Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: SQME5TMNYfLVQOWSYIOfcaCZvY+gUHSy9sWBsjvv7qI=
Subject key identifier: B1:53:8B:FB:8F:CF:C6:BB:3D:F4:2C:32:38:A3:B9:8A:33:B0:4B:70
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 0198529F0F37EDE5AA4249D24BE2F4B476B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 14DE
Signing time: Mon 28 Jul 2025 20:00:12 +0000
Manifest this update: Mon 28 Jul 2025 20:00:12 +0000
Manifest next update: Tue 29 Jul 2025 20:00:12 +0000
Files and hashes: 1: YV0LpnxtBTAq4lz06bEpbCvyfLw.roa (hash: 9MkObNOUwLuOccH80DPJr9LOnHYQQUzirjuDL+0jWhk=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: HqPepVs1tAiTA7i5vM/H3wG0nMcAJlQCB5fkMZqpufY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:0f:37:ed:e5:aa:42:49:d2:4b:e2:f4:b4:76:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Jul 28 20:00:12 2025 GMT
Not After : Jul 29 20:00:12 2025 GMT
Subject: CN=b1538bfb8fcfc6bb3df42c3238a3b98a33b04b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8a:f9:23:57:92:32:80:00:09:c4:59:7f:95:
32:6a:3f:f7:ca:d3:43:ee:cf:2e:96:23:4b:e6:b5:
fe:9e:c7:4b:8d:26:9b:6b:29:f2:ac:de:2d:b0:b3:
c1:8c:f3:9d:00:8c:c1:52:0a:6e:bc:a0:1a:5d:39:
e1:75:0b:e8:4f:99:a9:64:46:55:41:58:3a:f5:ab:
06:f5:c0:29:7b:26:df:65:13:2d:28:32:79:21:21:
16:b1:6d:bf:99:43:a9:52:d8:77:cd:9a:f1:2b:30:
a4:d4:d1:59:a4:20:38:d4:bd:4a:c6:97:8f:9a:e8:
bf:0b:78:bb:7b:0a:17:d7:e8:33:88:d4:e2:7b:4a:
97:00:a4:2a:cb:fb:cd:7e:f3:94:f8:65:35:a3:2b:
7f:e3:06:b7:c0:0a:65:a8:41:0b:eb:8d:22:24:47:
8b:a1:dd:77:fd:27:cc:75:2a:d6:e8:87:e6:75:65:
98:67:6a:1b:5d:9b:3b:13:40:5f:18:4b:65:0a:39:
6f:a0:cb:d2:c5:1c:fa:07:30:ee:45:79:e5:32:ef:
bd:c4:ea:46:77:e6:6c:4f:27:bc:97:df:17:33:99:
04:18:6e:44:97:c6:82:1e:5a:98:c6:7b:6b:e7:1c:
16:c7:c5:62:30:43:a2:65:58:ab:28:13:a8:59:04:
7e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:53:8B:FB:8F:CF:C6:BB:3D:F4:2C:32:38:A3:B9:8A:33:B0:4B:70
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0e:3b:ae:71:02:80:35:fd:88:74:a8:6a:73:41:fe:c8:b3:
7b:66:56:6d:15:1a:9f:39:04:9d:de:01:ff:2e:04:81:aa:66:
b8:84:f8:21:eb:37:ab:31:6d:44:fb:81:da:53:c4:80:29:2c:
61:f8:0f:f2:8c:b4:b6:a7:d4:89:59:92:b8:05:67:0e:9b:37:
e6:fe:d6:d7:49:b1:46:01:42:a9:20:7b:66:0c:96:05:05:5e:
70:3b:e7:3a:e8:3c:af:18:ae:e8:a8:a0:11:2b:a6:e4:0e:81:
c2:27:ea:cc:31:4c:a3:d7:ca:c2:01:0a:83:be:53:9a:53:d4:
c1:ed:ad:da:18:be:6c:e8:0d:a6:f4:f6:0f:f6:48:a1:ac:83:
b0:ef:66:ab:58:a3:8f:a4:e4:2c:39:6d:20:2f:18:c9:55:3e:
4d:60:9d:b9:80:7f:96:b2:02:ee:4e:6b:7e:4c:f0:a7:0b:f9:
1e:34:1c:00:4c:02:e3:90:0b:cd:e1:f7:17:c4:11:06:88:5f:
04:98:74:e9:a0:42:7f:1a:57:69:09:3e:e8:5b:41:98:53:75:
9a:d4:55:56:05:36:bf:77:fa:62:ac:50:6f:57:34:66:f7:bf:
89:63:e0:3c:67:56:c2:32:80:f5:f6:61:73:65:c4:98:e1:7d:
ba:19:0c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:13:31 2025 by rpki-client