Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
File: krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json)
Hash identifier: QkL68QJSyQ9YMQ7Q7OZHH2nJJR/S2QVmszrYb5AVmQY=
Subject key identifier: 33:8E:6B:F9:B2:82:48:1C:A7:28:B8:3A:F8:FC:7A:3E:16:78:CD:7B
Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Certificate issuer: /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Certificate serial: 0198D474104FA83B929A8F6D01CCA0B6DE79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
Manifest number: 156F
Signing time: Sat 23 Aug 2025 01:03:52 +0000
Manifest this update: Sat 23 Aug 2025 01:03:52 +0000
Manifest next update: Sun 24 Aug 2025 01:03:52 +0000
Files and hashes: 1: GCdodDNbb8kK5Nk7F_0-nAXSuto.roa (hash: +rPewf2fSfxIULsaTk1i8u3POGDLVTn+S/ryNeqw1mw=)
2: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: iHJT9+VC9BuByl45M93z8m5BqFjJ/CTep0oaPdIjJps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:10:4f:a8:3b:92:9a:8f:6d:01:cc:a0:b6:de:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Validity
Not Before: Aug 23 01:03:52 2025 GMT
Not After : Aug 24 01:03:52 2025 GMT
Subject: CN=338e6bf9b282481ca728b83af8fc7a3e1678cd7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:75:2a:5d:dc:7e:24:fd:75:9f:2a:7a:dd:5b:
e7:2f:68:8f:cf:19:50:bb:73:af:f4:79:47:49:b8:
ea:db:9f:0a:39:99:22:4d:11:1b:37:75:1c:9c:18:
32:c0:3f:02:06:f1:84:13:75:36:2b:97:52:aa:7d:
d7:b8:74:78:c6:6f:be:89:a8:be:4d:fa:94:7c:46:
ef:61:86:ac:fb:78:5c:c5:bb:73:67:d0:f0:5f:1a:
9b:74:d5:1f:76:f8:eb:a9:d1:19:2c:62:15:3f:08:
c4:b9:a7:b5:ff:01:6d:f3:53:5f:8f:0d:2a:1c:c9:
79:9f:45:ef:21:93:48:86:83:9d:92:86:60:d3:15:
cb:41:1b:d2:63:7e:c0:61:d0:76:03:d8:e9:f4:0a:
9f:c1:85:1a:05:7f:26:26:f2:4e:7d:18:db:2b:6a:
a1:fb:43:b1:40:86:6c:dd:be:a1:4e:62:42:17:66:
3e:d3:e6:f6:d5:b0:7d:a0:d1:ee:ce:97:23:a7:96:
bf:ff:89:3a:b0:52:97:72:e2:35:eb:95:a7:d0:c4:
03:af:99:14:4e:00:62:47:2b:9a:48:b1:e0:2c:52:
3d:58:98:e0:c2:67:24:a6:27:c7:12:5d:c6:ff:d8:
2c:3e:1e:ce:e8:89:e3:fc:70:b7:6d:d9:6d:50:74:
7c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8E:6B:F9:B2:82:48:1C:A7:28:B8:3A:F8:FC:7A:3E:16:78:CD:7B
X509v3 Authority Key Identifier:
keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6e:40:f4:a7:9f:72:df:4c:86:a8:13:2e:d6:00:70:1a:7d:
44:94:7e:9d:20:96:17:e0:da:89:ed:92:42:e5:db:40:21:c9:
02:d6:7e:3d:e4:7e:4d:8b:6b:52:90:45:9b:21:07:63:3f:14:
d0:6a:bf:d9:f7:f8:ab:28:86:eb:be:e5:7e:5f:02:e4:01:50:
cc:41:17:b2:9f:93:95:c7:bd:c6:d5:28:b1:d0:63:9d:ac:1f:
7b:6d:69:fb:d8:66:cb:f5:10:f8:8e:b2:d6:12:f5:d5:40:da:
e1:72:6c:e2:98:78:94:2e:53:37:1e:21:c7:54:77:5c:75:25:
64:33:e0:ed:08:cd:9c:22:b3:22:4b:2f:5c:b2:b8:17:03:8f:
f6:58:87:da:65:63:ad:05:43:10:0d:ce:28:c7:5c:d3:e8:ef:
9e:fd:2e:ce:ac:19:ca:e1:73:3f:b0:56:ea:da:a5:1c:2a:ed:
18:c1:4f:52:4f:0d:9c:2b:13:f7:fa:8e:d5:46:ec:cc:8e:e0:
e0:66:95:18:ad:20:a7:4a:52:76:58:5a:a0:03:41:e4:46:6f:
f4:80:5d:73:3a:6a:9b:d0:33:91:28:fa:56:d5:97:46:41:55:
c5:53:ab:e6:2d:3b:d0:e9:af:5e:72:0a:e8:a1:a2:93:e8:4a:
91:94:70:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:42 2025 by rpki-client