Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
File: CKkhe9gwYnyz5lfAuQY8giNN28s.mft (raw, json)
Hash identifier: kq4JZhTGA3ywxi7EOiHR1OlVDpZZ4E2UrNgfBLN5NHE=
Subject key identifier: 30:8F:84:EF:80:7F:08:62:E6:41:89:87:61:B7:FE:32:FB:F7:6D:03
Authority key identifier: 08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB
Certificate issuer: /CN=08a9217bd830627cb3e657c0b9063c82234ddbcb
Certificate serial: 019849D3C684A2BE7B98629849D19E53CA2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 03:01:12 +0000
Manifest this update: Sun 27 Jul 2025 03:01:12 +0000
Manifest next update: Mon 28 Jul 2025 03:01:12 +0000
Files and hashes: 1: 34veN2ucTJBbi388PrmLekhLRzM.roa (hash: zPkkR8nXQL9mfEVd+D/kn8bIVDt7EDLAoyKRPC1BVEk=)
2: CKkhe9gwYnyz5lfAuQY8giNN28s.crl (hash: 61adaUa1vl1vsJ518AC94s4qVeZ42g2VLH289LDG+pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:c6:84:a2:be:7b:98:62:98:49:d1:9e:53:ca:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a9217bd830627cb3e657c0b9063c82234ddbcb
Validity
Not Before: Jul 27 03:01:12 2025 GMT
Not After : Jul 28 03:01:12 2025 GMT
Subject: CN=308f84ef807f0862e641898761b7fe32fbf76d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:d8:42:b6:f9:93:f9:1e:49:9d:93:2c:67:
00:d3:de:73:c3:92:a0:53:61:84:20:24:9e:88:23:
30:7f:81:cb:19:42:90:d5:be:1a:40:49:d5:e1:9d:
97:60:b3:a5:c1:9b:28:b6:16:cb:15:f2:9e:6a:14:
83:fd:ee:27:40:3d:99:23:4f:a0:d7:e0:26:e5:4b:
38:c0:76:bb:ce:2e:8b:95:04:51:a5:9d:e1:28:8d:
45:67:5a:63:0d:8e:db:25:d7:cb:32:4e:6a:6f:7d:
4b:7a:b4:f1:d5:a6:9f:c9:ec:42:ff:39:c0:d7:cf:
60:69:73:27:25:c8:be:87:39:03:fc:e8:e7:94:ab:
a9:82:9c:de:76:2f:6b:69:2a:d3:df:94:e1:f5:c9:
2d:47:aa:83:4b:cb:ae:41:cc:46:05:73:09:32:47:
32:85:e4:b5:e5:2d:78:aa:e7:9e:e3:22:85:80:15:
2f:fb:15:ea:17:56:ad:eb:7d:9a:74:93:94:ba:33:
aa:f7:47:45:4f:a5:65:ff:ed:e4:b8:6d:6a:bb:69:
68:d1:0b:67:eb:88:f2:51:0c:47:84:d5:7b:d4:fc:
23:41:1a:21:be:0f:35:ef:e7:05:24:e8:81:15:2c:
3e:6c:3e:dd:ff:e0:08:bc:a4:0b:64:f7:c0:75:67:
3e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8F:84:EF:80:7F:08:62:E6:41:89:87:61:B7:FE:32:FB:F7:6D:03
X509v3 Authority Key Identifier:
keyid:08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:01:8f:b8:da:1d:32:22:94:5f:1b:d2:de:33:7c:1b:f5:01:
d5:7c:0c:34:60:aa:1f:b7:ae:6b:b2:25:01:9e:ce:75:c1:13:
b2:77:f6:fe:2f:b2:07:eb:71:bb:33:ea:04:10:01:44:c1:61:
1d:2b:5d:36:8a:dc:57:21:2b:82:d4:77:c2:61:0a:77:44:8e:
06:93:96:fd:c3:e3:a4:17:ce:13:21:aa:e3:ef:97:1c:fb:74:
74:2a:3d:b8:08:96:c8:75:f9:cb:32:b5:3e:ba:30:bf:96:14:
c6:4e:8c:fc:3b:d1:79:68:fa:06:b7:6a:29:99:eb:ac:50:9f:
0f:e0:a4:99:a5:c7:1a:d3:a1:bf:bd:93:d0:81:a5:e1:f4:04:
48:28:06:99:0d:17:b7:56:87:ef:68:1e:1d:00:6a:6d:22:50:
6d:d1:36:8a:eb:79:ea:af:90:29:06:30:cf:88:14:ef:a3:55:
10:b2:f9:a4:46:18:6a:69:a3:6e:8c:a2:96:66:05:35:03:67:
28:22:18:4b:de:ef:cb:be:67:16:4e:43:f4:2e:8d:20:3d:2e:
53:07:0f:e8:4a:b6:26:9c:93:3c:81:e8:c1:e7:9e:8f:b7:b1:
45:c1:0b:e7:c7:61:9c:0d:79:a4:07:45:e2:73:01:b8:9e:16:
f3:8c:04:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:47:50 2025 by rpki-client