Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
File: kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft (raw, json)
Hash identifier: 4B9w4Js+Yv4ErjN1KlmlVBnc1hgjNSQPejlP8qKmGBw=
Subject key identifier: 79:A0:4B:BA:7D:64:36:67:EC:64:1B:C2:AA:55:C8:F0:94:59:8D:32
Authority key identifier: 91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
Certificate issuer: /CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Certificate serial: 0198D47358BDD17090CA96F74B6FD87BD53F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 01:03:05 +0000
Manifest this update: Sat 23 Aug 2025 01:03:05 +0000
Manifest next update: Sun 24 Aug 2025 01:03:05 +0000
Files and hashes: 1: KWOjeTqrWS2bhx1qeVkVPGbzw7c.roa (hash: XUqhrwHbJF26mG4HYcUUQFE+zak+QHQ/0xU36G+fK8E=)
2: kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl (hash: ySKsJuzbvS/BWq9FCiJ1M28P54rYBLmncM8xD4Putbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:58:bd:d1:70:90:ca:96:f7:4b:6f:d8:7b:d5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Validity
Not Before: Aug 23 01:03:05 2025 GMT
Not After : Aug 24 01:03:05 2025 GMT
Subject: CN=79a04bba7d643667ec641bc2aa55c8f094598d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3d:36:e4:8e:4b:f8:36:9f:20:60:41:43:ba:
d2:e7:fb:3b:99:5b:be:ad:64:fe:d0:62:03:0f:f3:
49:20:8b:81:4c:37:fc:0e:e9:2b:e5:bf:43:bb:7b:
49:08:05:84:26:90:87:72:26:16:66:76:2a:9d:23:
3d:4c:a0:27:8b:2a:f6:ec:2b:84:9e:85:0e:2d:b5:
fa:db:69:5d:3b:36:02:b1:3c:78:61:24:c0:e1:d2:
09:3b:7c:3c:42:1b:69:81:67:0c:ba:0b:06:73:fb:
98:b8:e8:11:e9:05:b6:26:5a:38:6e:7b:3c:e0:a0:
32:54:87:ad:17:b3:a2:91:45:6b:5d:2c:16:a1:ed:
4c:77:d8:1b:3d:77:31:59:6e:65:1c:5f:19:4e:2c:
c4:ae:bb:bf:e0:a5:ba:47:d8:05:60:19:6b:17:62:
d0:ef:51:2c:fc:77:f8:11:94:24:42:0d:b1:95:0f:
2a:7e:b5:f3:f0:67:6f:c9:5b:27:f7:23:44:ee:8b:
66:75:e6:35:13:5e:0b:22:0d:fb:eb:62:7a:16:09:
28:b9:6d:8c:a5:22:0b:2e:1f:af:3b:4c:9e:ad:74:
67:8b:86:8d:e2:c4:5e:fd:48:d0:fd:c8:6e:63:ac:
be:ff:88:fa:cf:a0:35:d1:3f:7a:21:dc:fe:62:70:
29:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A0:4B:BA:7D:64:36:67:EC:64:1B:C2:AA:55:C8:F0:94:59:8D:32
X509v3 Authority Key Identifier:
keyid:91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:3c:40:17:1e:f7:0a:39:b5:b1:39:f1:ae:3c:a6:a9:86:be:
9f:2d:ba:b9:a0:87:e8:61:7e:09:3b:1e:0e:36:7d:47:30:20:
6b:b2:ab:26:15:07:29:24:94:9b:6e:4d:cd:3c:25:88:cc:e2:
65:e8:ff:10:e5:54:55:fa:9a:ef:c3:7f:fe:b5:34:0f:99:f4:
94:19:3c:19:e5:a2:d6:0d:cd:64:21:3c:bf:ad:2a:11:bd:90:
2b:68:2e:56:bb:4e:8d:0b:66:b4:e1:41:9f:d3:91:db:7b:5d:
f8:cf:78:02:b3:09:53:48:aa:bf:7e:dc:7f:a1:f7:3b:70:d3:
86:46:ff:43:bd:66:db:ad:3f:c0:f6:fd:ce:63:f5:26:de:5f:
2f:94:8a:c0:36:8d:d0:2f:d2:c0:3c:e6:c2:e1:66:b5:be:73:
45:91:92:6c:7c:a9:f1:b2:ff:34:cd:fd:81:21:ad:d4:5b:5a:
8b:26:e4:dd:82:40:60:90:94:a9:e2:d6:5a:7c:cd:ae:5f:a7:
88:f9:36:3e:18:c8:8b:37:46:95:e3:16:b6:a8:72:33:3a:10:
2d:0a:2c:24:06:76:2d:db:0b:5a:8c:22:f1:a0:ae:5e:8b:47:
17:41:c4:a5:dc:65:e2:60:eb:d1:61:d6:b5:91:47:ca:f7:1a:
2b:a3:c1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:07 2025 by rpki-client