Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
File: ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft (raw, json)
Hash identifier: S3ni8EPM1HNFk2dIJfu5+SVvS4avdJHWewT8k0OPin0=
Subject key identifier: BA:F8:A2:4E:EC:BB:3D:CF:BD:57:03:99:EF:A2:4F:DB:9D:1E:20:20
Authority key identifier: 92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
Certificate issuer: /CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Certificate serial: 019922C3813988840E5F5FDB56A2800DE819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
Manifest number: 0308
Signing time: Sun 07 Sep 2025 06:01:01 +0000
Manifest this update: Sun 07 Sep 2025 06:01:01 +0000
Manifest next update: Mon 08 Sep 2025 06:01:01 +0000
Files and hashes: 1: I0tfv2mZoSq2ysFvBwfbBYWY0JA.roa (hash: yceQ2f4xBd7/pbAxmzYNJmFayAdTupB1EL529XI3SK8=)
2: ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl (hash: aw4e0QRNaAArYdBHN24q5OV6zt521ukvDI6ITllQgxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:81:39:88:84:0e:5f:5f:db:56:a2:80:0d:e8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Validity
Not Before: Sep 7 06:01:01 2025 GMT
Not After : Sep 8 06:01:01 2025 GMT
Subject: CN=baf8a24eecbb3dcfbd570399efa24fdb9d1e2020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:ba:6f:3c:c7:76:74:d2:e7:b6:c5:cf:1e:
05:62:38:4e:b3:92:98:10:92:74:bb:2b:87:7e:42:
c9:f4:10:80:65:32:4a:d3:7b:a5:ef:ae:1b:50:08:
ec:fc:3f:ed:2e:52:61:d3:66:cc:fc:06:54:4b:8e:
6a:98:b2:4a:a5:6f:af:a7:a8:37:6a:fd:93:86:9a:
21:8b:9f:7b:03:54:6d:26:fa:98:dc:96:9d:74:6f:
ff:1c:05:3a:69:f2:bf:51:62:18:95:b2:a7:ce:48:
12:8c:c3:33:d8:c7:4d:fb:57:29:1f:bf:66:7a:db:
be:46:bf:9a:ac:a2:df:70:d6:41:c6:6a:3c:d7:60:
ad:d0:6e:be:cf:da:6a:b9:92:76:b2:26:29:78:f8:
05:85:bc:9f:d4:d5:63:bf:80:0f:b5:63:c2:04:70:
87:5d:8a:ea:c7:7f:da:a6:6d:d7:db:a0:cc:0a:f6:
52:ae:9e:4a:0c:d1:07:e0:4b:ac:96:37:53:c7:53:
0c:99:1c:ff:58:57:c6:6c:ec:6d:43:02:01:c8:7e:
1c:43:ed:42:5d:16:56:66:cc:66:0a:b2:5f:a8:f4:
3a:38:f0:02:10:f4:26:f2:e3:15:f9:ad:b2:c3:fe:
d8:62:77:1b:f8:05:ba:82:ff:15:57:cc:ac:1b:a3:
3c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F8:A2:4E:EC:BB:3D:CF:BD:57:03:99:EF:A2:4F:DB:9D:1E:20:20
X509v3 Authority Key Identifier:
keyid:92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:88:fa:03:66:2d:7e:f2:33:88:28:1f:2e:57:de:75:e2:06:
21:51:31:07:f9:e8:1d:6e:0c:31:bf:b9:e1:78:9d:4c:3d:1f:
71:bb:ac:dd:51:f9:a8:25:bb:c2:86:70:2d:31:f5:dc:43:5f:
13:69:ed:bd:ad:ba:f2:31:5f:7c:f3:ba:2c:5c:ab:f8:46:1f:
78:27:d4:b9:cf:7a:43:f0:df:8f:2f:7f:70:57:fd:8e:2c:88:
e7:b7:4b:60:2d:37:8b:f9:30:84:5b:44:57:09:e2:d9:4b:1c:
d3:b8:07:dd:35:23:5f:a8:c0:20:2d:cb:0f:89:24:b3:1b:49:
e6:10:3c:12:94:38:99:de:35:74:ad:39:15:9d:d5:07:5b:7d:
d3:83:f4:4b:35:2d:18:c3:32:14:e4:e4:f0:44:17:a7:70:66:
ff:a2:1e:1d:42:f5:2b:ab:79:31:a2:48:88:f2:37:86:48:e2:
71:96:35:17:49:a3:24:ce:1c:c3:8f:a7:a3:09:e6:7a:1e:e5:
82:88:63:ef:ce:9c:0e:74:87:05:17:8d:22:f9:22:ab:51:0e:
52:d9:4b:3f:05:31:91:69:6c:38:2b:41:a4:8d:f5:57:df:4f:
c7:25:9a:1f:e9:18:79:b6:63:9c:b3:36:79:f0:10:a1:f4:61:
17:17:d1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:15 2025 by rpki-client