Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
File: kioaZ-LacRLUVZzY29gUH48yd-g.mft (raw, json)
Hash identifier: P0+k/rXynJqlXfXqTFLZA8JhejU0VkZR4P/+ewQLyQM=
Subject key identifier: D4:EA:DA:F8:9A:B5:EA:F1:DE:BA:7D:6C:2E:E0:42:A5:38:F8:31:C5
Authority key identifier: 92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
Certificate issuer: /CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Certificate serial: 0198D73B5715D1F8D845FCB852743815858F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 14:00:47 +0000
Manifest this update: Sat 23 Aug 2025 14:00:47 +0000
Manifest next update: Sun 24 Aug 2025 14:00:47 +0000
Files and hashes: 1: kioaZ-LacRLUVZzY29gUH48yd-g.crl (hash: UcGvuZwwZCdwEaPhhzFHTJRXkaDtsKNT5zA5YCDfVVI=)
2: q7WZGuRVxVy-2pf3zBIUBRQeEL8.roa (hash: /Mga5oX8Op4TctH5TWu+rLivpwbBRAO4KpJeZeXs2ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:57:15:d1:f8:d8:45:fc:b8:52:74:38:15:85:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Validity
Not Before: Aug 23 14:00:47 2025 GMT
Not After : Aug 24 14:00:47 2025 GMT
Subject: CN=d4eadaf89ab5eaf1deba7d6c2ee042a538f831c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:f4:53:49:41:18:88:10:9c:a5:45:5a:05:
cf:75:35:55:fa:89:59:58:b9:f6:fa:f3:33:9f:e5:
ad:9f:92:f2:e8:52:56:7d:61:b8:f8:02:78:d5:26:
da:cf:61:81:61:d3:f5:b6:7c:9f:65:f0:07:c4:56:
90:d2:26:70:53:b8:28:de:86:2d:f7:47:66:2e:8d:
e7:0e:a9:f9:7b:d9:0a:ef:46:80:f5:a4:18:a3:da:
fa:09:98:43:5b:96:55:77:72:6f:dd:4c:47:07:a5:
3b:0a:16:d5:dc:42:60:70:e1:9d:ff:ce:55:e6:c6:
84:7e:cf:25:2c:a4:48:48:54:8e:42:66:fb:b6:6f:
0c:53:d8:ab:fa:a6:15:3a:dc:c7:4b:17:29:77:08:
36:81:3c:49:a8:af:56:7e:e9:19:59:5e:d8:c8:7e:
1c:5f:30:7c:64:70:91:92:73:9f:e6:91:f4:b5:3c:
0b:5e:53:1a:5b:1a:60:4f:0b:0d:49:24:4e:b7:e1:
a5:83:5a:5b:3d:8d:4f:e8:80:47:06:08:b9:dd:17:
af:f0:d8:06:26:97:30:d1:d4:ca:0e:53:cf:32:c9:
7b:de:08:d1:30:a4:0e:5a:29:d4:ff:66:73:85:7b:
d4:07:8b:c2:bb:61:31:c7:ad:90:ef:c6:7d:ad:10:
8c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EA:DA:F8:9A:B5:EA:F1:DE:BA:7D:6C:2E:E0:42:A5:38:F8:31:C5
X509v3 Authority Key Identifier:
keyid:92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e4:4f:e9:c8:d6:10:f7:d1:58:71:c3:88:d1:79:80:7f:d1:
f8:65:ea:ee:d5:16:0f:f8:5a:32:22:3c:c8:b8:f7:44:ff:d2:
35:f4:f0:8e:c0:0a:67:81:4a:88:b1:4c:09:a9:06:da:42:9f:
e2:fe:ef:bc:70:2d:5c:86:7f:d1:7c:8c:45:04:04:14:bd:94:
10:2e:67:aa:16:52:e4:db:45:f1:6a:58:a6:46:3a:08:5d:02:
14:64:88:58:80:fd:79:15:0c:09:db:9b:79:76:db:fe:cd:9a:
ea:e2:13:c5:45:27:2f:99:77:fd:2b:9c:e0:44:1a:80:2f:1a:
7e:46:8b:cf:c8:f3:97:2e:fd:f0:7c:42:64:3b:34:0f:84:d8:
a3:51:97:74:d9:9a:2c:d8:44:9d:14:d8:0a:a3:97:f6:ee:f6:
b4:28:99:79:d6:97:c7:36:fc:f5:fd:e0:21:6e:72:1c:2e:8a:
6a:94:ba:a1:1d:77:80:0e:4f:43:7d:49:94:eb:a7:8d:68:74:
1c:56:6f:c2:c3:5d:51:59:88:42:cd:80:d7:bd:c7:0e:8b:25:
3f:be:b3:e7:d3:39:0e:f5:78:3e:66:38:58:95:a7:4c:6f:e9:
49:7b:8a:71:ab:37:de:e0:4b:0b:94:61:f6:37:9f:13:a0:f4:
7e:0b:a5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:38:10 2025 by rpki-client