Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
File: Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json)
Hash identifier: hPUHibdqA5KcZ+2bOdzTJIz7aQSDGE8/XxUDy8Trji8=
Subject key identifier: 1E:77:92:11:AC:01:17:84:EE:30:FE:AF:7E:1E:EB:AB:D8:62:92:A1
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial: 0198488997D32201DBB75A397A82284F24D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
Manifest number: 0E4E
Signing time: Sat 26 Jul 2025 21:00:33 +0000
Manifest this update: Sat 26 Jul 2025 21:00:33 +0000
Manifest next update: Sun 27 Jul 2025 21:00:33 +0000
Files and hashes: 1: BTmSI3bKDyEio_o8HAFd3DpA8rw.roa (hash: 3z5V5nlo98dCHrSvU7v+ci/JP55YJA4F6NU227fMQdg=)
2: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: ubUy7Xtjem2K7EVtZRYpXb36kw8Xr9jfGgvToktMcos=)
3: Vl-BUyW_4i4W1Wnxmf0KDGW6dVM.roa (hash: qrkRzr8LSzDpFIdLrS23zNSmVx5+NOPtSLZdcnXxt68=)
4: oxi_ya_EdBtJCrjY1pYIsNptA_Q.roa (hash: /Rw4xq/Rq6iapjKpArPGVtAk2zVGOyS/eMr3PI823Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:97:d3:22:01:db:b7:5a:39:7a:82:28:4f:24:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Validity
Not Before: Jul 26 21:00:33 2025 GMT
Not After : Jul 27 21:00:33 2025 GMT
Subject: CN=1e779211ac011784ee30feaf7e1eebabd86292a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a8:71:8b:09:c0:98:08:75:bd:e5:2a:b6:6b:
41:2a:15:29:e1:73:b5:37:a0:58:e0:9f:62:6d:0b:
1a:b1:16:c1:57:7b:dc:38:84:67:d7:99:a2:f9:3a:
6b:78:69:ae:d2:5b:10:bc:11:8f:45:72:9a:a0:f9:
01:f6:f7:cc:38:5a:5f:24:1e:80:87:80:a4:d0:82:
31:18:24:6c:91:71:26:44:88:b0:35:be:93:7b:ab:
86:34:8f:c3:8d:3f:a5:7b:fe:f1:41:95:38:88:37:
90:c4:e9:da:d2:e9:3c:88:b4:d8:47:f0:80:3d:69:
2a:65:44:14:bd:1c:f3:cd:03:da:88:21:3c:5a:76:
fe:54:c1:eb:68:bf:51:47:a0:9b:e2:ec:a8:59:15:
b9:e2:c6:0e:27:93:c6:9e:50:95:4d:eb:79:11:1b:
37:8b:e1:0f:37:8f:a3:ab:9c:92:e9:e5:6c:90:73:
10:94:2a:0a:5f:1d:06:f5:df:f0:ad:c8:b3:ae:49:
ce:44:84:1c:96:7f:5f:54:8c:1e:06:4c:a9:59:54:
37:5c:52:c3:19:01:0f:9b:56:e2:5a:36:e9:da:4a:
d3:5e:42:07:bc:a8:de:c0:ae:4e:5f:b1:bd:ec:fc:
87:cb:02:93:b9:b6:06:3d:cc:d2:bf:e8:13:3c:79:
c6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:77:92:11:AC:01:17:84:EE:30:FE:AF:7E:1E:EB:AB:D8:62:92:A1
X509v3 Authority Key Identifier:
keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:00:e6:29:dd:8c:d5:b7:d7:d1:f4:03:bf:40:8d:51:c9:ed:
83:99:a0:5d:6b:5f:69:63:1e:27:3b:c2:b3:ff:c7:81:ef:a8:
af:95:54:d1:a7:ca:1c:7a:85:47:09:e0:f1:da:38:d0:62:a4:
ea:b1:5a:2d:d5:32:e4:3a:01:5f:d8:cc:d8:3c:8c:71:6a:f1:
9e:48:11:aa:2e:b5:8d:c8:df:50:a3:a7:03:ca:39:82:9b:63:
59:cd:0d:4a:b8:06:38:43:41:b3:90:3f:98:ec:e7:3f:79:4a:
0a:f2:15:17:8e:da:43:91:33:d0:37:1a:60:b3:e9:f7:bc:79:
33:75:2b:56:30:8f:a0:f9:69:7d:68:3d:e6:e7:2f:55:8f:3b:
24:bc:89:5a:4a:eb:5f:05:4e:df:53:2b:7e:57:ae:22:81:b9:
a6:c9:a0:e8:36:94:ca:98:ce:c6:6c:e8:a2:6d:93:96:34:cc:
67:cb:17:72:36:36:2a:ba:9c:8a:bf:fb:8c:1b:21:7e:e3:ac:
09:ce:43:a2:d5:54:7a:e0:53:a6:25:54:35:ea:40:83:34:2a:
3e:2f:3b:b0:e7:c5:ae:24:d2:46:e7:94:6b:e4:fe:20:5e:f5:
9a:9d:b2:b9:ac:89:a8:38:b6:39:53:f1:34:c2:6e:d7:fb:4a:
0e:31:be:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:23:24 2025 by rpki-client