Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
File: KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft (raw, json)
Hash identifier: DUL0mPR0jx2Ja9Tkpjms5bP5w3/Vp/oOirS0nqsbrVk=
Subject key identifier: 0C:39:F6:A9:36:CE:DB:6F:AF:81:55:0F:41:AD:6D:54:A5:8C:64:85
Authority key identifier: 2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
Certificate issuer: /CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Certificate serial: 019916BF0E95A897769BF3036A1E01F552FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
Manifest number: 13A8
Signing time: Thu 04 Sep 2025 22:00:43 +0000
Manifest this update: Thu 04 Sep 2025 22:00:43 +0000
Manifest next update: Fri 05 Sep 2025 22:00:43 +0000
Files and hashes: 1: KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl (hash: 7bRURk7SMXCoSafkTxBtZTLBCXuGjbD2g3Li6gNEGmU=)
2: jVEebkEC2-oHzNPCTqPYuC9aoqE.roa (hash: J11dJEoO4oOPIGJkgBui1oSiw1WMmsHoIDwoMRNd+jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:bf:0e:95:a8:97:76:9b:f3:03:6a:1e:01:f5:52:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Validity
Not Before: Sep 4 22:00:43 2025 GMT
Not After : Sep 5 22:00:43 2025 GMT
Subject: CN=0c39f6a936cedb6faf81550f41ad6d54a58c6485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:25:1b:10:71:85:46:1d:59:e8:e7:38:89:f7:
82:e4:e1:8d:a5:ca:02:4c:3a:d4:c3:00:94:f0:c8:
c4:cc:86:89:74:71:b1:93:12:12:ba:11:8c:b4:36:
25:75:9c:85:c4:7b:bb:3e:68:09:f9:45:19:38:6c:
4d:8d:8d:46:22:48:a0:97:43:db:e2:11:8b:da:00:
9d:24:39:c6:a0:1d:39:0a:22:db:cb:24:69:33:88:
a2:ad:7e:8f:83:2c:0d:4b:2e:02:5c:ec:32:19:18:
06:c7:86:81:fa:8d:17:05:56:7a:70:07:37:eb:9d:
3f:60:13:84:ee:f8:ae:7a:e5:57:5a:72:20:51:f7:
2e:5a:bd:8f:f6:7b:0c:74:45:1a:56:cf:d0:d4:f1:
e8:06:c8:9f:ca:3b:c5:4b:69:92:c8:62:60:fb:a4:
a9:19:0d:05:16:dc:fb:1c:75:20:cb:50:dc:92:b7:
d3:38:8e:73:86:02:2e:67:46:b3:c6:36:29:8a:9b:
da:e4:04:d1:bf:1a:59:51:8d:54:d1:bf:8f:55:f6:
16:9e:92:db:53:ca:2d:1a:06:1f:5c:13:63:e5:ec:
b4:cc:42:f6:83:57:9a:66:f5:59:f8:ff:f5:c5:f7:
e7:34:5c:59:94:7b:49:c3:f1:ed:a8:90:10:24:ab:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:39:F6:A9:36:CE:DB:6F:AF:81:55:0F:41:AD:6D:54:A5:8C:64:85
X509v3 Authority Key Identifier:
keyid:2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2b:2f:36:e2:70:19:2c:bc:c8:29:b3:81:13:d6:c5:16:34:
5c:fc:6b:80:80:d8:4e:c5:3e:49:24:48:d0:73:5c:d6:22:4a:
d1:77:ed:37:e1:50:16:41:d5:6a:9b:f1:a7:2a:5e:67:ea:54:
72:cd:e1:25:5f:c6:69:ca:94:4d:b7:79:a7:fe:11:42:38:c1:
8d:84:52:bd:f3:17:3e:4a:1c:35:8f:30:6b:e0:c7:6e:c7:40:
f2:f2:a3:58:65:1a:db:59:91:9f:ff:32:fd:cb:2c:43:ea:3d:
14:4b:15:e3:aa:f4:73:8d:2f:f4:fd:18:c2:e2:a7:e1:c1:66:
4d:47:b4:30:5a:f6:84:6d:7b:66:c4:d3:f9:21:d5:a3:35:c5:
47:45:54:10:7e:d8:29:62:a8:95:94:77:31:74:53:fa:6d:c4:
7d:5d:5d:ae:48:bb:63:e6:3e:ec:b9:ae:b1:f7:25:e4:81:83:
4a:da:25:32:bb:78:45:f2:3e:86:98:44:23:db:f7:53:a8:ae:
0d:c3:19:a7:28:a4:75:aa:bc:1c:40:14:0a:5f:2d:23:78:ba:
b0:84:50:dc:23:1c:62:a0:20:62:87:39:b9:f6:a8:52:f9:c7:
2e:c9:4c:95:ef:ac:4a:29:af:b3:59:3a:dd:ed:ae:5f:86:3b:
c5:e8:b0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:08 2025 by rpki-client