Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json)
Hash identifier: lFvElNQ4XZVOqUi1q2ujWb83sB7FM2Etbj/iwCi/oyM=
Subject key identifier: A4:C0:71:C1:1D:C3:E9:CD:DC:30:DD:A7:BB:E5:BE:5A:4A:FF:C0:EF
Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575
Certificate serial: 0198D54E12E361724CF653A3909DCD04C862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:00 +0000
Manifest this update: Sat 23 Aug 2025 05:02:00 +0000
Manifest next update: Sun 24 Aug 2025 05:02:00 +0000
Files and hashes: 1: aJJ-YdVMN1blRA6zgwpwFOSytEA.roa (hash: 18Fas5Pt/vlUe10SXqZ/nCZNIMF4HTl3m3WAOZlwA4Y=)
2: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: M/qHkjZTQiBwpH82W2iLcVg0YYmyVNU6r5GyiWPqMo0=)
3: tAP5YUU5DttldDjJZneQqbjMnns.roa (hash: Wr2DWhImWg05UEtM87fECNOHzZETG/9GHlcwfpi8dUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:12:e3:61:72:4c:f6:53:a3:90:9d:cd:04:c8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575
Validity
Not Before: Aug 23 05:02:00 2025 GMT
Not After : Aug 24 05:02:00 2025 GMT
Subject: CN=a4c071c11dc3e9cddc30dda7bbe5be5a4affc0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5a:51:65:b2:7f:80:3a:b4:08:e2:6a:1c:5d:
19:4e:62:ff:18:fa:a0:14:74:ed:e0:31:31:c3:12:
fb:a9:a9:5d:da:fc:00:8a:4a:7d:06:6b:90:d6:a6:
3e:d5:87:f4:00:5d:25:92:6d:cf:0e:68:c9:d1:50:
d5:04:61:9f:5a:36:b0:1e:61:5a:dd:0b:99:cc:f8:
1d:c9:00:4d:6b:17:1b:26:ef:09:ec:d5:07:a7:05:
ea:22:70:21:ce:02:88:28:45:31:ef:3a:25:b2:6b:
89:f7:29:0b:d9:96:bd:c8:0e:58:f4:ac:66:9c:c6:
f7:36:88:c7:0b:fc:ff:21:93:c1:f5:f3:12:67:83:
1b:14:cc:0b:81:06:38:20:1d:e8:72:07:60:43:2a:
71:00:30:dc:06:58:2b:cf:e1:31:d7:1d:f6:9e:4e:
5e:ab:b7:d2:70:55:ca:46:87:7a:51:d0:05:ef:4f:
7c:13:e2:40:18:79:2b:92:c0:41:62:80:67:76:b7:
63:83:86:45:8a:3d:e7:1a:14:8b:57:f4:25:99:bc:
f8:ff:9a:1c:df:8d:c3:70:02:63:67:5e:6e:d4:98:
4e:9a:cc:28:c2:5b:6c:a3:aa:ec:d4:12:08:11:eb:
61:80:ed:e1:02:d1:02:c6:29:5e:55:08:82:31:c8:
95:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C0:71:C1:1D:C3:E9:CD:DC:30:DD:A7:BB:E5:BE:5A:4A:FF:C0:EF
X509v3 Authority Key Identifier:
keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e5:38:c0:59:49:5f:c1:4b:37:04:d5:f8:e3:53:e5:db:b6:
5e:6c:5d:5c:e1:7f:45:5e:38:52:10:65:9d:91:81:6d:c9:56:
8e:18:63:1d:ff:ca:f8:91:59:47:46:b2:c1:e4:c9:14:19:fa:
5c:02:e0:3e:ef:69:c2:fd:ce:92:6d:9b:a8:8e:56:64:81:c0:
06:c9:db:28:23:73:7c:76:95:77:ca:61:d5:bd:e4:51:38:87:
95:4f:9b:f6:6a:4e:a0:a8:c1:ed:db:fb:06:6c:5f:2b:d3:3b:
06:f2:99:0e:08:e3:98:04:af:f8:d6:7c:b4:24:d7:54:51:43:
fb:34:8f:44:1c:c9:29:38:c0:67:e1:50:d4:d0:a9:ad:f5:16:
b4:cf:c1:7d:1a:b0:fc:66:56:10:c2:32:7f:e0:6f:c5:3d:d3:
64:ee:33:58:2f:6b:ae:f0:f8:89:56:13:f0:2d:54:23:fb:85:
75:db:9a:1a:7f:3c:0c:d9:3e:dc:a9:e0:b0:d5:a7:a9:04:59:
81:ce:76:ef:d1:2a:4a:c9:73:01:34:33:11:84:82:85:42:b5:
07:d8:9c:71:3e:2a:e0:d5:26:98:ca:a0:a0:30:45:eb:c4:4b:
25:51:ac:34:af:6a:23:13:b6:f4:09:58:30:c7:ef:22:13:8f:
b6:c2:0b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:30 2025 by rpki-client