Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
File: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft (raw, json)
Hash identifier: L/32AxxGScXL9jp5bEyzNUnP696Xd6MMQUtLnnggobU=
Subject key identifier: 63:C7:6F:C2:40:57:19:4B:AE:C0:68:04:61:2C:4D:99:7A:6C:2C:E0
Authority key identifier: 91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
Certificate issuer: /CN=913836859c6ce1869340edf1f273709b8094d9d4
Certificate serial: 0198941209D2212671C99580F2ACBFCE8033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
Manifest number: 158F
Signing time: Sun 10 Aug 2025 13:01:06 +0000
Manifest this update: Sun 10 Aug 2025 13:01:06 +0000
Manifest next update: Mon 11 Aug 2025 13:01:06 +0000
Files and hashes: 1: i0znYyDIsk78QzCDDCTg60lK9ig.roa (hash: aeDo1wq5VczgcfrDX0J+4eB6IcjwVsRwiJM6vkXROSk=)
2: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl (hash: es1QZ0MbGoDRqd6w3SogyAJHXXCxmJlcfWN03LAplhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:12:09:d2:21:26:71:c9:95:80:f2:ac:bf:ce:80:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913836859c6ce1869340edf1f273709b8094d9d4
Validity
Not Before: Aug 10 13:01:06 2025 GMT
Not After : Aug 11 13:01:06 2025 GMT
Subject: CN=63c76fc24057194baec06804612c4d997a6c2ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c6:9a:a3:ff:16:2f:aa:ae:95:c5:ab:d2:5a:
e5:36:4a:5d:66:bf:a1:54:c4:bd:7e:23:d9:58:9f:
28:95:4e:bb:a7:8b:8e:88:a2:54:3b:fb:cb:df:95:
fa:30:de:5d:74:f8:25:29:eb:a0:b7:4b:a7:5e:75:
d2:e4:83:09:fb:17:ee:d8:13:f6:01:de:49:b4:48:
70:ef:30:4e:de:b3:83:43:1d:39:d7:65:dc:f8:37:
83:e5:72:77:66:25:a6:ca:11:8c:a9:69:f7:ff:47:
95:05:f2:c2:07:36:07:c3:b8:4f:91:cd:29:5d:39:
93:eb:ec:c4:89:b9:6c:9b:e4:88:30:74:8b:e6:7d:
45:84:19:cb:13:75:94:13:e6:48:c7:ef:09:fb:a8:
e8:f3:b9:2f:1f:ac:c2:e2:d7:b0:fa:44:81:b0:ac:
68:7a:bc:2b:eb:fe:11:47:bb:c1:6c:ab:bc:37:a6:
e2:9c:f8:82:4c:30:98:14:e5:13:e8:c4:d0:bd:e2:
c8:11:32:f8:61:d3:e7:9f:bc:e3:2f:3c:c0:dd:ec:
c7:a1:1c:02:1d:91:20:3d:d5:0c:87:40:0e:54:e1:
f5:31:96:8f:c4:83:aa:1f:04:a7:85:a8:96:56:c9:
e8:67:41:de:c8:07:94:6f:df:ef:37:45:2d:8c:d0:
57:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C7:6F:C2:40:57:19:4B:AE:C0:68:04:61:2C:4D:99:7A:6C:2C:E0
X509v3 Authority Key Identifier:
keyid:91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9d:57:a2:8e:58:57:d1:6d:4c:1a:6e:e8:b6:4c:23:9b:13:
8d:48:b0:ef:6d:51:e9:16:ab:4b:bf:be:36:95:1f:cc:2d:30:
fc:8f:f4:54:5b:16:8e:59:e6:cb:e8:57:a7:7b:70:41:18:a1:
77:dd:22:af:db:98:58:4b:e6:8a:d2:15:be:29:0f:74:ea:fe:
67:db:56:37:cb:5e:b1:04:98:82:5c:bc:61:cd:c7:97:6f:aa:
2e:61:2b:81:5a:21:51:cf:a4:bf:97:f2:c8:3d:a4:5c:7c:31:
50:aa:79:c5:88:60:98:8b:54:c4:75:14:67:2e:8e:e0:10:10:
13:be:ea:f0:80:2e:07:19:48:5a:94:a2:aa:45:e6:f7:11:66:
47:38:f4:02:b9:64:23:6a:eb:3c:ed:e4:ad:be:06:9a:40:53:
19:c8:71:86:d8:56:ce:b7:d5:4d:c5:0e:4e:af:81:e5:0f:7f:
57:3f:21:6e:a9:74:6a:64:19:fc:c3:88:6c:21:71:82:fb:d4:
de:da:6d:a8:18:7a:e8:47:09:09:0b:14:9f:65:19:48:fa:0d:
99:02:95:57:07:7f:11:d1:3c:47:a6:d7:4d:5f:d6:5b:64:f9:
08:71:16:52:dc:33:6b:9b:71:2d:26:6f:a4:d0:e2:1c:ac:90:
16:2e:d6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:02:26 2025 by rpki-client