Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
File: kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft (raw, json)
Hash identifier: iNLLxPCLcST563YYivKXbyvJsjYF0o6uTuBNtF9+KfY=
Subject key identifier: EF:9D:5E:52:E2:FB:B6:41:0E:12:1C:8D:37:5C:33:20:C4:37:16:D2
Authority key identifier: 91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F
Certificate issuer: /CN=91d01c47f00e64f35cc752d03b34a71b71406b3f
Certificate serial: 0198D73B22B9787509646C7B5367333D5CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
Manifest number: 1578
Signing time: Sat 23 Aug 2025 14:00:33 +0000
Manifest this update: Sat 23 Aug 2025 14:00:33 +0000
Manifest next update: Sun 24 Aug 2025 14:00:33 +0000
Files and hashes: 1: 6fnAZ8W2MGF8ZNrQkh_nCxeTpv4.roa (hash: VVdXTpC74ZKSlf0OaYeG4sfAbOWwASAnFr5UUxM1yrQ=)
2: jwF2Fe8ZjLBRTo3L_7TINNi10fQ.roa (hash: Ap/raQBvujEIQc3hDUBU94DRN1La9dL+OAKrqJu5rbU=)
3: kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl (hash: GTTvDPNYheZW642pajs9dVXnjRmSUVYYehTveq8RPE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:22:b9:78:75:09:64:6c:7b:53:67:33:3d:5c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d01c47f00e64f35cc752d03b34a71b71406b3f
Validity
Not Before: Aug 23 14:00:33 2025 GMT
Not After : Aug 24 14:00:33 2025 GMT
Subject: CN=ef9d5e52e2fbb6410e121c8d375c3320c43716d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e9:a7:e7:6e:5f:b6:9f:18:a7:2d:7e:ab:68:
b0:92:b3:8f:1d:1a:a3:ad:ac:e2:3a:83:02:8d:b4:
b8:b6:30:b9:fd:3a:64:bc:ae:ff:e1:8e:a4:97:89:
ed:0e:15:6f:12:94:29:a0:0a:e3:f1:4b:56:92:36:
dd:28:e4:88:f7:1d:3d:0e:41:2d:75:93:74:b3:59:
bc:24:8f:41:f5:93:cd:b9:ac:31:81:88:47:c0:25:
c6:c9:9b:c8:4f:f4:fe:fe:71:1c:e3:99:5f:71:71:
8f:ae:d8:4d:a0:ba:ef:86:9a:b6:67:11:4d:e7:d7:
d6:41:2e:e0:36:99:da:6b:26:43:54:c2:7b:81:ae:
3c:12:9b:8c:f5:6d:b9:e7:44:f1:cc:4a:1c:49:11:
22:c9:bb:b5:a4:85:45:38:aa:7d:f5:b5:5d:b8:81:
f1:79:4d:93:b5:58:36:1d:ca:6b:82:d1:60:2a:21:
ea:4f:c3:22:1d:c6:11:fc:46:ba:f4:44:92:db:5a:
2b:e1:3f:f1:15:30:80:2c:f5:8e:27:26:03:0b:96:
8c:4d:3a:35:09:bd:80:57:2a:01:83:d9:32:87:de:
ca:2f:4d:72:fd:b8:b6:2f:45:3c:3d:fe:de:b7:6b:
45:26:b3:53:5a:87:12:23:b3:52:ba:42:c2:bf:36:
08:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9D:5E:52:E2:FB:B6:41:0E:12:1C:8D:37:5C:33:20:C4:37:16:D2
X509v3 Authority Key Identifier:
keyid:91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:31:1e:3c:53:ec:40:8d:03:d0:40:f0:16:88:4f:ea:9c:6b:
c0:95:5b:a6:69:fa:1b:46:56:6e:ad:7a:20:fe:d1:2d:f5:22:
7e:c4:86:09:75:b3:45:f6:a0:83:5c:c1:bd:d3:6f:e2:5f:ab:
99:9f:76:23:2d:fa:0f:c3:d1:19:27:31:80:d4:ae:ff:e1:1a:
46:b6:c3:ed:df:59:b8:fd:9a:24:88:87:21:ce:f9:42:b6:a4:
36:b1:6c:b7:51:df:4b:90:fb:e2:d0:20:98:1e:9b:93:a4:f5:
72:c3:a6:c4:c4:22:3c:d7:3c:f2:39:92:44:50:9c:70:23:32:
dc:6b:50:3a:de:7f:ee:d0:64:2a:f2:e1:13:28:92:14:61:6d:
4b:6c:03:b1:27:f9:64:68:7d:34:da:57:3f:14:3d:14:6d:bb:
f3:db:5b:04:f3:66:03:c5:7e:e8:2d:97:f2:a7:57:eb:05:9b:
5d:a6:f6:a9:52:2c:b8:b8:2a:cb:9e:eb:8b:70:8c:e7:f6:18:
46:73:ca:ed:74:e6:64:76:a3:8a:95:18:8c:4e:d1:bc:53:b5:
4e:2c:bf:d7:cb:e8:e0:43:f6:ea:36:86:82:f0:27:5e:1b:bc:
d2:f9:60:3c:11:a9:9f:76:9d:de:37:81:4f:ef:a3:e3:ca:2d:
51:d1:fa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:50:51 2025 by rpki-client