Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json)
Hash identifier: S0zaqjvRXZdlyhXQwQbKQ0oL9f3xX+y4drFCBSlTmz8=
Subject key identifier: CD:16:79:C3:58:47:74:F1:AE:90:D4:67:CB:95:BB:71:12:17:DC:D4
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 0198271091E38127D4525A9EDB0C37A04E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
Manifest number: 054A
Signing time: Sun 20 Jul 2025 09:00:54 +0000
Manifest this update: Sun 20 Jul 2025 09:00:54 +0000
Manifest next update: Mon 21 Jul 2025 09:00:54 +0000
Files and hashes: 1: BEBiIFhite7xZ0bNEP-JA8QrqMg.roa (hash: QbnrrPHP3fwKy8016pI0qpDqUM0JJdXwZKXHEa0y/SQ=)
2: LARL1hIKcaD4vW3zR5MLoEhaFxc.roa (hash: b6NkmGlDSYN3he0zDu5SwrD1JA7+YMRtU9hknGZasjA=)
3: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: IJmIAznLSiz1T2zEY//lFLh0oQaGwDP8++GpaRuEJiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:10:91:e3:81:27:d4:52:5a:9e:db:0c:37:a0:4e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: Jul 20 09:00:54 2025 GMT
Not After : Jul 21 09:00:54 2025 GMT
Subject: CN=cd1679c3584774f1ae90d467cb95bb711217dcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:e9:fe:a9:52:3b:2d:b7:33:a8:32:3c:7a:
02:33:23:18:3b:c9:1b:5c:0a:88:01:78:60:d0:81:
3e:a0:92:31:86:a8:9a:d6:2c:20:0c:0a:d8:26:3c:
c7:ed:b9:57:f0:46:af:6d:30:8d:a7:db:25:1e:15:
62:a6:3e:5d:4b:5d:bd:07:d7:da:bc:cf:75:70:7d:
41:b3:c0:e8:b6:16:99:bb:e1:a3:70:cf:fa:a0:e4:
19:a2:64:28:2c:8f:27:9b:8f:e7:7f:ac:b2:84:43:
b5:8f:47:9e:05:8b:44:ae:0f:1c:32:0b:e6:54:9a:
e9:9c:c0:80:30:73:8b:fd:bb:58:61:0a:09:de:13:
13:9d:a9:1d:be:6c:2b:1f:99:39:a0:de:09:b5:86:
7e:17:c6:b1:90:62:b9:e0:fd:a5:ef:05:5d:fb:cd:
39:24:d4:14:20:1e:24:cd:de:25:94:00:39:bd:89:
48:33:ee:55:93:c7:60:8f:35:5a:d4:b4:d7:fc:bc:
18:f4:bd:a3:93:6f:26:55:ee:13:bb:1d:b3:63:a2:
75:53:3b:57:b1:f9:b7:b0:33:d3:5f:a0:9d:bd:56:
c4:65:d4:1d:92:d5:0c:cc:b5:8e:4d:d2:68:4b:b0:
86:25:00:ea:96:b4:11:5b:68:8d:95:f2:17:1a:55:
20:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:16:79:C3:58:47:74:F1:AE:90:D4:67:CB:95:BB:71:12:17:DC:D4
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:3b:69:22:c0:37:f1:25:61:48:af:80:fe:d4:0d:72:75:03:
12:94:7e:da:00:fb:8a:2d:97:d9:05:45:cd:77:1c:d7:5f:a4:
9b:81:fe:07:c5:ed:94:af:29:c7:b0:e7:33:80:98:04:33:fa:
d5:96:a1:51:f0:b3:39:b5:d9:af:de:5d:4f:04:28:29:93:b9:
71:74:f4:aa:81:e0:1a:ac:36:f4:67:14:74:fa:e2:50:1d:15:
d4:dd:5d:46:d2:63:f5:61:6c:61:39:24:67:07:a1:8d:33:0f:
87:cc:d1:74:e4:09:5a:e8:71:e2:36:0c:03:7d:07:25:11:55:
37:f2:78:a0:79:25:16:d2:76:f5:c4:a5:97:ec:4b:2e:a8:21:
6d:1f:4a:0a:55:67:d9:99:67:4d:da:22:2e:c7:43:0a:9b:e0:
88:20:4d:99:5a:84:99:88:d2:53:cf:30:00:2a:2b:0d:0e:fc:
1c:30:77:5a:b8:f5:71:1a:96:6d:d9:83:2f:4e:19:1d:41:12:
8e:c1:1e:8f:48:5d:c1:fb:7b:08:c6:ff:bc:56:1a:b2:b5:b6:
2c:19:7a:06:66:c4:e6:a1:5b:e1:e4:99:30:20:c9:29:be:3a:
cb:a4:a8:af:6a:b7:b2:f3:52:4b:ea:d6:73:bb:cd:a8:a2:9d:
85:2b:48:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:31:50 2025 by rpki-client