Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
File: v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft (raw, json)
Hash identifier: HgH5NdY/zvOrGguWbNckAhhWsEKZjKh4tk3MnCgqNpA=
Subject key identifier: 9C:5D:86:CA:49:5C:13:1D:2D:21:76:7D:1E:39:B3:B9:13:5C:B2:6B
Authority key identifier: BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
Certificate issuer: /CN=bf628b93661e905887359fc8e9a1888075db3cd8
Certificate serial: 0198D65F6A79947D756899C3ACF4DEE29A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:34 +0000
Manifest this update: Sat 23 Aug 2025 10:00:34 +0000
Manifest next update: Sun 24 Aug 2025 10:00:34 +0000
Files and hashes: 1: O8A-n_YJ3aGox49eBzm7Q8xhXdQ.roa (hash: EUscQTnmBwchHhwFPgGdViuEre/xVGQ6ryyvSQoTdUA=)
2: v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl (hash: xz8dwLtbWbvbPRZWc9nBAEmssTZbcxCqc1/rZCC8JOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:6a:79:94:7d:75:68:99:c3:ac:f4:de:e2:9a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf628b93661e905887359fc8e9a1888075db3cd8
Validity
Not Before: Aug 23 10:00:34 2025 GMT
Not After : Aug 24 10:00:34 2025 GMT
Subject: CN=9c5d86ca495c131d2d21767d1e39b3b9135cb26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:df:5e:42:a5:b0:84:ba:ea:bc:e0:c8:12:
1a:5e:ce:27:23:b0:a9:85:25:50:2a:07:5d:2c:84:
7b:25:8c:22:53:a4:40:17:60:57:24:de:94:ce:d0:
b3:16:23:28:4d:85:ce:79:23:a6:8e:b3:e7:8f:87:
6c:4d:82:6e:58:6f:26:8e:62:ce:c4:1c:a1:55:1a:
56:5e:d7:fd:9f:ad:53:13:c0:e7:23:7c:a5:b6:19:
b5:d1:59:d5:0a:68:df:27:ad:38:37:bb:53:75:be:
99:a7:e3:f3:08:6c:43:3c:0b:a3:0a:9c:21:a5:c5:
d2:51:6d:6b:0c:d8:72:e9:fb:dd:11:58:a0:10:8c:
40:26:e7:7a:62:a7:77:7e:09:1b:f7:d3:b0:c6:74:
54:65:fd:d2:97:a9:cf:4a:75:3b:50:13:bd:82:5b:
4b:56:c1:3d:6d:6a:21:ea:c1:7c:55:48:1a:c0:24:
aa:29:80:07:25:fc:8d:63:ff:ae:9e:a9:23:8d:c0:
29:3f:01:4b:6a:83:e6:e4:d5:fa:81:72:d6:b8:77:
02:ed:e9:b9:32:1d:95:23:83:af:07:21:9f:3a:29:
8f:a6:ca:15:14:8a:44:c6:45:99:15:d5:5f:fe:c8:
f4:d5:14:d6:35:74:8e:ed:90:a9:38:dd:3f:f4:19:
f9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5D:86:CA:49:5C:13:1D:2D:21:76:7D:1E:39:B3:B9:13:5C:B2:6B
X509v3 Authority Key Identifier:
keyid:BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:cc:c3:2f:d3:6b:b4:cd:a6:f7:bb:6d:82:b3:d9:93:e9:fd:
b4:bc:4b:59:15:14:da:eb:2c:f3:11:e5:52:df:6f:0d:93:fe:
76:0b:20:24:ef:47:eb:19:6c:2d:17:77:b3:6d:85:21:e3:0e:
ee:b0:a4:2e:7a:e8:82:77:b0:9c:9e:49:b5:06:ca:b2:c1:e5:
61:b7:be:84:09:b8:c5:d7:6b:f0:cd:05:04:a6:0b:fe:34:38:
af:3c:ae:f8:07:cb:a1:96:47:e8:96:0d:12:13:4b:e6:66:91:
b9:bb:51:79:05:81:dd:dc:09:e4:5c:16:f2:70:7a:5f:56:ee:
88:a7:a7:0b:4c:fb:69:0a:78:99:78:75:10:fc:9c:53:db:af:
2d:e2:9d:af:f4:71:59:9e:ed:86:58:3b:1f:4a:a9:89:55:0e:
2c:f8:6d:7d:93:4b:ef:02:8c:0e:e1:cb:f6:55:4e:c3:98:c3:
ef:cc:bc:ad:79:75:85:14:f8:7e:fe:60:16:36:57:7b:56:18:
c7:08:0b:9e:5c:1c:b8:87:31:dc:39:50:1c:69:97:69:c1:6c:
92:92:dd:7d:d1:dd:b5:6f:f8:4a:db:b3:b5:81:45:a4:c5:0e:
25:51:1a:0a:26:75:7c:02:ce:12:91:b1:bb:06:c5:5b:71:15:
d1:02:bf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:47:43 2025 by rpki-client