Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
File: kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft (raw, json)
Hash identifier: AnTUHTjZyFlK41EyYeTnyfS9pxrq3QCuAW7qDAqaa9U=
Subject key identifier: 06:9E:B4:44:9E:EB:E7:08:6D:2B:BE:43:BD:D2:93:C7:24:23:CA:0A
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 0198D4E0B557567A5F8BE9B086C225F7C8B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
Manifest number: 1657
Signing time: Sat 23 Aug 2025 03:02:32 +0000
Manifest this update: Sat 23 Aug 2025 03:02:32 +0000
Manifest next update: Sun 24 Aug 2025 03:02:32 +0000
Files and hashes: 1: L3kS7Jn1yhF9Sq1B0Zxhnxy-UmQ.roa (hash: 7USsx/75CcWYYXOpIrJthPZ+SLbNDigaF6/K5IzHy04=)
2: L3xdjIH2zy7v5Cj6gtkLDE8Ij7M.roa (hash: Q+o3qtQDOHZiPtx1qsjKwH4+/xbmKCsf4LWPeNV0Toc=)
3: Te7YHi2pfVF9zbo2M3FU6X9QFw8.roa (hash: iefxuR6cCSeQuUVD7gHNM5oNj3aGdVfsEjg121b/nwY=)
4: YbdTZXXJ_bhou-ns1MRKdw7L4Hs.roa (hash: Yu99aBSHIFLARWNtpLmDu4XobT/yupAF1F7TMAyI2tE=)
5: Z82XkiOXgkgyHP_qUTQtV9ipAQI.roa (hash: Pcm+DnawQak47wg3O3tVgdWOq8t4gYDBeT6sBFXXJVE=)
6: kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl (hash: 4xBFIHXOxhc5U8Sl7Z3HIlrKpzL4TsetA+QGw0xOSM0=)
7: xzAOimHDia6u9KEZ2lcYuzbmUh8.roa (hash: twU3Zu+3OA4eLfmXFSTTDjCKPfrJ6o8S1Q+yF0JIdC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b5:57:56:7a:5f:8b:e9:b0:86:c2:25:f7:c8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Aug 23 03:02:32 2025 GMT
Not After : Aug 24 03:02:32 2025 GMT
Subject: CN=069eb4449eebe7086d2bbe43bdd293c72423ca0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:a4:7f:54:90:17:c4:43:f9:d8:9f:76:70:
9d:2b:f9:f0:84:69:18:bf:19:7a:b7:cc:60:4a:92:
6c:87:a6:9f:d6:1a:f7:4c:d0:48:1e:45:6f:10:6d:
8a:ff:8f:03:43:30:2c:22:19:fa:f9:18:69:d1:e5:
98:65:e0:b4:c6:7c:6d:5e:26:65:c6:1c:ba:e2:79:
4f:92:97:84:e0:48:d6:84:8c:f4:b6:39:f4:7f:dc:
7b:ef:dd:84:12:ae:c4:86:2e:0c:4e:ea:ac:3e:c6:
87:3b:cb:69:43:17:ab:94:cc:d0:3f:71:27:77:aa:
d5:d5:d4:51:81:1a:5c:3c:f9:5f:1c:13:f7:24:6a:
77:c4:fb:00:c1:46:30:62:e3:f5:4e:9d:ca:fc:31:
5c:ec:dc:f9:60:ec:aa:a9:3d:bd:3b:f5:fb:bd:69:
e3:fc:6a:c6:0c:16:1a:1c:f3:d0:37:a3:3d:24:87:
8e:64:e1:c8:ad:3c:5a:99:1d:5a:a1:e3:40:75:70:
8b:6d:ca:e6:94:c5:f4:72:3f:32:d1:c6:e4:49:df:
09:af:c0:86:b4:39:b5:b7:9f:9d:ea:a3:41:7e:ce:
eb:0b:ac:51:64:b5:15:21:f2:e5:29:97:c5:c2:c3:
8a:ad:73:a2:44:e2:d3:76:fe:1c:cc:60:b3:76:02:
6b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9E:B4:44:9E:EB:E7:08:6D:2B:BE:43:BD:D2:93:C7:24:23:CA:0A
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1e:5b:96:98:d5:0f:2d:7f:97:c9:cf:01:b0:76:a3:7b:36:
71:51:49:37:43:cc:a3:ca:a3:7f:7a:ed:ef:c5:08:fd:12:a9:
c7:a5:e1:de:13:b7:97:d4:03:f4:f9:98:b9:ae:78:4f:1b:59:
56:5a:7c:58:63:f7:45:53:1c:a1:db:a4:4a:5a:7d:f7:49:99:
75:13:3b:0f:a8:57:fd:e9:19:02:55:6b:a0:3b:25:c2:6c:5e:
58:be:01:bd:78:9f:d8:49:d8:8f:9b:54:29:23:10:41:27:10:
5c:dc:fd:d0:99:ac:46:81:be:a7:11:ff:e9:ef:51:96:24:a1:
3b:8e:04:aa:7b:1d:09:51:1a:9e:7b:58:55:b7:ef:99:b8:c1:
94:49:a7:fd:e3:60:34:8f:bf:c2:c9:de:13:c4:45:b8:45:ab:
38:dc:74:70:76:96:df:84:b3:18:50:8f:c1:eb:ac:3e:bb:87:
c3:ed:c1:ad:68:ef:bc:ff:7b:3e:28:e5:e7:9f:66:60:54:b8:
c3:8f:91:86:d0:2c:51:df:c2:2e:50:80:d7:9b:58:c5:6f:22:
6a:86:68:7b:01:09:92:30:f3:77:07:97:4a:37:6d:a4:bc:52:
3f:10:e2:ce:83:95:b7:ca:fc:fa:02:67:80:27:27:7d:2e:e5:
3e:a5:14:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:30 2025 by rpki-client