Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
File: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft (raw, json)
Hash identifier: teqsU0yfMmU23BEQQ5ZOjmlsh4blfMgVpdRS5S3TGuw=
Subject key identifier: D1:E8:07:64:21:8A:EF:47:C0:23:56:F4:A6:89:CC:63:61:6E:6E:5C
Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Certificate serial: 0198D473A8C08D72789B3DF05DDEF37AD036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
Manifest number: 0610
Signing time: Sat 23 Aug 2025 01:03:26 +0000
Manifest this update: Sat 23 Aug 2025 01:03:26 +0000
Manifest next update: Sun 24 Aug 2025 01:03:26 +0000
Files and hashes: 1: DgYaKXLAfCciJB45PdY6jb3nvSM.roa (hash: 3wQZIj5q2hejLISAuXVPv02HNSLvrU3fDX6SOnePruk=)
2: iLJZ457a-7z02PhFWjv4cGHT93U.roa (hash: NESsCi8hLaoKvM16NOOEv6MVC+cF28ZWv23JeL3C9tw=)
3: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl (hash: lhRK0F+BEk83gcRmAYntD7H1gPJJaiXufVm6OgjDPv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:a8:c0:8d:72:78:9b:3d:f0:5d:de:f3:7a:d0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Validity
Not Before: Aug 23 01:03:26 2025 GMT
Not After : Aug 24 01:03:26 2025 GMT
Subject: CN=d1e80764218aef47c02356f4a689cc63616e6e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:5a:85:49:a0:57:d2:c8:72:30:a0:58:55:
49:83:7e:70:83:25:be:f0:ba:b6:61:ba:ee:ee:9a:
8b:53:37:fa:f8:fa:d9:f4:49:69:ff:da:f1:4f:32:
94:66:32:6e:1f:bb:b5:17:49:42:1b:12:4d:ee:b0:
42:98:b4:76:e2:58:5a:d3:de:97:4b:24:06:a9:d6:
99:f6:e2:bd:0f:02:d9:a3:b7:1a:60:55:47:d8:a5:
c6:13:b8:e5:d0:86:04:7a:49:de:98:e6:e1:05:a5:
6d:2e:66:4d:d3:54:87:46:12:5c:b2:fb:68:dd:6c:
46:7a:a2:f5:0a:ae:80:f7:01:8b:c5:09:40:47:34:
ab:27:10:5c:10:c8:37:59:e8:fb:78:57:a1:db:34:
dc:21:6e:0d:72:34:cf:ed:16:45:4b:f7:5f:9c:15:
db:70:79:ed:b8:25:4c:68:b6:0f:40:e9:50:d1:e8:
ac:bc:72:c3:51:b4:bc:84:70:4e:ac:f0:97:48:c6:
1a:b8:92:85:63:d8:6e:df:c5:ce:ed:d5:8e:04:6d:
9f:e1:4e:15:2b:57:5f:29:74:48:2b:a7:35:ad:ae:
21:3f:fb:3f:fa:ff:cc:a9:2a:7f:f5:03:a9:3e:bd:
32:06:5b:78:4e:ff:2e:e0:42:97:e1:ec:32:aa:be:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E8:07:64:21:8A:EF:47:C0:23:56:F4:A6:89:CC:63:61:6E:6E:5C
X509v3 Authority Key Identifier:
keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3f:68:ef:de:d1:18:ca:46:4e:76:b9:a1:8d:d1:bc:c5:2d:
5b:16:4d:8d:94:a8:36:09:16:1c:ed:57:0d:93:6f:d2:c2:ec:
42:4b:5f:0c:d6:eb:63:80:59:dd:96:76:f8:db:98:88:f0:d2:
29:6c:17:84:5a:a9:28:e4:d1:d9:01:7c:b9:21:d7:0f:79:d0:
0f:22:16:30:97:f8:de:f7:4f:17:27:8f:5a:2e:e0:77:45:fc:
1c:b9:ad:91:a2:12:fd:96:d1:56:37:16:f5:e5:a3:2f:89:e7:
c8:09:ae:f4:97:9b:fd:91:31:93:fe:4e:69:fa:1b:9e:e6:3b:
6b:e2:2a:0a:3d:f3:9e:16:d4:7c:b4:79:14:16:0f:de:be:48:
9f:d4:58:08:5b:bd:d0:5d:ce:c3:9d:4e:21:22:04:26:a1:dd:
62:ec:78:62:36:4d:5b:4e:d6:78:a6:5d:5c:15:0a:39:9b:b0:
b3:99:fd:6f:78:d0:db:9e:de:22:30:db:3f:e4:7c:6b:89:8f:
46:19:7c:1a:ea:45:89:ae:ad:c7:44:c6:95:e5:e3:12:ee:d1:
b2:48:12:f3:2f:cb:60:a9:75:6d:23:00:d6:0c:24:86:3e:9e:
f1:da:0d:aa:49:ea:3e:e9:0d:be:fe:01:30:1c:b6:ab:1e:46:
e8:0c:ed:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:24 2025 by rpki-client