Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
File: kPJzpjxR6vP55a57n6r9spMTQN8.mft (raw, json)
Hash identifier: wW+19qv4ONl1Q6/VQJp6C4LNL2pr3DyqL3PxiAKDark=
Subject key identifier: 61:1B:07:78:F1:C8:C9:41:FC:44:FC:8D:C2:39:36:2F:AC:7C:6C:A0
Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
Certificate issuer: /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Certificate serial: 0198D6CE0842B19C4C20A99D093C8FB28901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 12:01:23 +0000
Manifest this update: Sat 23 Aug 2025 12:01:23 +0000
Manifest next update: Sun 24 Aug 2025 12:01:23 +0000
Files and hashes: 1: 6d9Ml28WO2fAjTVW7MUT4p6IuIc.roa (hash: gkVSjCGx8IsHv5K/Qw9S9gdePh2YLb49mTKwa/5dQoA=)
2: ZO9mngdXNIl_VPA2Mn28l-sVzI0.roa (hash: hmCSaS0Wu7YEQqY6nNJRdpritFyq3hIDgudp8EuE1fw=)
3: kPJzpjxR6vP55a57n6r9spMTQN8.crl (hash: o+1QboWm4rNhXd7vWto0VtqL/XWMni9l3n4IjPzHOko=)
4: rd6hfh2x52BDGiRJllR6149itW8.roa (hash: CEiJf5vw/0k6qBwbBaFAB9ewgzEg3Zx08ds/2EBhN80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:ce:08:42:b1:9c:4c:20:a9:9d:09:3c:8f:b2:89:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Validity
Not Before: Aug 23 12:01:23 2025 GMT
Not After : Aug 24 12:01:23 2025 GMT
Subject: CN=611b0778f1c8c941fc44fc8dc239362fac7c6ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:66:c4:fc:15:56:b9:09:ae:bb:0c:e2:a7:13:
23:87:d1:c9:7b:5e:a6:84:97:5a:2f:27:ec:6c:c8:
72:38:2b:1b:48:a9:c3:44:0b:0b:37:63:85:c9:2f:
b3:f9:f9:70:51:80:18:ad:47:75:d9:3b:ec:e3:cf:
21:aa:d6:6d:fd:f7:fc:e5:0d:60:d6:94:18:08:ea:
27:b7:a0:62:da:4d:8c:fb:86:54:9b:99:92:cb:16:
9e:28:f5:8b:8a:61:e4:98:df:8f:7e:48:58:3d:20:
0b:bf:3c:a9:8b:a1:44:e6:fd:0b:ab:c4:93:fb:00:
99:a3:d4:68:58:7d:0e:af:b8:08:8e:49:ef:c2:a0:
31:f4:25:5b:d7:88:6a:cb:28:8b:61:3a:2a:cf:f1:
ae:b1:6c:2a:a0:48:4d:69:5b:aa:bd:e3:0c:20:69:
d4:6d:82:13:a2:80:c8:eb:bf:ac:dd:ff:82:74:2c:
7a:9c:e3:df:fc:26:23:c6:96:3e:58:1c:d7:fa:77:
33:8c:52:59:2a:be:93:56:8d:74:fd:97:a6:62:1d:
44:06:18:27:b5:26:fc:a7:70:7c:98:e9:93:cb:72:
d3:be:18:4c:7d:82:b3:2d:08:77:f7:41:3e:17:03:
fd:6b:d8:29:86:fa:c0:61:a6:9c:b0:4c:6c:65:ff:
dd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1B:07:78:F1:C8:C9:41:FC:44:FC:8D:C2:39:36:2F:AC:7C:6C:A0
X509v3 Authority Key Identifier:
keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:76:00:05:a6:0f:03:09:47:2a:24:6f:92:22:40:26:0a:9e:
0e:34:22:4f:47:44:75:55:94:c6:a2:8e:02:3b:da:ad:45:77:
11:6a:9f:7f:60:71:6e:b6:14:04:33:86:4d:c6:dc:d9:d3:ca:
33:78:ce:65:b7:74:a1:ca:7e:f2:b1:11:e8:02:72:d8:05:6f:
d2:a0:d7:82:b1:a9:78:fc:50:84:39:72:c8:22:fd:5d:14:90:
bc:57:dd:89:ba:bc:fb:59:e4:db:aa:21:3c:96:61:31:5d:4c:
ce:e9:9f:f5:98:93:83:1a:63:7a:db:e8:24:37:90:24:d5:35:
7a:fb:aa:d1:9b:17:ed:77:5b:0f:bf:7f:0b:1e:af:9e:58:49:
d2:33:b4:a5:48:59:d2:69:0e:bd:2d:77:3d:20:98:6a:27:0c:
be:de:34:03:e9:cf:d4:f2:00:d9:0c:3c:7a:9e:6f:31:8a:5d:
fe:17:17:41:8e:3c:79:f9:db:46:1a:ee:72:5c:63:de:b0:d5:
38:eb:92:d4:88:4f:db:ac:65:f7:3c:b5:1c:67:c3:68:8f:9a:
f4:65:e8:0f:37:1f:f6:5e:f3:e7:e2:ff:29:be:2f:1f:e5:d7:
2f:60:f8:8e:e7:5f:e6:42:21:2d:45:86:46:55:67:b5:d4:3f:
b3:a2:81:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:19:34 2025 by rpki-client