Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
File: kIFN053Tklz_iL801DB_1sYhZes.mft (raw, json)
Hash identifier: 09vYcaLbPHvyx1LEJ1AaWGvrttPripoB8JJlg8+X0wI=
Subject key identifier: 36:CB:D9:79:2C:4B:01:7E:30:11:1F:45:8E:BC:DA:F4:EA:A4:DC:1B
Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
Certificate issuer: /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Certificate serial: 019853447D1405BE1AF8FD5E17DBA5407101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
Manifest number: 0837
Signing time: Mon 28 Jul 2025 23:00:54 +0000
Manifest this update: Mon 28 Jul 2025 23:00:54 +0000
Manifest next update: Tue 29 Jul 2025 23:00:54 +0000
Files and hashes: 1: I1YCEfbbjRZSc_xIUFyDblYriwE.roa (hash: eOZKe0lo11jreas9XGaAS+8tYDTXuTVMymwF1+Z+Yug=)
2: hWSKcMqeZaW4Zv4jBiknXOuGsW8.roa (hash: 2qZdD5hbe6sIKnLdKsWHsV9kY8NKZnUdaQZKVQK/Jyo=)
3: kIFN053Tklz_iL801DB_1sYhZes.crl (hash: atOIgzrcm1rb8fLvqm8db/kzq7NXZwz41zKNyuORzoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:7d:14:05:be:1a:f8:fd:5e:17:db:a5:40:71:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Validity
Not Before: Jul 28 23:00:54 2025 GMT
Not After : Jul 29 23:00:54 2025 GMT
Subject: CN=36cbd9792c4b017e30111f458ebcdaf4eaa4dc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:18:8b:57:72:c7:81:89:9a:99:26:8b:f8:
3b:70:a1:69:5b:ab:13:6e:30:93:c6:b6:8a:ab:d1:
14:6b:2f:aa:f5:14:7c:d8:f5:c4:11:b7:40:ea:0a:
97:40:cd:8c:bd:4d:c5:35:0f:4c:6c:b7:8f:1d:fe:
17:33:fc:1f:1f:07:ec:ea:fa:e0:35:0d:9b:69:f8:
6f:5f:d7:44:38:e4:30:dd:0d:d3:fa:00:6f:ed:02:
82:2f:be:dc:fe:18:bb:92:83:27:e6:4c:9d:63:cb:
d4:fc:8f:94:6a:17:6c:9d:52:74:56:55:5d:8d:d1:
e2:1f:cc:db:85:93:1f:5e:ea:ee:34:f7:dc:bc:5d:
6e:ec:12:1d:4a:72:ef:f5:65:87:2a:9d:83:32:1f:
3d:18:52:12:88:4d:f1:51:ee:98:0a:2b:24:ae:17:
13:34:e1:a7:93:25:68:66:15:85:3b:df:92:44:f3:
fb:a3:a7:2f:c9:d8:f3:f7:f8:fd:d8:d6:3c:dd:d7:
34:33:c1:f4:09:52:c3:1e:39:6b:4a:ef:af:3a:e7:
ee:32:4d:ef:f4:08:c4:c5:55:30:2a:91:61:a4:e6:
7c:c4:e8:e6:5e:54:f3:83:19:b2:2d:56:32:e5:e7:
63:70:d5:e0:89:af:92:73:e5:98:a2:9b:d7:ea:d6:
49:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CB:D9:79:2C:4B:01:7E:30:11:1F:45:8E:BC:DA:F4:EA:A4:DC:1B
X509v3 Authority Key Identifier:
keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:14:af:f1:f8:59:ca:4a:36:c6:cd:07:ea:5b:4b:d2:8e:89:
9c:70:e8:3c:f5:3e:f7:63:e3:a4:19:a9:cc:7e:fc:f2:3b:27:
e4:f6:b3:5a:78:48:7e:8e:1c:61:c9:6d:ad:8a:e6:ad:de:54:
07:18:78:30:3a:17:7a:2a:e2:ab:38:dc:4c:c7:33:02:64:4b:
95:03:ea:89:4e:c2:6f:3b:6c:b4:59:4f:f6:ad:21:18:a1:36:
8b:33:7b:cd:9a:f3:72:69:43:5a:9b:35:34:cc:c9:77:00:60:
7c:97:53:79:74:45:58:c5:3a:28:b2:29:e0:35:06:08:6a:be:
2c:8f:9d:96:33:ee:32:cc:25:46:5d:54:5b:05:7d:ab:8a:85:
54:a1:5e:04:90:22:2f:4b:e4:4c:8d:8d:e7:92:21:7e:9f:82:
c8:ed:50:0c:0f:8e:a0:1a:4d:33:12:58:10:28:f9:11:41:24:
5f:e1:2b:04:f8:d1:dd:bb:85:36:da:58:c8:86:ef:36:f5:42:
b5:60:91:85:4e:fb:6c:2f:1f:b5:41:a5:76:5f:ea:15:2b:8e:
4b:bf:c0:d9:82:ca:93:4e:4f:9f:56:b2:15:91:82:18:76:c3:
41:db:d3:ae:ea:7d:3a:54:d5:58:61:03:8e:17:6d:3b:9c:5a:
2d:bc:3d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 06:32:31 2025 by rpki-client