Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
File: kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft (raw, json)
Hash identifier: ps5DNr3M5pwMgkJE5NNEmjvkbURrZHMB2svH/qfoa38=
Subject key identifier: 3D:F5:1C:E1:C0:22:1E:1C:F0:8A:7A:49:75:95:7D:D8:E8:7A:F3:60
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial: 0198D5F199D3D03375DDB47E7AF757EE0CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
Manifest number: 1395
Signing time: Sat 23 Aug 2025 08:00:37 +0000
Manifest this update: Sat 23 Aug 2025 08:00:37 +0000
Manifest next update: Sun 24 Aug 2025 08:00:37 +0000
Files and hashes: 1: CqEnPa0b4387Yb8gdu7piqZKu5s.roa (hash: 7FXFrw8ym051yYy3atG+YQp+VQXGW2aiyGL+xx2k/Xk=)
2: XtIL7quorkF1D-_EHiY0b7NsohQ.roa (hash: q5vGrOEbLzDUn3MKsUHJKxeeKv09uan8ihtlp9ven8o=)
3: kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl (hash: 7MYAU64TDUy0hqScY3BXQCQZz+MqdO0RBIJ6Q0PeDCQ=)
4: rLGKVyUKBREDsm9aK6Yw80lJkwg.roa (hash: rOtQmfozC5J8XHLeIeIIoLbvmJ2uwQ3sbWfTJEEZWVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:99:d3:d0:33:75:dd:b4:7e:7a:f7:57:ee:0c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Validity
Not Before: Aug 23 08:00:37 2025 GMT
Not After : Aug 24 08:00:37 2025 GMT
Subject: CN=3df51ce1c0221e1cf08a7a4975957dd8e87af360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a0:7a:0e:28:2c:bd:63:4f:eb:c8:63:c0:b8:
3c:18:2d:ce:ad:36:bb:11:a3:1b:4d:46:8c:91:84:
e2:6b:61:c4:e2:48:cf:18:0a:70:c0:f6:df:d6:65:
b2:b3:3c:6d:56:d6:fb:da:22:f5:40:b6:a2:98:fc:
4e:e9:4f:31:4f:8d:75:72:30:c0:62:d1:12:79:e9:
55:9b:5b:1e:96:a7:ff:97:38:db:da:13:64:b6:7e:
85:69:3e:3f:f8:09:5b:9e:20:50:cd:6c:7e:ca:52:
ee:da:e7:7f:65:1a:e4:43:e3:84:8f:c6:19:38:9a:
bd:44:08:1a:ef:84:79:d5:41:73:45:0d:04:c9:13:
36:a7:58:68:b5:9f:03:5f:b4:e6:50:f1:22:64:be:
65:e0:ec:24:02:c5:20:3d:da:7e:c7:18:28:24:73:
68:39:2e:60:05:c0:9f:cd:ff:c8:89:15:5f:e7:8c:
d7:0b:6f:77:f8:5f:df:dd:19:94:40:13:f4:90:68:
54:50:95:fa:76:54:23:2c:1f:1c:7b:79:6a:f8:76:
8e:b0:dc:64:62:c4:fc:ed:09:07:3b:ee:5d:1c:72:
7a:dd:39:4d:e5:76:50:4f:56:3a:e0:1d:53:8f:c5:
42:c9:49:ec:cf:12:87:da:b9:e3:c8:4f:a5:f2:8c:
63:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F5:1C:E1:C0:22:1E:1C:F0:8A:7A:49:75:95:7D:D8:E8:7A:F3:60
X509v3 Authority Key Identifier:
keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a3:8b:ae:ae:72:46:59:b8:ad:31:b7:d9:9d:c0:c0:66:89:
30:69:2a:2d:cc:21:ef:bb:c7:00:fe:c6:74:1e:71:c1:16:21:
e9:79:da:f5:6a:46:a3:2f:06:5f:d3:8b:78:70:66:11:3e:00:
35:60:20:90:20:a9:21:34:87:6a:dc:be:31:96:7a:53:06:f1:
4f:d4:83:67:c1:85:eb:90:71:38:ab:91:27:63:51:34:dc:d3:
ea:d1:6e:e8:74:74:ce:8f:2c:47:57:5b:79:aa:13:05:9d:ea:
30:79:31:32:ba:2d:fa:ca:da:bc:5b:00:23:38:19:ca:55:15:
ad:1a:0d:2f:e8:7b:b7:0e:3b:b8:3d:68:10:2e:28:4d:15:ba:
d9:e4:b2:62:fe:fe:29:34:31:39:40:1c:66:e5:43:b4:0d:56:
90:a5:20:6a:a7:92:98:9b:dd:bd:18:ae:9e:32:97:76:18:e5:
39:68:da:9f:e1:aa:3c:ec:59:8e:16:c5:95:70:bc:cd:60:d5:
27:75:b9:cf:f3:68:e6:97:e7:8f:8d:76:a3:7f:3e:7c:79:4c:
dc:10:13:b9:3d:f5:9b:ad:c9:69:3d:4d:5c:27:aa:e4:f8:a2:
0d:97:2e:17:2e:9f:aa:1f:fe:f4:0b:c8:85:a8:f7:15:54:ac:
3b:fc:d7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:08:54 2025 by rpki-client