Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
File: kp8HacY4g1c_JwPXZkYlcK9VkPM.mft (raw, json)
Hash identifier: fc3olY1HwKOLtQnLimdmVh8UhYIk+fDae5KoNId0gI8=
Subject key identifier: D1:D9:E8:79:C3:8E:AA:0D:00:8B:8D:A0:AB:99:61:C0:93:CF:C6:53
Authority key identifier: 92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
Certificate issuer: /CN=929f0769c63883573f2703d766462570af5590f3
Certificate serial: 0198D6606B34DA15726099D5837806BCD063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
Manifest number: 1528
Signing time: Sat 23 Aug 2025 10:01:39 +0000
Manifest this update: Sat 23 Aug 2025 10:01:39 +0000
Manifest next update: Sun 24 Aug 2025 10:01:39 +0000
Files and hashes: 1: 64T0ThntK_T_XpMgojpC9XD428A.roa (hash: IOm91WRA7m29s//pvbAOHwECZ0iF5k9Wr7VRSaUENC8=)
2: kp8HacY4g1c_JwPXZkYlcK9VkPM.crl (hash: Vf3jVmvmLXKO62kbMTT/JT8Fg9KV3Bz2mawg/VpHgXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:6b:34:da:15:72:60:99:d5:83:78:06:bc:d0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929f0769c63883573f2703d766462570af5590f3
Validity
Not Before: Aug 23 10:01:39 2025 GMT
Not After : Aug 24 10:01:39 2025 GMT
Subject: CN=d1d9e879c38eaa0d008b8da0ab9961c093cfc653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:6b:17:dc:4d:ce:b4:9b:0f:2b:91:ca:db:
60:95:54:87:1d:cd:35:da:63:37:86:48:f1:06:f8:
92:c0:8f:27:2c:29:e8:72:32:db:19:b7:ec:f3:b8:
22:bf:ef:0f:64:9f:93:5f:50:5d:fa:66:90:7a:f9:
9b:f9:76:5f:9d:90:72:fe:37:ac:fc:5c:84:78:4e:
8a:45:98:a4:d9:19:9b:1e:4c:61:4d:43:61:4c:d9:
f5:92:d8:a8:95:54:1b:be:59:fa:b1:c2:64:d0:b6:
d2:bd:a4:c5:3a:db:b6:f2:97:73:66:63:70:6c:b2:
22:28:8b:6c:5b:11:d2:25:27:0e:25:f6:bf:89:3c:
d5:8e:f9:03:33:df:88:ea:d6:53:0f:ea:87:73:83:
fb:01:c4:0d:2c:ab:57:b4:f3:c5:4f:04:c0:fc:74:
b5:a5:b1:93:d1:2c:83:cc:25:6b:89:28:81:61:fd:
e6:c0:1c:4c:da:84:7c:54:69:5d:81:74:c3:18:14:
e8:ad:05:35:8e:c2:04:2d:12:a8:a3:81:d0:1e:6f:
15:c0:f7:a3:ae:ec:43:13:e0:15:4b:35:2b:2b:fc:
68:f1:18:51:74:90:d3:b5:7d:09:17:c2:9f:77:9c:
5c:86:ff:b7:5e:49:59:71:39:1c:1c:01:30:da:07:
88:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D9:E8:79:C3:8E:AA:0D:00:8B:8D:A0:AB:99:61:C0:93:CF:C6:53
X509v3 Authority Key Identifier:
keyid:92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:67:c6:9a:af:0d:e2:21:f0:e1:68:db:ca:02:1b:4d:6c:af:
ba:db:1b:ea:dd:89:c0:20:f6:78:6c:98:2e:cd:07:21:f4:21:
03:0a:57:07:03:55:52:9d:88:d0:41:db:96:96:6a:23:80:33:
ec:29:fb:43:93:87:c4:57:94:25:f3:dd:05:35:81:b5:f2:5c:
5d:d1:e9:af:2c:ad:68:b7:68:43:5d:26:4f:ed:0e:e8:61:6c:
fe:f6:e6:b6:fc:4e:69:a3:f9:7b:fb:33:69:14:c0:fa:9e:de:
a3:89:62:0c:7b:8b:a9:e7:59:9d:1a:86:a7:0e:7d:3c:6c:ec:
b0:ac:79:08:0d:c6:1b:08:e4:c3:3f:86:d2:da:99:09:cc:b9:
79:2c:4f:da:9f:fb:c2:7d:04:83:00:d5:e1:d6:0c:06:71:a4:
9b:42:24:dc:6d:40:07:43:fe:3e:f7:9a:ed:f4:30:ac:c2:ae:
e8:47:62:3f:42:fa:ab:b5:91:f3:a0:72:f3:5f:58:cd:5a:f7:
9f:71:ce:4b:53:15:c8:56:30:ee:b8:b5:d8:b6:8c:8a:0c:64:
58:47:87:01:de:46:45:14:e8:7c:83:df:07:ed:88:13:68:d1:
94:36:73:28:a9:48:8e:97:cd:5a:26:d9:79:34:3f:d9:b5:1e:
c7:c6:95:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:11 2025 by rpki-client