Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
File: k-zM3oXECxVPkZuvZO8DLscNdR4.mft (raw, json)
Hash identifier: HAN7iHsrX95gXB6Z+nC2HyN0ia9RZSm4aMRedN+spF0=
Subject key identifier: 2B:14:9D:FD:18:DA:4B:D5:AB:57:63:75:E2:75:81:EF:C7:C5:CF:55
Authority key identifier: 93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
Certificate issuer: /CN=93ecccde85c40b154f919baf64ef032ec70d751e
Certificate serial: 0198D4E023AF085703E512ADB55AE73A5223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:01:55 +0000
Manifest this update: Sat 23 Aug 2025 03:01:55 +0000
Manifest next update: Sun 24 Aug 2025 03:01:55 +0000
Files and hashes: 1: GqA5UTC990ZFigxOynJ8MXXo8rI.roa (hash: YOFtkRTAig5lLMiPuaPFv21LA8hii5BrqwulK2FRjwI=)
2: k-zM3oXECxVPkZuvZO8DLscNdR4.crl (hash: iR83CEbFaX2bzd1nCJnscb86D3ES1Oki0VoG8TRTWBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:23:af:08:57:03:e5:12:ad:b5:5a:e7:3a:52:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ecccde85c40b154f919baf64ef032ec70d751e
Validity
Not Before: Aug 23 03:01:55 2025 GMT
Not After : Aug 24 03:01:55 2025 GMT
Subject: CN=2b149dfd18da4bd5ab576375e27581efc7c5cf55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:55:89:0d:ca:30:31:c9:cc:fa:f5:d4:5f:
23:09:0c:39:22:00:7b:6c:a2:eb:79:8d:14:96:72:
5f:ee:65:f9:ce:e9:1e:bc:4a:d7:63:3d:b8:0b:b1:
8c:0d:14:af:19:36:76:95:83:35:ef:fe:4d:38:0d:
a9:f3:c1:49:89:b6:7a:8f:9d:a7:5b:49:07:68:d4:
21:be:f1:15:61:05:6a:0e:0e:45:b4:6c:5b:ee:f9:
ca:c6:3e:ea:14:8f:f1:14:03:b0:83:49:89:db:56:
40:96:b9:b4:52:3e:e3:b4:29:e6:e5:7f:41:ef:e2:
76:c9:2f:50:48:b1:50:22:c7:1d:82:4f:3f:49:11:
0e:bb:3b:c7:8c:26:4d:18:d4:47:92:0d:93:f5:2a:
de:43:e5:e0:aa:b6:d5:4b:ca:b4:e3:7b:7d:a2:ff:
f7:ee:a8:9e:2d:d7:47:d2:d0:41:fb:6a:26:72:a1:
ec:7f:e0:11:48:a9:87:31:0e:35:ee:13:f0:b9:1f:
1f:6f:1b:78:15:7b:99:74:ef:2f:d9:59:5e:e3:1e:
93:c7:ab:d7:2a:16:dc:04:46:29:a7:3b:cf:82:8d:
8e:5e:1d:e2:18:f2:22:c8:27:49:e2:6a:f2:de:dc:
d1:e4:22:29:03:b6:a1:86:9a:d2:75:b4:06:17:58:
15:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:14:9D:FD:18:DA:4B:D5:AB:57:63:75:E2:75:81:EF:C7:C5:CF:55
X509v3 Authority Key Identifier:
keyid:93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7f:e5:9f:bd:d8:73:0a:d0:f1:6a:43:16:a5:19:62:be:66:
a8:7b:e1:01:68:c4:dd:0a:7e:e5:e4:81:4f:9f:ea:77:00:4d:
9b:b5:6a:2b:11:f5:ad:7e:3f:d7:67:1b:56:e5:62:ba:de:b1:
f4:d7:c3:0e:fd:6c:79:b0:2a:0a:bf:87:9d:32:3c:d0:32:1d:
5f:4d:bb:23:41:96:24:f7:45:da:d8:e3:65:81:3b:45:0d:b2:
c0:97:7a:66:01:67:69:6b:7b:3c:29:e5:91:32:76:63:1a:b2:
49:69:30:bb:5e:25:88:95:fc:fc:70:0b:2c:6d:3b:a5:6d:fb:
45:99:a8:01:5a:32:77:29:30:67:16:f0:0a:3d:e9:05:54:11:
b6:3e:69:02:8c:d4:42:f2:ff:a2:99:12:f8:79:92:cd:18:d2:
86:81:bc:69:d9:c9:13:d3:7b:2f:da:93:4d:a1:3a:37:70:17:
41:ca:d0:96:bd:58:31:5b:bb:c0:cf:c6:22:35:d5:cc:10:61:
f8:c2:f1:16:11:76:28:2e:0a:cc:ce:3e:ca:b6:12:0d:83:8c:
09:cd:18:3f:28:f3:fd:d5:73:5c:25:55:bd:28:6a:c7:a4:c8:
be:2a:d6:20:5e:1c:70:e4:5c:06:63:5d:68:87:6b:dd:18:cc:
7f:f6:9e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:46 2025 by rpki-client