Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
File: KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft (raw, json)
Hash identifier: mRIyLXasEu01p4LDiDmCZywJKzDFEIvOFSDlHrPEmOY=
Subject key identifier: 7D:5D:9D:BC:C5:18:FC:2B:B4:7B:22:B8:71:B2:BF:20:B7:37:D3:90
Authority key identifier: 2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
Certificate issuer: /CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Certificate serial: 0198D515854A0E5C51724723A02FAF8AFC71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
Manifest number: 1386
Signing time: Sat 23 Aug 2025 04:00:14 +0000
Manifest this update: Sat 23 Aug 2025 04:00:14 +0000
Manifest next update: Sun 24 Aug 2025 04:00:14 +0000
Files and hashes: 1: KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl (hash: N3HI3KbdyAuzuy2EPH5yT7+ZIFZDz/vmuS8tkF2vDtg=)
2: jVEebkEC2-oHzNPCTqPYuC9aoqE.roa (hash: J11dJEoO4oOPIGJkgBui1oSiw1WMmsHoIDwoMRNd+jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:85:4a:0e:5c:51:72:47:23:a0:2f:af:8a:fc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Validity
Not Before: Aug 23 04:00:14 2025 GMT
Not After : Aug 24 04:00:14 2025 GMT
Subject: CN=7d5d9dbcc518fc2bb47b22b871b2bf20b737d390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:8c:ce:22:ed:a3:ac:03:d3:a2:40:a9:15:
36:fc:2e:36:45:9d:95:3f:7c:70:b3:f9:40:2c:32:
00:cc:35:42:fd:af:4d:0f:00:11:ab:04:7c:c9:96:
1b:a2:4e:84:28:d2:91:06:da:3e:69:74:ac:e3:6c:
30:c4:36:57:08:19:ff:5c:eb:b5:34:03:78:f9:a9:
73:3b:6f:bd:a5:a2:c5:f5:e1:48:09:b5:c6:6b:28:
11:42:9e:40:47:98:2b:51:b6:f5:ac:dd:95:e5:9c:
dd:52:32:9c:d5:8f:08:e6:63:de:01:2f:c9:eb:bc:
8b:98:98:80:74:62:8c:1f:ae:84:23:10:31:93:1c:
8b:38:fc:ec:7d:f3:1f:01:61:94:36:a1:86:b3:83:
45:06:11:30:d5:47:8e:ad:14:4b:3b:6b:2f:64:70:
87:f8:52:bc:38:5f:79:03:ea:f7:9a:53:60:da:a9:
b2:26:a0:c5:81:9f:91:7e:06:64:3f:2c:7a:8f:4a:
2d:57:99:8b:d2:7b:ff:36:eb:d3:ce:c8:93:4e:8a:
14:ad:06:f4:5f:08:50:5d:b5:52:3b:4a:15:e1:74:
a4:59:b5:ea:83:9c:e6:05:08:fa:19:0a:9f:e3:9c:
ea:69:f3:72:3a:b6:e9:e4:cd:3e:1b:7a:73:62:7e:
63:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5D:9D:BC:C5:18:FC:2B:B4:7B:22:B8:71:B2:BF:20:B7:37:D3:90
X509v3 Authority Key Identifier:
keyid:2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9e:f2:0d:1a:3d:bd:ac:3c:55:68:9f:77:dc:52:e0:64:72:
d0:3e:1f:e9:e5:e9:1c:28:62:9a:87:e2:02:9e:4c:61:10:17:
35:55:1a:cd:75:a7:c4:37:54:82:5d:52:f3:1e:d0:f6:3c:26:
52:20:95:ca:2a:9f:30:42:83:c0:1b:ad:ed:ea:08:6f:e1:6d:
07:b3:d9:f7:2b:20:dd:f3:f1:91:f4:00:4e:43:fd:25:c6:58:
da:d7:6c:ff:6b:7e:c5:a6:a6:37:cd:93:06:b1:e3:fb:d3:0c:
c9:73:c3:50:b1:68:a1:cf:b8:25:d1:e6:89:25:11:f7:b2:d0:
3c:3f:f3:f0:07:20:1f:25:68:74:d7:4a:fd:cd:48:c6:d1:9b:
4e:0b:c1:77:c2:01:76:49:57:2d:4a:26:9b:88:6c:df:85:ea:
92:22:8a:95:63:46:7c:2d:b7:3d:52:dc:e4:25:45:5c:7a:25:
a1:72:24:45:e0:8e:1e:d0:2a:d0:14:5b:fe:30:b2:e3:88:61:
e5:1e:17:e4:03:59:ac:77:09:a7:0a:ba:4f:04:df:4e:31:f7:
e5:11:4b:20:34:b4:1c:a1:2c:d5:36:d4:cb:27:0a:ad:9b:30:
c1:82:e1:72:25:da:a6:b3:89:0b:1f:df:25:83:fd:75:0b:cd:
b1:74:29:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:41:51 2025 by rpki-client