fa:1c:a8:d1:9f:cb:ba:5a:
dd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5A:8B:D8:16:27:BD:C6:7D:B0:31:C6:AE:C9:09:A8:F4:B0:DA:67
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d9:ae:12:de:75:eb:d6:e5:55:6c:9e:31:e7:db:1b:b4:4f:
e4:7c:fb:06:a7:a5:1a:32:3f:c7:31:fd:c5:19:45:82:b1:fc:
c0:20:f9:8e:8e:38:db:19:ad:8d:3f:22:fc:26:ce:0c:c1:23:
0a:19:46:71:e2:15:8c:de:1f:b1:a1:31:f0:75:d3:75:48:a0:
00:7e:70:19:d0:92:22:6d:f8:2d:c5:c8:31:31:c2:dd:a8:d4:
d4:f8:b7:31:b4:c1:48:25:d9:25:77:84:19:f6:5a:10:dc:e4:
e6:94:9f:ea:f6:31:6e:f4:bd:3b:51:62:b7:20:e1:56:2e:59:
a4:6f:fc:ab:66:8e:ac:ed:3e:50:93:32:22:cc:cd:ce:97:16:
52:8f:b9:7b:cc:4d:2c:be:2b:9c:d5:92:c1:81:ec:a7:77:79:
bb:c3:fc:e8:c8:ac:97:ba:20:6b:cb:3b:17:97:80:08:12:7c:
89:c6:b8:3d:ad:9a:79:2f:ea:d3:75:43:96:54:a4:c4:6b:89:
f0:9a:49:52:10:c6:b7:fb:c4:7e:74:80:4d:be:ab:9a:8e:81:
ba:84:b0:d6:ba:6c:6e:f7:49:2d:1c:96:cb:92:90:0a:80:07:
be:35:92:75:5c:a3:78:e9:d9:de:1a:95:6b:20:ba:f4:e8:93:
c0:07:e1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:55:05 2025 by rpki-client