Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier: obyGZwS367QCgFz3AY5w1lFz2M/guxTT3+NPkra7LPI=
Subject key identifier: B9:AE:FC:C3:2A:4D:77:E0:68:81:87:D7:8C:D9:50:DB:D3:87:77:62
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 01984589A731504CB2D3DF1FD58292A11A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number: 1605
Signing time: Sat 26 Jul 2025 07:01:45 +0000
Manifest this update: Sat 26 Jul 2025 07:01:45 +0000
Manifest next update: Sun 27 Jul 2025 07:01:45 +0000
Files and hashes: 1: 3WOQMHHA_gyX03awABhKzOim3Bs.roa (hash: ZA+s/EckArtDe+QZpgBb9d1KuxQcRDkEk6RSEwu6Y0k=)
2: 7KoL3jGlfNGPpyhqV9AtZAaoaI0.roa (hash: Nb/Vw+/Ylb4cSX8JKW25BkVIJgSx13SRW+VCTwm5sJ8=)
3: HL23JkhmDLszmlcMKIQLjOYgOlw.roa (hash: UcG0dWZ6JWWkmOHgvKVtqjoii96EVOB2hFdkb/AhZXs=)
4: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: Hnq0nth8MLVKlibG/nmlCynox6Z3vqxcz7lH+Henq4s=)
5: bLZSbio8bkJcYZljrUphK1wwfiI.roa (hash: 8pmPyotbXxfraqC1rKstG9Ljo1wkSagV+FMWF45wlzU=)
6: pZ6QLhb3L-zU8HaIuMWziHfarGQ.roa (hash: bAsLcg/vcZKidF7bKnaCdDmEHtuPe3QKZhFTHIqySAA=)
7: vgrDVzIHM-lfYbprXn7b8oE_EG0.roa (hash: pmw87KrkZDI/w+UgS4DgQBhIgi8uItz6U8fozdzX4sc=)
8: yIaElboDEcTWK_3VfQrVd7rO3sU.roa (hash: dRcI0G+6+49AKUKXqa7HKsOOK4Sxw6VtAfiMSWdhRnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:a7:31:50:4c:b2:d3:df:1f:d5:82:92:a1:1a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Jul 26 07:01:45 2025 GMT
Not After : Jul 27 07:01:45 2025 GMT
Subject: CN=b9aefcc32a4d77e0688187d78cd950dbd3877762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:20:00:81:43:58:09:78:32:ec:bd:3b:b2:1a:
13:ba:79:ef:03:d2:19:c9:58:98:1a:08:21:57:49:
f9:29:68:e1:63:cc:32:79:b9:6b:57:7d:17:42:c0:
de:5d:9e:36:f7:55:5e:1d:70:b9:a9:64:ae:45:8b:
eb:49:02:a6:e7:14:9a:0e:69:d1:6d:a0:65:4b:e0:
ba:1c:9f:89:7b:6a:5c:70:89:bb:73:56:28:4b:23:
f3:a3:6c:15:c8:a7:50:81:2d:f6:53:1d:a6:58:eb:
0c:1a:a7:c1:59:6e:df:28:63:2f:d2:eb:65:fc:a1:
22:2c:53:82:2a:0b:c4:00:be:7b:90:bc:06:c3:0e:
4a:12:1c:e6:4f:18:d0:c2:20:3d:74:88:66:8b:c5:
0d:b5:f8:38:e3:fa:fc:b5:76:a6:ad:e8:e3:84:0d:
b6:bc:07:23:42:68:0c:cd:47:9b:0d:68:ba:16:13:
92:1d:ef:80:66:6c:40:a2:1e:b2:f1:72:43:73:f4:
00:c4:c2:8d:2c:d4:67:20:70:c1:20:09:ec:d7:dc:
ef:f9:15:53:5d:35:5a:04:6a:c5:9d:33:c7:a2:b4:
d1:b3:42:05:ef:9b:ce:08:3f:c9:df:31:af:3e:22:
69:45:ac:42:a3:40:25:8f:14:4b:2f:e6:a3:f0:b7:
2e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AE:FC:C3:2A:4D:77:E0:68:81:87:D7:8C:D9:50:DB:D3:87:77:62
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:da:ae:d4:dd:5e:37:d7:e9:a0:c4:44:d9:d6:5a:11:3c:14:
ff:af:80:c0:64:c2:77:88:96:07:0c:60:b2:cb:70:0e:03:59:
71:1e:80:b3:00:8e:b1:9e:5e:79:fe:53:c8:88:dc:41:87:bf:
07:96:b9:2a:c6:0b:44:7e:b6:a8:88:72:3c:8d:95:67:f1:96:
8d:7d:eb:b6:4b:e6:f8:72:e4:70:bb:fa:f0:12:b6:1c:b8:1b:
8f:87:57:86:40:b0:8f:6c:e2:35:e5:92:82:2c:6c:97:7b:95:
d6:fd:24:f7:1f:3a:a8:ba:93:66:ff:2f:2a:a4:a8:cb:1b:92:
50:cd:d5:c8:53:b6:54:38:95:a5:0a:b5:23:f0:a9:e3:2c:b4:
49:9e:a3:65:bb:60:17:a9:bf:33:5a:cd:17:55:24:1a:63:97:
0b:f7:af:03:80:db:cd:d0:21:1f:36:93:35:68:a2:92:ad:ed:
66:0e:d6:d5:43:ef:63:7a:91:9e:52:86:2d:75:b6:97:4e:ae:
d9:3e:ec:29:83:e7:7e:63:30:5f:cc:71:63:d3:31:a6:70:45:
34:3e:f1:b0:8d:a3:65:2f:bd:f7:1f:c8:0d:7d:e2:96:eb:d9:
5e:95:83:d1:4a:01:9f:77:1a:60:68:16:4e:2a:d5:33:c3:46:
0f:a4:d6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:50:45 2025 by rpki-client