Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
File: k4yI3syI92r_E7wIWNs4eDS-FxE.mft (raw, json)
Hash identifier: NGca+u6HAX2d1svpbdvntiW12MtwAFPgTn0Q4MeQcoo=
Subject key identifier: 5B:09:51:A6:09:5A:2D:F5:41:F3:88:FB:7A:18:63:6D:B3:71:0F:6B
Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
Certificate issuer: /CN=938c88decc88f76aff13bc0858db387834be1711
Certificate serial: 019848F71A01267E523D81675B5813E72087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
Manifest number: 10A2
Signing time: Sat 26 Jul 2025 23:00:10 +0000
Manifest this update: Sat 26 Jul 2025 23:00:10 +0000
Manifest next update: Sun 27 Jul 2025 23:00:10 +0000
Files and hashes: 1: GzSJNC8rXvHPR5ECqFrqBc47EjY.roa (hash: DpRxP+N8EisPg5SdQn8IRQde36mD1fsRwPBj23IbYe0=)
2: k4yI3syI92r_E7wIWNs4eDS-FxE.crl (hash: qtRS8QoThCR3KMLWBNhbrr+tnXv7axpSkNkfIExlOi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:1a:01:26:7e:52:3d:81:67:5b:58:13:e7:20:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938c88decc88f76aff13bc0858db387834be1711
Validity
Not Before: Jul 26 23:00:10 2025 GMT
Not After : Jul 27 23:00:10 2025 GMT
Subject: CN=5b0951a6095a2df541f388fb7a18636db3710f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:52:32:c3:b3:dc:47:e7:b6:35:07:8e:f8:b7:
25:b5:33:2f:39:71:3e:39:be:7b:35:a8:1d:14:65:
e8:5a:cb:e2:da:e0:43:75:84:d5:b2:3d:57:cb:95:
61:e2:08:7b:4c:19:9a:75:1d:a8:2e:c5:80:c8:68:
b9:8d:19:c6:7c:a6:4a:35:fc:6c:68:4b:c6:54:88:
8c:b4:27:76:d7:8d:70:30:f7:2c:6d:d0:f8:46:83:
3e:24:bd:d7:6f:64:cf:61:8f:4e:de:d8:bc:bd:22:
31:da:29:d2:f0:5a:80:af:b9:84:1a:ad:da:4b:01:
d7:34:d3:7d:76:dd:09:80:6f:0b:5d:f2:c7:cc:5c:
39:ea:49:6a:d4:d8:e6:f7:55:3b:3d:47:24:e4:90:
67:6a:ad:98:15:20:02:c5:cb:cd:12:95:f9:a1:5a:
92:d4:14:2b:ee:13:fa:96:c9:00:58:ae:13:c2:d4:
4e:d7:81:f7:cc:42:17:a4:2e:f5:04:34:16:fc:c7:
e7:95:82:e1:43:89:2a:e8:84:d3:36:a8:ac:c9:d9:
9d:07:41:98:48:85:79:a1:6c:9c:7b:d5:6a:8a:70:
d5:8a:41:d7:cc:b3:26:16:96:34:dd:4f:26:73:b9:
8c:22:4f:44:3f:18:7f:7a:53:06:f2:40:5f:90:3a:
6d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:09:51:A6:09:5A:2D:F5:41:F3:88:FB:7A:18:63:6D:B3:71:0F:6B
X509v3 Authority Key Identifier:
keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f3:a1:68:a4:f8:c0:07:44:4d:c0:1e:2f:e4:c1:a7:bf:04:
96:2b:85:21:3d:c6:ff:2e:35:2b:13:cb:f2:8e:20:aa:5a:54:
0e:e9:7e:86:18:57:9f:07:89:0c:38:11:7c:9f:dd:ca:c4:61:
da:92:86:e7:24:a6:ab:42:9c:7e:12:21:9f:e5:11:de:26:74:
5a:dd:9a:c2:3e:83:d2:03:96:23:57:50:30:e9:93:28:85:fd:
cc:08:e2:60:49:63:45:5f:ce:e2:3a:35:81:ac:89:53:37:d4:
2c:20:bf:38:c9:4a:51:b7:14:c5:8c:31:c5:c3:0f:ee:5e:f3:
20:a7:db:0c:ce:74:13:f1:b9:ab:6f:f5:98:e3:fb:27:25:01:
25:1f:de:a0:22:df:6f:a5:29:af:61:b1:32:e9:5c:99:51:12:
b7:26:29:40:b0:07:7b:4d:6b:80:41:af:5e:11:91:fe:17:0b:
aa:d9:f0:eb:e4:c0:71:af:9d:b5:f0:dd:49:4a:e4:ae:59:d6:
01:84:af:f5:07:1a:c5:c1:ec:ac:54:38:ab:18:67:fc:e7:c5:
d3:6e:47:3d:34:21:41:04:db:6a:ad:d9:a3:eb:f7:84:59:68:
2f:19:3f:df:4f:46:df:0b:0c:98:45:2e:e3:52:47:b0:c9:ec:
88:34:22:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:28:21 2025 by rpki-client