Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
File: kTOA6LhQRU2zgd3euawsyKL2JTE.mft (raw, json)
Hash identifier: Jlp56KSEAbBI64Kw236J5mmhXyLLRgJTCnn0xUgzxpo=
Subject key identifier: BD:76:6B:C4:DF:90:AD:0C:BC:4B:3F:EB:04:62:08:D7:86:B9:DC:D2
Authority key identifier: 91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31
Certificate issuer: /CN=913380e8b850454db381dddeb9ac2cc8a2f62531
Certificate serial: 01984B5516E7B96021A2DB14FCC5A6D43421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
Manifest number: 04FD
Signing time: Sun 27 Jul 2025 10:02:02 +0000
Manifest this update: Sun 27 Jul 2025 10:02:02 +0000
Manifest next update: Mon 28 Jul 2025 10:02:02 +0000
Files and hashes: 1: U5Y7YWVXNPPm9KoqmwsivloXzrs.roa (hash: ca5vcs2GJ+zXpmrDaBzBSEBE+1Vnejqdln+cTCo9uxU=)
2: kTOA6LhQRU2zgd3euawsyKL2JTE.crl (hash: BbTa1PYUWlyXI4yz4q1b0MyAQ8u6CG5RcRINtQJa0BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:16:e7:b9:60:21:a2:db:14:fc:c5:a6:d4:34:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913380e8b850454db381dddeb9ac2cc8a2f62531
Validity
Not Before: Jul 27 10:02:02 2025 GMT
Not After : Jul 28 10:02:02 2025 GMT
Subject: CN=bd766bc4df90ad0cbc4b3feb046208d786b9dcd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:97:69:8b:33:b7:f1:3b:67:99:cc:05:be:1d:
ec:d6:45:22:38:9a:79:92:6a:a7:57:2d:4f:9e:5c:
46:7c:e9:f6:fb:81:cd:6c:21:70:d3:8c:4d:b6:75:
74:2d:ce:1d:d1:1b:33:c8:03:00:83:18:0b:83:0a:
50:fa:ba:ba:64:56:40:62:c0:44:6e:1a:92:a7:7c:
53:74:9b:9e:23:5d:f9:90:4d:f1:97:82:34:98:d8:
c3:40:b6:0a:70:2d:e8:5b:f3:8f:e7:42:5f:35:34:
e5:2e:92:7e:6a:42:0e:cf:00:b2:a9:7c:02:bf:5e:
78:bd:c7:0a:25:2a:6c:5b:e6:c9:1d:29:6b:21:62:
82:93:62:42:36:81:11:ce:dd:87:96:06:f0:db:41:
c7:03:60:76:c3:d1:a3:8c:fd:5c:73:57:ef:52:79:
62:16:79:ae:dd:e0:a3:01:0d:1c:75:60:c5:2f:dc:
40:63:94:10:87:38:b8:b2:6e:91:f6:45:78:64:53:
0e:04:ca:f4:8e:8e:14:37:8c:d7:ee:d4:3d:96:3d:
0d:5b:1a:ef:0b:82:72:02:40:95:9f:4d:69:d9:21:
ec:16:31:6e:fa:f1:93:05:fd:c4:5f:40:24:6c:1e:
2e:66:f5:e7:db:dc:d8:2e:4f:85:8d:eb:f6:c1:0d:
23:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:76:6B:C4:DF:90:AD:0C:BC:4B:3F:EB:04:62:08:D7:86:B9:DC:D2
X509v3 Authority Key Identifier:
keyid:91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0f:29:2a:9e:e3:0a:20:38:eb:c3:a6:79:a0:e4:d1:8e:5b:
fd:2f:be:ca:a9:ba:33:ed:59:19:34:cd:0a:31:b2:75:51:04:
78:71:2d:35:c0:15:b8:5e:e1:98:d5:fe:56:b4:3b:76:83:a5:
66:24:d2:5c:11:0d:d6:94:75:95:83:2a:d5:a3:56:36:8f:71:
38:1a:61:5b:07:a8:90:83:68:6d:ff:85:d3:ab:a2:2e:72:ec:
58:dc:21:ec:15:19:4e:74:ed:b1:1b:e4:64:f8:a5:e9:26:db:
04:2b:2d:43:03:60:da:8b:fc:b5:68:ac:44:7e:a8:24:e0:e5:
e2:c5:7b:84:8b:91:24:7b:96:0c:1d:42:f9:1f:c6:e8:2f:ac:
c3:4c:f7:c5:c9:45:ba:1a:2c:d5:b0:32:be:c2:63:14:3e:93:
a5:af:fb:5a:41:00:b3:95:f4:bd:cd:09:1c:fe:f1:84:03:d3:
fd:2b:a5:bf:57:5a:2d:36:0a:83:2d:2a:c5:68:ff:7f:df:18:
86:5f:d4:80:df:97:a8:bb:35:06:fd:d6:21:a4:cf:77:f9:85:
f6:84:c9:22:26:77:1e:00:6c:fe:3a:1c:9c:78:39:b6:64:a1:
64:fa:4e:77:ac:4c:36:b1:cf:82:5c:13:63:3a:35:2d:db:22:
39:cb:8b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:35:28 2025 by rpki-client