Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
File: kGSznoDKHN5MrcC8jqK0HqbSfHY.mft (raw, json)
Hash identifier: d3ZdzEOlKMSzTwhLmQPwZQTKmyRJva+42onqJgPjn+0=
Subject key identifier: E7:95:8E:FA:B0:AF:40:39:88:F0:AD:74:C4:A6:A3:32:09:FE:BC:50
Authority key identifier: 90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
Certificate issuer: /CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Certificate serial: 01984853133190B7489080C17487DD585894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 20:01:00 +0000
Manifest this update: Sat 26 Jul 2025 20:01:00 +0000
Manifest next update: Sun 27 Jul 2025 20:01:00 +0000
Files and hashes: 1: FKW3Mb8twN-jkMzdiCWs_x2VU-o.roa (hash: zIG0SkUcjt7d+bJLn+B2ubk7D8sMo7IcD8uDUAn5toQ=)
2: kGSznoDKHN5MrcC8jqK0HqbSfHY.crl (hash: Pd9hNOooKxtiduZrkST5j3jbGvUEq5Rfusi7aO0/l4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:13:31:90:b7:48:90:80:c1:74:87:dd:58:58:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Validity
Not Before: Jul 26 20:01:00 2025 GMT
Not After : Jul 27 20:01:00 2025 GMT
Subject: CN=e7958efab0af403988f0ad74c4a6a33209febc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:5f:d9:98:c2:75:ad:0d:51:4a:e9:6a:cc:
03:7e:b5:4c:75:45:d1:26:94:33:02:ba:38:b1:0c:
96:1d:a5:71:b4:97:95:03:d7:a7:c1:d0:1f:39:80:
8e:6a:b3:1f:3c:93:31:6e:c9:56:c1:3b:1e:2e:28:
e2:57:62:ba:7b:06:43:aa:da:45:65:02:1e:c9:75:
4f:38:28:d4:a4:e3:04:b2:cf:01:c1:9a:ba:21:44:
a4:8c:51:ec:c8:ea:52:18:30:50:8b:61:56:df:aa:
7c:9b:3a:f5:95:cc:a1:4c:80:02:89:72:d4:a3:9c:
fd:29:9a:4b:8f:03:26:58:81:ab:56:e6:a2:60:19:
64:94:8c:48:89:14:11:84:e9:86:32:a6:19:60:2e:
21:67:fb:13:49:7c:a9:65:11:fb:55:43:9f:72:e1:
a7:21:bd:ca:f4:cf:57:35:7f:f2:58:7f:1e:ee:51:
ba:ac:1d:a2:b1:92:bf:f6:af:b0:3d:a4:d7:4f:61:
46:8a:fe:ab:d6:4d:04:86:56:fe:c6:d9:6e:cf:34:
59:61:98:c5:a0:6c:4b:c9:3a:b3:5d:5a:c0:fc:ab:
c1:45:8e:ee:c4:07:96:ad:a3:71:ad:47:d3:cf:a7:
85:30:ee:0e:81:52:63:38:fb:45:ff:92:0f:d8:49:
0e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:95:8E:FA:B0:AF:40:39:88:F0:AD:74:C4:A6:A3:32:09:FE:BC:50
X509v3 Authority Key Identifier:
keyid:90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f7:df:9b:47:64:a5:65:e6:5f:fa:44:35:a4:fe:12:43:70:
08:14:2d:40:71:fb:77:04:c2:c1:10:45:08:a8:a8:35:9d:58:
ba:ae:a2:3c:ca:79:6b:95:ab:9c:3b:89:24:05:ce:49:3a:c4:
8e:49:dc:0f:b4:ce:53:fc:d7:41:7e:0a:3b:b1:86:e6:f4:e3:
3f:4c:66:c2:1e:9d:e2:90:81:41:0f:16:ca:e2:66:a5:5d:c2:
4c:fa:07:77:69:83:15:f8:e2:30:e4:07:88:e6:2f:8f:4f:02:
c8:98:1c:dd:1e:11:41:91:46:34:ac:69:f8:85:96:91:c6:6f:
04:3e:e3:e2:c9:94:2e:c5:0a:f9:80:d1:16:fc:bc:32:f6:1b:
7d:fb:97:43:50:4e:6e:49:14:68:a9:e9:a7:65:53:76:99:22:
1b:fb:99:6f:ae:73:72:c0:7d:74:89:27:da:cf:76:f7:5a:04:
73:6e:09:88:7f:4a:7c:43:70:9e:1c:b6:53:e8:31:d6:ba:43:
ab:ec:cb:fc:15:a8:f8:35:27:98:17:54:e0:cb:0d:81:16:bc:
cd:97:f7:d9:9d:8a:26:ff:b5:d4:c5:cb:61:36:71:16:22:2b:
50:62:1d:da:e0:86:dd:0a:e6:a1:2d:53:49:d1:78:17:a1:49:
dc:bc:e7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:55:55 2025 by rpki-client