Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
File: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft (raw, json)
Hash identifier: Cd6AcRlKFKguDi3mN7YSk9kk6aNK463e02/Eq8dUnac=
Subject key identifier: F6:2A:98:E6:EE:0F:5E:17:E9:DE:4B:BA:43:FC:CE:DA:28:D4:1D:0D
Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Certificate issuer: /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Certificate serial: 01983E3D0F0DA8D517592E7A88BF17669793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
Manifest number: 1600
Signing time: Thu 24 Jul 2025 21:00:45 +0000
Manifest this update: Thu 24 Jul 2025 21:00:45 +0000
Manifest next update: Fri 25 Jul 2025 21:00:45 +0000
Files and hashes: 1: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl (hash: dzWH5sO8OdfksuV6yCd8AasgHqRr0LhIRFZan0E/LSU=)
2: rIuFBAfmvp_-lxNjPhpoImYAjZk.roa (hash: UYHTUbb1Al1rBA78c79sngeNx1JvlEPhDvWJaFDSi+E=)
3: y4ueXY0ijBf4RZb4fGJVsXQLGA0.roa (hash: UvuMlXoUYXPwY2R/r9zwqG0BA2XfWQY7ClxJAXl4TJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:3d:0f:0d:a8:d5:17:59:2e:7a:88:bf:17:66:97:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Validity
Not Before: Jul 24 21:00:45 2025 GMT
Not After : Jul 25 21:00:45 2025 GMT
Subject: CN=f62a98e6ee0f5e17e9de4bba43fcceda28d41d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ec:06:ed:90:5d:08:42:63:b9:ab:c6:b0:fe:
14:a5:15:a5:22:63:6b:23:b1:2e:7a:e1:3f:a5:af:
b1:97:60:8a:45:3e:17:13:f4:38:8c:55:4f:04:5b:
c4:74:4e:e5:ec:ce:bc:46:cb:9e:26:4b:91:9f:2e:
1f:63:00:d5:cc:3c:fa:36:5e:40:3c:48:55:c2:c2:
85:31:1d:93:33:e6:21:0c:02:24:bb:00:31:5b:53:
35:fa:42:34:b1:71:c8:39:29:0c:3f:45:21:3c:26:
e0:32:04:fa:34:e9:71:32:bc:38:51:90:3b:45:0f:
ac:21:6b:a1:eb:a0:5f:98:7a:b9:e1:7f:ed:6a:b2:
9b:54:9e:0e:f1:bc:77:28:06:87:5f:43:fa:cf:b6:
ce:17:12:78:79:7f:26:f7:2c:47:af:93:7c:40:ec:
c8:92:22:23:e1:8f:97:7e:6a:5c:62:76:13:d6:4f:
ff:b2:f9:8c:79:c0:83:d7:aa:c7:c7:13:b7:1e:49:
28:5d:9a:2b:8d:ad:b6:a6:9b:69:66:c3:6b:b5:a0:
ea:61:f3:ee:c4:53:79:0f:9e:5f:30:75:5a:9b:ce:
ce:e0:8d:ab:c4:46:a9:86:26:3d:b4:3e:5b:aa:ac:
1a:61:69:0a:46:40:29:e7:3b:df:15:1a:fa:1e:78:
88:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2A:98:E6:EE:0F:5E:17:E9:DE:4B:BA:43:FC:CE:DA:28:D4:1D:0D
X509v3 Authority Key Identifier:
keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6b:92:2e:38:9a:28:42:92:f8:54:c1:da:67:d2:37:a2:a8:
aa:f2:40:54:8b:dc:c9:95:92:3d:91:36:df:61:ef:8c:3e:1f:
cd:5c:54:22:1f:af:01:e7:b5:f0:4a:a8:0b:a9:7e:fd:b1:45:
41:5a:2d:aa:b5:69:2e:ae:61:b9:fe:2e:b0:46:95:aa:d2:b1:
39:91:1f:72:5c:53:d2:fd:50:de:6f:d9:c6:04:82:a5:95:ba:
01:95:13:f2:e4:b6:4b:5d:dd:a9:11:bb:bb:43:44:11:ef:28:
31:26:b0:71:18:d1:5b:22:f5:ec:85:08:15:15:a4:7a:90:e3:
8c:85:b9:08:d5:6f:ee:6e:e8:85:69:21:73:b4:5f:f6:a9:d7:
8d:05:1f:35:70:c4:59:17:75:96:c2:e6:54:b8:ce:27:d5:d5:
3b:24:a6:2a:6f:2d:94:ed:01:c4:7b:69:13:d7:37:79:3e:8e:
26:62:3e:8e:8b:a5:0a:b8:4f:35:49:75:4b:9e:af:44:4e:dc:
48:69:01:9f:7d:e7:7e:1b:c1:5a:51:e5:34:d7:e5:ff:42:72:
24:7e:49:44:c5:2f:db:e0:1a:91:19:a3:c4:f4:69:14:5d:40:
84:f3:83:82:21:e8:3d:eb:36:04:17:38:09:9f:59:09:c1:24:
ab:2a:f1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:04:54 2025 by rpki-client