Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier: yMtzOCPoyQHbJoTg/hOfruERu3hhcUOJVQxNPhctdCc=
Subject key identifier: 85:E8:70:D8:8E:51:82:EF:E7:42:17:72:C8:E9:02:A9:99:A2:DD:A3
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 01992E5A213827C5D5E9D12FE0E9592FAE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number: 167E
Signing time: Tue 09 Sep 2025 12:01:22 +0000
Manifest this update: Tue 09 Sep 2025 12:01:22 +0000
Manifest next update: Wed 10 Sep 2025 12:01:22 +0000
Files and hashes: 1: 7KoL3jGlfNGPpyhqV9AtZAaoaI0.roa (hash: Nb/Vw+/Ylb4cSX8JKW25BkVIJgSx13SRW+VCTwm5sJ8=)
2: HL23JkhmDLszmlcMKIQLjOYgOlw.roa (hash: UcG0dWZ6JWWkmOHgvKVtqjoii96EVOB2hFdkb/AhZXs=)
3: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: KQDBN2lQ+MwWwX2QpSgNqvPsmxNoWTCL5C69anq/yq4=)
4: _5futta0xSGb2K29XZ9-2mIIcNo.roa (hash: B+25/sqAb1n8V0UhyQrKEJ3bDb2KGluec9BcmrwzlDo=)
5: bLZSbio8bkJcYZljrUphK1wwfiI.roa (hash: 8pmPyotbXxfraqC1rKstG9Ljo1wkSagV+FMWF45wlzU=)
6: pZ6QLhb3L-zU8HaIuMWziHfarGQ.roa (hash: bAsLcg/vcZKidF7bKnaCdDmEHtuPe3QKZhFTHIqySAA=)
7: vgrDVzIHM-lfYbprXn7b8oE_EG0.roa (hash: pmw87KrkZDI/w+UgS4DgQBhIgi8uItz6U8fozdzX4sc=)
8: yIaElboDEcTWK_3VfQrVd7rO3sU.roa (hash: dRcI0G+6+49AKUKXqa7HKsOOK4Sxw6VtAfiMSWdhRnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:5a:21:38:27:c5:d5:e9:d1:2f:e0:e9:59:2f:ae:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Sep 9 12:01:22 2025 GMT
Not After : Sep 10 12:01:22 2025 GMT
Subject: CN=85e870d88e5182efe7421772c8e902a999a2dda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:09:15:ae:ea:f3:b3:d3:18:68:d3:04:69:ae:
c2:98:32:9c:3d:a7:63:29:b2:dd:65:6a:2c:a5:4c:
80:0a:9d:3a:05:1c:cb:fe:87:74:a4:33:26:ad:d3:
14:4a:60:65:39:91:04:40:b2:bb:9b:f2:47:48:25:
cd:81:55:52:e9:21:c1:cf:a7:90:74:39:a7:51:fc:
66:06:44:0f:45:e8:fc:ee:c3:f4:bd:28:84:97:19:
c3:f0:48:dd:d7:a8:e7:32:2b:e9:17:4b:5b:7e:59:
63:c6:c0:5c:c4:29:94:de:8d:d8:15:42:ad:1e:6e:
1c:32:b1:ed:20:aa:d5:a3:1d:c1:1c:02:e0:03:3a:
22:7d:05:a3:fe:15:2d:ae:c1:5e:89:26:0c:03:34:
9a:0e:56:74:dc:6c:f5:f8:0c:7c:31:c1:35:27:4a:
0b:dd:ba:df:0e:c0:cc:1a:6e:c0:29:fc:61:71:54:
b1:3d:c6:ac:cc:c8:b6:d0:52:42:23:ec:b6:ca:cc:
ce:aa:d5:cb:a3:cf:d2:c5:96:7e:c3:c8:7e:8d:63:
d5:e9:63:2b:36:bf:52:1a:55:3f:50:90:7a:c6:1f:
01:33:10:99:1d:eb:72:7b:c0:9e:ab:b1:f4:0e:8a:
04:81:60:cf:1b:45:67:3d:08:db:d2:a3:14:d6:1a:
fa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E8:70:D8:8E:51:82:EF:E7:42:17:72:C8:E9:02:A9:99:A2:DD:A3
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3b:f8:d3:ff:3b:ca:64:20:1e:b2:1b:38:7e:af:e0:27:b3:
50:00:29:fe:d7:8b:1a:e0:30:fe:b9:ce:d0:77:a6:16:16:3f:
6f:ed:38:3d:68:73:93:6d:6f:f6:3a:d4:73:53:b7:da:5c:d7:
e6:55:03:82:bc:77:a9:b5:6a:6d:e7:4f:76:97:23:78:f0:77:
93:ec:b1:22:13:c3:bd:61:c2:60:2d:31:b0:69:76:dc:87:23:
f8:4b:73:88:c6:a9:ab:3f:03:23:9b:fd:10:9f:64:bc:b6:19:
81:97:6a:82:b0:b3:a2:cf:8a:9b:b1:d2:d9:97:d7:35:55:c2:
fa:ea:2a:78:44:79:d8:c3:1f:5a:ad:59:31:ec:08:75:5d:58:
c5:11:f3:f2:31:b7:59:eb:87:65:6d:4e:76:d5:0e:55:28:2b:
7c:44:d9:8e:37:f1:84:2f:2c:54:19:e9:67:3b:ec:f6:ac:05:
99:f6:f9:2b:d8:8a:83:54:e4:09:31:a5:3f:23:da:e3:e3:e0:
b9:0c:d7:bb:7d:57:b0:5c:c3:d0:32:9a:86:cd:00:38:e7:d2:
2f:13:52:07:a5:a5:04:3c:3b:7d:b8:61:b8:2b:bf:a2:97:07:
5c:25:39:30:fe:44:4e:d9:ac:47:88:33:8d:64:e0:5c:d1:2e:
05:40:e6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:22:29 2025 by rpki-client