Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
File: kaBxUIM4JgVRpV8B_QcI_fXggoc.mft (raw, json)
Hash identifier: H7dyMvZ/35d5QGWULLaFfxbUklRy6LaYXg17wQVPToc=
Subject key identifier: 1C:F9:EF:4A:D2:0B:F1:8C:FE:31:4B:1D:79:6E:75:37:26:07:B5:37
Authority key identifier: 91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
Certificate issuer: /CN=91a071508338260551a55f01fd0708fdf5e08287
Certificate serial: 019922FA210F743B9C62360DFF87C5F36829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 07:00:41 +0000
Manifest this update: Sun 07 Sep 2025 07:00:41 +0000
Manifest next update: Mon 08 Sep 2025 07:00:41 +0000
Files and hashes: 1: Cgt_gy7EMOYMV19k2tz2rtLd7TU.roa (hash: j2CPj0aVUdndtIwS2SsvRubF8DiJi7ArwXEuxy5F6uI=)
2: LtAL3K8AdfyisGKqq9Vjp_7EH0w.roa (hash: ExkUCXkAhlWeYSrTyMjTF0LGwM8Q8/UHTNY3ZJzGHYE=)
3: kaBxUIM4JgVRpV8B_QcI_fXggoc.crl (hash: 3GbrJzTVFmwA6MlVb1bCvsCZRC8emgvs8n4kbtn8VA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:21:0f:74:3b:9c:62:36:0d:ff:87:c5:f3:68:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a071508338260551a55f01fd0708fdf5e08287
Validity
Not Before: Sep 7 07:00:41 2025 GMT
Not After : Sep 8 07:00:41 2025 GMT
Subject: CN=1cf9ef4ad20bf18cfe314b1d796e75372607b537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:77:b7:6b:ee:9f:44:a9:0e:c1:62:f9:53:08:
78:59:2b:b3:5f:bd:33:b4:e1:c5:38:5a:ca:49:06:
4f:41:89:e8:f0:1b:4c:0c:cd:2c:96:f8:af:49:c0:
9d:d3:15:fb:99:38:c2:14:a5:b8:14:3b:4c:5d:eb:
56:f1:d0:97:d4:f1:0d:34:b3:9a:cb:2d:b7:6f:e1:
f1:7c:d5:fc:17:ed:a8:e5:72:ef:17:5f:31:b0:b3:
80:22:64:9a:ba:6f:65:51:b4:26:76:bd:2e:ac:27:
bc:94:b7:5a:df:17:52:f9:57:7f:40:d5:c1:d5:c6:
97:87:ae:d7:04:16:92:72:68:dc:3b:4f:24:31:de:
80:7f:c6:dd:a3:3a:8e:ac:e5:b5:0d:16:dd:68:9b:
6f:39:0a:e0:4e:85:9d:3f:8d:c2:0e:92:d6:d4:f2:
4f:21:e5:3d:0f:a6:d1:0a:6d:f9:45:fb:e4:1b:dd:
c9:5a:1a:33:f7:cf:28:fb:c4:8c:4a:7b:65:59:7b:
af:1b:db:ea:ef:59:95:d8:e5:5b:73:10:ff:8d:f3:
8d:3f:e8:c1:25:58:a2:29:95:08:3c:0a:f3:fa:58:
b2:75:84:7e:6b:c7:fd:14:e9:11:e8:dc:4c:3e:2d:
ea:27:3d:99:95:59:cb:95:7a:08:dc:6d:4f:f6:35:
67:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F9:EF:4A:D2:0B:F1:8C:FE:31:4B:1D:79:6E:75:37:26:07:B5:37
X509v3 Authority Key Identifier:
keyid:91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a4:5f:c5:a1:56:e9:bd:49:cd:21:1a:f8:39:f5:3a:e2:d7:
b4:01:88:7e:ee:0e:f3:ab:93:5f:cb:0c:9f:61:45:04:7f:7c:
95:f1:a6:9e:5a:30:a1:97:c0:cd:08:77:ef:57:b3:8e:3f:76:
bf:88:b2:9b:17:3e:75:10:b9:bf:aa:f3:ba:c0:61:04:8d:93:
25:00:b7:d4:9b:3b:a3:1f:5a:4d:95:d9:cf:1b:ca:66:9c:e2:
74:7b:a1:95:c8:22:b0:9a:35:ae:9f:7f:6a:9c:72:d0:84:a1:
29:49:a7:ae:35:a9:1a:9c:b6:d5:04:88:00:ca:be:ef:2d:d6:
5c:35:f7:9d:49:f2:58:17:a6:ed:1b:ee:13:b0:b9:f0:4c:bf:
86:f1:ef:29:db:22:61:22:d7:61:ee:cd:ab:d9:c7:76:25:49:
8c:d5:29:f9:45:27:05:60:2c:62:dc:3c:fa:73:a5:52:7a:00:
36:a6:9b:52:25:6b:d7:66:31:c3:b9:af:d6:fc:a2:27:12:16:
d4:99:1d:ac:e5:00:53:71:19:b8:5e:97:e0:51:8e:e2:8e:f6:
a5:9c:11:a7:9e:c6:d3:b6:fa:8e:a6:22:2d:87:62:cb:11:02:
56:57:89:16:98:44:6c:bc:73:71:28:d2:6f:8f:78:9b:6d:55:
ec:28:9b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:00 2025 by rpki-client