Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
File: ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft (raw, json)
Hash identifier: nK539epVBnCxBVBk0VkgUBuj4nIRjf1wwmiXO+Yx9W4=
Subject key identifier: 94:73:2E:64:BC:64:DF:75:96:B5:40:53:ED:4C:FE:03:99:6A:9B:69
Authority key identifier: 92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
Certificate issuer: /CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Certificate serial: 0198D583462EDA2F875ED36D350A155C1B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
Manifest number: 02E0
Signing time: Sat 23 Aug 2025 06:00:06 +0000
Manifest this update: Sat 23 Aug 2025 06:00:06 +0000
Manifest next update: Sun 24 Aug 2025 06:00:06 +0000
Files and hashes: 1: I0tfv2mZoSq2ysFvBwfbBYWY0JA.roa (hash: yceQ2f4xBd7/pbAxmzYNJmFayAdTupB1EL529XI3SK8=)
2: ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl (hash: rYCT3nspkFzdEfhY8WOeCPSwr/nU3UnUwzxMgvz3HiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:46:2e:da:2f:87:5e:d3:6d:35:0a:15:5c:1b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Validity
Not Before: Aug 23 06:00:06 2025 GMT
Not After : Aug 24 06:00:06 2025 GMT
Subject: CN=94732e64bc64df7596b54053ed4cfe03996a9b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:b1:72:5f:d7:b8:18:5d:35:ff:84:1a:9f:
12:d2:3c:14:75:83:81:aa:85:ce:8f:a4:6d:1a:ad:
8d:a1:49:bc:38:ec:f2:c9:c8:fd:27:5a:e6:30:23:
ce:fe:ad:0e:67:52:62:ab:b8:79:68:64:5c:e2:23:
b6:63:0a:d2:c5:1c:48:f0:fb:32:b6:c1:1f:75:40:
bb:c3:fa:b8:e0:66:04:13:c5:cd:49:05:a9:81:11:
47:b3:6f:82:a8:23:36:f6:43:b3:c7:b1:d0:d8:c2:
b6:be:a4:c8:02:e9:4f:c9:fd:67:9a:9d:51:26:70:
e9:5a:ee:73:34:dc:69:47:5e:2c:1d:62:06:c8:72:
78:ae:aa:71:4f:7f:d4:10:85:6a:fc:30:90:b3:29:
a2:92:d8:32:19:63:3f:5c:a0:de:ed:4d:76:49:c6:
4a:0f:1f:03:da:8b:b3:ca:66:a7:c5:ce:7e:7e:0b:
3c:0e:95:61:d8:21:57:6c:20:5c:1d:05:17:36:95:
ba:a4:42:0c:4f:4f:8a:68:5f:18:a0:44:83:aa:fe:
47:28:9b:3b:02:cd:9e:a0:f0:9a:ea:59:a6:70:83:
76:f7:24:e2:b9:6a:95:d8:64:e0:19:9a:e5:38:56:
e2:af:b9:79:2e:61:bc:0c:20:db:ef:35:51:31:47:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:73:2E:64:BC:64:DF:75:96:B5:40:53:ED:4C:FE:03:99:6A:9B:69
X509v3 Authority Key Identifier:
keyid:92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:31:a1:18:08:c7:48:f8:51:07:e3:ed:1a:cd:3b:b5:1a:6b:
b1:e9:01:db:d7:3c:83:3f:9d:46:4f:bf:ae:22:d2:6b:c0:e8:
6d:d5:18:9b:0b:52:76:97:fe:10:e6:92:6f:55:3a:d7:a5:f8:
02:c7:47:eb:88:ff:df:fc:f6:e1:f8:c8:48:72:77:04:95:4c:
0b:80:8a:55:99:92:d0:f4:8a:ad:5c:47:59:b4:88:b0:9f:4c:
0d:b1:0e:0f:e8:d6:19:d2:4d:8a:6a:fc:2f:14:33:19:63:c0:
e7:c1:05:60:6c:2b:49:39:dd:28:56:35:8a:7f:e1:a2:ab:45:
1b:6d:5f:e0:1e:b5:eb:57:77:4f:80:34:a0:21:6c:c0:d5:b4:
e2:6c:0d:6f:46:f6:d8:bf:76:f0:27:bd:30:42:a5:10:2f:28:
61:7c:7e:f4:a9:0a:4b:7e:67:77:67:51:e8:cc:7e:ff:cf:eb:
de:da:22:23:27:e6:f0:17:34:34:f7:b2:3f:cb:cf:b7:32:6d:
16:9b:35:df:f7:9c:16:d7:ba:e0:a5:bd:56:cd:a7:c4:c2:ca:
2c:73:c5:41:42:f7:37:b2:4f:1f:83:31:8a:b6:cf:43:33:f2:
e4:29:88:4d:d2:08:b4:3e:c2:0f:af:02:ba:c7:aa:87:3a:fe:
f7:1a:47:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:44 2025 by rpki-client