Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
File: KYlkeFHvzRmJcu09FJzLvenFXAA.mft (raw, json)
Hash identifier: oZO5etFlJDgj1TXNGIhU7giEClLOpRjnt6nnrAhX4D4=
Subject key identifier: DD:27:FE:71:7B:E6:AD:BA:3E:47:6C:EC:C9:8D:FC:91:4E:79:15:29
Authority key identifier: 29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
Certificate issuer: /CN=2989647851efcd198972ed3d149ccbbde9c55c00
Certificate serial: 0198D5BBF536E02B6941770E39A7FAEDC536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
Manifest number: 0982
Signing time: Sat 23 Aug 2025 07:02:01 +0000
Manifest this update: Sat 23 Aug 2025 07:02:01 +0000
Manifest next update: Sun 24 Aug 2025 07:02:01 +0000
Files and hashes: 1: 1ndyHQjZ22gElMY09b9UIH97Fd0.roa (hash: d9wD6lD21fFSwiL6i7e8/Tvl1y891h5uDv49+B9KB5s=)
2: KYlkeFHvzRmJcu09FJzLvenFXAA.crl (hash: cZHJXhKWNNoVZJwcBclSZER0Xe2CNRJvo+Q4B89gdX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f5:36:e0:2b:69:41:77:0e:39:a7:fa:ed:c5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2989647851efcd198972ed3d149ccbbde9c55c00
Validity
Not Before: Aug 23 07:02:01 2025 GMT
Not After : Aug 24 07:02:01 2025 GMT
Subject: CN=dd27fe717be6adba3e476cecc98dfc914e791529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fa:e5:d6:72:d2:28:7a:87:74:2e:f5:1a:56:
09:a0:f7:5e:b8:7c:4d:39:c5:fe:e9:7f:c1:da:69:
82:b7:68:db:0b:79:31:18:db:1a:68:ec:b9:0b:29:
a6:9f:b9:71:31:1c:5d:c8:d7:8e:30:f5:e5:d0:10:
8d:60:08:cf:d6:ff:f7:44:e6:78:6f:59:13:6d:2a:
55:60:b4:5b:5a:3f:6a:0e:15:36:d2:7b:a9:b6:d7:
24:5c:30:ca:b6:82:f9:ae:84:e6:95:79:87:ef:df:
04:33:8f:47:f9:63:49:d0:a9:a8:21:eb:9e:35:9e:
93:c4:36:61:70:9e:2e:1d:32:50:95:17:89:b4:74:
e6:70:96:a8:5a:2d:3c:c5:92:86:4f:14:d3:e6:e2:
48:10:58:cb:7c:15:b3:cd:8f:a3:99:8a:0e:ad:6e:
9c:ac:28:b4:3d:90:f2:e1:6c:07:ec:08:b8:b4:ba:
83:77:24:66:c0:3f:c1:12:de:ad:96:25:0a:11:15:
d6:b1:ba:0c:22:06:81:87:ce:31:ce:e2:cf:80:aa:
7a:1f:22:15:17:24:65:9a:45:39:75:fa:39:2d:f0:
59:59:8f:42:65:7b:ec:32:4e:e0:ee:5d:e0:2e:5d:
d4:cc:3d:eb:cc:da:64:5f:7a:5b:7c:89:e0:92:24:
61:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:27:FE:71:7B:E6:AD:BA:3E:47:6C:EC:C9:8D:FC:91:4E:79:15:29
X509v3 Authority Key Identifier:
keyid:29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:61:a7:e7:34:c3:48:0b:c6:d5:2b:fb:5b:a8:e7:42:19:8e:
4c:2a:ce:8e:27:4d:5e:d4:e3:03:2f:63:9f:92:52:09:9f:57:
07:0a:17:ff:62:bc:16:8a:fd:84:cf:5e:65:a7:15:33:72:91:
75:3b:1f:c1:80:f5:eb:cf:48:42:0c:fc:4a:21:4a:ce:0f:a8:
fd:bf:a0:b5:b7:61:88:42:0d:5b:72:5f:4f:71:5b:a1:9e:de:
95:1c:41:d8:13:52:86:d6:9f:0c:04:a6:c2:5c:97:7f:4f:69:
45:a6:80:e3:1f:23:fa:5e:1b:1e:68:ab:4a:2b:b9:10:a1:4a:
b7:ff:23:ca:69:47:ab:d9:de:af:4c:e0:60:f7:64:96:1f:58:
e5:41:ed:5f:71:e0:e6:c8:68:8c:a2:e8:1d:62:25:3e:95:49:
63:e3:11:eb:35:e5:20:e2:ec:c3:0c:63:78:78:35:08:dd:51:
d1:3c:f2:fd:9f:c6:35:c5:24:38:99:11:33:f0:6e:ee:6e:5f:
2e:7c:7f:eb:05:14:68:56:78:ab:29:3f:bc:91:9d:01:d6:b6:
74:c4:46:6e:34:7f:f9:05:25:59:b4:b5:9c:d8:91:8f:0b:f5:
5c:75:df:0d:83:17:59:c0:a8:be:bf:a2:a2:5b:d8:a4:1b:f0:
f0:88:74:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:33:34 2025 by rpki-client