Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
File: KkVY4mVr-JczOJWU3xRNIdHcAxM.mft (raw, json)
Hash identifier: rn6kB7N4Dc0WgW2FVjybBuwNv9vCjRzWCSCmgLkcBmM=
Subject key identifier: E3:62:C0:70:DA:EA:6E:8A:B8:B0:B0:4E:A6:FB:53:34:E8:F2:5D:BE
Authority key identifier: 2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
Certificate issuer: /CN=2a4558e2656bf89733389594df144d21d1dc0313
Certificate serial: 0198D4744AF1660DC66003C8324CCB3119D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
Manifest number: 05E1
Signing time: Sat 23 Aug 2025 01:04:07 +0000
Manifest this update: Sat 23 Aug 2025 01:04:07 +0000
Manifest next update: Sun 24 Aug 2025 01:04:07 +0000
Files and hashes: 1: KkVY4mVr-JczOJWU3xRNIdHcAxM.crl (hash: HbncUixj79S602xxtm6EBvh9fOB/EI8MVmBBiEaKCfs=)
2: SSf6jkDtZNnbxOBRunTsvPqgvfA.roa (hash: 5IZEhx43JWWVyUng521teCJJCgxsPSwTh1bUksl7+e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:4a:f1:66:0d:c6:60:03:c8:32:4c:cb:31:19:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4558e2656bf89733389594df144d21d1dc0313
Validity
Not Before: Aug 23 01:04:07 2025 GMT
Not After : Aug 24 01:04:07 2025 GMT
Subject: CN=e362c070daea6e8ab8b0b04ea6fb5334e8f25dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:aa:92:43:70:97:db:78:91:5c:f9:f9:05:19:
6c:93:a9:1b:0e:84:fa:c3:38:2b:0a:d5:cb:5c:0b:
67:59:1e:dd:99:5c:d1:b6:ad:0c:1c:2d:c3:c5:2c:
cd:90:dc:cd:99:75:6d:85:d2:18:e4:e3:ba:b5:d4:
53:d1:bd:12:8b:73:92:9f:01:d6:78:61:c0:19:a9:
ea:89:71:db:87:40:22:ee:2a:58:97:a1:34:3b:9a:
4b:57:e2:45:0b:4b:e7:72:82:d0:b9:e9:99:08:10:
15:a7:79:48:46:bf:fe:dd:12:e9:75:ac:1f:42:65:
8d:44:ce:27:22:84:40:bb:b0:de:01:65:71:a5:ac:
f3:e7:aa:f5:70:65:55:0b:73:d2:5f:9d:0e:2a:23:
b5:2b:26:77:73:8b:80:20:58:2c:38:56:6e:d7:cb:
90:2c:94:69:3b:e1:24:2e:3d:8c:f6:9f:ac:d6:f0:
41:1e:65:b2:b6:79:c8:3c:f4:ff:0f:ef:a5:bb:56:
97:52:5a:98:0a:e7:72:e5:cd:dd:07:1c:19:ba:6f:
b8:8e:9b:b9:a1:03:e6:d1:87:fb:06:e7:59:3d:15:
00:f1:b0:cb:a7:04:a8:c4:01:b0:93:31:03:43:3c:
c3:3b:33:3e:82:e1:91:5e:01:b1:ca:b5:23:77:e8:
46:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:62:C0:70:DA:EA:6E:8A:B8:B0:B0:4E:A6:FB:53:34:E8:F2:5D:BE
X509v3 Authority Key Identifier:
keyid:2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d5:6b:37:84:24:cd:4d:04:0c:37:4b:a5:01:65:b6:aa:38:
49:98:6e:23:e2:73:50:ff:f9:2c:61:46:77:ea:b1:e5:68:e8:
a4:94:b6:17:0b:d5:56:a0:4c:d2:b7:d3:a7:5d:a0:bc:66:55:
80:8f:bd:b7:df:a2:d0:91:1a:cb:e9:35:4b:91:45:a0:b6:4f:
4a:85:e7:95:56:56:5f:e8:1d:5c:79:4f:08:fa:6c:60:ad:22:
38:13:fc:6d:85:cd:7d:31:c0:61:19:98:b0:89:ad:c2:e9:49:
68:a8:a5:cd:10:a0:5f:4d:38:71:bc:1d:00:43:80:fb:10:5a:
64:75:83:03:48:0b:36:2f:79:63:1e:4c:c3:49:6c:5f:b2:fc:
f4:d3:7d:8f:0a:34:e0:2d:2a:b7:ed:62:c6:26:45:b1:11:38:
29:0b:31:d3:40:2b:c4:69:c2:8b:96:85:30:56:36:f6:7f:21:
f9:f4:82:6c:a7:52:d7:d7:c2:d1:dd:60:17:1e:7b:e2:1d:3b:
0b:ee:e3:3a:88:5f:1c:e5:15:b0:06:01:4c:aa:75:de:10:6d:
75:31:6b:5a:5d:4c:a6:bc:51:f8:09:81:6a:50:ee:39:31:ca:
c2:b8:61:85:08:54:db:c4:1a:9d:da:f9:77:f7:7b:ef:7a:7c:
89:8a:b3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:32 2025 by rpki-client