Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
File: kS8Wn8dEy-iVqfhe2reW1KxwACk.mft (raw, json)
Hash identifier: Ne/jcHdBRoY7wezaR/1AXiCn+U4B/E/DLXXScxN1dMs=
Subject key identifier: 1E:FB:21:06:10:F8:02:87:9F:A4:84:EE:7B:2B:E6:37:BA:F6:AC:B1
Authority key identifier: 91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
Certificate issuer: /CN=912f169fc744cbe895a9f85edab796d4ac700029
Certificate serial: 0197C8DDA101B97D257777066E9F90C6D3CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
Manifest number: 0DCD
Signing time: Wed 02 Jul 2025 02:00:57 +0000
Manifest this update: Wed 02 Jul 2025 02:00:57 +0000
Manifest next update: Thu 03 Jul 2025 02:00:57 +0000
Files and hashes: 1: TYH4Ce0-k-wvqgRH0i5li3BgriI.roa (hash: Q3Et9vzkH2i83UUu897K4DdPhoe5uvwQSHH8BVd+9Y4=)
2: kS8Wn8dEy-iVqfhe2reW1KxwACk.crl (hash: QO2bJYD4edtyBX/6DExzfjfRiqdkzT5Z1jfsdqzc/gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:dd:a1:01:b9:7d:25:77:77:06:6e:9f:90:c6:d3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=912f169fc744cbe895a9f85edab796d4ac700029
Validity
Not Before: Jul 2 02:00:57 2025 GMT
Not After : Jul 3 02:00:57 2025 GMT
Subject: CN=1efb210610f802879fa484ee7b2be637baf6acb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:bd:0b:e7:df:5a:9a:ca:3b:ad:ac:6b:75:
9b:c9:36:a7:02:db:5f:cb:17:6b:19:42:ff:4a:3c:
44:fc:71:12:45:54:d4:f8:18:9e:87:67:70:a1:73:
07:05:d7:a2:27:35:eb:20:75:ee:6a:6b:11:a8:df:
f5:8d:5b:aa:44:03:47:8a:1c:53:7a:30:66:54:6d:
d0:72:bb:59:4a:3f:43:20:5f:a0:58:43:5e:56:02:
fa:f3:ba:68:b1:6e:29:dc:5b:af:c3:e2:04:ac:5a:
c1:15:9a:40:26:48:3c:bf:28:73:2c:4b:34:4a:eb:
be:d6:16:d9:1e:57:82:3e:d2:6e:be:67:24:1f:c4:
83:40:7e:a4:d3:cf:f0:f3:a1:4c:a6:7c:79:dd:5a:
fd:81:5e:3b:41:f7:c2:8c:ca:c4:34:c8:4c:e8:89:
c8:4f:91:6b:4e:00:78:9c:6a:65:ec:d0:55:cc:66:
50:62:4b:43:20:37:ec:6b:3d:83:43:8b:1d:30:fb:
15:6e:a0:2b:e5:2d:1e:17:70:a2:49:64:0f:33:01:
fc:05:20:49:9a:de:2f:f9:7e:92:1e:da:48:62:78:
0c:3f:97:f9:77:8d:30:5b:98:60:a3:dc:44:b8:76:
bf:f6:8c:18:99:60:04:6b:ce:e8:23:75:5e:d6:e6:
1a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FB:21:06:10:F8:02:87:9F:A4:84:EE:7B:2B:E6:37:BA:F6:AC:B1
X509v3 Authority Key Identifier:
keyid:91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d3:6a:ff:ea:4f:ef:df:14:26:8a:e8:96:62:c7:40:36:03:
20:38:a6:a7:f9:c2:d2:ce:5d:84:18:4b:a9:8b:94:ae:d6:4a:
2b:06:bf:4a:56:e9:42:4c:5d:7e:a8:a1:9c:4f:4c:de:68:a8:
b4:2f:37:81:b8:32:04:24:74:00:4c:e5:3a:fe:88:5b:a2:f2:
02:4c:1b:ff:ae:28:84:8d:8b:70:50:49:f7:70:81:6a:a5:83:
10:67:9c:5c:4c:06:b7:55:34:c0:09:5e:65:97:59:ef:2b:90:
87:b4:99:10:6a:77:9d:1b:ff:40:f3:81:ad:e6:85:e4:72:9f:
f7:da:cf:62:46:6e:eb:bd:ab:09:97:a3:db:2b:da:10:2f:bd:
14:ff:e2:f3:50:22:97:9b:6f:5e:c1:22:3d:49:9a:f2:19:04:
fe:2a:2f:2a:ab:2f:93:eb:13:d4:d5:e8:4c:d2:20:f6:09:10:
ff:6f:8d:59:4b:60:0b:81:52:42:78:f7:73:c1:ba:79:fa:7e:
95:56:7c:6c:3b:9a:11:f8:a0:42:b2:ef:99:a6:07:c2:88:9c:
ff:c1:b4:37:d5:c3:22:76:e6:bb:20:79:b3:8c:5d:84:77:ad:
30:3d:6a:01:d1:21:3a:9f:99:2b:9f:9a:9a:af:17:bb:ed:ae:
16:cb:6a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:55:24 2025 by rpki-client