Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
File: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft (raw, json)
Hash identifier: hGGux07NRZJ7D2f/q9E+B+6k24e0QhutfQB9wMumjsk=
Subject key identifier: 87:38:A0:FB:7D:33:BF:1B:87:28:7D:15:50:20:C5:19:25:BD:C4:C4
Authority key identifier: 91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
Certificate issuer: /CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Certificate serial: 0199228CEC81C563493BFAEA17C823BEF915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
Manifest number: 068E
Signing time: Sun 07 Sep 2025 05:01:24 +0000
Manifest this update: Sun 07 Sep 2025 05:01:24 +0000
Manifest next update: Mon 08 Sep 2025 05:01:24 +0000
Files and hashes: 1: 1-PjUZT902dDkd6VPDrdDPHXwUZw.roa (hash: MHJPB3k7tQCL3suOF/2f4yZcUJ+jnvq9tJxwFWeEEbc=)
2: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl (hash: wn5oCI1prwQTTZZTN9yWiOCGqvgyIdjCHR7aOcIWV4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:ec:81:c5:63:49:3b:fa:ea:17:c8:23:be:f9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Validity
Not Before: Sep 7 05:01:24 2025 GMT
Not After : Sep 8 05:01:24 2025 GMT
Subject: CN=8738a0fb7d33bf1b87287d155020c51925bdc4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:5d:17:64:d7:b8:a3:19:99:3f:3b:a5:13:
43:74:ba:ce:8d:59:84:43:c5:6e:63:45:3f:d9:d7:
ec:f9:b7:8e:ad:3f:77:4b:ae:00:cd:8d:c5:2c:75:
68:6f:2c:0a:cc:f1:3c:81:38:b7:60:4e:f8:24:76:
29:fe:14:dc:6d:dc:79:a2:f0:11:ed:10:80:6d:67:
be:f0:9c:3f:de:fc:f6:35:e6:cc:02:d5:fc:cc:02:
c2:1c:ca:95:1a:8f:2f:fb:e3:bc:9b:35:3a:79:c3:
b9:40:46:ed:59:10:c8:a2:d6:1b:79:89:82:7f:38:
da:78:a4:6b:46:85:f5:0b:d9:a5:cc:34:4c:8f:42:
55:0b:2a:4d:77:5f:ca:d4:4f:78:ca:d0:e0:c3:38:
0a:56:a9:70:69:1f:21:c2:65:06:17:37:da:7a:aa:
24:d8:bb:dc:5e:cf:ca:8d:46:29:65:f6:7b:1d:f5:
da:21:19:f5:00:f9:4b:2d:85:a8:6a:27:fc:88:57:
96:38:f0:9a:7c:5d:5d:c6:0a:32:a0:b5:8f:1f:9b:
d4:7a:d8:4e:01:a2:97:c4:3a:59:47:f2:1f:08:a6:
a2:ec:62:53:45:0e:1a:9f:9f:79:c3:c7:9c:95:20:
1b:5d:6e:eb:3f:a6:9d:0f:e2:87:21:13:ff:37:06:
38:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:38:A0:FB:7D:33:BF:1B:87:28:7D:15:50:20:C5:19:25:BD:C4:C4
X509v3 Authority Key Identifier:
keyid:91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:36:89:1b:ad:22:6a:2b:94:df:8e:65:78:ca:98:2e:2c:9f:
a9:e1:06:76:ae:6a:37:35:fe:56:be:83:f2:57:2a:a1:ec:f9:
33:b3:9d:f3:1a:ad:3f:e0:d1:74:5d:1e:92:33:d5:01:a0:45:
d0:98:5b:9e:73:08:5c:ca:f4:1b:34:1f:bf:b6:0f:19:87:4a:
50:d8:e7:bf:4a:75:22:ff:d1:17:95:a7:07:2a:21:51:e2:1b:
5f:2a:2f:f4:d7:0f:1e:af:c1:02:50:82:f7:07:e4:c4:c1:a6:
3d:25:c3:ae:68:08:2b:a9:8e:bf:d8:b8:cb:53:0d:a3:c0:d7:
63:22:a7:c5:3d:d2:c7:3f:71:8b:34:55:40:9b:d6:28:f2:70:
12:5f:cd:3e:cc:5e:0d:21:fb:d6:36:1a:7b:41:b4:ad:1f:f2:
41:a4:b7:95:7f:6c:f8:f4:05:46:7f:f3:8a:34:03:3e:e6:25:
8a:8f:3c:2b:03:41:67:60:11:e7:dd:90:81:6d:93:d9:4f:53:
73:7d:a0:9b:32:29:27:df:fc:0f:12:49:52:83:4d:c6:94:30:
be:0f:2f:93:77:e5:4b:60:ac:08:8e:d3:6c:41:87:84:40:47:
31:ff:57:31:17:ad:3a:dd:21:22:b0:74:0d:6b:9a:eb:ff:cb:
ab:4a:be:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:40 2025 by rpki-client