Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
File: kQRcV5lsmjyeYnekMmsRgyFdW2o.mft (raw, json)
Hash identifier: HQq/z5m+oP+0RYgk/KPeZAVfY2e+zk6FY9QaCGYJFkc=
Subject key identifier: C1:0C:18:BF:CD:16:30:4F:C2:9B:EE:30:AA:3D:5E:B8:6E:AF:4F:B3
Authority key identifier: 91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
Certificate issuer: /CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Certificate serial: 0198D472F958145D178D28D4495370D96BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
Manifest number: 1043
Signing time: Sat 23 Aug 2025 01:02:41 +0000
Manifest this update: Sat 23 Aug 2025 01:02:41 +0000
Manifest next update: Sun 24 Aug 2025 01:02:41 +0000
Files and hashes: 1: 75qkVCY5XXIcFQQiW3dyFVzW6eQ.roa (hash: dXFNWNpycxDfWS4F1kZ68a/+XDX33UqEzrugZvo8DVg=)
2: kQRcV5lsmjyeYnekMmsRgyFdW2o.crl (hash: mvNCQ+YOG1KpqGP6ehGOM1nfu8InUNxs+VX54RsMrK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:f9:58:14:5d:17:8d:28:d4:49:53:70:d9:6b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Validity
Not Before: Aug 23 01:02:41 2025 GMT
Not After : Aug 24 01:02:41 2025 GMT
Subject: CN=c10c18bfcd16304fc29bee30aa3d5eb86eaf4fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:50:f7:71:a1:62:8f:96:d6:74:e9:84:74:
75:58:04:da:69:c1:75:d4:30:66:c2:6e:e5:db:aa:
e5:83:f7:be:21:54:f8:2b:78:05:83:a7:79:df:56:
87:da:29:c6:7b:15:63:69:71:53:3d:d2:9e:45:ef:
eb:57:bc:36:cc:48:3d:84:cb:f2:eb:95:20:9b:53:
8d:34:fc:11:e3:8a:a7:31:03:9a:89:d0:0b:47:46:
b2:27:e7:bc:e1:0f:61:d2:85:a0:e3:9d:1a:74:01:
4f:8a:82:4f:6d:06:97:bf:7a:83:3e:b6:dd:0f:2b:
f9:29:91:3d:af:ae:52:a6:08:e3:b8:89:85:99:34:
32:16:e3:5a:01:de:6a:f1:6a:1d:55:de:3a:0e:38:
3e:02:b3:d8:11:b1:e7:14:16:c0:b9:fc:52:a8:c0:
94:2c:0e:e2:75:5b:d2:3f:d4:3c:42:5d:f0:72:be:
ec:6c:74:9f:7e:57:4c:cd:28:dd:af:57:55:7b:5a:
8a:6d:50:36:78:02:76:42:81:fd:de:28:8b:d4:68:
50:b8:85:8b:41:bd:49:b2:56:85:5e:c0:bd:92:fe:
18:15:8c:a3:23:82:e0:84:ca:27:c6:fa:fc:49:98:
40:7b:ee:8b:46:97:b5:e9:e5:30:ef:db:46:62:b3:
10:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0C:18:BF:CD:16:30:4F:C2:9B:EE:30:AA:3D:5E:B8:6E:AF:4F:B3
X509v3 Authority Key Identifier:
keyid:91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a5:38:82:b3:fb:ca:7d:90:75:38:59:a1:cb:9f:59:7d:5c:
61:48:52:68:c6:dc:5c:d5:f0:b0:56:52:0a:c8:70:a1:a7:d8:
c0:ed:32:e1:15:c1:52:19:a0:68:ac:6d:a0:12:50:8d:65:00:
86:ab:9c:65:80:20:ac:36:47:57:0a:3b:ba:22:c0:20:04:ec:
b2:fb:40:fc:af:ca:9d:a5:81:9b:df:19:6a:9a:59:f5:2c:f5:
8d:f4:26:2b:da:f2:18:1c:18:a5:20:ad:8a:0d:6b:30:34:04:
06:79:5d:fb:68:80:9f:67:36:69:9a:8c:b5:4f:8f:de:a0:22:
58:b3:61:01:00:20:ea:77:16:44:af:10:fa:9e:63:44:85:4d:
9d:9c:5c:e9:f3:ae:00:1d:55:04:b3:48:03:53:ad:4b:1b:2f:
f7:6d:53:41:d1:0a:d7:35:61:6d:25:09:74:2a:a1:58:62:39:
92:d9:a4:74:af:5b:92:06:c2:28:b4:a5:53:e1:f1:49:25:8f:
c2:9a:e4:95:5b:ca:d2:3e:9a:b1:a5:d0:4a:01:0a:cc:6d:37:
f2:d1:97:14:aa:fd:16:de:31:34:7a:a4:e2:01:2e:19:8a:68:
d0:42:03:df:3d:bf:ab:19:ae:22:2c:6e:9c:b3:39:2c:14:28:
14:58:64:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:30 2025 by rpki-client