Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
File: rk6MY5rq8TKi_DP85ugUNN_KZLc.mft (raw, json)
Hash identifier: ZVqFD/jHtyXxav/Jinx2t3ZP6Ii5nlHexmZttRupOnY=
Subject key identifier: 44:0F:2E:F3:C8:98:37:D0:03:24:AE:F6:93:FD:C0:12:DC:F8:77:3E
Authority key identifier: AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7
Certificate issuer: /CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
Certificate serial: 01991687FAEA9A80F827660CEBF37B541857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
Manifest number: 10A2
Signing time: Thu 04 Sep 2025 21:00:34 +0000
Manifest this update: Thu 04 Sep 2025 21:00:34 +0000
Manifest next update: Fri 05 Sep 2025 21:00:34 +0000
Files and hashes: 1: rk6MY5rq8TKi_DP85ugUNN_KZLc.crl (hash: 1iKR5HvOAfViuepBNPUGvxO5VzO/CTiLG+2Vd8r8aA4=)
2: xqvPkHVlDD3xuumnlHy2tF-Btw8.roa (hash: vv9+/PYhC7QdrwSx3qLUpWjs0FVNrCioO0VXJDLX8UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:87:fa:ea:9a:80:f8:27:66:0c:eb:f3:7b:54:18:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
Validity
Not Before: Sep 4 21:00:34 2025 GMT
Not After : Sep 5 21:00:34 2025 GMT
Subject: CN=440f2ef3c89837d00324aef693fdc012dcf8773e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3c:4e:be:10:58:e9:f7:98:44:3a:f4:23:84:
2d:e7:39:b2:e0:60:39:77:de:4b:a9:1d:c3:34:4c:
c9:af:38:68:de:26:2b:39:ca:72:66:e5:54:03:a3:
89:9a:4f:fd:fe:4a:71:a4:64:ee:43:87:4d:ca:f8:
05:e3:d5:17:c8:d7:48:6f:8b:3d:3d:38:0e:50:b3:
bb:89:be:61:05:02:46:b2:f2:5a:53:ad:21:66:69:
aa:78:5a:52:bd:0c:d6:fa:a9:19:80:95:09:36:a4:
bc:ba:f7:db:5c:fd:d4:83:2c:76:e1:1d:c2:52:15:
9a:3f:78:8d:5e:dc:b3:47:8c:d3:c1:25:ad:af:cd:
ce:46:46:c1:7e:6d:e9:ad:ca:d5:e4:10:99:35:e9:
fc:37:f9:17:e8:eb:ee:ac:38:81:3a:f3:f3:51:a9:
88:1e:bf:2a:44:24:ce:21:f9:d4:87:23:59:de:10:
39:18:b9:37:ef:c9:53:64:b7:b2:c7:79:45:d4:12:
39:43:63:65:4c:2a:55:47:29:8e:98:03:d5:5b:36:
2f:ad:8f:1a:f6:84:6d:46:53:93:16:9f:14:35:39:
4d:73:47:d2:4c:bc:00:94:57:3a:8d:bd:bb:85:16:
e2:9a:a6:18:df:ef:1e:ca:ab:8e:ac:16:2f:7d:60:
d8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0F:2E:F3:C8:98:37:D0:03:24:AE:F6:93:FD:C0:12:DC:F8:77:3E
X509v3 Authority Key Identifier:
keyid:AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a4:68:6a:2e:bc:f6:84:1c:7e:64:2f:6c:34:57:cf:e1:d9:
62:97:4f:79:d1:8d:34:88:49:89:c0:be:af:b0:5f:51:7f:0c:
e9:5c:8e:57:75:de:d1:6c:13:94:13:dc:b9:5c:fb:e6:7a:f4:
60:e1:a6:d8:ea:f1:48:58:1c:94:3c:62:ef:6e:ee:4b:ad:d0:
ec:96:b3:d8:49:d6:de:1d:f7:ad:0a:2e:a7:6c:e7:0f:78:89:
40:14:03:67:09:b3:78:83:37:46:a9:d0:24:07:01:b6:a6:3e:
53:98:f3:44:fa:ae:38:85:88:63:e1:24:3b:7c:fb:c2:99:45:
84:04:a9:97:45:cc:cc:fe:af:72:28:be:f0:fa:c7:38:55:c3:
38:61:49:3c:5e:b6:29:20:42:2b:9f:44:7a:de:8c:06:8a:b9:
81:78:ad:5a:40:97:96:95:5c:b0:9b:59:6a:4f:d9:61:ce:3e:
95:33:ec:87:ae:f7:4a:5e:ef:42:29:e8:ec:a3:fd:bc:a7:7c:
d3:01:14:37:90:f8:b9:9f:e1:4b:3a:9f:9c:73:5f:db:4e:77:
ee:79:3a:de:b3:91:fc:f8:81:27:e1:50:b1:01:06:80:e8:e9:
e1:ab:fb:19:12:bd:3e:51:b0:ba:95:40:f5:ec:08:82:be:e8:
ab:ad:4f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:20:19 2025 by rpki-client