Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
File: kS8Wn8dEy-iVqfhe2reW1KxwACk.mft (raw, json)
Hash identifier: 5OumPl/EeJ+f0ZIYw3Skpja+WWMYdPXFiq8aEKgky+k=
Subject key identifier: BD:7F:2B:EA:A3:EB:8D:3B:C1:A8:8B:9F:AF:36:1C:87:B4:C1:AF:B5
Authority key identifier: 91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
Certificate issuer: /CN=912f169fc744cbe895a9f85edab796d4ac700029
Certificate serial: 0198D54E97059C0BEA3B9A69B52730050B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
Manifest number: 0E58
Signing time: Sat 23 Aug 2025 05:02:34 +0000
Manifest this update: Sat 23 Aug 2025 05:02:34 +0000
Manifest next update: Sun 24 Aug 2025 05:02:34 +0000
Files and hashes: 1: TYH4Ce0-k-wvqgRH0i5li3BgriI.roa (hash: Q3Et9vzkH2i83UUu897K4DdPhoe5uvwQSHH8BVd+9Y4=)
2: kS8Wn8dEy-iVqfhe2reW1KxwACk.crl (hash: HFkXSLtpeKpOk7Wov19tFpSqqS2e/E2DHY8IgVjUBT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:97:05:9c:0b:ea:3b:9a:69:b5:27:30:05:0b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=912f169fc744cbe895a9f85edab796d4ac700029
Validity
Not Before: Aug 23 05:02:34 2025 GMT
Not After : Aug 24 05:02:34 2025 GMT
Subject: CN=bd7f2beaa3eb8d3bc1a88b9faf361c87b4c1afb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:b2:34:58:13:4e:14:5f:f4:87:1e:10:47:
63:11:5e:e4:cc:e9:52:ff:6c:56:0b:46:78:75:10:
58:79:10:a0:77:11:8b:a5:81:8f:31:69:72:01:9e:
82:6f:27:da:9c:7c:46:37:54:35:97:5d:a7:8b:8c:
ac:a9:24:a1:e0:75:b1:ca:27:dc:55:f9:44:34:35:
c8:89:bb:c6:9e:a2:ca:0b:f9:a0:35:ad:f6:ca:36:
99:10:db:d5:c2:ea:25:a1:18:58:b1:e7:dc:3a:ae:
03:09:64:6b:5f:8e:6c:d7:67:a0:56:68:4e:da:05:
81:25:69:1c:ba:0c:29:a1:9c:fd:81:72:fd:ca:87:
16:37:28:6b:3c:3c:69:a1:92:f8:ed:bc:43:a3:a3:
ca:21:fa:10:8c:3e:02:68:83:43:88:01:b7:4c:e0:
ee:0c:d6:88:9f:59:b9:b7:ba:f6:f1:25:e6:ea:c9:
dd:2f:70:2b:df:82:e7:60:88:2b:59:ef:e2:75:7e:
7b:d8:26:f5:69:02:a4:66:bf:06:c6:97:3b:f5:c4:
37:76:ea:80:27:a7:51:0a:8c:f0:c1:5c:68:97:d1:
1a:2f:27:49:c4:c5:71:a8:ec:10:2a:81:2b:1c:c2:
43:e3:d0:3c:38:df:da:74:89:f3:85:3c:41:30:11:
77:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7F:2B:EA:A3:EB:8D:3B:C1:A8:8B:9F:AF:36:1C:87:B4:C1:AF:B5
X509v3 Authority Key Identifier:
keyid:91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fa:15:3e:68:c5:dc:5f:a8:25:88:d7:32:a1:af:5f:ff:5e:
ab:b2:2b:4e:e8:1d:8a:f4:dd:16:03:46:7f:af:5f:4c:a5:8c:
66:14:75:00:21:11:0c:c4:6a:ab:b4:7f:36:8c:8c:21:46:5e:
90:86:0b:34:84:77:58:39:ac:0e:06:eb:b9:82:31:2f:68:d2:
f0:0b:be:91:15:d6:18:f8:0b:d6:d1:c3:d6:c2:a3:61:3e:4c:
65:d5:fa:67:f9:cc:c3:cd:a0:89:5c:14:3f:7a:ca:02:af:08:
c0:71:22:a3:1a:3f:50:47:e8:3f:82:fc:0b:75:26:a6:c1:92:
d2:a0:1f:f1:4e:7c:67:40:5d:f0:ff:1d:6c:66:25:5c:5b:ae:
79:e5:63:56:28:0b:18:48:7c:ec:fa:3e:76:69:8b:4c:e8:f6:
50:e4:03:09:81:32:f9:c8:ba:90:b7:24:0f:b1:d5:83:c7:1a:
c8:d7:ca:7f:2b:e0:33:60:4d:37:fc:a5:3d:52:30:28:d1:9b:
bb:48:dd:48:12:d6:34:63:f4:c7:b9:ff:c8:92:ae:b5:ef:e5:
99:41:41:67:14:1a:91:a4:bd:de:31:38:f6:a4:92:d1:75:31:
5d:e5:9c:2a:3e:80:40:59:0d:4f:d8:cb:03:7f:6f:e6:ae:02:
41:15:2b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:20 2025 by rpki-client