Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
File: kCmtIleaaAXB_4se5dc1KQwBNAs.mft (raw, json)
Hash identifier: dn9fyXmtsn5f9fqqebgVQ6B0OMIcLzkXGX3whG7SQOo=
Subject key identifier: 3F:B5:00:7B:0A:7F:F8:F4:3F:E4:B6:7B:46:A6:31:EA:96:75:DD:65
Authority key identifier: 90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
Certificate issuer: /CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Certificate serial: 0198D4E07B0E52A34F3BCEDD8AE1E5C7CD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
Manifest number: 15B2
Signing time: Sat 23 Aug 2025 03:02:17 +0000
Manifest this update: Sat 23 Aug 2025 03:02:17 +0000
Manifest next update: Sun 24 Aug 2025 03:02:17 +0000
Files and hashes: 1: FzL4SlSs_uFjHZS5YX5ero2HyWw.roa (hash: 3lSLuBolW3IlEuxgHTGtyQj8Ri5qBsROLZSgukqH9vw=)
2: kCmtIleaaAXB_4se5dc1KQwBNAs.crl (hash: 5y76CTFdjKkMnHGb7Lgsi8gOCvB4AaLYCG1I0otw7jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:7b:0e:52:a3:4f:3b:ce:dd:8a:e1:e5:c7:cd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Validity
Not Before: Aug 23 03:02:17 2025 GMT
Not After : Aug 24 03:02:17 2025 GMT
Subject: CN=3fb5007b0a7ff8f43fe4b67b46a631ea9675dd65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ec:1b:1a:23:e4:5e:c1:fa:0a:19:b3:a4:10:
77:67:04:79:94:35:e9:1a:d9:81:01:22:dd:92:03:
03:2b:6b:e6:3e:3f:ef:a8:ae:dd:db:ab:25:39:e0:
08:28:f2:51:f5:3b:06:89:2d:80:2f:90:50:12:27:
15:c0:37:77:8e:62:d7:68:e8:13:0d:f9:54:da:42:
dd:1a:9b:90:c9:05:cb:8c:9e:49:2e:e7:fa:36:ec:
c6:2f:21:82:4a:35:2d:6e:5a:29:d1:4a:c0:83:0e:
94:76:dc:3a:a8:40:92:31:0c:2e:94:98:e9:29:78:
6f:39:2d:56:e5:5a:66:96:58:04:1c:b9:e1:ce:17:
c9:f9:10:79:51:36:86:db:22:5f:45:ce:5a:e1:a4:
6e:b5:09:e6:5e:d4:7f:69:b5:5d:7f:78:3b:ff:df:
f1:7b:39:2b:82:77:8f:e5:0a:35:ae:2d:a6:35:47:
2f:48:de:2e:e5:25:01:ed:86:c6:c9:e5:ef:cc:37:
d2:cb:19:17:db:48:bb:60:73:62:e4:09:a7:b8:b2:
fd:3e:1c:3d:9d:b7:87:44:28:8b:3b:31:7c:1f:1b:
c0:3e:a2:53:86:ce:e4:7a:77:93:c6:25:65:ef:dc:
20:d6:5d:e8:18:1b:8e:64:84:28:ca:ee:e5:5b:8a:
93:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B5:00:7B:0A:7F:F8:F4:3F:E4:B6:7B:46:A6:31:EA:96:75:DD:65
X509v3 Authority Key Identifier:
keyid:90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ff:a5:6f:a4:ca:26:80:f4:d9:c6:e5:35:47:10:67:b8:d0:
19:7a:2c:b9:e8:08:9f:83:33:27:23:ce:a7:ac:f1:f9:48:86:
a7:2c:06:38:72:85:b4:e7:b5:ec:84:da:72:5a:10:5d:37:04:
1f:a3:e5:20:93:e7:35:b9:62:fb:4a:01:f7:9e:28:e3:1e:f8:
25:d3:d4:93:90:3b:9a:97:11:f8:b9:99:1e:7d:8f:c4:e3:85:
4f:38:89:b5:dc:1e:67:f1:10:79:ad:c6:83:be:8a:ae:0c:e6:
5b:46:a6:75:68:67:bd:cb:ad:50:36:9e:80:2a:99:02:29:d6:
35:55:a0:f6:7e:f2:32:7c:db:42:39:70:b3:b5:5a:37:f2:33:
b0:3d:67:a5:19:58:4a:7d:ad:b6:d7:41:e9:d4:73:42:0d:74:
bd:55:a6:d8:b8:cb:5b:66:58:1f:c2:19:7e:7f:89:04:d2:35:
33:ae:72:ec:0e:f1:36:d1:e7:80:3c:27:49:27:fb:f7:ef:f2:
d2:83:84:50:3d:04:09:66:91:57:14:53:7b:9e:5d:20:67:d5:
52:e2:33:10:f7:d8:08:cf:58:c0:c7:c0:ed:59:34:b2:09:62:
d5:72:1f:33:c2:45:b9:b0:a0:8a:34:e7:d3:88:85:58:34:6a:
90:39:98:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:56 2025 by rpki-client