Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
File: kLihVGbD_x6RXXgKELC6qa1pSGA.mft (raw, json)
Hash identifier: 8MZxuObxif34fv4tLRegPKa6OaaUFJU1q+2dPEcWQLE=
Subject key identifier: EA:44:5B:01:34:A3:C5:01:17:3F:37:23:92:3F:8D:27:DD:27:2A:48
Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
Certificate issuer: /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Certificate serial: 0198D5BB82F1D8AABE96300FE8082ABBFB14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
Manifest number: 15AB
Signing time: Sat 23 Aug 2025 07:01:32 +0000
Manifest this update: Sat 23 Aug 2025 07:01:32 +0000
Manifest next update: Sun 24 Aug 2025 07:01:32 +0000
Files and hashes: 1: 1-6txeQs5g_33zuSjTCgOD4iIjGM.roa (hash: 0QhFC81+fO/ZdvCBfNNwnivS3ThqNHOEWwldyX4zRQQ=)
2: IBhlETgYaERfbB5CiLuY_-0qwMc.roa (hash: 5ejOqhZOZxTv95HyIIIT8jej3tcquGQMs7iyHCKL42E=)
3: SEMQLfPoFtmMG9uMdSXJeyNo3nk.roa (hash: ZD2o8n/XFRcCzyhjjBouPx+0N/ySWQHovrDaz6PBT8Q=)
4: kLihVGbD_x6RXXgKELC6qa1pSGA.crl (hash: lNoBtBvTtE2NPGnLD77xAfqUuyhwhvbcEQBVwHxnAI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:82:f1:d8:aa:be:96:30:0f:e8:08:2a:bb:fb:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Validity
Not Before: Aug 23 07:01:32 2025 GMT
Not After : Aug 24 07:01:32 2025 GMT
Subject: CN=ea445b0134a3c501173f3723923f8d27dd272a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:66:ac:a3:1f:98:e4:15:44:84:77:df:46:
8b:b9:e0:0c:c7:22:5e:de:30:84:16:91:ab:1b:60:
e9:f8:02:fd:e2:45:3b:d7:aa:03:d4:e0:92:41:1e:
f0:8b:e9:4e:31:8b:a4:32:31:ff:47:40:05:74:c8:
c4:d8:56:de:1f:66:8d:b4:02:66:53:8e:2f:09:4f:
09:d5:5e:24:e6:1e:49:7e:05:08:cd:2b:72:9a:cd:
c9:2b:e2:cf:7f:67:19:7e:97:00:c5:80:90:ad:a9:
62:1c:11:a1:1f:96:b2:ec:76:95:c1:b2:0c:d2:e4:
0a:a7:cf:a2:09:b3:34:4e:af:5a:51:5d:bc:e5:ff:
51:01:1c:c7:2f:8c:43:98:01:fe:fa:53:17:08:46:
68:8d:c0:ef:ed:67:41:db:72:7b:9f:44:11:6d:39:
ac:e0:f4:bf:f8:2b:f3:01:b8:e5:b7:61:32:d5:b0:
d4:1e:68:59:fc:92:ad:60:ce:56:91:b6:15:9c:67:
92:db:33:b4:0c:14:ce:51:e0:19:e3:d4:f6:ff:94:
9c:4a:91:d7:11:83:87:4c:db:6d:c9:12:33:b9:18:
0f:79:b5:3b:96:14:d7:2b:79:81:19:a4:63:77:e8:
eb:32:a4:70:7d:55:9e:03:cd:c7:4b:cf:58:a9:ea:
aa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:44:5B:01:34:A3:C5:01:17:3F:37:23:92:3F:8D:27:DD:27:2A:48
X509v3 Authority Key Identifier:
keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:27:c1:6b:14:0d:49:59:62:f5:05:e7:4b:c9:94:43:8c:7d:
19:ce:94:bd:34:19:df:f4:53:5b:f0:3f:5c:0e:1c:ce:62:b4:
fb:56:be:3f:13:fb:cb:04:2f:86:34:ca:da:22:b9:f5:cf:b0:
b1:0d:37:72:66:b2:0b:6c:e5:5b:c4:35:fe:e1:b8:46:cc:d7:
b9:0b:7c:fc:29:0e:bf:3a:c0:ad:f3:7d:f2:32:89:3e:53:6d:
94:43:7b:7a:ef:39:7c:c4:f1:20:9b:d7:43:d7:d0:e4:09:72:
88:05:4c:97:54:4d:cb:75:f6:07:7d:2b:22:4f:35:ec:87:8f:
02:75:40:60:83:59:3e:76:78:de:8e:aa:d4:09:5e:cd:40:66:
16:f8:e3:ab:7c:e0:a2:02:6a:5a:5f:dc:d7:5b:d2:d8:39:d2:
5c:6d:05:88:73:06:73:73:24:8f:4a:52:ed:62:b3:37:40:9e:
7f:85:ee:dc:7d:bb:ae:d8:80:40:ca:58:1e:3c:1f:db:c5:38:
ad:81:98:1f:00:da:01:50:fb:e1:49:5c:09:07:39:4e:d6:18:
ca:e6:dd:0f:fb:b1:7b:5e:e7:6b:62:47:f2:c7:b8:2c:5e:dc:
57:c3:6b:e6:c2:12:a0:18:9d:fd:23:e8:0a:28:11:99:b0:05:
2e:85:15:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:57:46 2025 by rpki-client