Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File: kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier: czzDrrULw93pTRtJXQ8biP3TydRPwkCuzqiLApPmpn0=
Subject key identifier: 35:D5:1F:DD:31:9A:20:90:09:21:B2:9F:3B:ED:16:34:C4:75:43:22
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 0198D4730B7DECD93C1BBE8BBDBC6122FE5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number: 165F
Signing time: Sat 23 Aug 2025 01:02:45 +0000
Manifest this update: Sat 23 Aug 2025 01:02:45 +0000
Manifest next update: Sun 24 Aug 2025 01:02:45 +0000
Files and hashes: 1: 12sEndDITu3xfG3rwq5fCgDFi4g.roa (hash: INrDxDNjEOUhYyeyQWwSgSxYwST/jFhVVKOzmgcOx8U=)
2: J-F67EchYLFsSdnuT0ELKO3zkVM.roa (hash: X3ffb8upes93ybjj9N2ywu5hcNrq4bSW9hgoat91kHU=)
3: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: d3HmN83SzZgFT1Z3RAJAI7wwcryrT8UcDXRHFySc54g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:0b:7d:ec:d9:3c:1b:be:8b:bd:bc:61:22:fe:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Aug 23 01:02:45 2025 GMT
Not After : Aug 24 01:02:45 2025 GMT
Subject: CN=35d51fdd319a20900921b29f3bed1634c4754322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:59:6c:1b:46:9c:ed:db:cc:54:f1:20:4e:
d5:68:1c:11:50:e7:0d:28:45:d9:ad:42:3b:f2:b3:
cc:30:99:cc:a3:9e:59:1d:fc:03:2a:19:38:83:77:
71:d1:37:61:ee:05:2b:42:94:c3:e3:11:2b:b1:f1:
b1:2e:3a:59:17:4f:0a:05:9f:e7:5b:2d:0b:5f:10:
58:79:3e:1f:77:55:19:49:7c:c6:8f:df:ae:56:39:
bf:12:ba:a1:ec:fb:65:f7:ad:7a:b7:4f:10:1b:89:
3f:1f:8c:33:cf:18:0a:18:03:b6:4a:ba:d5:b3:2b:
39:e1:5b:29:34:4a:ef:2b:cb:08:28:dd:e5:d9:1a:
9b:6b:9e:b6:0f:18:1f:ca:69:00:61:cf:2e:92:47:
83:1b:1c:61:8c:fb:8b:f6:34:23:d3:6b:53:a0:8a:
7b:f6:42:26:3f:8f:f7:18:fa:d8:c5:87:54:f2:60:
43:79:85:ee:d8:4f:69:79:c1:66:e2:01:7d:ee:1d:
d5:28:a3:28:d3:82:8a:fb:cd:98:6d:04:27:e6:aa:
f6:87:14:ea:6a:d9:24:c9:2f:52:df:6f:d6:0b:78:
0a:63:e0:0b:9b:83:73:0f:5b:06:63:13:2f:f4:ba:
d2:4a:33:1c:65:2b:5c:2e:a1:b9:b5:19:9f:50:91:
7a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D5:1F:DD:31:9A:20:90:09:21:B2:9F:3B:ED:16:34:C4:75:43:22
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:18:47:03:53:ac:d9:2a:13:1f:61:83:27:a1:87:77:13:5d:
0d:f7:3b:cb:70:d9:4b:3b:8d:c8:b9:76:5e:de:7c:4e:19:5d:
01:00:67:77:49:36:bc:34:b7:89:d1:5f:3e:91:69:01:a5:d0:
60:1b:4a:0d:cf:7f:fc:f9:1e:51:f7:f7:b1:a5:01:08:ad:2e:
58:ca:c4:93:a7:d8:19:6e:cc:fc:75:18:f9:b7:a4:ce:9c:28:
33:4a:8a:76:61:f5:23:fc:bf:b4:f7:c0:1b:41:6f:10:56:8a:
a3:9d:d9:43:54:b6:3b:7e:64:69:d8:f0:f8:9c:a2:62:16:1b:
78:3f:54:a8:a8:62:0c:06:4d:13:12:c8:80:44:1b:27:85:cd:
ec:7a:f3:b4:cd:e7:f2:64:0a:89:f5:8c:3c:5b:51:a4:8f:1d:
f1:da:e7:77:49:f7:55:a5:80:e3:b1:10:c1:b8:a9:f5:5c:7d:
c3:a8:20:3d:f0:6b:2c:53:88:a3:eb:50:97:58:b1:40:af:1e:
d4:58:14:90:2e:ee:43:c3:c6:5c:19:6b:ec:a8:c5:33:62:28:
72:67:30:c9:08:d9:43:98:19:26:1a:ae:96:58:84:b0:0c:8e:
c2:0c:93:1e:fa:9b:90:0c:f3:fc:2f:0e:38:06:ba:29:e6:18:
65:12:58:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:53 2025 by rpki-client