
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: /Aoo7wIjCqF3q1U1oBMsMQKqaecHbEf1EvNxiP/Ui5I=
Subject key identifier: 06:FA:C2:8D:52:AB:C0:F4:A1:34:60:CC:BD:DF:8D:3B:07:6C:F9:E4
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 019848F7A187C65E2624C5CD81D996B0C5A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 23:00:44 +0000
Manifest this update: Sat 26 Jul 2025 23:00:44 +0000
Manifest next update: Sun 27 Jul 2025 23:00:44 +0000
Files and hashes: 1: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: Ec17zBK0ly9MdwLLDAQ/9FjOHt5K8mdakTG3979ly8k=)
2: veklkDiCqI48H1uQ5ixFAlK84NY.roa (hash: KUIRIFDZrVheg1iXYyW8LsCjhDrH33Kf+Op6ybMvK2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:a1:87:c6:5e:26:24:c5:cd:81:d9:96:b0:c5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: Jul 26 23:00:44 2025 GMT
Not After : Jul 27 23:00:44 2025 GMT
Subject: CN=06fac28d52abc0f4a13460ccbddf8d3b076cf9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:a6:89:2a:24:ab:b5:64:c6:93:88:10:2a:
47:e1:ad:55:15:28:b6:fd:9b:d7:1e:31:be:d5:6a:
c9:40:63:e7:ae:df:7c:1b:50:ac:62:1e:3a:95:c5:
89:88:57:b5:8f:9f:93:47:eb:af:13:e5:dc:70:08:
2f:5e:c3:60:ed:65:3f:b8:38:46:93:0e:a9:27:9f:
55:da:c1:27:fc:6a:92:e9:4e:17:27:98:7f:58:18:
ff:54:e6:f0:39:dd:c9:54:11:b1:3e:7f:30:a6:35:
50:12:24:3e:a9:39:87:17:42:bc:e0:27:52:9b:55:
0e:e9:06:7c:d4:52:b6:58:c2:5f:f0:f2:5a:1d:1b:
3a:ed:bc:ff:7a:ad:6b:7b:5a:c8:90:98:20:41:a3:
3f:2b:a0:df:c5:59:61:4e:cc:f1:81:4b:46:39:82:
83:92:cf:0f:88:37:cc:34:16:47:8f:31:7a:93:c9:
62:1b:f2:4a:93:69:cf:a1:71:df:00:ae:b3:ef:fb:
96:75:78:c6:c3:5e:05:75:9d:e4:1a:f8:22:dd:06:
7b:ba:56:1b:aa:8e:db:c4:f1:5a:86:23:85:04:d2:
90:9e:30:ab:75:1a:61:71:62:96:e1:b2:58:6f:cd:
5e:b4:0f:2e:82:9c:6e:b9:3a:5e:6f:12:82:a3:b9:
0b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FA:C2:8D:52:AB:C0:F4:A1:34:60:CC:BD:DF:8D:3B:07:6C:F9:E4
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d9:9b:74:e9:9a:09:d8:49:67:f9:e2:44:fd:a4:41:0e:f8:
46:de:c0:e7:17:f0:da:1a:dd:a3:53:32:c6:1d:49:db:d3:a3:
8a:84:4a:ff:1b:43:de:7f:00:3a:7b:b3:1b:da:c1:77:e9:39:
06:00:de:1f:0f:70:3e:35:5b:bb:97:c6:68:56:d6:f6:ff:9f:
79:ae:95:67:f9:f6:7d:41:0e:bd:7b:23:b3:50:f8:2f:15:16:
9a:fe:0b:98:86:d2:58:6d:da:0d:23:88:76:fe:e8:45:48:fa:
02:f2:c9:9e:b5:3a:0a:9a:61:40:24:9b:ad:3f:cf:5a:50:1f:
b4:68:a1:e7:10:e3:0c:d2:f9:9d:ec:bc:ca:e9:2f:11:36:dc:
d6:c5:ff:c0:8a:88:d1:5f:b8:a6:67:2e:60:89:ea:79:d0:23:
f7:97:59:88:db:8a:cf:91:56:7d:9a:5a:2d:0a:4f:7b:27:e1:
c8:7e:2f:65:9b:7a:db:cb:be:b0:e9:97:b8:c9:36:20:b6:4b:
43:c8:5f:95:de:f4:f2:9f:c3:3b:0e:20:45:ec:54:80:a9:80:
da:4f:20:43:c6:77:a1:b2:bd:c3:4b:91:39:09:11:99:f7:92:
af:57:99:65:be:20:cd:a1:b5:af:35:e7:46:e9:02:14:51:97:
3c:cf:d8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:47:33 2025 by rpki-client