Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File: kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier: OEwg+RT/4d7WFLPeoTqcycAGQx8eUwCxLk9hGu6npkE=
Subject key identifier: C4:4C:59:9F:1F:C0:9B:17:CE:39:FA:10:EA:EA:EF:54:18:46:B1:73
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial: 0198481BD73C35D90220575B7C3A8A7E6BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number: 091A
Signing time: Sat 26 Jul 2025 19:00:40 +0000
Manifest this update: Sat 26 Jul 2025 19:00:40 +0000
Manifest next update: Sun 27 Jul 2025 19:00:40 +0000
Files and hashes: 1: i0TYuxJTadWsH2nNCaLA3ELCG_g.roa (hash: WKF6rqlqDJ5rXyoCDaodVLIXE1F+Y/5SEavY6SvlaFE=)
2: joszl7vjeMm9I7xAP3JhFk1aZ5s.roa (hash: jKG1eRBOq5nJNcRDVBOsW2QarCcd5ds9sjRhL8pufpI=)
3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: UbQIV5YJEbNjFLYudYNa7yZig9ArAfYmn/W+gMdXlsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:d7:3c:35:d9:02:20:57:5b:7c:3a:8a:7e:6b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
Validity
Not Before: Jul 26 19:00:40 2025 GMT
Not After : Jul 27 19:00:40 2025 GMT
Subject: CN=c44c599f1fc09b17ce39fa10eaeaef541846b173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:27:bc:12:b9:b6:4d:13:9e:e5:53:81:3a:f8:
4c:e5:85:33:c1:0f:af:10:b5:7f:e3:39:83:4e:7e:
ad:de:8f:e8:4a:b4:e2:5d:f4:b0:32:da:74:6c:35:
ed:77:8b:e4:cb:f5:08:4f:c7:36:27:8c:b6:b9:f1:
c4:bb:ec:6b:5b:5d:94:86:dd:f3:ab:6d:33:6a:42:
3a:ce:e7:a6:20:82:c5:e1:13:4f:21:59:6b:e7:ff:
7e:da:82:05:b8:6f:bc:dc:da:00:90:44:eb:45:c3:
a4:d1:e2:54:69:98:7a:5b:11:87:d9:fd:d2:a5:88:
b1:8e:74:a9:ca:d2:28:8b:e6:d8:a1:6f:db:df:8b:
4d:dc:93:36:0f:44:6a:3d:ae:d5:bb:03:a0:a4:b3:
d4:8e:e7:ac:e6:85:b6:01:8f:13:ab:eb:07:d9:43:
90:a3:21:70:bc:67:9c:5e:46:c8:2c:07:5f:4b:f6:
d8:f3:1d:2a:c2:e5:80:5b:47:21:d7:1b:b0:33:3a:
0b:2b:c2:b2:37:74:55:7a:be:6b:ff:43:ac:c6:ef:
56:39:05:b5:f1:e3:90:87:e1:9b:58:dc:de:da:53:
91:86:f5:c2:25:8d:94:1e:3b:a7:bc:3a:0c:1f:91:
17:a5:f1:02:72:0c:95:13:ce:bd:87:28:1e:8d:02:
47:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4C:59:9F:1F:C0:9B:17:CE:39:FA:10:EA:EA:EF:54:18:46:B1:73
X509v3 Authority Key Identifier:
keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:38:2e:2f:70:a0:fe:ec:e4:40:20:fd:0a:88:e2:b1:3e:12:
6f:40:2d:dd:d5:ea:85:1f:ef:d2:d0:99:84:6f:e8:b1:e9:da:
8d:14:8b:ae:7d:ff:01:3e:59:97:62:ee:49:ab:24:a9:30:f9:
c4:e0:82:1d:6d:6e:f2:30:7c:45:8e:27:58:d5:98:9b:42:c9:
8b:b6:c6:6d:ca:85:7f:9a:07:9f:e8:af:87:c3:bc:a1:8a:2c:
f5:23:eb:4a:e3:90:fe:bd:7b:e0:0f:4e:ba:3d:be:8e:db:d3:
ba:90:95:ba:00:91:e1:b0:96:43:5f:5e:cd:6b:62:13:97:a3:
22:de:37:6c:b8:8a:0c:1d:61:b7:9b:01:6b:41:57:83:08:d7:
e3:b9:b9:e9:da:c2:dd:67:3d:44:2d:19:cb:d3:0b:21:da:75:
a7:aa:cf:a7:55:6c:2f:90:24:20:bf:58:9a:72:bc:1f:76:6e:
03:88:45:67:e0:33:d9:14:46:32:97:24:28:45:27:70:88:e6:
63:18:f6:5e:60:0b:d1:c7:36:3c:ea:be:53:b8:80:cc:bd:2b:
74:c4:46:f5:ba:1a:ee:d4:19:13:fc:1e:15:ad:a2:66:c3:0c:
48:48:e7:f6:07:ed:49:d8:92:68:19:4e:98:0c:a2:08:1b:ad:
df:8b:3a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:25:04 2025 by rpki-client