Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: mIiLqD0xWvVlgXqF3xTjZeKbEv04JhrvD8XhBkHTe58=
Subject key identifier: F4:19:EC:53:FE:34:E7:C3:C8:CA:DB:D3:4D:F1:5E:E2:85:90:EA:AF
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 0198D5F18812AEB2BC42233587A74379F9A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:32 +0000
Manifest this update: Sat 23 Aug 2025 08:00:32 +0000
Manifest next update: Sun 24 Aug 2025 08:00:32 +0000
Files and hashes: 1: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: 0zVjJobLB4FYmrInnb+2NOwuFEeFW75I9ln2wzPZLLY=)
2: veklkDiCqI48H1uQ5ixFAlK84NY.roa (hash: KUIRIFDZrVheg1iXYyW8LsCjhDrH33Kf+Op6ybMvK2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:88:12:ae:b2:bc:42:23:35:87:a7:43:79:f9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: Aug 23 08:00:32 2025 GMT
Not After : Aug 24 08:00:32 2025 GMT
Subject: CN=f419ec53fe34e7c3c8cadbd34df15ee28590eaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:c2:83:87:0a:77:b8:31:ae:a4:5c:3f:0f:
e2:8c:db:4e:2b:a7:dd:ce:a0:11:0e:10:ae:66:43:
ab:7a:f4:96:4a:9f:9b:98:d1:40:c8:fc:3a:e0:e3:
93:f5:80:19:dd:4c:b8:1f:d9:8b:ff:1a:ac:b6:85:
a5:f5:29:11:33:a0:db:06:30:be:24:94:89:c4:89:
c9:aa:62:58:ae:d7:1c:77:17:4e:f5:c7:30:db:d1:
d3:0a:ea:7f:2e:86:08:13:58:59:f0:a9:7c:05:95:
8a:11:f3:8c:a6:c2:83:a6:54:40:7a:d4:ae:27:06:
50:07:fd:45:61:58:22:82:e7:54:89:68:e7:b5:d5:
cf:a6:b1:00:78:1b:16:28:41:0c:5e:9a:a3:ae:de:
3d:53:50:11:53:e4:53:64:7d:5c:fb:df:c7:ba:ef:
5d:d4:96:72:d6:9c:d6:10:e4:39:ad:d4:54:5e:2c:
7e:d3:e4:fc:29:28:4d:dd:b1:af:4e:8e:bd:a2:6a:
c8:29:ca:8d:85:cf:c5:e0:b2:47:d9:7a:67:af:ad:
e4:6a:d7:6a:73:b5:4c:80:06:5c:cb:8f:e5:3e:3d:
8e:fb:df:d0:13:33:05:e1:ca:a7:1e:60:11:ad:4d:
4a:94:04:e9:7a:e2:34:88:01:70:01:6d:05:11:8a:
46:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:19:EC:53:FE:34:E7:C3:C8:CA:DB:D3:4D:F1:5E:E2:85:90:EA:AF
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a6:f2:42:1d:06:67:e9:1c:d9:7d:cf:83:71:4e:cd:56:bc:
d6:fe:0c:7d:2e:d6:d1:03:93:1f:a5:7f:db:67:f3:88:46:2e:
94:2f:6b:1f:e1:ec:f0:1f:71:00:8a:36:67:02:6b:73:5e:2a:
44:26:c2:3e:35:20:7d:f5:2d:fa:17:32:c6:f5:db:96:a0:0e:
dd:d6:db:f2:01:c4:33:9a:a3:79:8c:67:c1:a8:c6:be:b3:e0:
fb:d4:05:57:0d:08:ef:38:b2:ab:44:bf:7d:54:a4:d6:f2:3e:
64:e3:8f:d0:9b:ac:44:26:33:a6:7c:db:9a:e3:a1:7f:5c:53:
c5:58:13:b0:56:8c:25:6f:40:0d:36:de:95:33:35:f7:c1:aa:
19:16:9b:25:dc:61:71:0a:3b:91:8b:e6:ba:37:e8:7e:f3:9c:
2d:1c:a7:76:5c:a2:01:6f:de:29:6f:ce:5b:fc:19:eb:ca:b2:
6c:42:d7:5c:d1:f7:e9:f7:17:be:de:12:4b:ae:ef:e4:45:ab:
f0:92:08:14:0a:a7:69:6f:01:7d:c3:f7:6a:e7:af:3b:69:b8:
f5:48:4c:23:bb:d3:23:a8:ac:94:19:e1:10:05:90:4a:8a:5d:
df:1c:ed:ad:97:7a:e2:f0:5b:0d:cd:21:f6:58:41:57:c8:17:
fb:32:39:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:08:55 2025 by rpki-client