Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft
File: kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft (raw, json)
Hash identifier: kRa4GN97MCbKbNMHXNAPMLID3olS3rFysibHGMrW4qo=
Subject key identifier: C2:44:1F:48:E7:A9:28:37:50:3F:0B:3A:98:80:AC:9A:E9:6B:DB:3B
Authority key identifier: 91:18:8C:A6:4C:46:70:A6:EB:56:B4:2A:50:A1:05:88:AD:96:47:EE
Certificate issuer: /CN=91188ca64c4670a6eb56b42a50a10588ad9647ee
Certificate serial: 0198D7736B441D804B42C64DC16271475928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft
Manifest number: 0ADE
Signing time: Sat 23 Aug 2025 15:02:02 +0000
Manifest this update: Sat 23 Aug 2025 15:02:02 +0000
Manifest next update: Sun 24 Aug 2025 15:02:02 +0000
Files and hashes: 1: JyQo8VWrljsbu7fdBUyCLnp2fRo.roa (hash: PYNlAKDVxyxJWLdDPpsz5WMXt3MO3ZloO8y7DclxK3I=)
2: kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl (hash: oWUatpQuJMvolP0LD35xEPIXl+HHocZclMG9qOy39kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:6b:44:1d:80:4b:42:c6:4d:c1:62:71:47:59:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91188ca64c4670a6eb56b42a50a10588ad9647ee
Validity
Not Before: Aug 23 15:02:02 2025 GMT
Not After : Aug 24 15:02:02 2025 GMT
Subject: CN=c2441f48e7a92837503f0b3a9880ac9ae96bdb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:13:1f:4c:0e:1c:e7:e9:8f:ba:a4:ab:95:
6e:f6:e3:97:6e:52:d2:62:c6:2b:00:5a:77:16:ea:
71:b7:6d:5f:f9:99:32:57:c2:cf:ba:34:8a:f5:55:
ca:bd:ac:86:51:86:80:8b:96:f7:aa:a4:70:0a:c7:
c5:2d:3e:4b:a6:b1:56:14:e4:93:6b:1b:a3:2f:18:
79:30:28:54:e3:51:17:dc:69:07:48:56:81:68:68:
c0:8f:03:24:d7:2a:5e:82:6e:33:9e:c1:ff:34:d2:
5f:ab:83:74:65:c8:19:6b:0a:bb:64:35:7f:f8:87:
09:c0:61:c9:8e:e2:35:34:88:a5:1c:e2:e0:ae:5b:
62:05:06:1e:78:2c:a7:fa:e5:21:ad:22:27:4b:d2:
f9:3c:cb:33:37:c3:e0:60:2c:88:f2:8a:42:5f:54:
42:a8:30:f1:d3:ab:e0:49:fa:1d:40:b8:69:46:a3:
fd:7a:4e:65:84:3f:e0:01:b4:05:81:4e:7f:10:07:
98:81:d2:cd:74:5c:5b:b1:97:ea:2f:d6:60:2a:68:
67:08:fe:59:3d:77:03:3f:9e:99:e2:cf:54:20:8f:
1b:41:cc:2b:b5:dd:02:52:c8:a7:f7:5b:e4:88:e6:
bc:48:36:a3:20:bd:f7:fe:be:57:eb:d4:57:cb:44:
e8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:44:1F:48:E7:A9:28:37:50:3F:0B:3A:98:80:AC:9A:E9:6B:DB:3B
X509v3 Authority Key Identifier:
keyid:91:18:8C:A6:4C:46:70:A6:EB:56:B4:2A:50:A1:05:88:AD:96:47:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:42:65:3e:90:fe:08:41:23:60:9d:52:22:a7:b1:ad:3c:4e:
84:a8:44:6c:02:cb:50:d5:8c:f6:25:a1:43:9b:f1:6e:c7:f9:
1e:96:1a:3d:8d:ed:fa:dc:cd:cf:1d:91:c9:34:b0:01:fe:43:
cf:0c:81:85:9a:8d:ef:0c:69:1b:ca:54:f3:e6:74:67:b3:4d:
05:37:25:6e:48:23:80:95:30:51:a1:59:2a:36:97:18:b6:8a:
10:91:7e:5b:30:6a:c1:0b:55:c7:45:91:27:86:2a:53:d1:f4:
92:4c:33:ab:3d:12:6f:cd:73:94:cb:59:19:2d:01:c0:3f:09:
bc:0e:3d:af:6a:9d:31:f4:c8:79:35:64:1f:eb:82:9e:64:5a:
9b:1d:64:71:5c:3f:f3:fd:5d:76:1f:8f:9b:af:49:97:c4:bf:
44:64:8c:b9:11:a0:91:ab:4e:b2:6e:0d:ef:cb:34:fd:bc:5f:
e6:c2:d5:fd:a5:eb:32:9a:82:85:84:48:fd:56:a3:ff:cb:2b:
9f:ce:59:78:da:8c:84:75:2f:21:d1:4b:9c:79:cd:0e:cb:c5:
59:f2:cb:d0:3b:90:a0:19:33:1c:49:1d:03:bc:2a:d4:10:25:
52:f4:c9:46:3a:70:30:78:0e:50:1d:a9:1b:d4:02:ad:54:3a:
2c:10:74:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:27:33 2025 by rpki-client