Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
File: Ka2L_getXSzLQ7DR26axkstR2-o.mft (raw, json)
Hash identifier: O7vj9uI6oRXUDJ0tIY36kSh7lbJRi4kRtMs+O6U9YwY=
Subject key identifier: 7C:67:AC:73:5F:FD:97:37:71:42:9B:0C:70:73:2E:69:49:10:2A:FE
Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
Certificate issuer: /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Certificate serial: 019840CFD3F87AD29455EDBA1296DB4DDEB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
Manifest number: 1603
Signing time: Fri 25 Jul 2025 09:00:18 +0000
Manifest this update: Fri 25 Jul 2025 09:00:18 +0000
Manifest next update: Sat 26 Jul 2025 09:00:18 +0000
Files and hashes: 1: Ka2L_getXSzLQ7DR26axkstR2-o.crl (hash: WiUg9NfAdfwYtFiKhJDM8kJb00oz9kfvweACjvbjmGo=)
2: h-R5SrdfAe7rN8zMOqkX0BtsnJ4.roa (hash: 3D3z76pesB4+PkPGfBCrb/veNRexeyxDAf3xN4YJwnQ=)
3: tOD9yELwWOB6I1JsshHxqOqJaWE.roa (hash: E867kd+hZLMJTwwIfg4wQE1B1KmxpcWNXSjEvrvHFrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:cf:d3:f8:7a:d2:94:55:ed:ba:12:96:db:4d:de:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Validity
Not Before: Jul 25 09:00:18 2025 GMT
Not After : Jul 26 09:00:18 2025 GMT
Subject: CN=7c67ac735ffd973771429b0c70732e6949102afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:36:44:3b:b4:df:4f:64:15:3c:74:4e:63:
08:9e:1c:a2:92:a1:3d:d1:2e:24:13:01:b2:ad:c7:
14:73:fd:8d:41:62:22:b2:6a:ea:2f:d3:88:ff:2e:
56:cb:e6:1d:ca:31:47:0c:e4:63:b3:3b:3a:40:f9:
d3:d3:91:10:35:a5:29:61:5f:75:84:17:eb:11:99:
72:41:8d:0a:d5:92:2c:dc:c7:55:65:55:42:6f:05:
7e:17:0d:8c:3b:0a:55:aa:d2:04:a8:6c:ff:ee:c7:
50:db:48:0a:42:20:5e:2c:84:8e:f1:b4:b0:73:66:
99:1d:63:0d:38:ec:ab:80:e4:c0:16:67:f3:8e:c3:
45:d6:2b:43:cf:af:3b:ea:73:36:b3:22:3e:d9:2c:
06:3a:9c:60:e8:6e:7a:80:dc:ae:d1:e7:af:e3:76:
26:39:11:f6:14:17:9a:f9:27:23:92:4b:5f:02:45:
1d:e1:7c:fa:57:ef:6c:47:65:c6:87:ff:84:57:eb:
0d:86:68:43:5c:16:85:fe:f7:2f:af:a0:dd:eb:60:
55:8b:8e:b5:97:09:30:fd:d9:a0:5c:44:47:07:24:
fd:5d:1d:f8:8b:26:4f:78:39:3c:b9:29:14:4e:a5:
30:22:66:97:1c:8d:eb:45:13:ef:d1:30:b7:11:df:
a5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:67:AC:73:5F:FD:97:37:71:42:9B:0C:70:73:2E:69:49:10:2A:FE
X509v3 Authority Key Identifier:
keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:95:46:ce:6e:b0:c1:f3:e7:0d:15:c5:26:ea:9b:da:fb:54:
2d:e4:9c:4e:16:ee:fa:14:be:3c:54:54:1d:d9:c5:2c:72:f5:
a3:52:ff:df:4b:b9:dd:12:fa:f0:77:33:c3:61:a3:ea:cf:12:
31:0d:f4:82:5d:56:3f:fd:ae:80:e1:59:14:86:2c:1f:65:0e:
4a:7a:db:43:5e:32:69:f0:1c:5a:15:17:80:d8:6f:01:04:8c:
79:8b:bc:22:5c:aa:21:45:cb:57:45:09:f1:e1:8d:94:54:69:
f0:a7:52:2e:9b:67:21:7d:5b:3e:a8:e0:e4:f9:c6:12:dc:36:
d4:80:a2:1c:8e:0a:70:24:f7:b4:fe:45:bf:10:f6:45:45:60:
bc:8b:55:c7:7b:6d:36:b1:cb:d8:48:be:fe:f0:c8:c2:a7:9a:
dc:54:5f:59:40:71:bc:99:a1:4e:ac:61:d5:ce:2d:b1:b7:de:
bb:c5:f5:8f:f5:99:5b:00:28:35:b6:72:9c:79:e1:c3:77:53:
7d:83:a8:d6:89:89:cc:f3:9f:66:fb:a1:1b:77:c1:28:f0:ae:
84:2b:0c:96:b6:02:15:27:0b:97:1f:dc:cd:22:7f:48:e1:eb:
61:cd:92:f3:17:ca:81:4f:79:89:76:18:ec:33:f6:fa:73:a3:
40:9c:6b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 11:06:27 2025 by rpki-client