Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
File: kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json)
Hash identifier: 0GJRraSuy9UzqmxxkjIlsM68v1kF8I8/fW7Mi+3bSvk=
Subject key identifier: AC:88:85:FE:64:36:2C:08:AC:4B:61:97:6B:BE:77:48:16:F9:33:A7
Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Certificate serial: 01984965891D5D7582563E7EC659C2DF38B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 01:00:47 +0000
Manifest this update: Sun 27 Jul 2025 01:00:47 +0000
Manifest next update: Mon 28 Jul 2025 01:00:47 +0000
Files and hashes: 1: _wZ7w3Scv14H15k_iZCT9mnEPVI.roa (hash: JHtZU8B5JlDmryEaVYDxAxM9JobFikDH6+vwZ+Ii1xM=)
2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: PuFRcTXiIT/lw/xPTNdyeZ89Wu/lTsXRHMdG7a7Zm0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:89:1d:5d:75:82:56:3e:7e:c6:59:c2:df:38:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Validity
Not Before: Jul 27 01:00:47 2025 GMT
Not After : Jul 28 01:00:47 2025 GMT
Subject: CN=ac8885fe64362c08ac4b61976bbe774816f933a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:26:d7:69:33:89:41:4a:ea:6b:6e:dc:9b:
3b:61:7e:0a:d2:8a:80:36:1e:88:ce:25:cd:5e:74:
b7:44:0a:4c:e2:a4:66:1f:82:c4:ac:12:89:f9:cc:
1e:ca:a8:32:5f:ca:5e:ac:e8:f0:2c:0f:f3:ba:78:
31:9c:a3:cc:ee:3b:d1:57:0e:9b:2f:c2:35:b4:52:
ab:a7:cc:f0:0a:44:ad:51:1a:5b:05:4c:dc:8a:25:
c1:5b:7b:aa:e4:15:d2:10:67:ac:87:0d:df:1f:4a:
85:4e:40:d4:9a:fc:45:41:f4:04:72:98:a5:75:bc:
fc:d3:bd:9f:b6:a9:04:28:9a:75:24:c5:82:f7:87:
b6:20:5b:83:d8:5b:e7:1b:95:5c:09:18:61:0d:de:
b0:ab:6b:45:0a:37:0d:bc:be:9f:b2:78:6c:51:60:
35:d9:9e:b3:50:61:7b:6d:67:6c:9b:c5:93:0f:2a:
92:33:98:c4:ce:a1:11:d7:aa:36:90:ef:62:0f:ed:
25:94:68:69:c3:bc:52:fd:09:9b:d9:98:92:ba:48:
f3:d8:64:43:99:31:e0:6a:8e:28:42:52:79:c6:e3:
1b:ca:6b:81:5f:be:69:e1:2b:7d:18:50:11:b0:4c:
06:c7:33:f9:f9:98:15:f8:ce:62:d8:12:79:cc:49:
12:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:88:85:FE:64:36:2C:08:AC:4B:61:97:6B:BE:77:48:16:F9:33:A7
X509v3 Authority Key Identifier:
keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:19:e1:ba:97:d7:58:ba:6d:90:5c:89:e1:2f:e4:bf:96:cb:
74:80:c0:90:2d:ce:e8:ab:6a:3a:9e:ac:92:05:1c:63:a9:0c:
1b:f9:13:7e:c2:d2:f6:40:e6:dc:a3:6f:7c:a7:df:fb:cb:ac:
99:38:64:f9:2c:18:bb:57:77:cd:88:26:ed:2c:cf:51:53:9d:
57:8c:9a:e5:33:50:d4:45:9a:b3:b6:d5:ea:e1:fd:a0:71:9b:
1a:97:91:89:ef:c5:07:91:17:78:d8:ab:0d:7f:3e:c5:4a:47:
53:9e:ba:24:1b:53:cc:26:17:19:3d:fe:ae:bd:76:09:2c:16:
67:54:47:33:14:3f:fd:0d:4a:47:37:2a:f6:5c:dc:96:bd:9f:
d1:90:d1:5d:95:a4:5e:82:24:fd:aa:fc:db:82:99:a3:1b:ce:
3b:97:81:3a:07:a3:02:6c:1f:c6:57:e5:bd:57:09:cd:0e:f7:
46:50:e2:6f:d4:1a:0b:9c:48:3a:8c:78:4b:3c:97:1b:76:a0:
39:49:9d:e2:50:8c:8e:4c:eb:54:b2:35:87:2c:d9:99:f5:61:
32:7d:d7:fa:e8:f7:6a:de:7d:4a:e3:6c:39:a3:32:38:a1:9a:
21:94:a6:3f:c0:c6:3d:2c:59:67:cc:5a:15:98:cc:cb:27:a9:
6a:10:1c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:42:50 2025 by rpki-client