Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier: YdpdFNzTMKfO9kBQNmhUJtZyz9fdD0B9YhwZKd3hY1I=
Subject key identifier: 42:1B:FB:60:F1:9F:65:16:FC:78:F5:82:E2:C8:29:68:D6:07:31:FF
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 01984B54759C82F70C556FF52E741666BEFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 10:01:22 +0000
Manifest this update: Sun 27 Jul 2025 10:01:22 +0000
Manifest next update: Mon 28 Jul 2025 10:01:22 +0000
Files and hashes: 1: deIOkmJ8ssMd2RwtI-v-jMre1M8.roa (hash: 1DQjFOIdMCv4n8BARwPWSteFX1+/0FvbC04tqMoZb0Q=)
2: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: kQXtoC8c7TUzVTGDrd/bFQ97YxFRVmFViSiwlUAEukc=)
3: pNxIm0SmH7kBUMbare2mFQXDHOk.roa (hash: FL47b2q1GAJAcT+EDiWHDQ+iV/Lo12DMIiUY1wrMTeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:75:9c:82:f7:0c:55:6f:f5:2e:74:16:66:be:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: Jul 27 10:01:22 2025 GMT
Not After : Jul 28 10:01:22 2025 GMT
Subject: CN=421bfb60f19f6516fc78f582e2c82968d60731ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b7:e4:36:6f:d6:69:0a:aa:d6:fe:de:29:09:
ff:b6:7c:d5:a3:b2:4a:d9:89:74:ca:9c:74:84:75:
44:9b:fa:3f:25:6f:1d:87:2d:85:7a:b2:8d:7b:b8:
62:37:cc:de:a0:76:fe:e1:1c:ba:34:49:c3:5b:3d:
c0:f1:27:7d:a0:1e:5a:96:38:29:51:80:da:d9:41:
04:28:2f:6c:d5:26:e0:25:e3:01:57:25:ac:59:37:
c1:f3:7c:b1:90:68:a3:02:77:f7:8c:34:99:74:2c:
fb:60:f6:cf:0c:54:e6:8c:e8:bc:06:7a:1c:59:71:
e0:08:0a:4c:52:9e:a3:fb:d8:c9:ad:88:b7:d5:68:
d0:ed:91:69:08:5e:66:e9:54:24:34:c7:a6:5f:bd:
de:ab:1e:27:b9:a1:3e:38:35:22:70:85:e0:c6:ba:
d1:c5:69:ff:eb:0f:be:1a:c4:c9:77:f2:86:e3:86:
cd:5a:8d:95:b9:5d:c2:ff:c5:97:15:5e:f1:20:1b:
2b:dd:15:be:bc:46:37:cf:70:58:7b:86:d4:7a:af:
8a:cd:96:72:0c:c7:82:e4:89:ae:3f:df:aa:87:11:
7f:30:51:de:9e:d2:91:3b:d2:b7:a5:f0:59:41:4d:
b2:67:e6:0b:77:82:54:ff:b9:aa:b9:1b:52:15:e6:
c9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1B:FB:60:F1:9F:65:16:FC:78:F5:82:E2:C8:29:68:D6:07:31:FF
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8d:27:3a:85:d0:3c:59:49:ed:e2:72:0f:dd:90:bb:3f:ee:
a3:1e:1d:00:cc:df:fb:df:12:2f:af:ba:3f:4f:77:9e:45:09:
b2:83:fc:75:13:95:4b:34:32:91:e0:64:f5:fb:e1:76:13:cf:
0c:9d:23:7a:d6:82:27:80:6f:7a:09:fc:43:ec:32:0d:c4:49:
34:cf:58:90:3c:5f:22:61:e2:e6:f8:ea:52:12:7c:1b:2d:29:
86:24:16:94:86:ef:72:99:7d:da:61:4f:6e:43:44:10:12:54:
2f:f1:25:4d:f3:0f:a2:ce:06:d7:64:21:48:ba:0c:60:8c:98:
0e:26:28:bf:ae:f3:69:98:14:3c:46:bb:d2:b4:0d:49:fc:b8:
c6:08:db:29:7d:ab:45:89:3e:03:59:e6:34:ae:67:99:8c:9b:
8c:45:7d:92:ad:80:08:95:f9:b4:80:d9:a0:c4:02:c8:81:2c:
79:46:c6:73:e1:29:93:73:44:d1:7c:cb:21:a4:db:40:eb:71:
11:4d:c3:69:87:13:27:bc:85:af:d1:1e:0e:85:34:44:ab:a6:
11:0a:fb:2a:10:9e:11:1f:e5:22:64:ea:40:8e:4d:d8:89:82:
b4:2c:f2:35:c4:67:bb:82:bb:69:8d:e6:2e:79:53:78:71:c3:
37:94:1c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:01:19 2025 by rpki-client