Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
File: kNzOkQAEUUlMQ8FdFy2i651beVY.mft (raw, json)
Hash identifier: a47DxFuHRaKMRclK5mTTg3WbK7BKjJEa75h3E9Zmg9k=
Subject key identifier: A9:5D:93:6B:F0:67:A7:63:FD:3B:22:28:D3:5A:A6:67:AA:1A:CD:3B
Authority key identifier: 90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
Certificate issuer: /CN=90dcce91000451494c43c15d172da2eb9d5b7956
Certificate serial: 0198D583463BB2A7BAD271C6589743942CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:06 +0000
Manifest this update: Sat 23 Aug 2025 06:00:06 +0000
Manifest next update: Sun 24 Aug 2025 06:00:06 +0000
Files and hashes: 1: 4COA7EoK---RVhokcyyZ55j8IXE.roa (hash: 7qjze9UZTxm2x0zZOdskcsGbC7b8KEyBHHGZAVSSicA=)
2: kNzOkQAEUUlMQ8FdFy2i651beVY.crl (hash: OQjlJWskdIUzfpdp4f6PJhrq9EB/OmkDMnRTvJwQs7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:46:3b:b2:a7:ba:d2:71:c6:58:97:43:94:2c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcce91000451494c43c15d172da2eb9d5b7956
Validity
Not Before: Aug 23 06:00:06 2025 GMT
Not After : Aug 24 06:00:06 2025 GMT
Subject: CN=a95d936bf067a763fd3b2228d35aa667aa1acd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:85:cb:97:5f:87:70:90:22:fe:52:9d:f5:44:
89:cb:92:23:34:71:42:10:d0:ee:2b:14:1d:dc:d7:
06:a5:0e:43:da:79:fc:3e:d4:9c:c7:6e:e3:75:6b:
91:dc:09:f4:1c:45:f2:3e:25:6a:34:23:19:d4:5d:
0d:f9:0f:08:50:db:44:13:6a:53:59:05:00:ba:b9:
3f:62:c8:5f:50:71:7f:fb:58:33:eb:93:dd:96:74:
50:4c:ec:f5:ea:32:21:92:0a:47:06:8c:15:37:0f:
12:80:92:94:e5:c1:e1:b6:f1:82:87:f8:d9:86:bb:
d9:e1:15:43:a8:88:f7:29:b9:99:20:38:c7:9a:27:
85:b4:f3:cf:cd:bd:c7:3a:a6:da:db:4a:3d:11:23:
b0:d0:b1:27:f6:3f:a3:3b:db:56:53:a3:6b:0f:81:
2f:c2:74:2f:c4:b9:ae:05:a2:cb:b0:4a:34:9e:c6:
37:bf:e0:4c:84:b3:43:f3:b8:d7:25:43:fd:e8:f9:
23:d1:57:b5:c0:ea:60:11:1b:be:7b:ae:c5:73:f0:
8a:8d:36:d3:7a:43:76:66:6c:e6:ba:3a:76:0b:3c:
eb:50:02:c6:54:b5:6f:ea:1c:09:28:f4:c3:15:ca:
ec:b3:1a:56:73:5b:95:40:77:10:ab:4c:57:23:c7:
be:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5D:93:6B:F0:67:A7:63:FD:3B:22:28:D3:5A:A6:67:AA:1A:CD:3B
X509v3 Authority Key Identifier:
keyid:90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e3:c1:a3:02:6a:1c:d3:1e:ea:10:60:9a:52:cc:3f:49:8b:
f0:44:fe:f7:3d:49:8e:31:c5:14:1f:4f:07:d1:97:94:3c:56:
de:60:5c:23:1f:5e:77:80:f0:ca:40:1f:ed:b3:ad:65:ed:73:
06:cf:e9:76:53:74:fa:cf:84:65:02:03:e5:4d:89:30:93:dd:
1a:ff:15:fb:d8:f6:96:30:64:a9:34:54:cd:86:ab:51:e6:36:
a6:14:06:1b:1d:11:aa:64:ec:89:b3:c2:9c:69:b7:b6:24:00:
23:15:9e:03:54:0e:54:56:9c:83:9d:10:7c:47:16:ed:86:ff:
c6:f5:57:35:bc:b3:89:2e:eb:1d:bc:d7:6d:41:10:eb:fa:66:
77:68:ef:55:76:2a:0e:cd:63:16:b8:13:2d:6d:aa:31:ab:4d:
21:fc:21:fd:14:fb:9d:1a:04:ff:fb:e2:ed:03:7d:6b:0f:b8:
20:39:f3:06:81:00:04:a5:d1:84:d1:af:93:55:4f:bc:4d:a5:
3e:1f:29:93:e3:f3:60:86:1f:c8:02:fd:7e:af:3f:5a:b3:a3:
e2:28:7c:63:8e:df:89:cf:29:4a:f0:8d:f7:2d:ca:66:3e:44:
78:a7:2a:92:d9:d5:45:c1:c6:c9:00:22:88:9a:ac:65:8e:9d:
21:4c:99:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:29:40 2025 by rpki-client