Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
File: kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft (raw, json)
Hash identifier: XhQrmXliKmvvr+KDA3kvbFmBvlUhu0CxmFkglL6Sv30=
Subject key identifier: 4F:37:38:63:F6:BC:B9:1D:8A:14:11:D9:91:0E:9F:75:AD:76:5B:76
Authority key identifier: 91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
Certificate issuer: /CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
Certificate serial: 0198D5834D4876860829B0BA0D853A9B6564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
Manifest number: 11CC
Signing time: Sat 23 Aug 2025 06:00:08 +0000
Manifest this update: Sat 23 Aug 2025 06:00:08 +0000
Manifest next update: Sun 24 Aug 2025 06:00:08 +0000
Files and hashes: 1: 7onO-XhdJCc_IRQIQVCJn8u-1wE.roa (hash: sTU2wUb7RHNn6n+c6UyiV4vOHD7amsQkLEZ6q5B98dM=)
2: kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl (hash: RDTC2K2Kel7/HB7vvx7qszLjfMnRl/Nh5bRim0XhZyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:4d:48:76:86:08:29:b0:ba:0d:85:3a:9b:65:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
Validity
Not Before: Aug 23 06:00:08 2025 GMT
Not After : Aug 24 06:00:08 2025 GMT
Subject: CN=4f373863f6bcb91d8a1411d9910e9f75ad765b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:43:fa:01:df:9f:40:f4:1c:b3:08:2d:90:
5d:3e:16:c1:a7:d6:7e:d5:47:b0:1a:00:6a:4e:21:
fa:5b:59:4b:91:5a:86:7f:b1:d7:bb:f3:dd:ea:c5:
b7:fe:38:88:1e:a4:2e:8d:bd:1b:f4:e1:bd:a8:80:
e1:05:89:12:3a:49:e1:cf:f6:d1:14:f8:5e:ff:83:
96:61:8f:8f:09:a8:f7:59:52:ba:1b:4e:c2:f0:ed:
0f:36:68:91:79:8b:6b:7f:b8:ba:a4:6a:2a:07:b5:
a0:6c:ca:27:12:51:d1:41:9e:04:84:7d:5f:9d:4a:
99:84:1d:84:b3:65:1f:c0:7c:a7:d7:7e:12:9f:06:
0d:64:0b:38:6a:ff:ac:57:12:de:82:5e:50:cb:7a:
5b:ca:2a:59:04:8d:55:c0:a0:bb:cb:03:c5:f4:d6:
c7:66:c1:ab:3e:40:f3:20:72:fc:76:e3:b3:41:ac:
72:c8:e4:85:02:da:84:31:a0:fe:11:84:21:4c:9e:
69:c3:99:ce:3c:d9:56:92:90:dc:9f:80:5f:86:ec:
9d:3c:7a:2f:25:52:31:ac:5a:be:03:59:be:a1:c0:
8f:2a:06:43:61:f4:19:62:4d:af:16:82:7d:e7:11:
90:e5:f8:5f:7c:0e:4c:f6:21:ff:dc:8e:3b:e7:c2:
4f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:37:38:63:F6:BC:B9:1D:8A:14:11:D9:91:0E:9F:75:AD:76:5B:76
X509v3 Authority Key Identifier:
keyid:91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:9a:95:37:23:9c:f5:b4:26:90:d6:f8:a8:7b:34:00:a6:78:
de:c4:77:bb:9a:85:27:fb:b3:8d:12:b6:d8:24:d1:a2:8e:26:
c8:75:3c:89:c8:c3:0c:86:d1:4a:b9:3b:df:88:ed:be:be:ff:
e9:65:b6:26:24:47:dd:90:84:32:f1:17:ef:07:65:43:36:e6:
b0:65:db:52:21:bf:49:8a:3f:56:e4:a6:16:64:57:cb:8c:8b:
34:96:ef:26:e5:02:90:31:b5:1d:35:25:5e:d5:90:35:79:3b:
5f:bb:17:a9:e1:10:bb:87:aa:47:9a:4f:b0:e7:2f:ca:41:6a:
ef:85:ea:99:85:dd:0f:b2:46:b3:83:7c:e0:dc:a9:94:bd:01:
95:d4:fb:98:0b:d0:b4:11:96:bb:0a:f3:38:fe:d1:8c:c6:d3:
13:f0:fd:ee:92:07:da:f1:e6:5b:ed:e1:9f:ce:a8:91:0a:92:
91:11:45:ed:92:03:f3:fb:66:00:f9:3a:3b:86:5d:5f:eb:d7:
f4:d5:ab:3b:be:84:3d:8b:b7:53:6a:a0:37:e7:24:83:23:2b:
a1:89:37:9c:61:d1:ae:59:e1:37:5d:69:46:80:cf:b8:1f:45:
c8:9c:fb:19:74:04:7a:8f:64:b4:3b:3c:2a:ac:c6:d1:0b:89:
37:2d:50:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:16:22 2025 by rpki-client