Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
File: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft (raw, json)
Hash identifier: NCja4MX/t3Le04Jqlq5oneYMC+aaJegZznknkIWsFZ4=
Subject key identifier: 6C:02:7E:46:20:70:1B:AA:72:32:B3:CC:92:19:36:C8:ED:55:C3:D1
Authority key identifier: 29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
Certificate issuer: /CN=292d120970515846360ea223e9a0e6a3c3896934
Certificate serial: 0198D5837F8E21E3FE930ACF699C9EAFB0D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:21 +0000
Manifest this update: Sat 23 Aug 2025 06:00:21 +0000
Manifest next update: Sun 24 Aug 2025 06:00:21 +0000
Files and hashes: 1: Dmpy31ijG2f6hXZqP5vPJHMC7fc.roa (hash: a19ubK1sseKa07iYGs0SfWBGmOIfQnOOnA1DdC09cIs=)
2: E7yxjynkTDUFSV0KBoIMTHpUAPI.roa (hash: 9bhJ257wp5/WErvUFH4Spo9AhE0rTIMhiGRzFbkOnjk=)
3: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl (hash: eh2NZ4oPNF6Ot+vM3RPNkSvegcG2YjemQW/KU6Uubx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:7f:8e:21:e3:fe:93:0a:cf:69:9c:9e:af:b0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d120970515846360ea223e9a0e6a3c3896934
Validity
Not Before: Aug 23 06:00:21 2025 GMT
Not After : Aug 24 06:00:21 2025 GMT
Subject: CN=6c027e4620701baa7232b3cc921936c8ed55c3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3f:aa:c9:c7:6e:b8:b3:d1:cd:48:20:07:cd:
a4:de:9d:20:2b:7e:de:45:65:45:c6:b4:c3:8b:a3:
38:b6:c8:62:16:18:76:83:9e:c3:a7:59:51:9a:b8:
e2:9b:64:ef:39:05:e5:10:75:c6:13:e3:92:3f:bd:
92:e1:2e:d3:30:6f:c6:82:8e:54:e4:1f:13:6f:ad:
76:c4:5a:ce:37:6a:fd:53:4d:32:aa:7d:ac:93:e5:
e9:d3:b5:c5:1d:d4:95:de:1f:f3:7d:2a:6e:2d:28:
2e:fa:b8:d4:18:9d:bb:b4:74:22:ef:3c:c6:b6:be:
3d:fb:7c:64:2c:51:d1:6b:d0:eb:b5:18:97:ac:38:
a6:e2:a6:4e:f8:ee:47:5a:89:6a:3d:9c:48:3e:9e:
5a:86:93:1c:00:75:e3:5f:1c:01:cc:be:61:03:4e:
28:e3:c1:57:59:8d:cb:d0:cf:78:b5:c8:01:ca:5c:
d0:b1:33:98:73:1c:42:9c:a5:91:20:f4:17:91:0c:
d2:38:8a:7d:fd:9c:2f:35:ac:32:5a:df:c1:78:96:
47:a8:44:1e:df:c1:14:96:6f:4b:f2:c6:f9:c5:71:
d6:a1:a8:76:5c:2a:92:13:a2:f9:a6:b1:92:ce:67:
c8:9a:66:6c:f8:72:ad:03:d3:4e:7f:29:68:7e:cb:
b6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:02:7E:46:20:70:1B:AA:72:32:B3:CC:92:19:36:C8:ED:55:C3:D1
X509v3 Authority Key Identifier:
keyid:29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:2a:b6:57:6a:2f:cb:6a:29:f5:fe:71:2b:c0:7f:8c:98:b1:
47:ae:ac:a9:6a:6a:3c:7c:03:13:69:ea:96:78:63:ca:2d:44:
03:f7:06:ad:98:48:3b:00:f4:dc:3b:ff:4e:40:c4:ac:5f:63:
40:0a:31:bf:1a:ac:97:31:fd:75:a9:d7:60:cc:71:48:ce:39:
ef:8f:46:dd:39:f9:15:4b:ec:69:3e:49:da:34:4e:8e:af:34:
aa:83:8f:dc:59:48:db:b3:ab:a6:e3:b3:86:c6:41:a3:60:13:
2f:44:3e:3c:ac:24:98:12:ea:59:04:f6:59:fc:c8:4b:b5:4c:
d7:6f:f2:85:9b:18:c4:eb:5e:2c:fa:6b:84:c8:90:7f:cd:cf:
97:ed:bd:5b:4c:59:53:93:6a:92:d4:0f:4a:c6:39:fb:53:71:
78:89:70:cc:20:cd:ee:62:e9:a0:2b:ac:19:0e:fc:c7:82:12:
17:e2:82:58:f4:6a:44:8d:ea:54:9d:16:a7:a4:62:08:8c:04:
28:7e:f2:19:49:b7:36:75:6b:e0:2b:3a:5f:6c:9b:d1:86:53:
f0:25:b8:41:cf:45:e9:47:49:2d:0b:9b:ab:79:7d:1e:6f:cf:
70:74:a5:e5:24:d5:9a:91:aa:8a:d7:07:51:12:8b:d9:49:1f:
46:e0:f8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:06:45 2025 by rpki-client