Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
File: K04tNMzuRXa1znYFoITmwIUiwig.mft (raw, json)
Hash identifier: Kp2SzSx1IQXdXqbhW5mblGeZndQQAvqfO4vHEQsEWeQ=
Subject key identifier: 85:C1:A5:5D:38:11:B5:32:8B:51:95:B8:48:21:91:62:39:9E:4B:44
Authority key identifier: 2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
Certificate issuer: /CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Certificate serial: 0199356DFAAD8CD60751E251877626D05617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
Manifest number: 167F
Signing time: Wed 10 Sep 2025 21:00:23 +0000
Manifest this update: Wed 10 Sep 2025 21:00:23 +0000
Manifest next update: Thu 11 Sep 2025 21:00:23 +0000
Files and hashes: 1: GSpTlfTO5KcQK2jI527EKT02SMc.roa (hash: TpoUJbGzlzV0iUGibBYOB2or2f2ZUtWBHSlc5utMfHk=)
2: K04tNMzuRXa1znYFoITmwIUiwig.crl (hash: 79HzEilefGYUS5FmJX+Myi4By7+TKchDFg+Z7kuAy4k=)
3: inTF6SWHroBiGHmy-0U30O5ydnA.roa (hash: evzJBNLsSCaxTpI1F1FxS8W2lXJa9MwPxDq+MYhTrqw=)
4: qgbAAtOcnU1uj0vsxF1XX4uS6aw.roa (hash: sqwZAEeBQvSXLjPqcFlAmMMOVHBKwCNCWM9uKLuZCYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6d:fa:ad:8c:d6:07:51:e2:51:87:76:26:d0:56:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Validity
Not Before: Sep 10 21:00:23 2025 GMT
Not After : Sep 11 21:00:23 2025 GMT
Subject: CN=85c1a55d3811b5328b5195b848219162399e4b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:aa:e3:cc:c3:11:13:da:46:f8:ed:2d:ac:14:
e2:8f:d6:ab:d2:26:68:10:d0:ff:14:6c:ed:ce:4e:
49:45:81:2f:30:84:37:65:dc:39:f5:b8:26:3e:53:
89:51:ed:64:e0:d1:81:a0:86:ef:9e:f3:94:2a:8b:
08:8c:38:bb:5b:ff:d8:ea:3d:14:fb:ce:b1:8f:8f:
1a:44:ca:30:67:64:84:54:8c:bc:28:38:a2:09:80:
e6:39:8e:6d:13:dd:32:7f:62:7d:a7:02:6b:88:37:
6e:9e:8c:b5:6c:0b:da:73:39:ef:8e:89:eb:e3:7a:
6c:74:13:24:22:b9:af:95:47:9e:ed:a3:ee:53:97:
d1:cb:e4:dd:b7:37:33:df:4f:11:3d:fe:66:33:aa:
6f:78:83:e8:3c:17:b4:78:f7:58:bf:77:77:5a:06:
24:ee:a5:33:b3:5d:49:58:7d:d0:c1:6d:ba:53:c0:
65:a0:6e:dc:0c:c1:45:6e:58:71:41:a5:46:db:ce:
3a:84:a2:59:25:4a:9e:e3:44:ab:85:bb:a4:5f:99:
d4:44:2b:e7:8c:c2:e3:e7:38:49:4b:4a:b7:83:4d:
38:6a:bf:fa:87:dd:cd:42:34:1a:d7:02:fa:98:48:
53:2b:aa:6c:af:6b:36:f1:c7:25:ae:30:ab:18:39:
4c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C1:A5:5D:38:11:B5:32:8B:51:95:B8:48:21:91:62:39:9E:4B:44
X509v3 Authority Key Identifier:
keyid:2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ae:8e:b7:db:a8:4a:cf:fa:18:20:81:4f:28:e9:6f:68:55:
d9:c5:1c:d0:1f:a7:e3:59:41:04:0b:b4:51:a7:fa:7a:e3:f1:
50:2a:79:d5:07:5c:90:a7:4e:12:b4:a2:ab:55:ed:29:1f:7e:
c1:24:c7:81:f0:64:c1:f8:cc:4e:88:cc:27:2b:00:fc:ef:3b:
65:b0:9f:97:e0:42:e8:06:e0:ec:e1:16:0a:d7:96:7e:65:78:
74:a4:c0:94:35:68:1d:b3:6a:7d:2b:cf:5e:ef:bc:8a:b8:aa:
d0:bf:f8:b7:24:8b:57:1d:ad:e0:8f:2d:3e:d7:ab:a7:62:74:
39:a5:2c:e4:62:02:c9:33:48:92:18:d8:1d:44:48:11:53:6c:
91:10:a7:27:c3:1d:a2:d7:c9:41:b3:ba:eb:0f:8a:75:e1:63:
3b:64:61:be:f9:cc:b4:32:c8:bc:82:29:d8:b7:10:41:a4:07:
2f:ed:84:75:ae:10:08:71:c2:66:9e:a3:6c:71:07:38:79:68:
3c:1d:c2:92:8e:bc:ac:66:29:88:03:6b:cc:20:f5:f8:36:03:
94:1a:42:11:d4:23:1b:af:4d:f9:fc:5a:63:49:71:a8:cb:03:
02:a6:bd:89:14:a2:14:c9:9c:94:df:9c:80:74:d3:cc:c1:1d:
6b:d9:26:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:30:47 2025 by rpki-client