Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
File: kw4KO7COSsZzY-MLqDsHFjLQqkM.mft (raw, json)
Hash identifier: PrhtLT45/jD53L7t6kNpecQyOWGfkqeq933iNMkLwp8=
Subject key identifier: 45:7E:6B:1E:F6:2D:62:1A:23:5F:12:64:E0:28:20:F0:42:2B:1D:5C
Authority key identifier: 93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
Certificate issuer: /CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Certificate serial: 0198D88453CD32C06697538914AF7774BEEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
Manifest number: 0353
Signing time: Sat 23 Aug 2025 20:00:07 +0000
Manifest this update: Sat 23 Aug 2025 20:00:07 +0000
Manifest next update: Sun 24 Aug 2025 20:00:07 +0000
Files and hashes: 1: kw4KO7COSsZzY-MLqDsHFjLQqkM.crl (hash: Hnlu/oeaOTyMB668LiOJJ5hXdlEN0q11AQs/PU1hIyY=)
2: xaq4DEF6a2KbAw0s5ehiRgdBeuQ.roa (hash: NrVb13nbYMUhAilB4rQP3yYP82eHLTMIedBxEXPs6iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 20:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:53:cd:32:c0:66:97:53:89:14:af:77:74:be:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Validity
Not Before: Aug 23 20:00:07 2025 GMT
Not After : Aug 24 20:00:07 2025 GMT
Subject: CN=457e6b1ef62d621a235f1264e02820f0422b1d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9c:13:4b:6d:56:14:e9:29:51:8a:1b:1b:6d:
3b:4d:f3:a4:d1:e9:a4:07:a9:60:5c:b5:37:21:9c:
40:36:21:a7:4c:72:6c:cc:bd:3d:ed:0c:63:f6:7f:
93:41:95:26:a0:14:fb:e1:c1:fe:de:82:60:eb:05:
94:9d:00:6b:7c:64:9c:74:c2:0b:df:14:ea:ca:c9:
02:6e:cd:cc:db:7d:ac:ae:21:0a:8c:34:c5:7d:3b:
fc:01:f5:d3:19:fb:bf:9d:d4:05:ba:4d:55:40:43:
e7:ee:b1:19:54:d3:b8:57:58:66:ce:97:e6:20:80:
d3:9a:82:3d:82:2d:8c:e8:d3:ad:12:ec:82:cd:9b:
06:d7:5c:c2:2b:0a:26:30:57:d4:d8:de:8e:0f:04:
e2:7a:4e:a1:45:63:2f:69:c7:38:34:b0:f4:44:dd:
20:d6:dd:25:cd:d9:ae:99:93:e8:6c:60:33:71:04:
32:73:9a:01:53:3c:05:9f:8c:32:bc:6b:e2:70:f7:
b2:64:64:7e:fd:8a:ac:ff:b2:b5:01:76:f9:d3:6b:
78:5c:ba:cd:02:6b:d0:1f:46:87:8a:5e:33:56:ce:
30:b0:cb:6a:4a:83:f5:91:5e:88:06:ca:6b:dc:54:
95:b4:48:43:2f:2c:5f:5a:a7:cb:8d:cf:d8:20:48:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7E:6B:1E:F6:2D:62:1A:23:5F:12:64:E0:28:20:F0:42:2B:1D:5C
X509v3 Authority Key Identifier:
keyid:93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:dc:87:a7:38:22:79:5f:e0:89:17:1c:eb:e8:d6:bc:d8:ab:
0f:e2:2d:be:18:a5:a7:8f:97:b2:e4:f7:4a:15:5d:e5:64:fa:
51:c4:a4:7a:e4:1c:ed:a3:2b:59:a8:0f:46:7a:6d:f4:1a:8a:
50:31:3d:bf:00:75:82:17:78:63:6c:a8:6f:24:93:d1:16:3a:
8c:26:4c:58:e7:1f:25:90:f1:12:78:60:93:9c:83:cd:b6:a3:
a4:d9:99:c4:72:b9:14:6d:4a:e2:07:41:03:c3:9a:4a:60:1f:
a7:39:cc:49:7c:a6:e7:91:ed:49:46:b3:5b:10:6b:9f:13:46:
67:5f:a6:f9:c9:61:5e:0e:02:35:56:99:6a:0d:34:bf:09:4d:
34:d5:da:11:4a:e7:c8:09:c8:9d:f8:c3:d1:01:bb:49:af:92:
1c:2b:ee:9a:24:28:53:9c:be:98:64:83:f6:d0:7a:fa:07:7f:
ad:2d:3e:a3:d4:5e:ac:e7:3f:dc:30:d2:0a:f6:c6:05:64:95:
e2:36:80:82:3b:bb:4a:e6:06:23:96:3f:75:a7:93:89:ef:2d:
41:4c:27:8e:32:89:c6:41:50:42:56:ab:94:ba:dc:fe:63:a7:
0f:28:70:01:c4:f6:e2:a1:93:6e:29:dc:4d:3c:fd:8d:46:ee:
a0:1a:b4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:24:37 2025 by rpki-client