Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
File: klUhi2nlURQ8UfodkZUS4aRMXJ0.mft (raw, json)
Hash identifier: qAN7Lksew/jM+UVVzb1nPiHsa9VXVnci3T5p6ZwbC9o=
Subject key identifier: 32:B8:53:99:8B:D1:E9:F3:CB:8A:B1:7E:4D:DD:69:76:6A:A7:4B:31
Authority key identifier: 92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
Certificate issuer: /CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Certificate serial: 0198D515D22678BAA17B64D3F4FAC48642EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
Manifest number: 138B
Signing time: Sat 23 Aug 2025 04:00:33 +0000
Manifest this update: Sat 23 Aug 2025 04:00:33 +0000
Manifest next update: Sun 24 Aug 2025 04:00:33 +0000
Files and hashes: 1: GHhfFCE3A402Gr9cqgeQDfKgELg.roa (hash: ykZ7G8ecfT0Bn+ARhYf2ZXhWVJ+RmdfZPxrqGyOjY/E=)
2: cl0W_dg6-SS2WR9dVPceKMDs_Vs.roa (hash: /pB+oHyiaUXmAAdbfPeCmqHZJhPFFFtRAcQpmJHE+pY=)
3: klUhi2nlURQ8UfodkZUS4aRMXJ0.crl (hash: AoYfOdAX2b8/nHBgEXpNCunqgN8UCm2S8HxnoUIUajw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d2:26:78:ba:a1:7b:64:d3:f4:fa:c4:86:42:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Validity
Not Before: Aug 23 04:00:33 2025 GMT
Not After : Aug 24 04:00:33 2025 GMT
Subject: CN=32b853998bd1e9f3cb8ab17e4ddd69766aa74b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5f:87:29:f7:8a:d8:cd:73:e8:85:66:18:e4:
ef:8d:e3:33:8c:f3:ac:e9:9c:b6:09:94:8e:fb:b1:
a3:8f:8e:07:76:63:7c:de:a8:6f:e0:c4:f4:40:e4:
dc:02:6c:83:fb:08:fc:15:04:fb:63:cf:72:6a:98:
8d:0d:46:a9:6f:75:50:bb:92:eb:26:f8:c5:5e:02:
68:7b:49:0f:44:20:63:94:0c:04:c9:bd:3c:41:8b:
05:3e:fc:23:fe:65:5c:f0:2f:09:fe:86:be:15:ac:
29:af:56:13:78:d1:7c:3e:fd:ca:76:2c:2a:5f:44:
ee:06:4b:b7:4e:55:6b:d6:48:86:ae:a4:96:36:d4:
3b:4c:64:a1:fd:44:56:c6:92:0d:91:de:d9:d3:78:
1d:44:df:a0:3d:65:59:d0:2f:5f:43:e4:eb:b5:9b:
c3:49:22:db:82:f2:7a:e7:b9:c6:02:ba:34:c3:67:
07:98:22:25:37:54:5c:06:92:96:7d:ae:81:e6:4f:
5e:80:64:3a:1e:49:c0:20:0b:91:ba:e0:94:c4:76:
5f:d9:1e:a8:5b:0e:f3:d5:ba:e2:9e:10:8c:bf:bb:
e3:f3:39:95:78:ef:f5:40:f0:4b:db:cc:3c:09:cb:
ac:82:54:ac:ed:69:08:13:df:2f:24:41:9e:42:0d:
41:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B8:53:99:8B:D1:E9:F3:CB:8A:B1:7E:4D:DD:69:76:6A:A7:4B:31
X509v3 Authority Key Identifier:
keyid:92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:79:92:08:05:a6:9f:50:eb:17:12:fd:8f:0c:31:56:86:7f:
25:72:fb:09:f2:fb:55:4d:c2:86:dd:43:87:98:60:3e:e1:8c:
11:41:24:c4:93:24:33:b9:da:72:22:6d:0d:36:08:f8:14:53:
95:8b:e9:4b:7d:ff:93:48:f5:e6:fc:76:69:87:bc:ca:c6:8c:
a2:fe:5c:24:3f:83:21:58:44:02:97:b9:73:86:c5:db:b4:28:
ec:8f:18:7f:90:ef:7f:bb:f1:b3:dc:1b:94:f4:37:00:92:29:
6a:31:ff:86:86:66:cf:05:96:e2:d1:6b:f7:35:6b:a7:3e:e8:
d3:3d:63:e5:a0:12:5e:e5:27:4f:ab:f0:67:2f:ea:94:5a:17:
1a:1a:c6:ac:a7:b2:e1:d0:18:ff:f5:00:f2:d0:7c:94:29:e0:
a2:9b:cf:1a:66:a8:27:0b:c1:08:21:52:dc:c7:75:3c:41:a4:
30:09:64:8a:ef:ad:90:f9:95:d9:f6:1c:61:1a:0e:ef:f5:a9:
5b:44:db:a7:f2:64:ae:21:23:65:96:26:86:e2:78:0e:6b:70:
92:38:58:20:96:1f:a0:9c:fe:64:35:95:39:d4:9f:55:ee:2b:
e2:32:ac:97:3d:5f:87:ae:78:35:3d:4e:e6:7d:04:a6:e6:3d:
92:6a:ae:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:54 2025 by rpki-client