Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
File: kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json)
Hash identifier: 2PeSE2mK0/K/SLHfE/ZSLNSXrYPw7U2UA2JQAcoTu04=
Subject key identifier: D1:0A:50:6F:CC:F2:67:3B:6E:3C:02:C6:7F:1C:02:91:74:A7:BC:58
Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Certificate serial: 0198D66092FEDF22885D3E7A5A5F96877864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:01:49 +0000
Manifest this update: Sat 23 Aug 2025 10:01:49 +0000
Manifest next update: Sun 24 Aug 2025 10:01:49 +0000
Files and hashes: 1: _wZ7w3Scv14H15k_iZCT9mnEPVI.roa (hash: JHtZU8B5JlDmryEaVYDxAxM9JobFikDH6+vwZ+Ii1xM=)
2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: fyU0jG+IOeKAA1Fh+NT5itp2Xiqz3ksRSN9Ih/IMEhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:92:fe:df:22:88:5d:3e:7a:5a:5f:96:87:78:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Validity
Not Before: Aug 23 10:01:49 2025 GMT
Not After : Aug 24 10:01:49 2025 GMT
Subject: CN=d10a506fccf2673b6e3c02c67f1c029174a7bc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c5:81:9d:6b:43:5c:ad:47:75:06:c5:85:51:
59:f1:9a:14:ce:7c:21:d0:c5:80:24:03:87:73:cb:
be:83:3d:f5:31:65:33:ac:4f:4f:64:f2:8b:9b:a4:
c7:09:66:09:9c:01:3b:35:70:87:93:ac:fe:33:ff:
e7:8b:a1:f7:f5:54:9f:e2:86:68:77:f4:8b:e5:78:
42:f7:31:0b:93:ad:47:9b:66:49:0a:58:79:11:fa:
60:c9:fe:0a:d4:ae:75:46:29:f1:11:06:47:1c:42:
1b:d3:37:5c:19:d3:20:f1:4b:2a:85:82:e3:57:3f:
b8:d2:89:37:c5:2d:46:d2:fe:c3:b7:24:3c:54:a9:
c2:b0:e2:59:3e:1a:28:87:b8:77:af:2e:f6:a1:5e:
c9:a8:3e:c2:b8:de:f8:7c:1d:5f:6b:10:fb:5a:7b:
2a:b5:d4:3b:2e:da:f1:96:16:bf:0a:61:fe:17:d0:
ef:db:aa:52:22:a6:0d:36:4d:63:9c:ea:20:f2:6f:
f1:8c:83:fc:02:3c:ef:6d:e7:6e:d9:13:41:f7:cb:
4e:cc:84:30:08:91:e0:e6:c4:d1:04:b0:52:a1:76:
4d:49:e3:b9:6e:72:dd:31:87:74:45:48:22:80:7a:
38:25:71:15:2c:7b:40:77:ea:80:be:b1:84:0f:b7:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0A:50:6F:CC:F2:67:3B:6E:3C:02:C6:7F:1C:02:91:74:A7:BC:58
X509v3 Authority Key Identifier:
keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:58:9a:84:82:14:74:81:0c:24:a0:de:10:ab:03:d4:3b:99:
ab:72:90:88:c1:4d:fb:72:cf:eb:a8:26:d1:fb:d8:f6:17:ee:
8a:05:4c:65:14:a7:6d:68:fa:3e:67:6f:2f:2b:38:b0:ef:d8:
7c:e2:cc:21:fd:2e:b7:d6:90:bf:0e:7f:2a:65:ea:94:8c:80:
99:b0:bd:40:3c:ef:a0:dd:51:d7:89:95:56:a8:11:41:92:c7:
df:aa:f2:37:9a:eb:f6:25:83:c7:1e:93:48:10:f6:c2:18:50:
84:a3:e2:aa:fd:7d:ce:b9:b2:4a:af:5f:3c:a6:e4:a4:5d:c0:
95:ca:dc:01:1f:ea:25:00:51:94:38:58:e7:6d:4c:ae:a9:75:
a3:c0:f8:bd:25:10:56:2b:b2:1a:14:8e:5c:c7:23:fc:13:b9:
32:72:c5:e0:8a:d6:97:e7:46:a1:57:6e:a5:a4:19:e7:bc:6c:
ba:ab:71:69:7a:34:45:05:6a:9f:59:15:8c:9b:81:1b:68:2c:
64:66:8c:61:77:09:8e:a6:5b:f7:04:a5:79:f2:b2:42:7e:52:
2d:26:bd:94:9d:47:64:91:64:fc:a7:e4:20:83:26:1e:a2:9b:
4d:d8:63:a3:38:7a:49:96:3d:58:06:88:32:8b:b4:6c:33:09:
0f:69:bf:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:20 2025 by rpki-client