Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
File: Ka2L_getXSzLQ7DR26axkstR2-o.mft (raw, json)
Hash identifier: iFNjvzyjPU2zFFqpKsicPeOc91nMuX70Y1hdI1cB9BQ=
Subject key identifier: 96:20:DB:D5:41:19:2B:B9:1D:84:D9:3B:1B:0D:6E:DE:75:81:C8:EA
Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
Certificate issuer: /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Certificate serial: 0198D58351296C5595672ED3ABE230CE9BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 06:00:09 +0000
Manifest this update: Sat 23 Aug 2025 06:00:09 +0000
Manifest next update: Sun 24 Aug 2025 06:00:09 +0000
Files and hashes: 1: Ka2L_getXSzLQ7DR26axkstR2-o.crl (hash: yt9b2UK2I5sh1+M6jmudQMyP+Fbk22sz0aHOaE63R4c=)
2: h-R5SrdfAe7rN8zMOqkX0BtsnJ4.roa (hash: 3D3z76pesB4+PkPGfBCrb/veNRexeyxDAf3xN4YJwnQ=)
3: tOD9yELwWOB6I1JsshHxqOqJaWE.roa (hash: E867kd+hZLMJTwwIfg4wQE1B1KmxpcWNXSjEvrvHFrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:51:29:6c:55:95:67:2e:d3:ab:e2:30:ce:9b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Validity
Not Before: Aug 23 06:00:09 2025 GMT
Not After : Aug 24 06:00:09 2025 GMT
Subject: CN=9620dbd541192bb91d84d93b1b0d6ede7581c8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:15:dc:4f:0b:87:3a:37:1e:b8:42:6d:9c:3d:
36:b1:44:f8:af:4d:2c:b4:76:64:7c:d5:e2:99:1d:
59:a8:fd:74:58:75:2f:43:3c:47:05:b7:78:e3:59:
3b:0b:9c:be:58:3d:51:ff:85:d6:55:2e:fd:8e:9b:
3f:c6:3e:a1:2b:ff:ff:de:96:f0:19:aa:e6:61:db:
e2:03:e9:c9:e1:02:0d:16:bd:13:84:6c:b0:af:23:
07:0d:76:d2:b0:8c:51:d8:7e:c4:72:54:4b:b8:28:
d0:0d:93:82:2a:e1:80:21:fd:56:35:59:d0:ef:c2:
08:b9:da:0b:ca:df:fe:8d:b7:1b:10:82:13:f7:ba:
b1:ca:9a:25:91:cc:6b:87:de:89:58:36:d1:ea:a4:
5b:7c:3f:c6:d0:3e:47:d5:12:93:06:98:6a:7e:55:
31:f2:0f:f0:f8:d0:22:82:dd:b8:a3:07:2d:96:07:
de:68:25:2c:a1:53:ee:25:e0:26:7a:9e:eb:2c:e8:
b5:82:27:0a:fd:2a:8f:84:4b:eb:8c:2a:b4:d7:ba:
45:29:76:2e:57:30:8d:95:89:9b:7a:26:71:f2:5b:
0a:60:5d:1d:29:34:c1:3c:e5:b8:69:59:2e:67:78:
07:02:4e:5a:fb:ee:72:c6:fc:99:75:e7:6b:da:2b:
66:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:20:DB:D5:41:19:2B:B9:1D:84:D9:3B:1B:0D:6E:DE:75:81:C8:EA
X509v3 Authority Key Identifier:
keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e2:4b:02:23:c7:c0:2b:18:eb:53:dc:78:26:1b:f2:dd:d4:
21:89:d7:f4:af:a2:72:61:01:5b:72:76:17:97:26:79:f1:c6:
c6:f0:11:d5:ec:a6:ec:fa:f3:3e:3f:86:63:3a:f3:22:68:59:
55:b0:b8:cd:0d:e0:11:7d:2b:81:36:9f:8e:59:a6:54:d7:e9:
8c:36:ef:a9:c1:e1:fa:09:ee:da:1d:87:9f:a8:3b:19:13:9f:
67:d4:b1:23:da:4d:3b:26:77:de:67:0c:69:3c:b3:24:56:b4:
65:1f:91:5f:46:97:16:4a:a2:db:0e:11:aa:dd:88:2d:17:59:
23:79:7e:6e:f7:1c:89:0b:7d:f9:ee:b3:ce:cc:86:86:da:3b:
92:52:6e:72:99:3e:04:74:6c:92:50:b2:2b:b8:c8:3d:94:61:
31:2d:7a:76:96:44:2d:94:57:17:c3:31:40:de:69:62:9c:7f:
2c:d8:c5:83:99:7e:c1:be:26:0d:23:a1:e9:2d:ef:07:e2:6a:
f8:96:63:c5:00:1e:9e:19:4a:e8:75:da:7f:bd:ea:75:df:59:
24:f3:4a:57:9a:8f:7f:14:06:4e:d4:07:b2:9f:8f:d7:4e:7a:
34:21:54:11:ee:89:3c:70:90:37:50:26:d6:0d:44:18:8c:51:
36:d2:9d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:41 2025 by rpki-client