Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json)
Hash identifier: ghSJIK1sM+95O76t+h8nVEf/piPkC7gxh9/TQuS/y4s=
Subject key identifier: 5E:68:0F:93:4B:23:3F:47:38:0A:94:03:8E:3C:F2:5C:50:40:AC:B7
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 0198D54E4E4074C2A7EE081BE88588222F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
Manifest number: 165A
Signing time: Sat 23 Aug 2025 05:02:15 +0000
Manifest this update: Sat 23 Aug 2025 05:02:15 +0000
Manifest next update: Sun 24 Aug 2025 05:02:15 +0000
Files and hashes: 1: 3S9CxnQg7YWqU3K6TXltDEUCLyw.roa (hash: 3OEFYGKv+A11bV584/FIEjB0rz/syH/3YTSncOKzqpk=)
2: 7iZSI8YJjBx97RcBp5yy0dHgNCc.roa (hash: zYIePn/XtBi1RBLoEwZwbryvrg3fa+ccFHSQFX92GIc=)
3: 8aTIb0puCina4qQH9DISIqfOc4Q.roa (hash: 1Nu+gUGiEPO422nTi4SIHIM/055+/Bx1i4GdyYjGB6w=)
4: 9DoakwUWAGtHNEatYpKzbo2QTwI.roa (hash: N1mtoTrK+kfX1PnLRJRzSQlCeUqp41+33H0gjLXBdeo=)
5: EZFIYtcapsDAbifqmq2FXtp-Cdw.roa (hash: f6ff20P7C3YhGHb/pCr95k1VGXcMCffUp+GlTWJzaPk=)
6: F-e0yheo2RviKbK6HPx7_eTqhA4.roa (hash: KEJO7y7WsDfC5FsDfSaCJ3hpxQXSnjViDnFGvytgGQY=)
7: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: bNAM9xgQE+TRSQ47BQu5SesrtCHXrYD6thg0v/RQcvI=)
8: ic83PxAobxuOswBFck-YRl3xl5s.roa (hash: b2hEd1qs+ywRwA/SKMeyaDMx96OzLoUUBDS6BjYhAik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:4e:40:74:c2:a7:ee:08:1b:e8:85:88:22:2f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Aug 23 05:02:15 2025 GMT
Not After : Aug 24 05:02:15 2025 GMT
Subject: CN=5e680f934b233f47380a94038e3cf25c5040acb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:d0:d8:29:d8:69:3f:f5:a0:b1:89:17:c2:
1b:b7:34:b1:83:27:6b:fb:ac:85:18:c7:8c:db:e1:
e7:b9:a3:db:e3:02:22:6f:b7:4d:16:cd:83:83:ad:
12:1c:10:28:58:7e:a6:d7:e4:6a:76:d1:cc:19:e0:
c7:09:2f:2d:e0:f5:64:f6:55:3f:66:3e:fd:e6:e1:
83:fa:82:3a:e4:ca:c4:19:57:26:2d:b1:86:97:df:
4a:79:dc:c8:12:19:62:dd:b9:aa:85:84:46:60:ce:
60:11:4d:ee:71:57:38:32:df:38:c0:51:4c:43:20:
bc:79:58:dc:3e:44:e9:60:4a:7a:0e:18:0a:c3:62:
b8:e9:95:43:b5:13:96:a6:25:5f:d1:91:90:c0:80:
61:89:5c:f4:5c:af:ab:71:97:99:d2:9f:5a:33:33:
aa:4a:65:ac:9a:e9:da:1e:6d:7a:55:67:22:f6:40:
4a:86:51:14:48:28:5d:f9:e9:b7:20:4e:f2:31:2d:
d2:e0:88:cd:a9:2b:e1:91:1c:dc:29:ab:37:11:b8:
25:3d:56:95:c1:6b:c6:2a:d7:ca:28:fd:79:75:ae:
5d:f0:45:05:b1:61:0e:74:0c:1c:8d:5d:fc:8d:70:
dd:2e:96:1b:04:71:3c:bb:3d:cd:e5:df:b1:48:2d:
df:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:68:0F:93:4B:23:3F:47:38:0A:94:03:8E:3C:F2:5C:50:40:AC:B7
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:08:27:39:bd:80:b2:78:b4:08:81:8b:98:0f:f3:fa:46:f2:
3e:40:09:1b:cb:be:47:cc:21:68:4f:c3:c5:85:2c:fb:4f:f2:
42:bf:9b:a8:74:38:32:b5:57:1f:f8:e5:9e:75:30:81:e2:73:
ee:92:d8:98:d5:f4:52:5c:20:94:ee:46:27:3f:e2:fd:45:01:
90:19:4d:22:c6:36:50:a1:3a:f8:1b:af:ee:81:6c:21:d1:93:
d8:1d:33:fe:c6:a6:4a:13:e4:17:07:98:9a:5b:54:93:f9:08:
53:3e:57:8f:51:0a:53:21:c2:a8:b1:89:e3:3a:bc:d0:b4:86:
f7:8b:19:90:dd:2f:01:82:6a:1d:f4:6d:76:b7:10:20:bd:0b:
0a:d1:3c:77:9c:4f:4d:db:33:6a:25:66:0a:ca:d9:96:9d:e6:
93:b4:06:22:7a:41:66:be:e9:35:f1:f0:77:fd:66:f5:3a:ad:
d2:09:e7:31:43:8b:b9:35:a5:a5:5a:44:0d:d6:be:74:7c:d5:
2d:a1:af:75:1a:7f:d3:a8:2e:32:64:22:77:ba:c3:2b:02:5c:
f0:9d:37:0b:59:45:2b:3b:d3:07:92:7b:31:1b:4a:85:cb:45:
ea:ba:4c:f7:cd:b6:95:2c:e0:b4:c5:c7:86:93:7e:f9:54:d7:
bc:69:ea:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:12 2025 by rpki-client