Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
File: kY74I7sEHqOsfIk2x1C2AYE34s0.mft (raw, json)
Hash identifier: dYlrSVbPvQDoGJFmtT9bAlY6FIbXFONKo1PbwHPuiDk=
Subject key identifier: D1:7C:29:8C:CF:E2:91:14:49:E0:82:CF:2C:8C:AC:64:87:36:F3:17
Authority key identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
Certificate issuer: /CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Certificate serial: 0197CCBADF260BB9A6F9168A8E4AF3CD7ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
Manifest number: 15C0
Signing time: Wed 02 Jul 2025 20:01:28 +0000
Manifest this update: Wed 02 Jul 2025 20:01:28 +0000
Manifest next update: Thu 03 Jul 2025 20:01:28 +0000
Files and hashes: 1: A9fnzzZSIyyk78DkykeGYg11L2Q.roa (hash: jan8f+is44AYa9jG93HTE50pBitsknBS00si8XIMwqI=)
2: DHmLK6qv7LDp9GSFF3bVVqiSSSs.roa (hash: 4c04LYJlSQnDFsWUTe3RinfcXPa5HIaLB5gKn1wNfQ8=)
3: X2DKxHgU0pJJ7l0RSAZexJQ4yk4.roa (hash: c4ZqtHFp+NEImgqSyGp/s8/x5ohWKo9ZUlSrkI+FleE=)
4: kY74I7sEHqOsfIk2x1C2AYE34s0.crl (hash: +GuoXT7xAXXGk9o40J4xvr58D0W2c/0vV6I5qHuqpsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:ba:df:26:0b:b9:a6:f9:16:8a:8e:4a:f3:cd:7a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Validity
Not Before: Jul 2 20:01:28 2025 GMT
Not After : Jul 3 20:01:28 2025 GMT
Subject: CN=d17c298ccfe2911449e082cf2c8cac648736f317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f0:61:c4:1d:48:d2:dd:c6:0b:02:ce:d6:35:
10:8d:b7:a2:67:10:25:cc:a7:85:2c:64:6b:23:b4:
88:45:c8:f7:28:f6:fb:64:6c:f6:01:0d:41:8b:40:
21:89:0e:93:e7:da:47:ef:1c:72:6c:dc:db:9d:87:
08:fc:cf:6a:46:64:24:3c:17:ba:b4:91:2a:54:b0:
67:b2:f6:4c:a2:41:a7:c9:37:29:86:a0:32:d6:0d:
1c:b7:89:78:7a:18:d0:0a:c1:7a:f7:e7:7c:c5:24:
c5:4c:4e:3f:1e:2f:89:a9:c0:d2:b1:27:ff:d8:1f:
df:a3:be:8d:5f:6b:62:45:89:f9:b0:76:84:84:a1:
f6:db:68:46:46:6b:5e:4e:23:54:80:03:54:ed:e4:
41:c3:fb:52:a1:51:28:49:53:0a:34:8b:dc:84:b6:
6b:3b:8e:c6:f6:e0:1b:79:86:ec:b6:94:ab:ea:f4:
a1:11:13:ff:dc:14:03:ab:6b:1c:6d:01:8b:2c:80:
f3:cf:7b:07:84:cc:66:fc:9d:da:43:ea:7d:10:17:
38:1f:a9:0a:83:ba:e0:de:6f:49:3c:7d:19:4c:a3:
8d:3b:9c:6a:24:80:87:ec:ef:ad:87:9b:a6:f7:bd:
a9:3c:96:77:bd:60:b9:88:f8:19:55:23:35:c0:96:
fe:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7C:29:8C:CF:E2:91:14:49:E0:82:CF:2C:8C:AC:64:87:36:F3:17
X509v3 Authority Key Identifier:
keyid:91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:66:6c:c7:14:94:bf:a6:82:5e:79:0f:55:f6:53:ef:fc:3e:
c3:87:95:ec:70:db:22:dd:e4:d1:8d:76:5c:ee:4e:81:d3:43:
7f:82:8f:4c:b1:2b:57:ca:a1:b8:80:4c:3f:39:88:96:3b:82:
f5:77:de:85:a2:11:a3:9a:be:cc:01:be:da:6d:47:8e:c1:a3:
0d:91:cb:21:a9:3b:a1:f2:cd:df:66:b2:f7:91:78:59:8e:3a:
fa:14:41:88:83:e0:b8:7b:cf:8b:cd:85:ef:92:9a:ca:f2:84:
0d:9c:a1:8b:74:fb:0f:c6:40:31:a4:71:da:16:20:3c:48:25:
20:92:33:d6:44:d2:dd:cb:6a:9f:f3:66:13:15:bc:52:80:e2:
2e:8d:8d:5f:35:be:f8:9d:7d:fe:e5:c2:c5:25:f0:b1:75:3c:
6b:0c:9e:62:70:bb:c4:9c:58:b5:4a:60:20:f7:52:26:92:c4:
4b:5c:83:6b:99:bc:92:89:2a:c8:3d:e0:09:17:e1:19:29:23:
25:26:65:2b:5f:b0:bb:53:76:f3:cc:20:85:a3:62:2e:da:57:
c7:28:46:bb:30:4c:83:e3:c5:a0:ee:80:ae:c5:99:1d:7e:b2:
da:82:57:fa:5c:b9:3d:06:44:4a:22:4c:76:e7:f9:20:23:01:
7a:b7:46:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:43:56 2025 by rpki-client