Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
File: kY74I7sEHqOsfIk2x1C2AYE34s0.mft (raw, json)
Hash identifier: Acea5Fz2z3ja9UiVWJjXqPAp6dI0yGcfLfc96WrVnzw=
Subject key identifier: B0:5A:B5:9D:28:BD:86:16:CC:7F:DE:1A:51:78:3D:92:CB:5A:96:48
Authority key identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
Certificate issuer: /CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Certificate serial: 0198D583AD06B674502F868FD30FA0036044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 06:00:33 +0000
Manifest this update: Sat 23 Aug 2025 06:00:33 +0000
Manifest next update: Sun 24 Aug 2025 06:00:33 +0000
Files and hashes: 1: A9fnzzZSIyyk78DkykeGYg11L2Q.roa (hash: jan8f+is44AYa9jG93HTE50pBitsknBS00si8XIMwqI=)
2: DHmLK6qv7LDp9GSFF3bVVqiSSSs.roa (hash: 4c04LYJlSQnDFsWUTe3RinfcXPa5HIaLB5gKn1wNfQ8=)
3: X2DKxHgU0pJJ7l0RSAZexJQ4yk4.roa (hash: c4ZqtHFp+NEImgqSyGp/s8/x5ohWKo9ZUlSrkI+FleE=)
4: cM2WijieWcfz1get8DBHQkXXH94.roa (hash: YN463PMg+163k21SmND+h8gKso19maJII2obZdv1r0M=)
5: kY74I7sEHqOsfIk2x1C2AYE34s0.crl (hash: mHTA42RCONINRRMhfFi/s1QHEWJYghVXnOVDg3ewapY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ad:06:b6:74:50:2f:86:8f:d3:0f:a0:03:60:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Validity
Not Before: Aug 23 06:00:33 2025 GMT
Not After : Aug 24 06:00:33 2025 GMT
Subject: CN=b05ab59d28bd8616cc7fde1a51783d92cb5a9648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:d0:93:16:e4:ca:44:bf:d2:e6:f3:1f:c4:
a3:b3:10:81:34:11:c3:70:db:b2:07:03:f8:85:73:
20:58:cf:aa:12:27:9c:32:d2:17:f1:81:95:fe:20:
ae:0f:b4:41:2f:c0:e0:25:ea:63:be:51:33:1c:08:
5c:af:5b:3f:15:61:48:1e:93:3a:d3:0a:e5:04:d9:
fe:dc:c9:7d:c9:2e:06:39:11:e3:f4:42:ca:49:3c:
20:1f:e7:65:af:f9:96:37:6d:6a:cd:4e:0d:cb:9e:
0c:ad:34:cb:aa:8d:e2:30:52:ec:33:8e:58:3a:7a:
bc:a4:e9:a7:a5:4e:b7:b2:18:b5:e9:1e:d0:79:e4:
ae:25:aa:8f:48:75:bd:61:7f:30:b1:40:dc:43:a2:
f7:2b:25:cc:b3:d0:b1:6b:50:21:a4:b2:b1:76:a8:
30:de:19:9e:24:62:41:f6:39:28:4b:aa:14:1c:6a:
63:c6:bb:f0:65:42:3e:9c:b5:36:91:f2:54:6b:95:
67:5a:9a:d9:85:7c:dd:5e:2c:c2:80:cf:af:2f:f3:
3c:a7:1b:88:6e:6a:97:a3:eb:53:bc:33:e3:e1:9c:
2c:f1:e4:e7:c2:37:a9:9f:27:49:10:6e:45:e1:7f:
cb:a1:90:c0:d2:26:a4:bf:01:60:88:d6:5f:d3:b0:
46:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5A:B5:9D:28:BD:86:16:CC:7F:DE:1A:51:78:3D:92:CB:5A:96:48
X509v3 Authority Key Identifier:
keyid:91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:44:68:7e:df:f1:3b:b6:09:cb:2f:3a:b4:1a:6d:18:c1:19:
57:30:6a:ab:b2:b3:4b:a3:38:07:d0:fb:b0:3e:f5:df:8f:e9:
be:74:a5:07:33:8e:04:a2:18:7a:38:93:e6:6c:74:c9:1a:ef:
79:5f:67:8d:83:91:f9:3f:07:d3:fb:9c:5f:6a:02:22:7f:f1:
b2:3b:af:21:a9:4a:44:6a:3d:4d:5c:03:ad:7c:48:c3:3a:6e:
98:6d:04:e0:e9:71:25:17:d0:20:b7:fb:09:63:b3:5e:00:12:
d3:51:c1:72:9d:cc:4c:2a:12:a5:85:31:08:10:ac:bc:9c:9d:
f9:36:66:13:ea:ef:cd:a7:4e:ab:92:bd:43:1b:0f:5b:2b:ca:
31:5b:30:be:60:51:dd:67:ad:01:ff:f5:b5:53:88:46:e9:50:
d7:26:a3:21:a0:26:21:ca:78:ac:bd:bc:22:b8:d9:df:bf:36:
c0:f2:fd:09:9b:a9:89:aa:84:8a:c6:57:18:cc:b8:9a:65:46:
41:29:f2:d0:a4:ae:37:69:38:33:95:35:b1:3c:23:4f:23:21:
e0:68:b1:dc:e4:39:f2:89:53:7c:50:78:08:c5:ff:10:f3:14:
0e:21:7e:6a:31:9a:fd:de:a1:2d:f1:fe:92:7e:10:d8:0b:85:
86:6f:aa:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:25 2025 by rpki-client