Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
File: rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft (raw, json)
Hash identifier: XXDMCZFpw1JJFsMKWrwJDlldRjwafEC7fpIqsHH8d5Y=
Subject key identifier: 23:3C:4A:6A:56:3E:09:57:F6:24:6F:B3:6F:B4:61:3D:0D:C1:3E:47
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 019938A6BA51538C40BA6FF828270EBBD89E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
Manifest number: 1688
Signing time: Thu 11 Sep 2025 12:01:14 +0000
Manifest this update: Thu 11 Sep 2025 12:01:14 +0000
Manifest next update: Fri 12 Sep 2025 12:01:14 +0000
Files and hashes: 1: F8W0QKbleYbmz2EN1Tis7Vds59A.roa (hash: GzkXVUL6jOXjlFMqb78IJPo96A7wfBUt8lug7KgSDew=)
2: N8PiG76ntwKAGaSP3YzYnQGkLVI.roa (hash: nUQC/UxGj4cDa5TMObsdW9+d18vToeDUb/QlHw0eCHA=)
3: V_r_ROOdvw6x3g5Jz-742T3rIbU.roa (hash: S0q7P5LnXINS1vQh7LQXUQWUqtUOHV0qMrb+2gHbmYs=)
4: i44JVxMTVgkMbhmNJMaUgaK-WQI.roa (hash: cxxt5MnNL7SzuLLNZDQp6rhtaTD9wJRJZPKAxjU7gO4=)
5: n4Mf2ZoxRDO4Gbl-YZdYsqIz4OI.roa (hash: aS1o0h1e6vPqOWTx/X2krBGlRAa3LkoHQcee6mx6EEg=)
6: rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl (hash: OksK0OHdI6VoFm/Up0Q+JaQsXPbmulzGYTJVqPCTjVQ=)
7: tli9a4MFilhc6bhiwfcm0_eUZQk.roa (hash: idJeUEpDv8hc3pPAuSjLkqMBrYsymPccKUeBDJM0BiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:a6:ba:51:53:8c:40:ba:6f:f8:28:27:0e:bb:d8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Sep 11 12:01:14 2025 GMT
Not After : Sep 12 12:01:14 2025 GMT
Subject: CN=233c4a6a563e0957f6246fb36fb4613d0dc13e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:6a:44:88:fb:6d:23:36:00:ab:71:d9:cd:
5e:b1:4f:b9:9a:d6:f8:ed:2a:03:b1:6e:ab:6b:ae:
03:24:e0:03:15:af:a5:b1:40:59:d6:e1:b5:99:73:
77:0d:bc:d5:a9:7a:f5:a9:9f:49:f8:84:27:e3:06:
0d:5e:cc:fb:e0:84:43:cc:0b:27:a2:3c:bd:49:2a:
63:83:be:81:2b:54:a9:f4:d2:93:02:5b:61:78:82:
a8:a7:44:d2:a8:79:9d:08:38:7f:0f:ee:b4:f4:d5:
8f:1a:03:14:2c:d4:6a:fa:db:67:14:36:33:bb:c3:
57:46:a8:b8:3b:34:16:dd:ec:d8:f2:9a:8f:96:87:
e8:3b:1b:4a:0a:59:0c:06:98:51:f3:c0:dc:59:84:
aa:7e:6e:3d:6c:96:a5:f7:18:fd:3f:70:90:0a:0e:
b6:13:f5:75:a9:43:42:e1:8c:bb:73:cd:ca:84:1e:
70:e5:b6:c6:5c:81:f8:ab:21:50:87:f7:e5:05:66:
e9:3d:3e:45:56:a5:64:bc:4f:98:fb:ec:f0:63:ae:
0c:9b:48:95:84:6c:f0:a5:1e:10:81:a4:62:55:de:
1a:f9:55:42:f2:bc:df:7b:73:8a:49:f1:d3:ec:70:
25:6a:d9:c9:4f:34:c5:eb:16:74:9c:dd:10:20:ad:
6e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3C:4A:6A:56:3E:09:57:F6:24:6F:B3:6F:B4:61:3D:0D:C1:3E:47
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7b:ce:b6:1a:6d:62:56:9c:4f:6b:23:5b:33:8f:ce:d8:0a:
d3:ee:3f:56:15:88:51:b7:a1:f9:76:8b:6c:45:8a:d3:fb:6e:
4c:b1:23:ba:6e:e7:2f:d6:92:98:3a:de:b0:e3:93:5b:c9:de:
4e:49:fe:64:20:88:3a:d9:8c:3c:83:c9:73:a2:a0:6c:30:66:
99:5a:6d:56:cf:1c:f2:25:04:a8:13:76:8a:ce:77:95:b9:9e:
9c:8b:95:95:49:cc:48:f1:d5:86:28:82:cb:ad:17:b1:8b:db:
28:dd:8f:da:ee:1c:b3:b1:f2:6a:58:46:4c:51:dc:19:a9:53:
cc:08:be:9f:5a:4d:6d:95:5b:a3:f9:d9:ef:11:79:9e:e9:a7:
01:af:0e:d1:8f:57:24:70:30:62:e9:89:0d:a6:93:8c:cd:ac:
2d:b2:b4:54:4f:98:37:83:6c:ab:32:7e:19:32:54:45:5f:7b:
89:04:d1:0b:85:a1:8e:c8:1c:7e:07:5a:0e:47:b3:49:39:39:
89:2c:f6:38:ee:d4:42:03:bc:44:6f:a5:0f:67:33:a6:a4:5f:
37:a8:48:b0:6f:21:87:c2:96:38:e9:f0:65:4f:16:6b:03:54:
35:7f:20:41:6a:c4:f4:58:a1:00:58:72:b8:78:b1:25:9b:0c:
9d:ee:1b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 16:12:58 2025 by rpki-client