Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier: iPNdeOssd6prFn2gAup1XscvYn8ni8j0dGf7bimNsj8=
Subject key identifier: 6A:39:05:3C:53:E3:40:E1:F6:4F:5B:59:E4:08:44:E8:CC:A9:B0:88
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 0198838C720D51FBBE3C479514EB1FECCE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number: 161E
Signing time: Thu 07 Aug 2025 08:01:16 +0000
Manifest this update: Thu 07 Aug 2025 08:01:16 +0000
Manifest next update: Fri 08 Aug 2025 08:01:16 +0000
Files and hashes: 1: CbRY4qO4S-WijK05eY2wCnYoQJU.roa (hash: +mTf7r6+zK/TdKHsfZ88i/cXxb9cvH9lfgC3dCfABuE=)
2: fJrFHPzcXBxu52oPqkGqKY4yJAk.roa (hash: 3hc352skG2gtrO+VgjnqkDCcrrWK6vetRgA/AknDSz8=)
3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: qt/rcxwcyBeSUGRNhdL2pzdxy8aWxxHQV/21nY08Q84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:8c:72:0d:51:fb:be:3c:47:95:14:eb:1f:ec:ce:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Aug 7 08:01:16 2025 GMT
Not After : Aug 8 08:01:16 2025 GMT
Subject: CN=6a39053c53e340e1f64f5b59e40844e8cca9b088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bd:29:4f:ac:5d:77:d0:aa:88:63:ea:19:bf:
e2:cc:93:17:96:c6:a0:6a:a8:16:aa:5e:59:2c:18:
eb:49:cd:68:e1:cf:4d:28:f1:ec:26:43:0e:4b:41:
27:aa:dd:8a:ef:c1:01:11:f9:89:6a:52:c5:30:92:
b6:fc:db:3e:02:d7:ce:80:2b:5f:52:c8:e0:f3:f0:
30:d5:8f:ef:a3:de:73:3a:f0:0d:0e:96:b8:75:e5:
c4:87:e8:dc:c4:62:33:64:b6:45:7c:07:a0:54:9f:
0a:33:c2:33:dd:3f:7d:42:f6:2c:02:8b:4e:8f:4e:
67:20:90:be:17:d7:d2:c8:1b:30:d3:2a:cc:55:84:
c7:11:3b:44:a1:6e:32:82:01:20:9c:25:06:51:bd:
36:36:f9:d5:d7:2a:21:fc:4e:df:70:16:70:cc:b8:
b2:9f:07:18:ea:62:ef:7f:ea:bd:96:4e:9d:ee:89:
e6:42:4d:0e:58:7e:8a:73:50:3a:e1:c7:08:2d:30:
37:8c:90:40:69:06:f3:98:b9:4c:4c:5b:92:d0:d9:
0f:83:d9:38:00:9f:18:27:35:d1:74:5c:7b:70:9e:
15:ba:0e:a6:5b:ff:12:7a:8e:ae:35:9e:f7:3e:e4:
98:ce:06:e5:cb:a3:05:5d:7f:4f:50:dd:0f:cd:12:
28:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:39:05:3C:53:E3:40:E1:F6:4F:5B:59:E4:08:44:E8:CC:A9:B0:88
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:30:5f:0a:c7:82:2a:3d:d4:36:8d:51:f5:80:59:dc:be:8a:
ff:9f:f3:14:27:42:68:07:05:31:36:2e:63:0c:fd:ad:c9:53:
6a:29:00:e8:5f:c9:4a:35:cb:8f:a3:bc:99:53:4e:8b:30:38:
a5:bc:9b:09:ce:a5:5a:f9:c2:3c:bb:20:86:1a:0b:2d:5c:78:
44:f9:c7:90:c2:4c:7e:11:58:95:64:d4:70:74:77:cc:9a:3b:
a4:c1:66:9e:1f:0f:5e:13:87:a7:1a:33:2c:1d:03:dd:2f:ce:
9c:58:e9:54:54:45:be:29:15:6f:86:c5:d8:3d:79:f1:80:f7:
be:17:99:22:cc:11:fb:7a:19:b2:10:d9:06:61:59:7e:cf:da:
e9:24:01:33:4d:17:3d:af:18:ce:b3:5f:bc:c5:b8:b7:cc:16:
38:11:a4:99:7b:39:fe:88:14:ba:e6:cb:33:5a:97:1d:d6:32:
4b:fb:e1:b6:37:f5:db:73:1b:85:0b:97:3b:4e:dc:79:66:2b:
25:d2:d8:be:5d:11:e4:1d:7b:fa:57:50:bb:8e:99:c7:57:8d:
1b:91:f9:b7:dd:f7:5f:60:52:09:98:8f:03:4e:1c:c0:d5:8a:
55:1a:98:d0:ac:d8:d8:d2:1d:0a:14:ce:36:bd:87:fc:a2:ac:
a5:af:7c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:10:12 2025 by rpki-client