Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
File: KjbWeMS7ysJK5r6pokyZXEjVk_A.mft (raw, json)
Hash identifier: u8gOULE4nrWphO8rdWQWDD7vPlboZnefnJ4U3Mk0rfM=
Subject key identifier: AE:EF:8B:04:E1:11:5A:97:D5:22:DC:EC:B7:7B:28:5C:11:20:51:12
Authority key identifier: 2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0
Certificate issuer: /CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0
Certificate serial: 0198D7E156932C577F76E1F96FD9F7BA0471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 17:02:05 +0000
Manifest this update: Sat 23 Aug 2025 17:02:05 +0000
Manifest next update: Sun 24 Aug 2025 17:02:05 +0000
Files and hashes: 1: KjbWeMS7ysJK5r6pokyZXEjVk_A.crl (hash: Hs2/jl2rBIo6PIkNQAdxzE2fnuiNbUZXJlhoPe3Cvfc=)
2: zK1LIZGeSSnaNXNW0qcn6w1MLCU.roa (hash: e8RwpvlrpxWqEOoeavX1Cyz9aTwhsZ8GdJGcHGa5+Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:56:93:2c:57:7f:76:e1:f9:6f:d9:f7:ba:04:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0
Validity
Not Before: Aug 23 17:02:05 2025 GMT
Not After : Aug 24 17:02:05 2025 GMT
Subject: CN=aeef8b04e1115a97d522dcecb77b285c11205112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:07:ce:ea:c9:8e:4e:ae:90:eb:6f:5b:39:87:
e5:c0:66:96:48:30:c3:fc:12:09:ec:1d:b3:b0:1d:
e5:c2:59:f8:7d:bf:4e:d0:e0:cb:e2:62:43:a1:c6:
b8:48:b2:bd:23:24:05:10:cf:65:8c:b5:87:4f:f6:
35:5b:01:6b:c5:9a:e5:a2:b9:75:54:8d:4f:17:a8:
2b:ec:45:fb:f1:4d:44:bd:0e:23:4a:0f:56:8e:19:
86:fb:cc:7f:c7:28:7e:d9:e1:e9:25:9c:1e:f0:a5:
af:d6:35:cd:b9:cd:7f:08:f3:af:c5:6c:a6:25:cb:
39:09:77:12:cd:e5:e9:be:0a:9e:29:7e:96:e0:fd:
9f:7e:ad:78:75:e1:23:c8:19:97:f9:70:4a:d2:88:
17:d2:ce:db:92:8f:1a:b0:88:46:72:93:a3:b4:48:
ea:62:2f:5a:59:c1:c2:41:17:e8:c4:4d:0f:f9:7e:
7d:0d:08:e2:56:87:c8:4f:4d:e1:04:22:e2:9f:c5:
64:5b:87:1f:89:07:02:3a:9b:bd:e7:17:97:d8:d0:
07:65:c0:11:16:2a:05:61:b4:06:ed:3c:31:2a:ab:
e3:d9:a1:b9:c4:e5:78:c9:29:e6:79:1b:9f:ca:cd:
60:cd:d8:b7:7f:e4:4a:7c:86:52:1c:87:8e:be:b5:
ea:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EF:8B:04:E1:11:5A:97:D5:22:DC:EC:B7:7B:28:5C:11:20:51:12
X509v3 Authority Key Identifier:
keyid:2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1c:c1:d3:70:8a:ef:b4:e7:c5:4e:db:ea:cd:47:36:8d:21:
bb:74:ab:1b:55:48:b2:f1:92:a2:9e:9a:58:ee:1f:47:a7:d4:
37:ac:5d:32:0a:08:b6:3f:d4:fb:be:62:87:a1:96:24:df:7a:
6c:8d:a6:91:6e:95:8b:05:14:08:f0:89:dd:c5:12:40:6e:84:
93:ed:f3:61:ff:50:74:e7:ed:a2:23:64:61:74:69:e1:fb:bb:
3a:9b:19:53:d3:2c:67:81:c3:8a:a7:e4:41:b6:fa:4e:b2:ee:
65:38:ae:42:10:a5:9f:75:f3:3c:e5:f1:82:a7:a8:d4:43:6d:
6b:2f:61:a4:e8:60:be:1c:cc:f9:44:08:57:dd:cf:da:c5:6d:
04:3d:8e:d9:00:27:c3:bc:5f:1b:2b:b3:ae:83:2b:7e:a2:bf:
b0:69:8f:89:2a:50:49:97:81:15:15:a1:ea:d7:8f:d3:ce:a0:
3d:04:75:d5:40:ee:53:24:ef:1a:64:53:56:87:64:8e:87:b0:
56:45:b8:a4:fc:aa:e7:21:20:44:b7:09:e6:7b:16:d4:61:08:
29:f8:8a:04:9b:6b:e1:35:67:41:e1:46:eb:62:cf:66:43:46:
c3:ca:69:70:cc:d7:20:e8:1e:69:3f:66:e0:29:c1:ea:b1:c3:
63:53:88:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:49:56 2025 by rpki-client