Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File: kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier: sylpBnhAeCdrww+JiPjm5QYsxC3M5Ku/CvZ3u9duoo8=
Subject key identifier: F8:25:DA:01:6C:6B:15:9B:9B:D9:20:12:5A:4E:FC:13:9F:5D:D6:F4
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 019849D3BC3838154A26B51566398839B615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number: 0B23
Signing time: Sun 27 Jul 2025 03:01:09 +0000
Manifest this update: Sun 27 Jul 2025 03:01:09 +0000
Manifest next update: Mon 28 Jul 2025 03:01:09 +0000
Files and hashes: 1: Ms3efVN_XUHd4QxKef3_YdRpvGM.roa (hash: JqLniVKizln7qKYMvWy43G4dVpEgMo9SnC/GlXkBUPw=)
2: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: QfSNELLE4h5JAKnSLlqaL37OIKyRac256iv3f3q4g5w=)
3: uDDSIBamhzWkhMClbzH_9oqf3KA.roa (hash: m1HA6uhPnc0quVohM65OVF8eaR3/NxsjEYFcU7UUjUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:bc:38:38:15:4a:26:b5:15:66:39:88:39:b6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: Jul 27 03:01:09 2025 GMT
Not After : Jul 28 03:01:09 2025 GMT
Subject: CN=f825da016c6b159b9bd920125a4efc139f5dd6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:97:57:cd:4e:32:51:10:1c:18:aa:7b:b8:b8:
9b:69:92:4f:32:5c:5a:e0:2d:70:8a:8c:03:e6:f1:
24:ce:8d:eb:fe:26:f0:8d:d7:66:3c:ef:00:c4:89:
93:be:2a:e2:4a:bd:1d:fc:9c:ad:38:f5:6e:17:3b:
9c:80:53:91:82:84:cf:01:ac:90:39:41:29:b9:53:
12:ad:f8:76:95:74:55:62:fd:e4:ab:a3:03:90:01:
64:77:23:70:b4:23:13:cd:8b:ad:88:e7:d6:c3:ff:
70:09:04:5a:ef:5d:f4:18:7b:b5:e1:e6:90:ca:c1:
a2:43:1b:49:65:42:a8:59:78:ee:06:a9:7a:f2:2c:
46:2c:51:08:83:1a:00:69:3c:29:33:e1:c2:17:6d:
ba:b9:77:39:13:d5:c5:01:58:85:82:10:51:d1:68:
8b:3d:c3:aa:66:70:fc:9f:10:37:94:42:9c:64:bb:
ac:5f:96:36:99:1a:e8:ab:e3:5c:a0:4f:3c:68:50:
95:d5:fb:55:c7:39:f2:92:17:8e:47:ff:2c:1e:00:
d4:9f:03:83:1f:6a:c4:0b:1f:df:3f:ff:93:dc:7e:
24:13:69:16:24:ca:af:df:76:75:51:e5:46:55:25:
e9:b3:50:5b:cb:7f:49:fe:68:bc:ae:4e:48:33:e2:
dc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:25:DA:01:6C:6B:15:9B:9B:D9:20:12:5A:4E:FC:13:9F:5D:D6:F4
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:97:0a:22:97:1e:b9:c4:a1:02:01:84:ad:4e:30:88:1e:e7:
02:11:98:03:b5:45:43:01:f9:7b:30:b4:53:38:a6:47:05:e3:
43:65:b7:d6:6e:80:9d:63:e7:8f:a6:57:37:91:4b:6b:28:35:
6b:30:d4:2f:97:78:d5:12:94:a2:0c:88:15:2e:d7:ff:de:65:
e8:46:97:93:ee:ab:65:11:ca:a4:73:bb:70:5e:8e:d9:f6:82:
c0:1d:27:de:b5:4a:f8:c0:b8:de:de:4b:f8:1a:48:90:da:22:
f1:2f:4d:50:10:2d:bd:f2:fd:97:dd:11:52:12:f9:7c:39:20:
bb:5b:0d:c5:31:71:88:8c:94:b8:bf:11:20:7c:83:d7:f6:8a:
ff:49:d4:df:36:57:d2:df:44:d0:0d:4e:02:1d:5b:3d:73:d9:
cb:01:36:28:ef:af:a0:24:f7:39:40:e1:88:16:61:fb:f9:42:
1e:8f:d1:b0:77:c0:52:f1:be:a1:d5:86:9d:6c:02:f5:68:78:
19:e2:40:03:51:62:cc:b3:3e:b0:f6:cb:21:4a:3a:3f:78:b8:
32:e8:30:7f:a6:9c:59:09:4e:80:1f:c1:6e:02:9f:e1:c5:45:
cd:2a:d8:9a:f3:ca:4e:e1:93:6f:62:7a:ea:17:55:b2:46:53:
23:9a:1e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:12:01 2025 by rpki-client