Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json)
Hash identifier: bHWD/T5Fu/NQznjNy3LDXIrooRUaJiTrOnDAZtvPUoc=
Subject key identifier: 53:BA:61:5B:49:0D:AD:09:FB:C5:E6:E3:52:78:77:54:67:D6:50:D1
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 01984664723002C7E54471D647411A67481E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
Manifest number: 1610
Signing time: Sat 26 Jul 2025 11:00:44 +0000
Manifest this update: Sat 26 Jul 2025 11:00:44 +0000
Manifest next update: Sun 27 Jul 2025 11:00:44 +0000
Files and hashes: 1: 3S9CxnQg7YWqU3K6TXltDEUCLyw.roa (hash: 3OEFYGKv+A11bV584/FIEjB0rz/syH/3YTSncOKzqpk=)
2: 7iZSI8YJjBx97RcBp5yy0dHgNCc.roa (hash: zYIePn/XtBi1RBLoEwZwbryvrg3fa+ccFHSQFX92GIc=)
3: 8aTIb0puCina4qQH9DISIqfOc4Q.roa (hash: 1Nu+gUGiEPO422nTi4SIHIM/055+/Bx1i4GdyYjGB6w=)
4: 9DoakwUWAGtHNEatYpKzbo2QTwI.roa (hash: N1mtoTrK+kfX1PnLRJRzSQlCeUqp41+33H0gjLXBdeo=)
5: EZFIYtcapsDAbifqmq2FXtp-Cdw.roa (hash: f6ff20P7C3YhGHb/pCr95k1VGXcMCffUp+GlTWJzaPk=)
6: F-e0yheo2RviKbK6HPx7_eTqhA4.roa (hash: KEJO7y7WsDfC5FsDfSaCJ3hpxQXSnjViDnFGvytgGQY=)
7: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: aH1DNLmUTKeSA0f+vWZ4dupA6dcTfWwGlK6zPW0/PXo=)
8: ic83PxAobxuOswBFck-YRl3xl5s.roa (hash: b2hEd1qs+ywRwA/SKMeyaDMx96OzLoUUBDS6BjYhAik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:72:30:02:c7:e5:44:71:d6:47:41:1a:67:48:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Jul 26 11:00:44 2025 GMT
Not After : Jul 27 11:00:44 2025 GMT
Subject: CN=53ba615b490dad09fbc5e6e35278775467d650d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:2c:9b:82:2f:f5:c3:f2:13:51:55:bf:2c:
c9:f1:a8:45:74:c8:23:a1:74:31:c1:fa:25:b4:73:
39:b4:13:c0:ea:4e:be:15:5f:53:c5:4c:5e:d0:e8:
62:1a:23:33:5f:e6:c2:e5:e5:72:01:b1:83:8a:b1:
ad:65:e2:92:be:89:fd:98:9a:6c:22:a8:0f:ca:2a:
94:79:61:37:41:18:c5:31:3b:02:9c:dd:31:f7:69:
83:97:47:b5:52:2b:13:ae:8b:1e:6d:2a:7e:ea:31:
ea:d8:f4:92:fe:70:84:1d:62:71:4e:13:cb:ec:00:
0e:51:51:0f:cd:2f:da:18:67:7f:d1:7e:73:77:56:
f4:7a:9a:9e:b2:02:5f:84:1f:07:25:7b:9a:a9:ce:
d0:d2:0e:cc:eb:a1:c6:77:f9:a1:dc:80:7c:f0:01:
20:8c:41:ec:ef:31:63:3b:48:e0:fd:13:4b:8c:f4:
61:62:a3:95:ca:5b:93:b7:60:fb:4c:5b:90:b5:36:
42:e9:b1:09:5d:b8:59:88:5c:df:7b:63:bb:fb:3e:
43:20:be:18:62:f5:a6:e4:19:ee:a3:66:9d:c2:ed:
ec:36:f2:9f:3c:09:59:98:a5:de:e5:b7:9c:0c:c7:
cc:02:29:f8:90:9e:40:ec:96:41:1a:46:93:26:76:
d8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BA:61:5B:49:0D:AD:09:FB:C5:E6:E3:52:78:77:54:67:D6:50:D1
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:37:d5:2f:b0:a2:13:48:ca:3c:69:80:d7:eb:ff:35:38:08:
3e:44:67:cd:8d:f5:61:ac:41:f0:d7:4c:62:4b:c9:c2:a3:2b:
46:2d:14:0d:99:f9:0d:ea:3b:7d:08:0a:f6:8e:18:3a:4e:a6:
5f:b3:15:30:f4:97:3b:93:5f:2e:2d:01:c7:2e:6a:d3:65:47:
00:0f:40:bb:b7:db:b7:5d:d2:45:ce:31:dd:5f:a5:e8:d2:13:
15:d7:6b:40:02:66:02:11:28:f7:a4:b7:70:5e:6d:f4:bc:da:
02:b8:f7:a8:b5:7b:a5:2b:6d:4d:6b:1a:94:87:bf:8c:d6:eb:
f7:45:96:b6:26:21:81:39:34:2a:c5:7b:85:c7:13:e9:ed:0d:
1e:36:d0:26:de:1b:08:04:f1:a4:d1:a2:38:5b:77:f1:20:49:
9e:e3:21:fd:9a:04:86:17:39:3a:cf:50:5f:66:1e:cd:8b:54:
ae:f3:4b:6c:89:ae:99:87:b2:f4:57:9e:2c:b6:af:9c:f2:ac:
cd:13:6c:e5:36:de:da:63:07:8c:f2:c2:5b:4d:27:bb:dd:51:
a0:82:25:70:64:c8:31:14:11:77:32:db:2e:ec:54:4c:b1:d9:
59:d6:21:af:0b:49:c4:dc:45:82:c5:75:22:23:e2:1c:5d:3c:
26:72:27:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:28:06 2025 by rpki-client