Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
File: kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft (raw, json)
Hash identifier: EIjpZ0RFVojmRqSxJ9BRtAbt0tS608LmyyN7aQxfmsE=
Subject key identifier: 5D:A8:B4:46:55:C6:71:F9:5B:5F:0C:29:B3:C3:36:13:C0:4F:21:F0
Authority key identifier: 92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
Certificate issuer: /CN=926b9336fcaf3657cedeba53c47e948010877e20
Certificate serial: 0198D7A95077A3C9BBCAECD81468AA323276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 16:00:54 +0000
Manifest this update: Sat 23 Aug 2025 16:00:54 +0000
Manifest next update: Sun 24 Aug 2025 16:00:54 +0000
Files and hashes: 1: Iz4og1YNjZbe-ZzC3Rok6fWTxAs.roa (hash: 0YDfRJkLurctQB+o/ewy6zBfFbZnDiGSOFrKrpKkhg8=)
2: kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl (hash: 8wQjVPveX4Tt3wk15HYRZmZekJw5Ar4fWlMd+KLXBVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:50:77:a3:c9:bb:ca:ec:d8:14:68:aa:32:32:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926b9336fcaf3657cedeba53c47e948010877e20
Validity
Not Before: Aug 23 16:00:54 2025 GMT
Not After : Aug 24 16:00:54 2025 GMT
Subject: CN=5da8b44655c671f95b5f0c29b3c33613c04f21f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:52:ee:e9:cd:03:a3:e9:79:d7:fd:8c:86:
99:ed:08:07:21:70:a0:f6:55:32:6f:3f:20:15:95:
15:58:7e:9a:2b:05:ac:0a:31:37:97:a9:33:35:ee:
1b:63:86:68:86:66:fd:23:48:97:f9:1a:c1:40:bf:
aa:84:fb:2f:62:61:a4:f5:fe:10:ae:dc:f9:12:7e:
34:2b:b5:58:ae:39:c8:34:6d:2b:89:55:57:a6:65:
24:6a:01:a9:4d:e1:d1:d0:32:7d:dd:53:56:2e:a1:
ae:71:51:5f:f8:97:32:fa:a4:ca:ca:f5:bc:a4:33:
b4:6c:d0:d9:d5:a8:13:79:76:42:b4:df:39:2a:d2:
df:0b:06:2d:c5:11:e5:41:77:88:5f:5a:df:82:07:
06:b0:d9:06:17:08:5b:ef:67:21:49:1a:5c:4b:f2:
c6:8a:58:45:21:26:c9:f0:24:ff:47:44:d9:f7:85:
a3:a3:a2:46:10:62:b5:16:6d:81:c3:d5:eb:73:ad:
7e:57:d7:ce:f0:8b:d7:1e:b3:59:e0:c4:82:06:1e:
6e:cc:aa:6c:e4:ea:b0:d2:0b:07:0c:e2:cd:e2:77:
c9:5a:b7:40:6e:cb:24:98:c3:82:28:72:ed:f5:b2:
88:3c:23:cc:bb:28:c3:ad:08:2a:a3:a1:c4:b6:cb:
3d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A8:B4:46:55:C6:71:F9:5B:5F:0C:29:B3:C3:36:13:C0:4F:21:F0
X509v3 Authority Key Identifier:
keyid:92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:71:2b:94:0d:15:27:ad:04:99:a5:b3:89:65:a7:dc:15:c3:
bd:5e:9c:69:dc:24:f8:72:bc:10:39:61:b8:53:43:1a:6e:af:
ef:55:3c:ab:ec:22:f9:a7:df:33:c8:96:ec:2d:8f:1d:f3:87:
95:7d:23:45:08:b7:0d:a5:59:c8:4e:4f:7a:91:a5:12:52:83:
5c:c7:50:a4:09:90:af:27:a2:db:c2:54:19:1f:b3:82:c1:2f:
7b:f9:51:36:2b:ae:53:86:29:12:be:7b:0d:08:6c:c7:19:8b:
12:bf:50:49:a0:96:bf:81:32:35:e5:5d:df:43:51:b7:34:a8:
66:f4:7f:b5:55:16:56:fa:29:30:9c:8f:e5:a0:72:70:2e:7f:
a4:70:52:c0:07:ec:22:de:2f:cd:cb:d0:f6:7a:db:eb:36:bb:
a1:bc:58:0a:d1:b6:6d:7c:fa:45:39:9b:ae:89:a2:21:9c:b4:
2e:4a:61:98:68:92:27:cf:79:82:29:65:6b:09:5b:4f:fd:c5:
75:af:d9:46:c8:b9:42:41:c0:f9:ae:ce:07:19:ab:33:a4:15:
cc:8a:9b:66:cb:88:e1:3d:c8:37:0b:fe:da:91:9d:ed:d4:d6:
b1:db:3e:09:d5:ac:f8:e2:f6:44:3f:24:26:9e:dc:21:01:0d:
50:96:68:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:38:16 2025 by rpki-client