Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
File: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft (raw, json)
Hash identifier: /0w4pXWyZt5tm2H47lxum1HPel0ZrhE+Ptb4xXCKMNI=
Subject key identifier: 23:2A:6B:60:60:6F:56:CA:DA:8A:66:3D:11:7D:53:89:2A:79:B4:8D
Authority key identifier: 92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
Certificate issuer: /CN=9246785f469be8aa7151e3333e47465d478fd0e7
Certificate serial: 01985569F3371A6CF362B66F54FCD1A95218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
Manifest number: 1609
Signing time: Tue 29 Jul 2025 09:01:03 +0000
Manifest this update: Tue 29 Jul 2025 09:01:03 +0000
Manifest next update: Wed 30 Jul 2025 09:01:03 +0000
Files and hashes: 1: aSkETRaAPEJs87vkPB5vARFsUpQ.roa (hash: aCCeFkfXg4eaGy/UUrllTCVipmWIQ10CNhHiLobPblo=)
2: h0KwGsV7Y4PS9-ubvbwvPxeINTw.roa (hash: QnImr5OAriGOLs8DShZajEz7o3J5PVeEaUrLJ83dAtA=)
3: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl (hash: nLPlkwKzZ8Gxa7L+cjnroTIrGb25cs7Kf9yel1i7m6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:f3:37:1a:6c:f3:62:b6:6f:54:fc:d1:a9:52:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9246785f469be8aa7151e3333e47465d478fd0e7
Validity
Not Before: Jul 29 09:01:03 2025 GMT
Not After : Jul 30 09:01:03 2025 GMT
Subject: CN=232a6b60606f56cada8a663d117d53892a79b48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:36:32:1e:73:51:6c:1c:2b:fa:d2:a6:8f:
85:f2:24:46:d5:58:b2:33:e3:8f:4f:05:c2:0b:1c:
3d:68:bb:6c:66:31:57:ae:9d:86:39:0d:b1:6a:1a:
cb:60:98:b8:ec:6b:80:52:64:5e:36:0e:cd:14:30:
13:d1:6a:52:06:4d:a7:13:20:74:3e:e9:2e:89:9b:
09:06:4e:61:c6:94:e8:ea:07:f1:c4:66:78:c4:04:
c2:7f:b4:2b:ce:cc:79:0b:e3:36:cc:7e:a5:da:4b:
ff:57:63:98:18:8c:53:8c:d1:ff:04:8d:29:e2:45:
e7:e8:57:67:a6:37:66:63:24:54:80:29:af:fd:34:
08:63:83:20:cf:f6:03:a9:7b:64:bf:43:4b:5b:09:
85:fc:e5:9b:09:89:05:7e:a5:1d:bb:db:f3:7a:63:
82:26:d9:78:0b:f1:b5:e8:ef:56:52:00:20:ba:fa:
2d:73:0c:d6:a9:2c:51:7b:74:3b:75:27:f4:8d:27:
67:cd:85:20:72:f1:a9:f4:2e:f6:aa:c8:09:98:fb:
9e:04:1e:b5:54:31:81:26:dd:f2:7a:55:06:8a:41:
d0:e7:38:b3:1b:3c:4e:3b:87:95:03:85:8a:d0:30:
1a:54:ee:d3:4b:a5:3a:74:4a:ba:9e:2c:4d:6c:90:
3f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2A:6B:60:60:6F:56:CA:DA:8A:66:3D:11:7D:53:89:2A:79:B4:8D
X509v3 Authority Key Identifier:
keyid:92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2c:83:aa:b9:47:cb:28:ca:49:a8:4d:93:65:25:a7:33:19:
39:37:2f:89:df:50:1a:b2:65:b2:a3:07:6e:e6:13:64:be:40:
46:c4:f3:03:5d:f4:d3:71:da:fb:fe:5a:6b:87:1b:52:a6:f0:
6e:89:e4:c6:5c:84:d7:ae:89:06:6c:13:d4:e5:3f:02:0c:8a:
8f:0f:7d:11:c9:1f:a4:af:13:90:82:7a:7c:b7:3c:38:a7:65:
f0:dc:62:55:62:9c:fc:b2:49:22:ce:36:f1:01:56:b5:d3:c8:
8d:dc:fa:27:0e:02:4d:58:be:9c:8e:c0:79:f3:d5:5b:51:e5:
49:c7:0e:f8:cd:fb:16:c2:16:f3:13:83:9f:bd:4a:d8:19:9a:
87:b6:25:73:9f:7d:fd:39:75:01:7f:95:12:29:ae:a7:3b:bf:
3a:c2:49:48:02:c9:8a:80:4e:b8:83:09:52:82:8f:66:1d:e3:
45:08:2c:5f:e5:eb:23:cb:a0:50:46:fb:75:92:c7:10:33:39:
ec:69:ed:68:2b:de:80:46:5b:f6:43:de:2c:b9:df:ed:2c:d8:
f7:ae:94:1f:1e:b8:b5:28:a0:00:f4:ef:98:38:8c:d8:2b:a9:
65:78:f7:4e:a2:a9:3b:fe:35:c1:79:ee:ff:d8:30:30:a5:ff:
71:00:3f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:55:22 2025 by rpki-client