Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
File: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft (raw, json)
Hash identifier: k10X32q6X6soih/1igOT8Nl13k8awBLRgu2U7j29udE=
Subject key identifier: A5:9C:63:62:6F:30:A9:5B:0C:73:13:01:DF:B2:33:38:29:44:5A:6C
Authority key identifier: 92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
Certificate issuer: /CN=9246785f469be8aa7151e3333e47465d478fd0e7
Certificate serial: 0198D6CDDDB049C8E95E9CC910D58EE99971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 12:01:12 +0000
Manifest this update: Sat 23 Aug 2025 12:01:12 +0000
Manifest next update: Sun 24 Aug 2025 12:01:12 +0000
Files and hashes: 1: aSkETRaAPEJs87vkPB5vARFsUpQ.roa (hash: aCCeFkfXg4eaGy/UUrllTCVipmWIQ10CNhHiLobPblo=)
2: h0KwGsV7Y4PS9-ubvbwvPxeINTw.roa (hash: QnImr5OAriGOLs8DShZajEz7o3J5PVeEaUrLJ83dAtA=)
3: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl (hash: PdKyJ3hzkFRfj2xu894N1tmm8uMido5huP2bfQBtHMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:dd:b0:49:c8:e9:5e:9c:c9:10:d5:8e:e9:99:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9246785f469be8aa7151e3333e47465d478fd0e7
Validity
Not Before: Aug 23 12:01:12 2025 GMT
Not After : Aug 24 12:01:12 2025 GMT
Subject: CN=a59c63626f30a95b0c731301dfb2333829445a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:2e:7b:52:75:b2:24:4c:90:3d:ed:0b:aa:
07:85:63:69:b0:48:20:67:1a:8d:2d:a8:13:6b:63:
30:68:08:ce:c9:26:11:c6:d0:1b:67:e7:0c:45:10:
b6:39:2f:9e:a2:f2:c9:d5:22:5b:e3:98:5f:96:a2:
c6:03:9e:57:0b:c3:1d:cc:d0:da:f8:37:6b:db:1e:
36:6e:58:d2:6a:1a:51:b0:2c:22:38:27:bf:95:43:
e4:2c:0f:91:03:0a:a1:9e:0c:64:e7:48:ce:d5:b0:
7c:16:5e:9b:fc:c1:32:97:98:51:8a:69:65:b9:e9:
29:61:93:5a:e6:e1:7b:9b:c4:78:88:40:fa:a1:43:
89:cb:c9:2b:99:a7:78:4c:57:c5:3e:ed:1d:42:c4:
4e:3a:6d:eb:dc:71:c6:13:be:77:0e:f6:00:ab:ad:
2a:14:51:95:a4:eb:74:9c:4f:60:67:c4:a3:76:cc:
04:05:e1:12:cb:0c:5b:e7:d0:77:f7:75:4d:1d:e7:
c9:44:f2:87:40:71:d5:c7:65:04:9b:d3:6e:79:b8:
23:a8:59:97:e9:30:02:ac:8b:85:22:77:86:99:a3:
49:41:d8:02:e9:4c:0b:5d:82:e1:d1:96:85:86:8d:
5f:75:01:64:42:7f:d6:c3:6d:e8:66:93:4b:bd:ed:
76:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9C:63:62:6F:30:A9:5B:0C:73:13:01:DF:B2:33:38:29:44:5A:6C
X509v3 Authority Key Identifier:
keyid:92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:53:64:3b:d2:ae:a8:ac:15:bb:0b:21:24:4f:86:0f:c8:6e:
97:49:01:5f:c5:db:be:b9:96:91:94:68:5d:54:2a:4b:8b:50:
8a:9c:75:e9:e8:ba:94:85:31:13:f3:79:f2:2c:ca:d4:ee:b4:
4c:13:02:b6:10:ce:1c:f6:43:4a:5d:fc:7e:25:e9:79:c7:6b:
24:a3:d9:ce:54:bf:36:b3:8f:cc:37:c6:cf:36:b1:ba:30:c0:
ca:ce:4a:24:a1:1a:73:82:49:bc:c9:92:fa:b5:c4:18:2a:96:
fb:5e:6c:db:1f:e7:8e:ca:28:77:f7:9c:81:06:6b:34:f6:64:
8a:10:c4:98:b9:3c:0b:2f:57:d6:88:b1:e4:bc:9b:09:cd:9d:
81:f9:83:93:fe:a8:a7:ed:52:50:34:12:7b:e0:98:26:1d:09:
00:b0:8c:af:30:41:91:87:36:53:b1:c3:cb:55:7c:28:36:0d:
6a:46:58:98:77:d0:40:81:48:d5:a4:cb:fd:24:a6:a7:fa:2b:
7b:89:84:72:f7:90:1e:39:5b:1e:78:24:8b:82:77:3c:32:2e:
93:d9:f3:01:71:de:35:a9:bc:2a:bc:d8:d1:04:89:f0:d7:52:
b0:40:78:de:b3:23:a0:bd:76:3b:6e:2e:3e:bd:65:c0:0a:27:
77:f1:f8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:20:53 2025 by rpki-client