Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
File: kaBxUIM4JgVRpV8B_QcI_fXggoc.mft (raw, json)
Hash identifier: 99tHBTV/WJsjFEZBTzPQJtW1vauduSc1n+1k8DyEG7c=
Subject key identifier: 1E:C9:BB:C6:B7:27:AA:1F:B2:F2:F8:24:55:D5:C9:70:A0:A6:74:15
Authority key identifier: 91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
Certificate issuer: /CN=91a071508338260551a55f01fd0708fdf5e08287
Certificate serial: 0198D5BC1C0EAC983E94F5830D48780DCBEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:02:11 +0000
Manifest this update: Sat 23 Aug 2025 07:02:11 +0000
Manifest next update: Sun 24 Aug 2025 07:02:11 +0000
Files and hashes: 1: Cgt_gy7EMOYMV19k2tz2rtLd7TU.roa (hash: j2CPj0aVUdndtIwS2SsvRubF8DiJi7ArwXEuxy5F6uI=)
2: LtAL3K8AdfyisGKqq9Vjp_7EH0w.roa (hash: ExkUCXkAhlWeYSrTyMjTF0LGwM8Q8/UHTNY3ZJzGHYE=)
3: kaBxUIM4JgVRpV8B_QcI_fXggoc.crl (hash: Mu+3xvlgxnXEIJOqvdEdzIlvZEMdskz9PqIP6UF05c4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:1c:0e:ac:98:3e:94:f5:83:0d:48:78:0d:cb:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a071508338260551a55f01fd0708fdf5e08287
Validity
Not Before: Aug 23 07:02:11 2025 GMT
Not After : Aug 24 07:02:11 2025 GMT
Subject: CN=1ec9bbc6b727aa1fb2f2f82455d5c970a0a67415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4d:f4:d0:d2:b0:a9:3f:30:f0:35:9c:c7:de:
fe:18:13:f0:b9:4b:60:3d:67:0e:f0:27:3b:ac:e7:
a0:16:00:a7:b1:6f:83:9f:81:cb:9b:e8:4a:e4:69:
23:77:5a:b3:00:5f:f2:ee:41:2f:fc:e3:db:8e:0e:
29:96:5b:bf:a7:33:14:d2:be:96:b1:c5:d1:84:39:
0b:be:f7:7f:81:1b:e0:73:25:99:25:16:48:f1:58:
09:c2:0d:68:c3:69:3d:e4:4c:c5:6f:ea:71:56:87:
bf:c6:85:97:4e:73:72:04:6d:db:07:05:90:30:a3:
0d:eb:e7:fc:bd:da:57:d0:8a:52:3e:97:a4:80:0a:
09:7a:31:fa:16:8b:32:bd:9d:bc:b6:8d:bd:ef:6a:
67:4e:55:dd:d1:e2:50:ff:e3:f8:4c:97:89:f4:a2:
3c:fc:15:ad:0e:ae:2d:4b:ee:6a:a1:8f:57:97:1d:
60:47:41:39:20:d6:92:a6:9d:79:e5:97:8d:ee:96:
6e:bd:f7:cd:64:c5:e2:1e:f5:7f:f9:11:38:f7:6e:
32:ea:5f:fd:0a:60:5d:cd:0e:35:e9:c9:67:2a:9d:
b5:34:85:bf:ad:36:90:5c:31:16:5e:95:5a:c3:de:
93:b5:f5:8a:15:db:1b:1d:45:40:5f:9b:59:9f:fb:
89:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C9:BB:C6:B7:27:AA:1F:B2:F2:F8:24:55:D5:C9:70:A0:A6:74:15
X509v3 Authority Key Identifier:
keyid:91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:36:b0:6c:0f:e0:2b:57:6c:3b:ba:b5:1d:71:98:06:e3:15:
54:d4:05:8c:62:40:dd:e5:8f:eb:c6:89:d0:20:bd:6c:e1:d3:
2b:0e:82:ae:46:ed:fb:0f:0e:98:bd:06:c1:33:ce:aa:69:11:
64:21:6f:e2:53:51:cc:12:09:18:9a:e1:cf:dd:9c:f2:14:be:
cc:9a:08:a1:2a:81:97:e1:bb:96:43:fc:6f:c5:ab:e9:14:b7:
92:10:61:f6:c9:da:ca:67:2d:b2:25:63:12:5d:6a:49:63:77:
9f:d2:81:56:33:59:ba:78:98:3d:6a:b0:e6:8d:74:e5:d4:5f:
73:11:ca:d7:9e:c3:4f:4a:d0:c3:51:c9:ee:8d:1b:77:dd:ff:
1c:ca:fa:42:54:fe:a4:85:96:ad:a7:f2:06:e6:c3:8f:ac:80:
5e:2f:ea:4c:aa:2c:a0:ff:8b:fe:5d:b3:a1:56:5d:9c:e4:3b:
19:3b:6f:33:d1:73:b9:f7:8a:df:48:77:3e:b4:d2:0c:82:a6:
70:9d:12:a2:c6:9a:1d:a7:5c:f4:9f:48:9f:be:95:2e:36:93:
7c:f8:d9:9c:f6:99:bc:d8:60:02:14:78:37:08:a4:e1:72:7e:
e4:ec:a0:94:cb:b7:c4:91:13:ab:92:fc:47:90:1c:2d:4d:e7:
58:2c:ce:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:06 2025 by rpki-client