Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
File: ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json)
Hash identifier: I8ST51UTEoaFdPDbgmO/lcPHa+55wX11AOzy9rc3D0A=
Subject key identifier: 2C:26:4F:73:54:AB:B0:17:B5:C7:1C:FC:1D:95:0D:6E:C6:24:F4:D9
Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
Certificate issuer: /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Certificate serial: 019851FA990B20EBB3BAFB4E3AE83D96AE1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
Manifest number: 02D9
Signing time: Mon 28 Jul 2025 17:00:34 +0000
Manifest this update: Mon 28 Jul 2025 17:00:34 +0000
Manifest next update: Tue 29 Jul 2025 17:00:34 +0000
Files and hashes: 1: NT1QDrMKsOVILzcOXnhpnfJyMhI.roa (hash: 9+BV5zYO8wTAitnkhk1uaQv1Ka5SPfIsNZ8LLhRy68U=)
2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: a/okjTpr6QtIMDwYHLCvsSxYj+Lgggj+fFW+0V7+yxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:fa:99:0b:20:eb:b3:ba:fb:4e:3a:e8:3d:96:ae:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Validity
Not Before: Jul 28 17:00:34 2025 GMT
Not After : Jul 29 17:00:34 2025 GMT
Subject: CN=2c264f7354abb017b5c71cfc1d950d6ec624f4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1d:22:1c:76:14:68:5f:cc:92:6a:a6:76:43:
dc:e8:0b:57:0c:92:ee:4f:63:bb:04:27:8a:0c:14:
97:25:58:a2:44:6d:da:ff:c9:9f:60:37:2b:c7:74:
8e:02:60:90:13:07:9b:f3:f2:99:63:dd:f3:83:d4:
c6:59:5f:28:c1:24:2e:dc:24:eb:aa:b4:45:0b:72:
3c:ea:11:b0:22:39:df:9d:19:93:ac:60:f4:58:7a:
ee:07:be:eb:ac:62:05:a1:ab:5f:92:8f:6a:7d:ff:
67:2a:35:3c:f2:09:44:c1:00:b9:72:82:bf:18:68:
f9:c6:a3:31:76:d0:cf:1a:4d:4c:5b:db:2c:1d:59:
c3:a5:17:e7:74:0d:3f:07:f6:26:29:9b:ac:6d:74:
3a:23:17:25:8a:58:0d:59:07:53:4e:fc:c7:02:5a:
f9:19:fc:f5:d1:0a:36:14:dd:c2:51:0d:63:a6:7b:
6c:c9:6c:f8:4c:d3:9a:7b:d5:98:de:ab:1b:58:9b:
bc:08:88:ce:36:55:11:c5:a8:c8:81:b5:83:79:17:
29:03:03:aa:8e:55:8d:f7:59:68:1c:27:17:e8:34:
69:da:27:4b:d5:09:1a:88:6b:a9:51:a3:02:c3:ef:
1a:c2:ad:7e:01:7c:0b:e0:a7:e8:7b:66:be:3d:e5:
be:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:26:4F:73:54:AB:B0:17:B5:C7:1C:FC:1D:95:0D:6E:C6:24:F4:D9
X509v3 Authority Key Identifier:
keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ae:c3:b0:b7:ed:2f:06:d6:ac:d0:a1:53:a4:d2:56:85:da:
fd:d0:a3:72:be:a3:1b:67:c8:fc:93:41:04:22:a3:ce:1f:59:
af:87:1b:9f:8f:41:14:67:dc:41:74:7f:ac:c0:88:79:cd:54:
e6:23:93:5a:18:58:80:f1:19:e2:0e:73:e2:6f:6f:6a:79:87:
29:ef:89:d9:58:94:1e:d3:3a:6f:75:28:85:22:88:d7:6d:2b:
f5:e1:45:b3:36:c3:6b:f3:83:31:df:90:27:23:bb:fb:ef:d4:
4f:2d:21:a4:4b:60:35:ad:a3:18:1f:00:11:db:29:61:6e:59:
bf:48:80:49:56:3f:55:d3:46:ae:71:3d:fb:78:d8:53:cb:51:
09:ab:23:7d:bc:93:bd:7b:3b:41:c4:a4:85:8e:87:8e:19:37:
bb:c6:7c:40:9e:48:0e:8f:cf:95:4c:5c:f5:d5:19:6e:ab:1b:
84:0a:9b:d3:bc:65:20:0d:2d:07:76:6f:34:5d:93:5d:4f:b5:
0c:a1:67:e5:c3:29:ac:61:ed:fb:83:b1:66:24:a6:b5:ab:1f:
57:1a:5c:11:6c:9d:7b:17:c5:41:05:40:fd:ad:66:27:8d:b4:
30:89:0c:ee:bb:4c:ef:84:0e:ac:51:38:8c:86:13:13:95:5e:
58:75:c7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:53:56 2025 by rpki-client