Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File: klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier: YJwUxYYd4NQB+jUy3beGkjMi/Z+de5+963A/pAl0lI0=
Subject key identifier: D6:6B:AD:D8:07:60:FD:F5:CF:D6:79:69:3A:00:FE:E2:96:C9:0F:47
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 019847ADE26478C6AC15CA2421976595A385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 17:00:34 +0000
Manifest this update: Sat 26 Jul 2025 17:00:34 +0000
Manifest next update: Sun 27 Jul 2025 17:00:34 +0000
Files and hashes: 1: 7U4mLLCZOK9jPZHgW6zPsanLT3o.roa (hash: zZ/3JaVashrdH1tPBAExwSunuDftYH55jv3g8RDnCrA=)
2: kDuhU048DTixv805ND5N0u_g9CE.roa (hash: XMPtRafhUHkyRUyzV4cxQSEk7ukN2f738Fahel2JBqI=)
3: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: QxFdGcYhwAZyFJeLYkoNmzDZnQpIh7YfEuH4e2O2WJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:e2:64:78:c6:ac:15:ca:24:21:97:65:95:a3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Jul 26 17:00:34 2025 GMT
Not After : Jul 27 17:00:34 2025 GMT
Subject: CN=d66badd80760fdf5cfd679693a00fee296c90f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c1:10:2e:ae:07:c0:a4:87:c3:e5:13:0d:a0:
ee:2f:dd:35:a8:ec:8d:d9:1c:0e:2e:ba:0a:e1:c7:
84:50:6d:bd:bb:e7:6d:ee:2b:c9:56:3b:43:cc:ce:
d4:92:a7:b1:3a:00:a1:05:23:9a:d2:f4:1a:2d:bb:
43:11:79:04:0c:13:a1:05:2b:2c:4c:1d:03:d5:3e:
38:96:e8:1b:d5:ae:54:b0:ab:12:73:54:e3:de:28:
3a:62:9f:77:9b:e2:36:2f:0f:ce:b4:86:69:cb:0d:
78:38:fc:54:64:cf:01:6c:f0:db:d8:e1:26:a0:00:
e0:d4:50:2c:7f:4d:87:0e:fd:e9:42:fb:2f:e6:27:
4f:9f:2c:3e:08:2f:51:79:01:84:33:67:0a:00:45:
29:c6:47:89:84:01:eb:2e:17:a4:51:13:fc:28:8f:
a7:89:3b:fe:c3:65:ef:0e:71:f8:f9:e5:7f:48:4f:
19:85:8b:3d:e4:d9:e5:a4:6d:0d:70:fc:2e:99:58:
02:03:d0:2f:11:1e:3b:13:04:34:6c:c2:b0:e4:bd:
4c:cb:80:06:bf:65:3e:b0:d1:04:9f:f5:94:f8:ca:
31:a5:0b:b2:43:8a:f6:93:07:f9:77:f2:87:5e:1b:
be:e0:51:d1:86:6f:75:6a:5f:9b:df:29:2b:ee:74:
33:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6B:AD:D8:07:60:FD:F5:CF:D6:79:69:3A:00:FE:E2:96:C9:0F:47
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:6b:49:59:17:8d:3f:08:16:8c:6c:f9:6e:57:91:9c:23:04:
55:b0:44:10:cb:1f:04:e1:99:52:47:0e:5a:53:4d:ad:97:03:
ca:c8:35:21:24:43:62:8b:22:e3:83:f6:8a:3d:4c:8f:81:ea:
2b:9a:a0:58:48:1d:c9:e1:60:3a:c3:cc:8f:3e:b9:9d:51:10:
ba:c6:72:8e:11:4d:49:8f:53:b4:bb:7d:5a:5a:e9:cb:c1:e4:
73:a6:dd:0b:f4:0e:d3:73:02:f1:94:75:7c:07:ee:1b:87:bc:
f8:23:fa:86:56:67:bd:ef:59:9b:3b:07:cc:c4:9a:10:0f:71:
b6:47:30:da:97:ff:9b:db:b4:4b:bf:71:52:fc:7a:1e:fd:bd:
87:e9:de:d5:07:5b:37:2a:64:63:da:91:a9:81:bd:b1:5b:1a:
5b:26:60:82:c5:72:ad:b2:1b:9f:92:01:11:73:08:64:f6:b3:
49:4a:91:30:a0:b4:cb:46:64:b6:58:7b:cd:ef:ed:85:1d:8c:
3e:a2:a6:7d:1f:fd:78:56:28:15:04:56:66:2e:c5:6f:ca:5c:
34:98:e8:33:4d:bb:69:df:4c:09:5c:8a:c1:4d:9a:c6:bc:72:
61:b2:7b:df:75:db:fc:66:be:49:25:59:53:83:cb:fb:31:b1:
2a:d3:f6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:39:14 2025 by rpki-client